last executing test programs: 6.858376916s ago: executing program 2 (id=1458): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7ca5e36e389e6e26533121ba56b5", 0x0, 0xf020, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) 6.707127866s ago: executing program 2 (id=1460): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x0) r2 = syz_clone(0x82288000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x48, &(0x7f0000000100)=r5, 0x120) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, r2, 0x0, r0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x19, 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x9, 0x0, 0xfb4f, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r8, r0, 0x20, 0x4, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) write$cgroup_subtree(r0, &(0x7f00000000c0), 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) 6.005877833s ago: executing program 3 (id=1469): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (fail_nth: 7) 5.985369194s ago: executing program 2 (id=1470): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000f80)='io.pressure\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x40804}, 0x1) socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x49, &(0x7f0000000000)=r3, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.89537061s ago: executing program 1 (id=1471): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.307381019s ago: executing program 1 (id=1473): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.267111822s ago: executing program 3 (id=1474): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x1000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 5.070131545s ago: executing program 0 (id=1475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 4.897578516s ago: executing program 0 (id=1477): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0xfffffff9, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x2089, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0x8000000000000000, 0x1, 0x2, 0x200000, 0x0, 0x0, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x82) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.185431313s ago: executing program 4 (id=1478): socketpair(0x27, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/158, 0x9e}, {&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f00000004c0)=""/94, 0x5e}], 0x9, &(0x7f0000000600)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xa0}, 0x40) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x25, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@ld}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @alu={0x7, 0x1, 0x8, 0x6, 0x0, 0xffffffffffffffe0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xa3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x1, 0x1, 0xb, 0x8, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0xe, 0x14, &(0x7f0000000880)=""/20, 0x40f00, 0x31, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r8, r8, r6, r5, r8], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c80)={r8, 0x20, &(0x7f0000001c40)={&(0x7f0000001b40)=""/62, 0x3e, 0x0, &(0x7f0000001b80)=""/150, 0x96}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{r8, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)='%ps \x00'}, 0x20) r21 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f, '\x00', 0x0, r8, 0x3, 0x3, 0x5}, 0x50) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xbc87443a68fac9d7, 0x17, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc6}, @alu={0x7, 0x1, 0x6, 0x9, 0x5, 0x50, 0x13}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000a80)='GPL\x00', 0x1020000, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001b00)={0x5, 0x3, 0xffffffff, 0x9}, 0x10, r19, r2, 0x6, &(0x7f0000001e00)=[r6, r4, r20, r5, r13, r21, r4], &(0x7f0000001e40)=[{0x1, 0x1, 0x5, 0x7}, {0x4, 0x4, 0x7, 0x5}, {0x4, 0x3, 0x7, 0xa}, {0x5, 0x4, 0x8, 0xc}, {0x1, 0x2, 0x5, 0x8}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002000)={{r3}, &(0x7f0000001f80), &(0x7f0000001fc0)=r12}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={r13}, 0x4) socketpair(0x22, 0x4, 0x7fff, &(0x7f0000002080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000020c0)={'ip6erspan0\x00', @multicast}) r24 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000002100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0x4, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x64, 0x2}, @datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x2, 0xfff, 0x80000001}, {0x4, 0x3ff, 0x603e}, {0x2, 0x4, 0x9}, {0x3, 0x10, 0x937}, {0x5, 0x0, 0x1}, {0x4, 0x7, 0x10001}, {0x1, 0x10000, 0x9}], 'Y'}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x6, 0x4}, {0xb, 0xf52e}, {0x8, 0x5}]}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x584fc756, [{0xd, 0x5, 0xfffffffc}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x16, 0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000002200)=""/132, 0xdc, 0x84, 0x1, 0xffff}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) sendmsg$unix(r25, &(0x7f0000002640)={&(0x7f0000002340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000023c0)="9caaf20068b766a3fa5da87d467ca2be0f8de35d46f4f1404c5f80735872ce67c26528a3a8d4afa1dd52e0f9848bea71c684907184e34ebb6a22996c65e031f80b552151a3f124e26b7d87fe376b61d9250bcb", 0x53}, {&(0x7f0000002440)="4a4ec11778e2fde7f9cc3846e38b5953a568423a56f8ac117dbf32f2e8f97340bb96f973619098994c209fc5c299acd65ae6f01f4b976baf756db562f90c6975e5e52a06a17722b95e86cbc9a64c0fbc5b66491ac0e3bb9da848400f8b1943bbdf83753b362f792795103216d5b455fb461fa99e9a2b318021da804b8ce3f21a07831771ceb3d1e4cacbfa7986bfbc546882ba4664bdcc6aa200cf2c46c5206695d6c07daef26a4a2cd9a6ab92cae564615f7e697696f5ac2bd9364ef15d35aec5996e5714399a7cf6e3ecc4e8dc4faf90813b169c203a7f81cf431c8c65c770", 0xe0}], 0x2, &(0x7f00000025c0)=[@rights={{0x20, 0x1, 0x1, [r7, r18, r24, r7]}}, @rights={{0x20, 0x1, 0x1, [r24, r9, r26, r23]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xffffffffffffffff, r17}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}], 0x80, 0x41}, 0x20008800) r27 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0/../file0\x00', 0x0, 0x18, r7}, 0x18) r28 = bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0x2, 0x5, 0x2, 0x80000001, 0x4a0, r13, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0xb, 0xd, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7f}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x7f, 0x2, 0x3, 0x3, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000002780)='syzkaller\x00', 0x80, 0x91, &(0x7f00000027c0)=""/145, 0x41000, 0x6a, '\x00', 0x0, @fallback=0xe, r15, 0x8, &(0x7f0000002880)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000028c0)={0x2, 0x6, 0x1, 0x1000}, 0x10, r19, 0xffffffffffffffff, 0x5, &(0x7f0000002980)=[r8, r13, r5, r7, r28], &(0x7f00000029c0)=[{0x2, 0x5, 0x5}, {0x3, 0x3, 0xe, 0x6}, {0x0, 0x5, 0xb, 0x3}, {0x4, 0x5, 0x10, 0x6}, {0x1, 0x4, 0x5, 0x3}], 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000002b40)={0x0, 0x80, 0xb, 0x6, 0x2, 0xe, 0x0, 0x3, 0x80, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000002b00), 0x1}, 0x0, 0x80008000, 0x6, 0x5, 0x3, 0x10001, 0x4, 0x0, 0x1d}, r10, 0xc, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000002bc0)={r0}) mkdir(&(0x7f0000002c00)='./file0\x00', 0x0) r29 = openat$cgroup_devices(r3, &(0x7f0000002c40)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r29, &(0x7f0000002c80)={'a', ' *:* ', 'm\x00'}, 0x8) recvmsg$kcm(r6, &(0x7f00000042c0)={&(0x7f0000002cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002d40)=""/149, 0x95}, {&(0x7f0000002e00)=""/141, 0x8d}, {&(0x7f0000002ec0)=""/72, 0x48}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/148, 0x94}, {&(0x7f0000004000)=""/153, 0x99}, {&(0x7f00000040c0)=""/162, 0xa2}], 0x7, &(0x7f0000004200)=""/155, 0x9b}, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000045c0)={r22, 0xe0, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000004300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000004340)=[0x0, 0x0], &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000043c0)=[{}], 0x8, 0x10, &(0x7f0000004400), &(0x7f0000004440), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000004480)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005800)={r15, 0x20, &(0x7f00000057c0)={&(0x7f0000005700)=""/81, 0x51, 0x0, &(0x7f0000005780)=""/19, 0x13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000058c0)={0x0, 0x18, &(0x7f0000004600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4a36}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r27}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff801}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x8, 0x6, 0x2, 0x6, 0xffffffffffffffea}]}, &(0x7f00000046c0)='syzkaller\x00', 0x3ff, 0x1000, &(0x7f0000004700)=""/4096, 0x41000, 0x38, '\x00', r30, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r31, r2, 0x8, 0x0, &(0x7f0000005840)=[{0x5, 0x1, 0x8, 0x8}, {0x3, 0x5, 0x4, 0x6}, {0x0, 0x2, 0xa, 0x3}, {0x5, 0x3, 0xb, 0x2}, {0x4, 0x1, 0xc, 0xc}, {0x4, 0x3, 0x1, 0x7}, {0x4, 0x1, 0x5, 0x6}, {0x2, 0x3, 0x1}], 0x10, 0x1ff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005a00)={r5, 0x58, &(0x7f0000005980)}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000005bc0)={r13, &(0x7f0000005a40)="99a10263f01f56932677b764dad99d64fd89f976a515eff5d16a4bd4d3316c92a87229183488f067871bbca294ee7402565680b45863b8887674f731154e1fa31aecdd29176be55de451bff7e9", &(0x7f0000005ac0)=""/232, 0x4}, 0x20) 3.824389507s ago: executing program 0 (id=1479): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x102402, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) 3.766060681s ago: executing program 4 (id=1480): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x11, 0x3, &(0x7f0000001180)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000030004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.669743943s ago: executing program 4 (id=1481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r1 = syz_clone(0x82288000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0x0, r0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x9, 0x0, 0xfb4f, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r0, 0x20, 0x4, 0x0, @void, @value=r0, @void, @void, r3}, 0x20) write$cgroup_subtree(r0, &(0x7f00000000c0), 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) 2.241774312s ago: executing program 4 (id=1482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x10000000000000}, 0x18) 2.019707566s ago: executing program 1 (id=1483): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (fail_nth: 6) 1.929831093s ago: executing program 3 (id=1484): socket$kcm(0x11, 0x20000000000000a, 0x300) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8847) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f0000000000000000000097", 0x2e}], 0x1}, 0x44004) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x85284, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000700), 0x8}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/217, 0xd9}, 0x40010002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000000), 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.926540743s ago: executing program 2 (id=1485): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffdfffff}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfefe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x5d) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, @perf_bp={0x0, 0x3}, 0x18210, 0xc8, 0x0, 0x0, 0x0, 0xfaa4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 1.871601736s ago: executing program 0 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x2, 0xffffffff}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 751.38556ms ago: executing program 3 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 677.766205ms ago: executing program 4 (id=1488): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x102402, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) 677.329525ms ago: executing program 0 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xba}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 677.198365ms ago: executing program 1 (id=1490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000012ffffffb702000009000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x240088c4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) 619.387819ms ago: executing program 3 (id=1491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r0 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8000) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000071000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000020000b0fd25a806c8c6f94f90124fc6007f6ebb4516bb4fcd7dd98", 0x1f}], 0x1}, 0x4000010) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x9, 0x4, 0x0, 0x0, 0x8, 0x10010, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0x9, 0x2}, 0x40, 0x7, 0x9d4, 0x8, 0x7ffffffffffffffd, 0x7, 0x2, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r0, 0x8) 557.650553ms ago: executing program 2 (id=1492): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r1 = syz_clone(0x82288000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0x0, r0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x9, 0x0, 0xfb4f, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r0, 0x20, 0x4, 0x0, @void, @value=r0, @void, @void, r3}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) 461.600469ms ago: executing program 0 (id=1493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = socket$kcm(0x10, 0x7, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)="b88f1f11a0236fb207257efaf231eb9a602d20ced28f38ca6793635ee30ef29e91973ede49c89787d07fcc64e24740833aaa0f540c20b282ef115eae86b28efe62a52bdcc88306ef2146b1be6e79fa79a37894e213f8d7f186332ed9a34d4a395c11cd186bbe56303b0bb1ccd46cb6b559d84b46dc2fa090635fb49e94fcf333dbf680a51a6409a67faab0739a4a390003d1422a135532594b5bff3d57601920d8d3c06d985c815b4ea5ade0555b839f5a18458fb3f91a7e785fe06cfd80a6f9abb0f8f74c0913d8f5865b1a71db16c374d41f4aba285330b55c0c11b5439d1230ee14e578784edcbdcef29e24c1bc1b9cbc5da0927e1839", 0xf8}, {&(0x7f0000000a40)="f2a14aaec19559af7f706facdeeeb66f61e470a67b9ecc2bf7c386eecf4616b670d772b4e2051ef93088f7921d9dc9a230ffce46ccdd7a18a60d2c92313f23e392e84de058f1a904a169d0558ad7aaf02c6b15e32ae1d883e1a288d2ac27c64e8e8bd9ea49794b1ff4ba0ee010ec2b191d28a5cf5d7bc01104d65f7ff151b0265c19d2ad473a", 0x86}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000000300)="01a9573868950aaf2dfa55b41d6693d02753f16478a305ee4dc4bc9c1ae5727ef3c58bf17a5af3b5126069", 0x2b}, {&(0x7f0000000400)="c6452bd4a95765131ce2", 0xa}], 0x5}, 0x24000001) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="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", 0x163}, {&(0x7f0000002180)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0db9afb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35cdfd70fd677bcd396b37c60e439693dcb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac8b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e06f835663a496857fb6320e5ee9086f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb9098e6db801cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c60040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932489b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171", 0xdf7}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r11 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x24, 0x8, 0xb}, 0x50) sendmsg$unix(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [r14, r13]}}], 0x18, 0x20000000}, 0x20004410) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x8, 0x8, 0x1, 0x6, 0x0, 0xffffffffeb71458b, 0x10, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x80, 0xd, 0x6, 0x8, 0x2000000000000082, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3}, r11, 0x6, r5, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000000040074040000080000008500000000000000e9bc0533a6e700000000000000000900000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r3}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 437.334351ms ago: executing program 1 (id=1494): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x1000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 379.860345ms ago: executing program 3 (id=1495): socket$kcm(0x10, 0x400000007, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x4, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002600)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb0900", 0x66}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x10000000, &(0x7f00000008c0)="20dad91e8d26351cbfd829ba8f3832fb49d7951547d36a31c6f8b0ba0fcd1fac713f26c797ff1d379cb14fc535", 0x2d, 0x0, &(0x7f0000000980), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8905, &(0x7f00000012c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000500)=r5, 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x12000) 69.438975ms ago: executing program 1 (id=1496): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000f80)='io.pressure\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x40804}, 0x1) socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x49, &(0x7f0000000000)=r3, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 69.125655ms ago: executing program 4 (id=1497): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x97fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000c50000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 2 (id=1498): socket$kcm(0xa, 0x2, 0x11) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12986, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44", 0xe}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r3, 0x0, 0x40000000) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x2, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x2b, 0x5}, @const={0x3}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x92b5, [{0x10, 0x1, 0x9}, {0x3, 0x4, 0x5}, {0xc, 0x2, 0x1ff}, {0xc, 0x3}, {0xc, 0x3, 0x2}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x18, [{0x10, 0x0, 0x8}, {0x4, 0x3, 0x5}]}]}}, &(0x7f0000000400)=""/60, 0xa2, 0x3c, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="6434e0372e000000001a00004813a19ae6a7ae35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) kernel console output (not intermixed with test programs): v6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.028605][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.038364][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.057180][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.073766][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.098089][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.109032][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.128572][ T4383] IPv6: Can't replace route, no match found [ 93.144380][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.162406][ T4383] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 93.174294][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.261342][ T4383] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.272186][ T4384] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 93.308900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.323519][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.334475][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.345572][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.357099][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.377428][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.388393][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.400746][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.412731][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.426961][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.439102][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.450420][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.470670][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.485816][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.528457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.547756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.560865][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.572971][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.585122][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.598014][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.609780][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.622806][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.637478][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.650872][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.670193][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.696387][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.735317][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.797954][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.820993][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.831916][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.849265][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.095104][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.125325][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.136327][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.170633][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.171213][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.178996][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.235780][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.239878][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311047][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.346137][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.372695][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.384239][ C1] hrtimer: interrupt took 25956 ns [ 94.423845][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.438866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.448723][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.460542][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.463848][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.483530][ T4406] netlink: 'syz.4.11': attribute type 10 has an invalid length. [ 94.515436][ T4406] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11'. [ 94.545305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.567241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.479780][ T37] wlan1: Trigger new scan to find an IBSS to join [ 95.980073][ T4439] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 96.111937][ T4438] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.120167][ T4438] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.336715][ T4438] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16'. [ 97.635105][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 97.896074][ T4472] Zero length message leads to an empty skb [ 98.435950][ T4349] wlan1: Trigger new scan to find an IBSS to join [ 100.537738][ T46] wlan1: Creating new IBSS network, BSSID ee:1c:f2:99:4d:e7 [ 103.647721][ T4492] netlink: 'syz.3.34': attribute type 13 has an invalid length. [ 103.749471][ T4492] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.34'. [ 104.804102][ T4503] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 104.882191][ T4503] netlink: 164 bytes leftover after parsing attributes in process `syz.3.39'. [ 108.571644][ T4520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 108.579107][ T4520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 108.816328][ T4520] netlink: 164 bytes leftover after parsing attributes in process `syz.0.44'. [ 108.987645][ T4538] netlink: 'syz.1.49': attribute type 13 has an invalid length. [ 109.066504][ T4538] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.49'. [ 109.330672][ T4543] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.52'. [ 109.614134][ T4548] netlink: 'syz.1.65': attribute type 13 has an invalid length. [ 109.713810][ T4548] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.65'. [ 109.907350][ T4559] netlink: 'syz.4.56': attribute type 21 has an invalid length. [ 109.916974][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 113.697563][ T4592] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.68'. [ 114.019076][ T4595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.026624][ T4595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.260151][ T4595] netlink: 164 bytes leftover after parsing attributes in process `syz.4.69'. [ 114.636624][ T4608] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 114.666327][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 114.935852][ T4619] IPv6: Can't replace route, no match found [ 115.084357][ T4619] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.474473][ T61] wlan1: Trigger new scan to find an IBSS to join [ 118.213693][ T4625] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 118.409887][ T4625] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.965759][ T4644] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.84'. [ 118.994884][ T4646] netlink: 'syz.3.85': attribute type 13 has an invalid length. [ 119.015436][ T4646] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.85'. [ 119.249368][ T4655] netlink: 'syz.2.100': attribute type 13 has an invalid length. [ 119.284374][ T4655] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.100'. [ 120.271066][ T4684] IPv6: Can't replace route, no match found [ 120.381174][ T4684] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.435734][ T9] wlan1: Trigger new scan to find an IBSS to join [ 120.454111][ T4684] netlink: 'syz.4.101': attribute type 10 has an invalid length. [ 120.571422][ T4684] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.586502][ T4691] netlink: 'syz.0.102': attribute type 13 has an invalid length. [ 120.635380][ T4691] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.102'. [ 120.998376][ T4707] netlink: 14 bytes leftover after parsing attributes in process `syz.3.107'. [ 121.083209][ T4707] device hsr_slave_0 left promiscuous mode [ 121.208915][ T4707] device hsr_slave_1 left promiscuous mode [ 121.681163][ T4725] netlink: 'syz.0.111': attribute type 13 has an invalid length. [ 121.721965][ T4725] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.111'. [ 122.113102][ T4739] IPv6: Can't replace route, no match found [ 122.211686][ T4739] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 122.222357][ T4741] netlink: 'syz.4.119': attribute type 13 has an invalid length. [ 122.240210][ T4741] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.119'. [ 122.321662][ T4739] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 122.423117][ T4739] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.862931][ T4756] netlink: 'syz.3.124': attribute type 29 has an invalid length. [ 122.876656][ T4756] netlink: 'syz.3.124': attribute type 29 has an invalid length. [ 122.898503][ T4756] netlink: 'syz.3.124': attribute type 29 has an invalid length. [ 123.748600][ T4778] netlink: 'syz.0.133': attribute type 13 has an invalid length. [ 123.860723][ T4778] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.133'. [ 123.888331][ T4786] netlink: 'syz.2.134': attribute type 13 has an invalid length. [ 123.904917][ T4786] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.134'. [ 124.221067][ T4790] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 124.229743][ T4790] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 124.411892][ T4797] IPv6: Can't replace route, no match found [ 124.431539][ T4797] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.448534][ T37] wlan1: Trigger new scan to find an IBSS to join [ 124.464551][ T4349] wlan1: Trigger new scan to find an IBSS to join [ 124.507863][ T4801] IPv6: Can't replace route, no match found [ 124.597724][ T4801] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.875534][ T4801] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.770553][ T4822] validate_nla: 4 callbacks suppressed [ 125.770620][ T4822] netlink: 'syz.2.149': attribute type 13 has an invalid length. [ 125.844836][ T4822] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.149'. [ 126.253958][ T4835] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 126.261356][ T4835] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.378739][ T4840] netlink: 'syz.1.152': attribute type 29 has an invalid length. [ 126.396571][ T4838] IPv6: Can't replace route, no match found [ 126.426044][ T4838] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 126.436260][ T11] wlan1: Creating new IBSS network, BSSID 12:62:34:36:5f:51 [ 126.469823][ T4840] netlink: 'syz.1.152': attribute type 29 has an invalid length. [ 126.500662][ T4835] netlink: 'syz.1.152': attribute type 29 has an invalid length. [ 127.310217][ T4855] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 127.351757][ T4855] netlink: 152 bytes leftover after parsing attributes in process `syz.3.160'. [ 127.909157][ T4855] wlan1: mtu less than device minimum [ 128.376125][ T4880] netlink: 'syz.1.167': attribute type 13 has an invalid length. [ 128.424957][ T4880] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.167'. [ 128.453944][ T11] wlan1: Trigger new scan to find an IBSS to join [ 128.643163][ T4887] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.650920][ T4887] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.682519][ T4887] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 128.714067][ T4887] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 128.753424][ T4895] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 128.775942][ T4896] IPv6: Can't replace route, no match found [ 128.802201][ T4892] netlink: 'syz.1.172': attribute type 13 has an invalid length. [ 128.812448][ T4892] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.172'. [ 128.831746][ T4896] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.499907][ T4918] IPv6: Can't replace route, no match found [ 129.580301][ T4918] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.519144][ T4934] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.183'. [ 130.756960][ T4940] netlink: 152 bytes leftover after parsing attributes in process `syz.4.184'. [ 131.054526][ T4940] wlan1: mtu less than device minimum [ 131.273121][ T4943] validate_nla: 2 callbacks suppressed [ 131.273156][ T4943] netlink: 'syz.2.186': attribute type 13 has an invalid length. [ 131.336434][ T4943] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.186'. [ 131.800833][ T4953] netlink: 'syz.2.189': attribute type 13 has an invalid length. [ 131.854561][ T4953] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.189'. [ 132.452792][ T4974] netlink: 'syz.1.199': attribute type 13 has an invalid length. [ 132.487684][ T4974] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.199'. [ 133.027713][ T4987] netlink: 'syz.1.203': attribute type 13 has an invalid length. [ 133.136507][ T4987] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.203'. [ 133.408374][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.415185][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.562202][ T4996] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 133.614695][ T4996] netlink: 152 bytes leftover after parsing attributes in process `syz.0.206'. [ 134.166091][ T4996] wlan1: mtu less than device minimum [ 134.375641][ T5011] netlink: 'syz.4.208': attribute type 13 has an invalid length. [ 134.384620][ T5011] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.208'. [ 134.758539][ T5031] netlink: 'syz.1.225': attribute type 2 has an invalid length. [ 134.799155][ T5031] netlink: 10 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.932525][ T5036] netlink: 'syz.4.215': attribute type 13 has an invalid length. [ 134.980293][ T5036] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.215'. [ 135.261998][ T5047] netlink: 'syz.4.232': attribute type 13 has an invalid length. [ 135.311661][ T5047] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.232'. [ 135.359734][ T5048] netlink: 'syz.3.218': attribute type 13 has an invalid length. [ 135.384671][ T5048] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.218'. [ 135.517530][ T5052] team0: Device dummy0 is up. Set it down before adding it as a team port [ 135.626635][ T5052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.683901][ T5080] validate_nla: 3 callbacks suppressed [ 137.683957][ T5080] netlink: 'syz.4.236': attribute type 13 has an invalid length. [ 137.762180][ T5080] __nla_validate_parse: 1 callbacks suppressed [ 137.762226][ T5080] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.236'. [ 137.788578][ T5086] netlink: 'syz.2.233': attribute type 4 has an invalid length. [ 137.818966][ T5086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.233'. [ 138.326987][ T5086] wlan1: mtu less than device minimum [ 138.531122][ T5099] netlink: 'syz.4.237': attribute type 13 has an invalid length. [ 138.576255][ T5099] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.237'. [ 138.711094][ T5106] netlink: 'syz.1.241': attribute type 13 has an invalid length. [ 138.744411][ T5106] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.241'. [ 138.840719][ T5113] netlink: 'syz.0.246': attribute type 2 has an invalid length. [ 138.857968][ T5113] netlink: 10 bytes leftover after parsing attributes in process `syz.0.246'. [ 139.514904][ T5127] netlink: 'syz.2.251': attribute type 13 has an invalid length. [ 139.557182][ T5127] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.251'. [ 140.274790][ T5142] netlink: 'syz.0.257': attribute type 4 has an invalid length. [ 140.299315][ T5142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.257'. [ 140.323210][ T5142] wlan1: mtu less than device minimum [ 140.439610][ T5144] netlink: 'syz.3.259': attribute type 13 has an invalid length. [ 140.535073][ T5144] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.259'. [ 141.167198][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 141.193357][ T5165] tc_dump_action: action bad kind [ 141.203265][ T5162] netlink: 'syz.2.265': attribute type 13 has an invalid length. [ 141.215816][ T5162] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.265'. [ 141.298833][ T5167] device wg2 entered promiscuous mode [ 141.442426][ T5173] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 141.606310][ T5181] wlan1: mtu less than device minimum [ 142.103887][ T5188] wlan1: mtu less than device minimum [ 142.711119][ T5202] IPv6: Can't replace route, no match found [ 142.792129][ T5199] __nla_validate_parse: 4 callbacks suppressed [ 142.792148][ T5199] netlink: 144 bytes leftover after parsing attributes in process `syz.0.276'. [ 143.087700][ T5206] validate_nla: 3 callbacks suppressed [ 143.087736][ T5206] netlink: 'syz.1.280': attribute type 10 has an invalid length. [ 143.121463][ T5206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.280'. [ 143.146787][ T5206] device batadv0 entered promiscuous mode [ 143.163762][ T5206] bridge0: port 3(batadv0) entered blocking state [ 143.172630][ T5206] bridge0: port 3(batadv0) entered disabled state [ 143.191780][ T5206] bridge0: port 3(batadv0) entered blocking state [ 143.199126][ T5206] bridge0: port 3(batadv0) entered forwarding state [ 143.290329][ T5210] netlink: 'syz.4.282': attribute type 13 has an invalid length. [ 143.332223][ T5210] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.282'. [ 143.397670][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 143.407846][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 143.549327][ T5226] netlink: 'syz.2.287': attribute type 4 has an invalid length. [ 143.598099][ T5226] netlink: 152 bytes leftover after parsing attributes in process `syz.2.287'. [ 143.641355][ T5226] wlan1: mtu less than device minimum [ 143.660707][ T5228] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 143.683924][ T5228] netlink: 152 bytes leftover after parsing attributes in process `syz.4.288'. [ 144.245541][ T5228] wlan1: mtu less than device minimum [ 144.419036][ T5233] netlink: 'syz.0.289': attribute type 13 has an invalid length. [ 144.435419][ T5233] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.289'. [ 144.635631][ T5245] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 144.653191][ T5245] netlink: 10 bytes leftover after parsing attributes in process `syz.4.293'. [ 144.992072][ T5254] openvswitch: netlink: Flow key attr not present in new flow. [ 145.011672][ T5255] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 145.043945][ T5255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.298'. [ 145.085516][ T5255] device batadv0 entered promiscuous mode [ 145.132463][ T5255] bridge0: port 3(batadv0) entered blocking state [ 145.189191][ T5255] bridge0: port 3(batadv0) entered disabled state [ 145.315591][ T5255] bridge0: port 3(batadv0) entered blocking state [ 145.323877][ T5255] bridge0: port 3(batadv0) entered forwarding state [ 145.552586][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 145.563148][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 145.627614][ T5262] netlink: 'syz.1.300': attribute type 13 has an invalid length. [ 145.677012][ T5262] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.300'. [ 145.866470][ T5275] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 145.887441][ T5275] netlink: 152 bytes leftover after parsing attributes in process `syz.4.305'. [ 145.921449][ T5275] wlan1: mtu less than device minimum [ 146.094007][ T5280] netlink: 'syz.2.306': attribute type 4 has an invalid length. [ 146.609535][ T5280] wlan1: mtu less than device minimum [ 147.748935][ T5305] device batadv0 entered promiscuous mode [ 147.861778][ T5305] bridge0: port 3(batadv0) entered blocking state [ 147.884164][ T5305] bridge0: port 3(batadv0) entered disabled state [ 147.925017][ T5305] bridge0: port 3(batadv0) entered blocking state [ 147.932295][ T5305] bridge0: port 3(batadv0) entered forwarding state [ 148.246087][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 148.255478][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 148.450864][ T5323] validate_nla: 3 callbacks suppressed [ 148.450879][ T5323] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 148.514486][ T5323] __nla_validate_parse: 4 callbacks suppressed [ 148.514501][ T5323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.324'. [ 148.554598][ T5323] wlan1: mtu less than device minimum [ 148.643864][ T5325] netlink: 'syz.2.326': attribute type 13 has an invalid length. [ 148.674842][ T5325] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.326'. [ 148.751365][ T5336] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 148.824631][ T5336] netlink: 152 bytes leftover after parsing attributes in process `syz.3.328'. [ 149.293646][ T5336] wlan1: mtu less than device minimum [ 149.800139][ T5356] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 149.829924][ T5356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.337'. [ 149.870144][ T5356] device batadv0 entered promiscuous mode [ 149.900252][ T5356] bridge0: port 3(batadv0) entered blocking state [ 149.918000][ T5356] bridge0: port 3(batadv0) entered disabled state [ 150.053271][ T5356] bridge0: port 3(batadv0) entered blocking state [ 150.060381][ T5356] bridge0: port 3(batadv0) entered forwarding state [ 150.160080][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.160233][ T5367] netlink: 'syz.0.341': attribute type 4 has an invalid length. [ 150.170599][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 150.196469][ T5367] netlink: 152 bytes leftover after parsing attributes in process `syz.0.341'. [ 150.231629][ T5367] wlan1: mtu less than device minimum [ 150.262021][ T5364] netlink: 'syz.3.343': attribute type 13 has an invalid length. [ 150.297843][ T5364] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.343'. [ 151.042806][ T5388] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.349'. [ 151.251396][ T26] audit: type=1800 audit(1759851757.528:2): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.349" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 151.273835][ T5388] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 151.344681][ T5388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 151.379742][ T5388] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.730942][ T5399] netlink: 14 bytes leftover after parsing attributes in process `syz.0.355'. [ 151.744704][ T5388] syz.3.349 (5388) used greatest stack depth: 19120 bytes left [ 151.774874][ T5399] device hsr_slave_0 left promiscuous mode [ 151.782400][ T5399] device hsr_slave_1 left promiscuous mode [ 151.940119][ T5404] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 151.981871][ T5404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.358'. [ 152.040450][ T5408] netlink: 'syz.2.356': attribute type 13 has an invalid length. [ 152.090019][ T5408] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.356'. [ 152.241698][ T5420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.886722][ T5430] tap0: tun_chr_ioctl cmd 1074025675 [ 152.929133][ T5430] tap0: persist enabled [ 152.953620][ T5433] tap0: tun_chr_ioctl cmd 1074025675 [ 152.974077][ T5433] tap0: persist enabled [ 153.779827][ T5451] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 153.794714][ T5451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 154.087590][ T5456] netlink: 'syz.0.378': attribute type 13 has an invalid length. [ 154.124673][ T5456] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.378'. [ 154.776791][ T5477] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 154.824291][ T5477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 154.903717][ T5483] tap0: tun_chr_ioctl cmd 1074025675 [ 154.946816][ T5483] tap0: persist enabled [ 155.014402][ T5481] tap0: tun_chr_ioctl cmd 1074025675 [ 155.020829][ T5481] tap0: persist enabled [ 155.308179][ T5491] netlink: 'syz.0.393': attribute type 13 has an invalid length. [ 155.347826][ T5491] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.393'. [ 155.777645][ T5507] netlink: 'syz.3.398': attribute type 10 has an invalid length. [ 155.808502][ T5507] team0: Device geneve1 is up. Set it down before adding it as a team port [ 155.912327][ T5512] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 155.924445][ T5512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.402'. [ 155.935518][ T5512] device batadv0 entered promiscuous mode [ 155.950226][ T5512] bridge0: port 3(batadv0) entered blocking state [ 155.957306][ T5512] bridge0: port 3(batadv0) entered disabled state [ 155.969493][ T5512] bridge0: port 3(batadv0) entered blocking state [ 155.976091][ T5512] bridge0: port 3(batadv0) entered forwarding state [ 156.015658][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.025084][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 156.387513][ T5525] netlink: 'syz.4.408': attribute type 13 has an invalid length. [ 156.402946][ T5525] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.408'. [ 156.964780][ T5536] tap0: tun_chr_ioctl cmd 1074025675 [ 156.970790][ T5536] tap0: persist enabled [ 156.983948][ T5536] tap0: tun_chr_ioctl cmd 1074025675 [ 156.991289][ T5536] tap0: persist enabled [ 157.015151][ T5543] netlink: 'syz.3.416': attribute type 10 has an invalid length. [ 157.023698][ T5543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.416'. [ 157.781963][ T5561] netlink: 'syz.1.423': attribute type 13 has an invalid length. [ 157.808026][ T5561] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.423'. [ 158.180655][ T5576] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 158.223644][ T5576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.429'. [ 158.859413][ T5588] tap0: tun_chr_ioctl cmd 1074025675 [ 158.894666][ T5588] tap0: persist enabled [ 158.911758][ T5588] tap0: tun_chr_ioctl cmd 1074025675 [ 158.945424][ T5588] tap0: persist enabled [ 159.106545][ T5596] netlink: 'syz.2.437': attribute type 13 has an invalid length. [ 159.151864][ T5596] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.437'. [ 159.424082][ T5602] netlink: 'syz.3.438': attribute type 13 has an invalid length. [ 159.461284][ T5602] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.438'. [ 159.817784][ T5616] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 159.843317][ T5616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.445'. [ 160.611820][ T5635] netlink: 'syz.2.451': attribute type 13 has an invalid length. [ 160.654615][ T5635] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.451'. [ 161.275411][ T5650] netlink: 'syz.4.457': attribute type 13 has an invalid length. [ 161.314747][ T5650] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.457'. [ 161.678048][ T5660] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 161.727594][ T5660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.460'. [ 162.111571][ T5673] netlink: 'syz.2.466': attribute type 13 has an invalid length. [ 162.141719][ T5673] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.466'. [ 163.267158][ T5692] netlink: 'syz.0.471': attribute type 13 has an invalid length. [ 163.338535][ T5692] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.471'. [ 163.711294][ T5696] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.719381][ T5696] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.763182][ T5696] netlink: 'syz.1.474': attribute type 29 has an invalid length. [ 163.834604][ T5696] netlink: 'syz.1.474': attribute type 29 has an invalid length. [ 164.151047][ T5703] team0: Port device netdevsim0 added [ 164.554939][ T5712] validate_nla: 2 callbacks suppressed [ 164.554975][ T5712] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 164.646028][ T5712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.479'. [ 164.753505][ T5717] netlink: 'syz.2.481': attribute type 13 has an invalid length. [ 164.780908][ T5717] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.481'. [ 164.804925][ T5716] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 164.835176][ T5716] netlink: 164 bytes leftover after parsing attributes in process `syz.4.480'. [ 166.085360][ T5750] netlink: 'syz.3.496': attribute type 13 has an invalid length. [ 166.114963][ T5750] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.496'. [ 166.380750][ T5755] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 166.435001][ T5755] netlink: 164 bytes leftover after parsing attributes in process `syz.2.498'. [ 166.533838][ T5758] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 166.573163][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 167.676865][ T5787] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.684118][ T5787] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.736850][ T5787] netlink: 'syz.2.508': attribute type 29 has an invalid length. [ 167.764829][ T5787] netlink: 'syz.2.508': attribute type 29 has an invalid length. [ 167.783559][ T5793] netlink: 'syz.2.508': attribute type 29 has an invalid length. [ 167.847045][ T5794] netlink: 'syz.3.509': attribute type 33 has an invalid length. [ 167.868007][ T5794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 168.502778][ T5801] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.511'. [ 169.329568][ T5805] netlink: 164 bytes leftover after parsing attributes in process `syz.1.512'. [ 170.610820][ T5809] validate_nla: 2 callbacks suppressed [ 170.610939][ T5809] netlink: 'syz.4.513': attribute type 13 has an invalid length. [ 170.696087][ T5809] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.513'. [ 170.985711][ T5822] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 171.095616][ T5822] team0: Port device netdevsim0 added [ 171.128654][ T5823] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 171.243639][ T5823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 171.828680][ T5831] device syzkaller0 entered promiscuous mode [ 171.895327][ T5834] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 172.036090][ T5834] syzkaller0: Linktype set failed because interface is up [ 172.163231][ T4323] syzkaller0: tun_net_xmit 48 [ 175.733824][ T5847] netlink: 'syz.0.525': attribute type 33 has an invalid length. [ 175.743464][ T5847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 175.752841][ T5852] netlink: 'syz.4.527': attribute type 13 has an invalid length. [ 175.761046][ T5852] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.527'. [ 175.974187][ T5867] netlink: 'syz.2.534': attribute type 13 has an invalid length. [ 175.985242][ T5867] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.534'. [ 176.217156][ T5877] netlink: 'syz.4.535': attribute type 10 has an invalid length. [ 176.226701][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.535'. [ 176.691186][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 176.798968][ T5883] tc_dump_action: action bad kind [ 176.942277][ T5892] netlink: 'syz.1.549': attribute type 13 has an invalid length. [ 177.037576][ T5892] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.549'. [ 177.169456][ T5893] device wg2 entered promiscuous mode [ 177.377588][ T5904] netlink: 'syz.1.542': attribute type 33 has an invalid length. [ 177.391446][ T5904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.542'. [ 177.416847][ T5905] netlink: 144 bytes leftover after parsing attributes in process `syz.3.543'. [ 177.624282][ T5909] netlink: 'syz.4.544': attribute type 13 has an invalid length. [ 177.633752][ T5909] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.544'. [ 178.343961][ T5919] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 178.358351][ T5919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.550'. [ 179.012532][ T5933] netlink: 'syz.4.555': attribute type 21 has an invalid length. [ 179.419074][ T5940] netlink: 'syz.0.557': attribute type 13 has an invalid length. [ 180.210161][ T5964] IPv6: Can't replace route, no match found [ 180.217536][ T5964] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.817006][ T5962] validate_nla: 4 callbacks suppressed [ 180.817042][ T5962] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 180.925193][ T5962] bond0: (slave wlan1): Releasing backup interface [ 181.568357][ T5991] netlink: 'syz.4.577': attribute type 10 has an invalid length. [ 181.629844][ T5991] __nla_validate_parse: 6 callbacks suppressed [ 181.629879][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.577'. [ 181.928375][ T5997] netlink: 'syz.0.579': attribute type 13 has an invalid length. [ 181.975697][ T5997] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.579'. [ 182.368532][ T6002] netlink: 'syz.4.592': attribute type 13 has an invalid length. [ 182.455770][ T6002] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.594728][ T6014] netlink: 'syz.2.583': attribute type 33 has an invalid length. [ 182.744835][ T6014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 183.233181][ T6021] netlink: 'syz.3.584': attribute type 13 has an invalid length. [ 183.244157][ T6021] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.584'. [ 183.311352][ T6023] netlink: 'syz.0.585': attribute type 21 has an invalid length. [ 184.624755][ T6042] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 184.633055][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'. [ 184.661197][ T6044] netlink: 14 bytes leftover after parsing attributes in process `syz.0.595'. [ 184.719240][ T6048] netlink: 'syz.3.597': attribute type 2 has an invalid length. [ 184.775840][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.597'. [ 184.806613][ T6051] netlink: 'syz.3.597': attribute type 10 has an invalid length. [ 185.733294][ T6070] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.604'. [ 185.851379][ T6075] validate_nla: 1 callbacks suppressed [ 185.851397][ T6075] netlink: 'syz.0.602': attribute type 13 has an invalid length. [ 185.926808][ T6075] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.602'. [ 185.951990][ T6068] netlink: 'syz.1.603': attribute type 25 has an invalid length. [ 185.979839][ T6068] netlink: 'syz.1.603': attribute type 7 has an invalid length. [ 186.081352][ T6086] FAULT_INJECTION: forcing a failure. [ 186.081352][ T6086] name failslab, interval 1, probability 0, space 0, times 1 [ 186.113080][ T6086] CPU: 1 PID: 6086 Comm: syz.0.610 Not tainted syzkaller #0 [ 186.120556][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.130653][ T6086] Call Trace: [ 186.133946][ T6086] [ 186.136897][ T6086] dump_stack_lvl+0x168/0x22e [ 186.141618][ T6086] ? show_regs_print_info+0x12/0x12 [ 186.146846][ T6086] ? load_image+0x3b0/0x3b0 [ 186.151371][ T6086] ? __might_sleep+0xd0/0xd0 [ 186.155990][ T6086] ? __lock_acquire+0x7c50/0x7c50 [ 186.161069][ T6086] should_fail_ex+0x399/0x4d0 [ 186.165776][ T6086] should_failslab+0x5/0x20 [ 186.170318][ T6086] slab_pre_alloc_hook+0x59/0x310 [ 186.175371][ T6086] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 186.181125][ T6086] __kmem_cache_alloc_node+0x4f/0x260 [ 186.186558][ T6086] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 186.192310][ T6086] __kmalloc+0xa0/0x240 [ 186.196500][ T6086] tomoyo_realpath_from_path+0xdf/0x5d0 [ 186.202379][ T6086] tomoyo_path_number_perm+0x1e3/0x600 [ 186.207873][ T6086] ? tomoyo_path_number_perm+0x1b6/0x600 [ 186.213545][ T6086] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 186.219035][ T6086] ? ksys_write+0x1bd/0x240 [ 186.223567][ T6086] ? common_file_perm+0x171/0x1c0 [ 186.228718][ T6086] ? __fget_files+0x28/0x4d0 [ 186.233446][ T6086] security_file_ioctl+0x6c/0xa0 [ 186.238413][ T6086] __se_sys_ioctl+0x48/0x170 [ 186.243039][ T6086] do_syscall_64+0x4c/0xa0 [ 186.247532][ T6086] ? clear_bhb_loop+0x60/0xb0 [ 186.252241][ T6086] ? clear_bhb_loop+0x60/0xb0 [ 186.256943][ T6086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.262861][ T6086] RIP: 0033:0x7f939218eec9 [ 186.267297][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.286960][ T6086] RSP: 002b:00007f9392f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.295401][ T6086] RAX: ffffffffffffffda RBX: 00007f93923e5fa0 RCX: 00007f939218eec9 [ 186.303401][ T6086] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003 [ 186.311406][ T6086] RBP: 00007f9392f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.319501][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.327497][ T6086] R13: 00007f93923e6038 R14: 00007f93923e5fa0 R15: 00007ffcb5b9f628 [ 186.335522][ T6086] [ 186.353417][ T6087] netlink: 'syz.3.609': attribute type 13 has an invalid length. [ 186.379972][ T6086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.983666][ T6091] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.703635][ T6111] netlink: 'syz.1.618': attribute type 13 has an invalid length. [ 187.723179][ T6111] __nla_validate_parse: 1 callbacks suppressed [ 187.723200][ T6111] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.618'. [ 188.103843][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 188.144369][ T6117] tc_dump_action: action bad kind [ 188.197747][ T6119] netlink: 'syz.4.624': attribute type 21 has an invalid length. [ 188.218024][ T6119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.624'. [ 189.062459][ T6117] device wg2 entered promiscuous mode [ 189.084390][ T6130] IPv6: Can't replace route, no match found [ 189.102732][ T6135] netlink: 144 bytes leftover after parsing attributes in process `syz.3.625'. [ 189.651884][ T6153] netlink: 'syz.0.633': attribute type 13 has an invalid length. [ 189.669484][ T6153] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.633'. [ 189.699628][ T6152] @: port 1(veth0_to_bridge) entered blocking state [ 189.760570][ T6152] @: port 1(veth0_to_bridge) entered disabled state [ 189.830650][ T6152] device veth0_to_bridge entered promiscuous mode [ 190.950261][ T6181] netlink: 14 bytes leftover after parsing attributes in process `syz.4.647'. [ 190.995025][ T6181] device hsr_slave_0 left promiscuous mode [ 191.003462][ T6181] device hsr_slave_1 left promiscuous mode [ 191.106805][ T6184] netlink: 'syz.0.648': attribute type 13 has an invalid length. [ 191.115205][ T6184] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.648'. [ 191.131313][ T6191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.163351][ T6193] netlink: 'syz.2.651': attribute type 7 has an invalid length. [ 191.543038][ T6206] FAULT_INJECTION: forcing a failure. [ 191.543038][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.665874][ T6206] CPU: 0 PID: 6206 Comm: syz.3.657 Not tainted syzkaller #0 [ 191.673425][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.684286][ T6206] Call Trace: [ 191.687805][ T6206] [ 191.690809][ T6206] dump_stack_lvl+0x168/0x22e [ 191.695516][ T6206] ? show_regs_print_info+0x12/0x12 [ 191.700729][ T6206] ? load_image+0x3b0/0x3b0 [ 191.705274][ T6206] ? __lock_acquire+0x7c50/0x7c50 [ 191.710765][ T6206] should_fail_ex+0x399/0x4d0 [ 191.715556][ T6206] _copy_from_user+0x2c/0x170 [ 191.720255][ T6206] __sys_bpf+0x265/0x6d0 [ 191.724621][ T6206] ? bpf_link_show_fdinfo+0x340/0x340 [ 191.730031][ T6206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.736499][ T6206] __x64_sys_bpf+0x78/0x90 [ 191.740948][ T6206] do_syscall_64+0x4c/0xa0 [ 191.745384][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 191.750075][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 191.754772][ T6206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.760691][ T6206] RIP: 0033:0x7f5ee8f8eec9 [ 191.765130][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.784850][ T6206] RSP: 002b:00007f5ee71f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.793309][ T6206] RAX: ffffffffffffffda RBX: 00007f5ee91e5fa0 RCX: 00007f5ee8f8eec9 [ 191.801296][ T6206] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 191.809296][ T6206] RBP: 00007f5ee71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.817293][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.825472][ T6206] R13: 00007f5ee91e6038 R14: 00007f5ee91e5fa0 R15: 00007ffe01a24788 [ 191.833485][ T6206] [ 192.820295][ T6221] netlink: 'syz.1.662': attribute type 13 has an invalid length. [ 192.829402][ T6221] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.662'. [ 193.922505][ T6247] netlink: 'syz.2.675': attribute type 13 has an invalid length. [ 193.955643][ T6247] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.675'. [ 194.390252][ T6263] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 194.420236][ T6263] team0: Device geneve1 is up. Set it down before adding it as a team port [ 194.737852][ T6279] netlink: 'syz.0.689': attribute type 13 has an invalid length. [ 194.764875][ T6279] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.689'. [ 194.857079][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.863957][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.550902][ T6306] device pim6reg1 entered promiscuous mode [ 195.996341][ T6321] device pim6reg1 entered promiscuous mode [ 196.214046][ T6333] syz.0.710[6333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.214147][ T6333] syz.0.710[6333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.327410][ T6336] device pim6reg1 entered promiscuous mode [ 196.512766][ T6341] device veth1_macvtap left promiscuous mode [ 196.538018][ T6345] device wg2 entered promiscuous mode [ 197.229655][ T6366] device pim6reg1 entered promiscuous mode [ 197.451541][ T6374] device pim6reg1 entered promiscuous mode [ 199.753077][ T6396] netlink: 'syz.4.738': attribute type 13 has an invalid length. [ 199.761516][ T6396] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.738'. [ 199.771394][ T6401] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 199.792982][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.740'. [ 200.067582][ T6404] netlink: 'syz.1.741': attribute type 21 has an invalid length. [ 200.095487][ T6404] netlink: 'syz.1.741': attribute type 6 has an invalid length. [ 200.130448][ T6404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.741'. [ 200.224971][ T6409] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 200.308407][ T6409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.745'. [ 201.321328][ T6423] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.139489][ T6444] netlink: 'syz.2.754': attribute type 33 has an invalid length. [ 203.148395][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.754'. [ 203.159093][ T6441] netlink: 'syz.4.753': attribute type 13 has an invalid length. [ 203.184673][ T6441] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.753'. [ 203.483498][ T6456] netlink: 'syz.0.769': attribute type 13 has an invalid length. [ 203.505028][ T6456] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.769'. [ 203.569993][ T6461] netlink: 'syz.4.760': attribute type 10 has an invalid length. [ 203.603354][ T6461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 204.211636][ T6468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.773'. [ 204.333263][ T6468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.348694][ T6473] FAULT_INJECTION: forcing a failure. [ 204.348694][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.457101][ T6473] CPU: 0 PID: 6473 Comm: syz.4.763 Not tainted syzkaller #0 [ 204.465259][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.475661][ T6473] Call Trace: [ 204.479060][ T6473] [ 204.481999][ T6473] dump_stack_lvl+0x168/0x22e [ 204.486699][ T6473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 204.493069][ T6473] ? show_regs_print_info+0x12/0x12 [ 204.498606][ T6473] ? load_image+0x3b0/0x3b0 [ 204.503198][ T6473] should_fail_ex+0x399/0x4d0 [ 204.508188][ T6473] _copy_from_user+0x2c/0x170 [ 204.514300][ T6473] ___sys_recvmsg+0x12b/0x510 [ 204.519142][ T6473] ? __sys_recvmsg+0x270/0x270 [ 204.524064][ T6473] ? ct_irq_exit_irqson+0xfa/0x160 [ 204.529624][ T6473] ? __fget_files+0x44a/0x4d0 [ 204.534545][ T6473] ? __fdget+0x17c/0x200 [ 204.538835][ T6473] __x64_sys_recvmsg+0x1eb/0x2b0 [ 204.544544][ T6473] ? ___sys_recvmsg+0x510/0x510 [ 204.549901][ T6473] ? syscall_enter_from_user_mode+0x2a/0x80 [ 204.556247][ T6473] do_syscall_64+0x4c/0xa0 [ 204.560778][ T6473] ? clear_bhb_loop+0x60/0xb0 [ 204.565552][ T6473] ? clear_bhb_loop+0x60/0xb0 [ 204.570358][ T6473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.576309][ T6473] RIP: 0033:0x7f181f38eec9 [ 204.580828][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.602303][ T6473] RSP: 002b:00007f1820263038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 204.611518][ T6473] RAX: ffffffffffffffda RBX: 00007f181f5e5fa0 RCX: 00007f181f38eec9 [ 204.623041][ T6473] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 204.631836][ T6473] RBP: 00007f1820263090 R08: 0000000000000000 R09: 0000000000000000 [ 204.639999][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.647981][ T6473] R13: 00007f181f5e6038 R14: 00007f181f5e5fa0 R15: 00007ffe82bc2168 [ 204.656081][ T6473] [ 204.880760][ T6478] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 204.893093][ T6478] netlink: 56823 bytes leftover after parsing attributes in process `syz.2.765'. [ 205.387365][ T6486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 205.396361][ T6486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.413261][ T6493] netlink: 'syz.0.770': attribute type 33 has an invalid length. [ 205.467945][ T6486] netlink: 'syz.1.768': attribute type 29 has an invalid length. [ 205.482411][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.770'. [ 205.551311][ T6486] netlink: 'syz.1.768': attribute type 29 has an invalid length. [ 205.567170][ T6490] netlink: 'syz.1.768': attribute type 29 has an invalid length. [ 205.581256][ T6495] netlink: 'syz.4.772': attribute type 10 has an invalid length. [ 206.472299][ T6504] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 206.490832][ T6504] syzkaller0: linktype set to 800 [ 206.621290][ T6502] device syzkaller0 entered promiscuous mode [ 206.665122][ T6514] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 206.692089][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.777'. [ 207.156229][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 207.156282][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 207.238467][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 207.245659][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 207.246003][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 208.820854][ T6529] netlink: 'syz.4.782': attribute type 21 has an invalid length. [ 208.838448][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 208.851690][ T6531] IPv6: Can't replace route, no match found [ 208.867463][ T6532] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.901073][ T6534] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 209.735762][ T6554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.789'. [ 210.463435][ T6554] device hsr_slave_0 left promiscuous mode [ 210.590484][ T6563] FAULT_INJECTION: forcing a failure. [ 210.590484][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 210.613351][ T6563] CPU: 1 PID: 6563 Comm: syz.2.792 Not tainted syzkaller #0 [ 210.620701][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.631861][ T6563] Call Trace: [ 210.635428][ T6563] [ 210.638397][ T6563] dump_stack_lvl+0x168/0x22e [ 210.643213][ T6563] ? show_regs_print_info+0x12/0x12 [ 210.648438][ T6563] ? load_image+0x3b0/0x3b0 [ 210.652973][ T6563] ? __might_sleep+0xd0/0xd0 [ 210.657771][ T6563] ? __lock_acquire+0x7c50/0x7c50 [ 210.662824][ T6563] should_fail_ex+0x399/0x4d0 [ 210.667621][ T6563] should_failslab+0x5/0x20 [ 210.672160][ T6563] slab_pre_alloc_hook+0x59/0x310 [ 210.677212][ T6563] ? tomoyo_encode+0x27e/0x540 [ 210.682116][ T6563] __kmem_cache_alloc_node+0x4f/0x260 [ 210.687776][ T6563] ? tomoyo_encode+0x27e/0x540 [ 210.693009][ T6563] __kmalloc+0xa0/0x240 [ 210.697205][ T6563] tomoyo_encode+0x27e/0x540 [ 210.701921][ T6563] tomoyo_realpath_from_path+0x58e/0x5d0 [ 210.707948][ T6563] tomoyo_path_number_perm+0x1e3/0x600 [ 210.713434][ T6563] ? tomoyo_path_number_perm+0x1b6/0x600 [ 210.719526][ T6563] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 210.724998][ T6563] ? ksys_write+0x1bd/0x240 [ 210.729591][ T6563] ? common_file_perm+0x171/0x1c0 [ 210.734922][ T6563] ? __fget_files+0x28/0x4d0 [ 210.740338][ T6563] security_file_ioctl+0x6c/0xa0 [ 210.745291][ T6563] __se_sys_ioctl+0x48/0x170 [ 210.750789][ T6563] do_syscall_64+0x4c/0xa0 [ 210.755207][ T6563] ? clear_bhb_loop+0x60/0xb0 [ 210.760359][ T6563] ? clear_bhb_loop+0x60/0xb0 [ 210.765252][ T6563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.771338][ T6563] RIP: 0033:0x7fa612b8eec9 [ 210.775875][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.795771][ T6563] RSP: 002b:00007fa6139d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.805159][ T6563] RAX: ffffffffffffffda RBX: 00007fa612de5fa0 RCX: 00007fa612b8eec9 [ 210.813317][ T6563] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003 [ 210.821297][ T6563] RBP: 00007fa6139d8090 R08: 0000000000000000 R09: 0000000000000000 [ 210.829265][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.837428][ T6563] R13: 00007fa612de6038 R14: 00007fa612de5fa0 R15: 00007ffed5f50e18 [ 210.845430][ T6563] [ 210.857513][ T6563] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.864714][ T6554] device hsr_slave_1 left promiscuous mode [ 210.959907][ T6565] netlink: 'syz.3.793': attribute type 10 has an invalid length. [ 211.009249][ T6565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.793'. [ 211.191590][ T6572] IPv6: Can't replace route, no match found [ 211.217001][ T6572] netlink: 144 bytes leftover after parsing attributes in process `syz.1.797'. [ 211.247508][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 211.257511][ T6574] tc_dump_action: action bad kind [ 211.317360][ T6574] device wg2 left promiscuous mode [ 211.352039][ T6577] device wg2 entered promiscuous mode [ 211.857984][ T6583] netlink: 'syz.1.799': attribute type 13 has an invalid length. [ 212.024970][ T6583] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.799'. [ 212.302414][ T6591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.684219][ T6597] netlink: 'syz.3.806': attribute type 25 has an invalid length. [ 212.742695][ T6601] netlink: 14 bytes leftover after parsing attributes in process `syz.2.808'. [ 213.931970][ T6608] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.809'. [ 214.106682][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.150094][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.176526][ T6601] bond0 (unregistering): Released all slaves [ 214.273907][ T6608] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.809'. [ 214.429760][ T6625] netlink: 'syz.4.815': attribute type 13 has an invalid length. [ 214.444859][ T6625] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.815'. [ 214.908434][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.821'. [ 215.075930][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.821'. [ 215.468775][ T6655] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.838689][ T6664] netlink: 'syz.1.828': attribute type 10 has an invalid length. [ 216.282722][ T6676] Â: renamed from pim6reg1 [ 216.423631][ T6681] netlink: 'syz.0.835': attribute type 29 has an invalid length. [ 216.548499][ T6681] netlink: 'syz.0.835': attribute type 29 has an invalid length. [ 216.578644][ T6684] netlink: 'syz.0.835': attribute type 29 has an invalid length. [ 218.069455][ T6709] FAULT_INJECTION: forcing a failure. [ 218.069455][ T6709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.093779][ T6709] CPU: 1 PID: 6709 Comm: syz.0.846 Not tainted syzkaller #0 [ 218.101135][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.111301][ T6709] Call Trace: [ 218.114653][ T6709] [ 218.117617][ T6709] dump_stack_lvl+0x168/0x22e [ 218.122578][ T6709] ? show_regs_print_info+0x12/0x12 [ 218.127902][ T6709] ? load_image+0x3b0/0x3b0 [ 218.132875][ T6709] ? __lock_acquire+0x7c50/0x7c50 [ 218.137937][ T6709] should_fail_ex+0x399/0x4d0 [ 218.143357][ T6709] _copy_from_user+0x2c/0x170 [ 218.148685][ T6709] iovec_from_user+0x143/0x360 [ 218.154378][ T6709] __import_iovec+0x6d/0x500 [ 218.159618][ T6709] ? __might_fault+0xa6/0x120 [ 218.164594][ T6709] import_iovec+0x6f/0xa0 [ 218.169163][ T6709] ___sys_recvmsg+0x433/0x510 [ 218.174230][ T6709] ? __sys_recvmsg+0x270/0x270 [ 218.179654][ T6709] ? lockdep_hardirqs_on+0x94/0x140 [ 218.185181][ T6709] ? __fget_files+0x44a/0x4d0 [ 218.189977][ T6709] ? __fdget+0x17c/0x200 [ 218.195389][ T6709] __x64_sys_recvmsg+0x1eb/0x2b0 [ 218.200368][ T6709] ? perf_trace_preemptirq_template+0x287/0x330 [ 218.206625][ T6709] ? ___sys_recvmsg+0x510/0x510 [ 218.211775][ T6709] ? lockdep_hardirqs_on+0x94/0x140 [ 218.217006][ T6709] do_syscall_64+0x4c/0xa0 [ 218.221636][ T6709] ? clear_bhb_loop+0x60/0xb0 [ 218.226527][ T6709] ? clear_bhb_loop+0x60/0xb0 [ 218.232103][ T6709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.239234][ T6709] RIP: 0033:0x7f939218eec9 [ 218.244165][ T6709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.264479][ T6709] RSP: 002b:00007f9392f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 218.272894][ T6709] RAX: ffffffffffffffda RBX: 00007f93923e5fa0 RCX: 00007f939218eec9 [ 218.280973][ T6709] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 218.289300][ T6709] RBP: 00007f9392f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.297811][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.306259][ T6709] R13: 00007f93923e6038 R14: 00007f93923e5fa0 R15: 00007ffcb5b9f628 [ 218.314519][ T6709] [ 218.389535][ T6719] netlink: 'syz.4.850': attribute type 13 has an invalid length. [ 218.403875][ T6719] __nla_validate_parse: 2 callbacks suppressed [ 218.403912][ T6719] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.850'. [ 218.597315][ T6724] netlink: 'syz.4.852': attribute type 10 has an invalid length. [ 219.075295][ T6736] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.855'. [ 219.167352][ T6740] netlink: 144 bytes leftover after parsing attributes in process `syz.2.857'. [ 219.234375][ T6736] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.855'. [ 219.957351][ T6761] netlink: 'syz.4.862': attribute type 13 has an invalid length. [ 219.984619][ T6761] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.862'. [ 220.019796][ T6763] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 220.089670][ T6763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.863'. [ 220.248889][ T6772] netlink: 'syz.1.865': attribute type 21 has an invalid length. [ 220.298119][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 220.432593][ T6775] netlink: 'syz.3.875': attribute type 29 has an invalid length. [ 220.503245][ T6778] device syzkaller0 entered promiscuous mode [ 220.546077][ T6780] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 220.563028][ T6780] syzkaller0: Linktype set failed because interface is up [ 220.574873][ T6775] netlink: 'syz.3.875': attribute type 29 has an invalid length. [ 220.585059][ T41] syzkaller0: tun_net_xmit 48 [ 222.190924][ T6811] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.877'. [ 222.212254][ T6812] FAULT_INJECTION: forcing a failure. [ 222.212254][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.250484][ T6812] CPU: 1 PID: 6812 Comm: syz.3.876 Not tainted syzkaller #0 [ 222.258771][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.270097][ T6812] Call Trace: [ 222.273680][ T6812] [ 222.276669][ T6812] dump_stack_lvl+0x168/0x22e [ 222.281498][ T6812] ? show_regs_print_info+0x12/0x12 [ 222.287283][ T6812] ? load_image+0x3b0/0x3b0 [ 222.292402][ T6812] ? __lock_acquire+0x7c50/0x7c50 [ 222.297497][ T6812] ? tomoyo_path_number_perm+0x503/0x600 [ 222.303506][ T6812] should_fail_ex+0x399/0x4d0 [ 222.308268][ T6812] _copy_from_user+0x2c/0x170 [ 222.313281][ T6812] wext_handle_ioctl+0xb7/0x1c0 [ 222.318201][ T6812] ? call_commit_handler+0xf0/0xf0 [ 222.323540][ T6812] sock_ioctl+0x145/0x6e0 [ 222.328044][ T6812] ? sock_poll+0x3f0/0x3f0 [ 222.332555][ T6812] ? bpf_lsm_file_ioctl+0x5/0x10 [ 222.337646][ T6812] ? security_file_ioctl+0x7c/0xa0 [ 222.343846][ T6812] ? sock_poll+0x3f0/0x3f0 [ 222.349281][ T6812] __se_sys_ioctl+0xfa/0x170 [ 222.354569][ T6812] do_syscall_64+0x4c/0xa0 [ 222.359061][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 222.363791][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 222.369249][ T6812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.375281][ T6812] RIP: 0033:0x7f5ee8f8eec9 [ 222.379737][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.400996][ T6812] RSP: 002b:00007f5ee71f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.410170][ T6812] RAX: ffffffffffffffda RBX: 00007f5ee91e5fa0 RCX: 00007f5ee8f8eec9 [ 222.419402][ T6812] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003 [ 222.428988][ T6812] RBP: 00007f5ee71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.437489][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.445693][ T6812] R13: 00007f5ee91e6038 R14: 00007f5ee91e5fa0 R15: 00007ffe01a24788 [ 222.454187][ T6812] [ 224.130656][ T6807] validate_nla: 1 callbacks suppressed [ 224.130671][ T6807] netlink: 'syz.1.873': attribute type 21 has an invalid length. [ 224.150177][ T6807] netlink: 'syz.1.873': attribute type 6 has an invalid length. [ 224.162021][ T6807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'. [ 224.171938][ T6811] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.877'. [ 224.182309][ T6825] netlink: 14 bytes leftover after parsing attributes in process `syz.3.879'. [ 224.337083][ T6828] IPv6: Can't replace route, no match found [ 224.381398][ T6828] netlink: 144 bytes leftover after parsing attributes in process `syz.4.881'. [ 224.497649][ T6833] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.505474][ T6833] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.599755][ T6833] netlink: 'syz.2.883': attribute type 29 has an invalid length. [ 224.648056][ T6833] netlink: 'syz.2.883': attribute type 29 has an invalid length. [ 224.664861][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 224.707816][ T6841] tc_dump_action: action bad kind [ 224.721154][ T6840] netlink: 'syz.2.883': attribute type 29 has an invalid length. [ 224.797111][ T6842] device wg2 left promiscuous mode [ 224.823585][ T6841] device wg2 entered promiscuous mode [ 224.842847][ T6844] IPv6: Can't replace route, no match found [ 224.876217][ T6844] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 224.955742][ T6849] netlink: 'syz.3.888': attribute type 13 has an invalid length. [ 225.003559][ T6849] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.888'. [ 225.064624][ T6844] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 225.087356][ T6844] bond0: (slave wlan1): Releasing backup interface [ 225.119142][ T6854] netlink: 14 bytes leftover after parsing attributes in process `syz.2.890'. [ 225.144644][ T6854] device hsr_slave_0 left promiscuous mode [ 225.156348][ T6856] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.891'. [ 225.237777][ T6854] device hsr_slave_1 left promiscuous mode [ 226.520831][ T6856] netlink: 168 bytes leftover after parsing attributes in process `syz.4.891'. [ 226.540526][ T6871] netlink: 'syz.0.894': attribute type 21 has an invalid length. [ 226.559128][ T6871] netlink: 'syz.0.894': attribute type 6 has an invalid length. [ 226.584783][ T6871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.894'. [ 227.195824][ T6886] netlink: 'syz.4.901': attribute type 29 has an invalid length. [ 227.408560][ T6902] IPv6: Can't replace route, no match found [ 227.436314][ T6902] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.993571][ T6902] bond0: (slave wlan1): Releasing backup interface [ 229.060333][ T6929] team0: Device dummy0 is up. Set it down before adding it as a team port [ 229.408135][ T6945] IPv6: Can't replace route, no match found [ 229.418671][ T6945] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.450196][ T6944] validate_nla: 7 callbacks suppressed [ 229.450240][ T6944] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 229.492492][ T6944] __nla_validate_parse: 2 callbacks suppressed [ 229.492536][ T6944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.921'. [ 229.612508][ T6951] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 229.630329][ T6951] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 229.655971][ T6951] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 229.963988][ T6945] netlink: 'syz.4.922': attribute type 10 has an invalid length. [ 230.009555][ T6945] bond0: (slave wlan1): Releasing backup interface [ 230.025741][ T6952] bond_slave_1: mtu less than device minimum [ 231.284266][ T6971] netlink: 'syz.4.929': attribute type 13 has an invalid length. [ 231.292071][ T6971] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.929'. [ 231.454040][ T6975] netlink: 'syz.2.931': attribute type 41 has an invalid length. [ 231.526697][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.931'. [ 232.091377][ T6988] FAULT_INJECTION: forcing a failure. [ 232.091377][ T6988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.112283][ T6988] CPU: 1 PID: 6988 Comm: syz.1.935 Not tainted syzkaller #0 [ 232.119736][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.129809][ T6988] Call Trace: [ 232.133106][ T6988] [ 232.136046][ T6988] dump_stack_lvl+0x168/0x22e [ 232.140742][ T6988] ? show_regs_print_info+0x12/0x12 [ 232.145953][ T6988] ? load_image+0x3b0/0x3b0 [ 232.150476][ T6988] ? __might_fault+0xa6/0x120 [ 232.155194][ T6988] should_fail_ex+0x399/0x4d0 [ 232.159897][ T6988] copyout+0x1b/0x120 [ 232.163901][ T6988] _copy_to_iter+0x48f/0x1030 [ 232.168614][ T6988] ? iov_iter_init+0x1f0/0x1f0 [ 232.173395][ T6988] ? __virt_addr_valid+0x188/0x540 [ 232.178541][ T6988] ? __virt_addr_valid+0x465/0x540 [ 232.184283][ T6988] ? __phys_addr+0xb6/0x170 [ 232.188805][ T6988] ? __phys_addr_symbol+0x2b/0x70 [ 232.193943][ T6988] ? __check_object_size+0x500/0xa40 [ 232.199626][ T6988] __skb_datagram_iter+0xde/0x740 [ 232.204753][ T6988] ? tipc_sk_anc_data_recv+0xbd/0x6f0 [ 232.210246][ T6988] ? skb_copy_datagram_iter+0x290/0x290 [ 232.215843][ T6988] skb_copy_datagram_iter+0xd7/0x290 [ 232.221214][ T6988] tipc_recvstream+0x727/0xe70 [ 232.226074][ T6988] ? tipc_sendstream+0x70/0x70 [ 232.230899][ T6988] ____sys_recvmsg+0x292/0x580 [ 232.235706][ T6988] ? __sys_recvmsg_sock+0x40/0x40 [ 232.240768][ T6988] ? import_iovec+0x6f/0xa0 [ 232.245298][ T6988] ___sys_recvmsg+0x1b2/0x510 [ 232.249999][ T6988] ? __sys_recvmsg+0x270/0x270 [ 232.254800][ T6988] ? __fget_files+0x44a/0x4d0 [ 232.259504][ T6988] ? __fdget+0x17c/0x200 [ 232.263850][ T6988] __x64_sys_recvmsg+0x1eb/0x2b0 [ 232.268834][ T6988] ? ___sys_recvmsg+0x510/0x510 [ 232.273804][ T6988] ? syscall_enter_from_user_mode+0x2a/0x80 [ 232.279729][ T6988] do_syscall_64+0x4c/0xa0 [ 232.284163][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 232.288861][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 232.293580][ T6988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.299532][ T6988] RIP: 0033:0x7f591818eec9 [ 232.303966][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.323598][ T6988] RSP: 002b:00007f5918f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 232.332041][ T6988] RAX: ffffffffffffffda RBX: 00007f59183e5fa0 RCX: 00007f591818eec9 [ 232.340036][ T6988] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 232.348025][ T6988] RBP: 00007f5918f77090 R08: 0000000000000000 R09: 0000000000000000 [ 232.356016][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.363997][ T6988] R13: 00007f59183e6038 R14: 00007f59183e5fa0 R15: 00007ffe23a5d198 [ 232.372004][ T6988] [ 232.544024][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.936'. [ 232.738531][ T6995] device syzkaller0 entered promiscuous mode [ 233.212471][ T7002] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 233.225288][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.938'. [ 234.803009][ T7029] netlink: 'syz.4.947': attribute type 29 has an invalid length. [ 236.976811][ T7018] netlink: 'syz.1.944': attribute type 13 has an invalid length. [ 236.984941][ T7018] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.944'. [ 236.995557][ T7020] netlink: 144 bytes leftover after parsing attributes in process `syz.3.943'. [ 237.009596][ T7029] netlink: 'syz.4.947': attribute type 29 has an invalid length. [ 237.018545][ T7043] netlink: 'syz.0.952': attribute type 21 has an invalid length. [ 237.049943][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 237.342143][ T7053] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 237.436185][ T7053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.957'. [ 238.551044][ T7071] IPv6: Can't replace route, no match found [ 238.557937][ T7071] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 238.888414][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 238.906090][ T7077] tc_dump_action: action bad kind [ 239.110271][ T7077] device wg2 left promiscuous mode [ 239.135099][ T7076] netlink: 'syz.0.963': attribute type 13 has an invalid length. [ 239.147193][ T7076] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.963'. [ 239.173716][ T7078] device wg2 entered promiscuous mode [ 239.200873][ T7071] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 239.220256][ T7081] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 239.248830][ T7081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.965'. [ 239.467533][ T7087] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 239.475593][ T7087] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'. [ 239.510273][ T7087] wlan1: mtu less than device minimum [ 239.731039][ T7096] @: port 1(veth0_to_bridge) entered blocking state [ 239.769531][ T7096] @: port 1(veth0_to_bridge) entered disabled state [ 239.820426][ T7096] device veth0_to_bridge entered promiscuous mode [ 240.446712][ T7109] FAULT_INJECTION: forcing a failure. [ 240.446712][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.545209][ T7109] CPU: 0 PID: 7109 Comm: syz.4.975 Not tainted syzkaller #0 [ 240.552562][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.563152][ T7109] Call Trace: [ 240.566446][ T7109] [ 240.569386][ T7109] dump_stack_lvl+0x168/0x22e [ 240.574082][ T7109] ? show_regs_print_info+0x12/0x12 [ 240.579298][ T7109] ? load_image+0x3b0/0x3b0 [ 240.583826][ T7109] ? __lock_acquire+0x7c50/0x7c50 [ 240.588870][ T7109] ? tomoyo_path_number_perm+0x503/0x600 [ 240.594566][ T7109] should_fail_ex+0x399/0x4d0 [ 240.599271][ T7109] _copy_from_user+0x2c/0x170 [ 240.603964][ T7109] wext_handle_ioctl+0xb7/0x1c0 [ 240.608835][ T7109] ? call_commit_handler+0xf0/0xf0 [ 240.614067][ T7109] sock_ioctl+0x145/0x6e0 [ 240.618418][ T7109] ? sock_poll+0x3f0/0x3f0 [ 240.622969][ T7109] ? bpf_lsm_file_ioctl+0x5/0x10 [ 240.627921][ T7109] ? security_file_ioctl+0x7c/0xa0 [ 240.633050][ T7109] ? sock_poll+0x3f0/0x3f0 [ 240.637487][ T7109] __se_sys_ioctl+0xfa/0x170 [ 240.642094][ T7109] do_syscall_64+0x4c/0xa0 [ 240.646520][ T7109] ? clear_bhb_loop+0x60/0xb0 [ 240.651206][ T7109] ? clear_bhb_loop+0x60/0xb0 [ 240.655897][ T7109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.661832][ T7109] RIP: 0033:0x7f181f38eec9 [ 240.666256][ T7109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.685879][ T7109] RSP: 002b:00007f1820263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.694311][ T7109] RAX: ffffffffffffffda RBX: 00007f181f5e5fa0 RCX: 00007f181f38eec9 [ 240.702308][ T7109] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003 [ 240.710292][ T7109] RBP: 00007f1820263090 R08: 0000000000000000 R09: 0000000000000000 [ 240.718276][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.726257][ T7109] R13: 00007f181f5e6038 R14: 00007f181f5e5fa0 R15: 00007ffe82bc2168 [ 240.734265][ T7109] [ 240.866555][ T7110] netlink: 'syz.1.974': attribute type 10 has an invalid length. [ 240.939732][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.974'. [ 241.004557][ T7112] netlink: 'syz.2.977': attribute type 13 has an invalid length. [ 241.024949][ T7112] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.977'. [ 241.066627][ T7121] tc_dump_action: action bad kind [ 242.076564][ T7121] device wg2 left promiscuous mode [ 242.102854][ T7119] device wg2 entered promiscuous mode [ 242.159713][ T7124] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 242.244429][ T7124] __nla_validate_parse: 1 callbacks suppressed [ 242.244448][ T7124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.980'. [ 242.292186][ T7128] FAULT_INJECTION: forcing a failure. [ 242.292186][ T7128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.346526][ T7128] CPU: 0 PID: 7128 Comm: syz.0.982 Not tainted syzkaller #0 [ 242.353911][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.363972][ T7128] Call Trace: [ 242.367294][ T7128] [ 242.370234][ T7128] dump_stack_lvl+0x168/0x22e [ 242.374925][ T7128] ? show_regs_print_info+0x12/0x12 [ 242.380129][ T7128] ? load_image+0x3b0/0x3b0 [ 242.384649][ T7128] ? __lock_acquire+0x7c50/0x7c50 [ 242.389781][ T7128] should_fail_ex+0x399/0x4d0 [ 242.394481][ T7128] _copy_from_user+0x2c/0x170 [ 242.399175][ T7128] iovec_from_user+0x143/0x360 [ 242.403956][ T7128] __import_iovec+0x6d/0x500 [ 242.408560][ T7128] ? __might_fault+0xa6/0x120 [ 242.413253][ T7128] import_iovec+0x6f/0xa0 [ 242.417597][ T7128] ___sys_sendmsg+0x1e4/0x290 [ 242.422286][ T7128] ? __sys_sendmsg+0x270/0x270 [ 242.427081][ T7128] ? __lock_acquire+0x7c50/0x7c50 [ 242.432139][ T7128] ? __fdget+0x17c/0x200 [ 242.436414][ T7128] __se_sys_sendmsg+0x19e/0x270 [ 242.441304][ T7128] ? __x64_sys_sendmsg+0x80/0x80 [ 242.446791][ T7128] ? lockdep_hardirqs_on+0x94/0x140 [ 242.452001][ T7128] do_syscall_64+0x4c/0xa0 [ 242.456447][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 242.461132][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 242.465810][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.471704][ T7128] RIP: 0033:0x7f939218eec9 [ 242.476121][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.495762][ T7128] RSP: 002b:00007f9392f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.504190][ T7128] RAX: ffffffffffffffda RBX: 00007f93923e5fa0 RCX: 00007f939218eec9 [ 242.512200][ T7128] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.520178][ T7128] RBP: 00007f9392f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 242.528176][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.536159][ T7128] R13: 00007f93923e6038 R14: 00007f93923e5fa0 R15: 00007ffcb5b9f628 [ 242.544251][ T7128] [ 242.592103][ T7124] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.797754][ T7131] device syzkaller0 entered promiscuous mode [ 242.820959][ T7133] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 242.834138][ T7133] syzkaller0: Linktype set failed because interface is up [ 242.925151][ T7140] netlink: 14 bytes leftover after parsing attributes in process `syz.4.986'. [ 242.954779][ T41] syzkaller0: tun_net_xmit 48 [ 243.932079][ T7158] netlink: 'syz.3.991': attribute type 3 has an invalid length. [ 243.986714][ T7158] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.991'. [ 248.394712][ T7169] IPv6: Can't replace route, no match found [ 248.427097][ T7173] netlink: 144 bytes leftover after parsing attributes in process `syz.1.993'. [ 248.730369][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 248.789883][ T7183] tc_dump_action: action bad kind [ 248.816554][ T7187] device wg2 left promiscuous mode [ 248.838591][ T7190] device wg2 entered promiscuous mode [ 249.264476][ T7203] netlink: 'syz.4.1004': attribute type 10 has an invalid length. [ 249.359782][ T7203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1004'. [ 250.980647][ T7230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.121355][ T7234] syz.1.1011[7234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.121466][ T7234] syz.1.1011[7234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.215775][ T7234] netlink: 'syz.1.1011': attribute type 29 has an invalid length. [ 251.292057][ T7236] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1012'. [ 251.332809][ T7234] netlink: 'syz.1.1011': attribute type 29 has an invalid length. [ 251.426159][ T7248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1015'. [ 251.435811][ T7237] netlink: 'syz.1.1011': attribute type 29 has an invalid length. [ 251.446623][ T7234] netlink: 'syz.1.1011': attribute type 29 has an invalid length. [ 251.458459][ T7246] netlink: 'syz.1.1011': attribute type 29 has an invalid length. [ 251.784566][ T7260] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 251.792607][ T7260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1019'. [ 252.644927][ T7274] netlink: 'syz.1.1023': attribute type 19 has an invalid length. [ 253.119519][ T7279] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1024'. [ 253.357981][ T7284] netlink: 'syz.4.1027': attribute type 13 has an invalid length. [ 253.410202][ T7284] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1027'. [ 253.801652][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 253.864606][ T7302] tc_dump_action: action bad kind [ 253.977083][ T7304] device wg2 left promiscuous mode [ 254.112953][ T7308] device wg2 entered promiscuous mode [ 254.185500][ T7314] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 254.284805][ T7314] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 254.349449][ T7315] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 254.438841][ T7317] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 254.460138][ T7317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1038'. [ 254.814584][ T7328] netlink: 'syz.2.1042': attribute type 13 has an invalid length. [ 254.822606][ T7328] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1042'. [ 255.465028][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 255.535518][ T7342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.587355][ T7343] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 255.616372][ T7343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.668607][ T7346] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 255.706383][ T7346] team0: Port device netdevsim0 added [ 255.722902][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 255.806700][ T7350] tc_dump_action: action bad kind [ 255.924202][ T7350] device wg2 entered promiscuous mode [ 256.328654][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.335228][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.976971][ T7371] netlink: 'syz.3.1057': attribute type 13 has an invalid length. [ 257.010269][ T7371] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1057'. [ 257.146090][ T7379] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 257.217803][ T7379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1059'. [ 257.551022][ T7385] FAULT_INJECTION: forcing a failure. [ 257.551022][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.624803][ T7385] CPU: 0 PID: 7385 Comm: syz.3.1062 Not tainted syzkaller #0 [ 257.632347][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.642445][ T7385] Call Trace: [ 257.645760][ T7385] [ 257.648730][ T7385] dump_stack_lvl+0x168/0x22e [ 257.653465][ T7385] ? show_regs_print_info+0x12/0x12 [ 257.658736][ T7385] ? load_image+0x3b0/0x3b0 [ 257.663307][ T7385] ? __lock_acquire+0x7c50/0x7c50 [ 257.668391][ T7385] ? snprintf+0xd7/0x120 [ 257.672701][ T7385] should_fail_ex+0x399/0x4d0 [ 257.677454][ T7385] _copy_to_user+0x2c/0x130 [ 257.682119][ T7385] simple_read_from_buffer+0xe3/0x150 [ 257.687563][ T7385] proc_fail_nth_read+0x19a/0x210 [ 257.692736][ T7385] ? proc_fault_inject_write+0x2f0/0x2f0 [ 257.698440][ T7385] ? fsnotify_perm+0x248/0x550 [ 257.703350][ T7385] ? proc_fault_inject_write+0x2f0/0x2f0 [ 257.709034][ T7385] vfs_read+0x2c0/0x920 [ 257.713261][ T7385] ? kernel_read+0x1e0/0x1e0 [ 257.717992][ T7385] ? __fget_files+0x28/0x4d0 [ 257.722635][ T7385] ? __fget_files+0x44a/0x4d0 [ 257.727409][ T7385] ? __fdget_pos+0x2ae/0x360 [ 257.732043][ T7385] ? ksys_read+0x71/0x240 [ 257.736430][ T7385] ksys_read+0x143/0x240 [ 257.740736][ T7385] ? vfs_write+0x960/0x960 [ 257.745210][ T7385] ? lockdep_hardirqs_on+0x94/0x140 [ 257.750469][ T7385] do_syscall_64+0x4c/0xa0 [ 257.754924][ T7385] ? clear_bhb_loop+0x60/0xb0 [ 257.759640][ T7385] ? clear_bhb_loop+0x60/0xb0 [ 257.764380][ T7385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.770311][ T7385] RIP: 0033:0x7f5ee8f8d8dc [ 257.774803][ T7385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.794452][ T7385] RSP: 002b:00007f5ee71f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.802916][ T7385] RAX: ffffffffffffffda RBX: 00007f5ee91e5fa0 RCX: 00007f5ee8f8d8dc [ 257.810943][ T7385] RDX: 000000000000000f RSI: 00007f5ee71f60a0 RDI: 0000000000000008 [ 257.819043][ T7385] RBP: 00007f5ee71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.827143][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.835155][ T7385] R13: 00007f5ee91e6038 R14: 00007f5ee91e5fa0 R15: 00007ffe01a24788 [ 257.843216][ T7385] [ 258.269656][ T7394] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1064'. [ 259.264901][ T7417] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1072'. [ 259.519407][ T7420] netlink: 'syz.2.1073': attribute type 13 has an invalid length. [ 259.548201][ T7420] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1073'. [ 259.661039][ T7426] netlink: 'syz.1.1075': attribute type 10 has an invalid length. [ 259.720445][ T7426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1075'. [ 260.066735][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 260.085404][ T7432] tc_dump_action: action bad kind [ 260.108028][ T7432] device wg2 left promiscuous mode [ 260.148113][ T7436] IPv6: Can't replace route, no match found [ 260.203102][ T7432] device wg2 entered promiscuous mode [ 260.233762][ T7435] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1078'. [ 260.308841][ T7436] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1079'. [ 260.812226][ T7442] can: request_module (can-proto-0) failed. [ 261.034847][ T7448] netlink: 'syz.4.1082': attribute type 29 has an invalid length. [ 261.116316][ T7448] netlink: 'syz.4.1082': attribute type 29 has an invalid length. [ 261.195749][ T7449] netlink: 'syz.4.1082': attribute type 29 has an invalid length. [ 262.485694][ T7459] netlink: 'syz.0.1086': attribute type 21 has an invalid length. [ 262.505749][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.276631][ T7473] netlink: 'syz.0.1090': attribute type 13 has an invalid length. [ 263.315190][ T7473] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1090'. [ 263.997529][ T7487] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 264.066865][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 264.690114][ T7499] IPv6: Can't replace route, no match found [ 264.776479][ T7499] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.853004][ T7499] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 264.951361][ T7502] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 265.024278][ T7502] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1101'. [ 265.133230][ T7502] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 265.186060][ T7512] netlink: 'syz.2.1103': attribute type 4 has an invalid length. [ 265.209855][ T7512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1103'. [ 265.515134][ T7516] netlink: 'syz.3.1104': attribute type 13 has an invalid length. [ 265.539799][ T7516] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1104'. [ 266.105731][ T7521] FAULT_INJECTION: forcing a failure. [ 266.105731][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.165080][ T7521] CPU: 1 PID: 7521 Comm: syz.1.1106 Not tainted syzkaller #0 [ 266.172517][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.182595][ T7521] Call Trace: [ 266.185903][ T7521] [ 266.188848][ T7521] dump_stack_lvl+0x168/0x22e [ 266.193550][ T7521] ? show_regs_print_info+0x12/0x12 [ 266.198947][ T7521] ? load_image+0x3b0/0x3b0 [ 266.203481][ T7521] ? __lock_acquire+0x7c50/0x7c50 [ 266.208530][ T7521] ? snprintf+0xd7/0x120 [ 266.212867][ T7521] should_fail_ex+0x399/0x4d0 [ 266.217671][ T7521] _copy_to_user+0x2c/0x130 [ 266.222636][ T7521] simple_read_from_buffer+0xe3/0x150 [ 266.228245][ T7521] proc_fail_nth_read+0x19a/0x210 [ 266.233296][ T7521] ? proc_fault_inject_write+0x2f0/0x2f0 [ 266.238953][ T7521] ? fsnotify_perm+0x248/0x550 [ 266.243746][ T7521] ? proc_fault_inject_write+0x2f0/0x2f0 [ 266.249416][ T7521] vfs_read+0x2c0/0x920 [ 266.253580][ T7521] ? kernel_read+0x1e0/0x1e0 [ 266.258174][ T7521] ? __fget_files+0x28/0x4d0 [ 266.262765][ T7521] ? __fget_files+0x44a/0x4d0 [ 266.267881][ T7521] ? __fdget_pos+0x2ae/0x360 [ 266.272508][ T7521] ? ksys_read+0x71/0x240 [ 266.276868][ T7521] ksys_read+0x143/0x240 [ 266.281116][ T7521] ? vfs_write+0x960/0x960 [ 266.285537][ T7521] ? lockdep_hardirqs_on+0x94/0x140 [ 266.290745][ T7521] do_syscall_64+0x4c/0xa0 [ 266.295168][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 266.299872][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 266.304571][ T7521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.310490][ T7521] RIP: 0033:0x7f591818d8dc [ 266.314905][ T7521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.334524][ T7521] RSP: 002b:00007f5918f77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.342939][ T7521] RAX: ffffffffffffffda RBX: 00007f59183e5fa0 RCX: 00007f591818d8dc [ 266.350913][ T7521] RDX: 000000000000000f RSI: 00007f5918f770a0 RDI: 0000000000000005 [ 266.358904][ T7521] RBP: 00007f5918f77090 R08: 0000000000000000 R09: 0000000000000000 [ 266.366885][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.374856][ T7521] R13: 00007f59183e6038 R14: 00007f59183e5fa0 R15: 00007ffe23a5d198 [ 266.382862][ T7521] [ 266.456864][ T7525] FAULT_INJECTION: forcing a failure. [ 266.456864][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.503855][ T7525] CPU: 1 PID: 7525 Comm: syz.4.1107 Not tainted syzkaller #0 [ 266.511314][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.521440][ T7525] Call Trace: [ 266.524739][ T7525] [ 266.527685][ T7525] dump_stack_lvl+0x168/0x22e [ 266.532390][ T7525] ? show_regs_print_info+0x12/0x12 [ 266.537606][ T7525] ? load_image+0x3b0/0x3b0 [ 266.542147][ T7525] ? __lock_acquire+0x7c50/0x7c50 [ 266.547203][ T7525] should_fail_ex+0x399/0x4d0 [ 266.551918][ T7525] _copy_from_user+0x2c/0x170 [ 266.556626][ T7525] iovec_from_user+0x143/0x360 [ 266.561532][ T7525] __import_iovec+0x6d/0x500 [ 266.566150][ T7525] ? __might_fault+0xa6/0x120 [ 266.570858][ T7525] import_iovec+0x6f/0xa0 [ 266.575232][ T7525] ___sys_sendmsg+0x1e4/0x290 [ 266.579950][ T7525] ? __sys_sendmsg+0x270/0x270 [ 266.584798][ T7525] ? __lock_acquire+0x7c50/0x7c50 [ 266.589887][ T7525] ? __fdget+0x17c/0x200 [ 266.594155][ T7525] __se_sys_sendmsg+0x19e/0x270 [ 266.599040][ T7525] ? __x64_sys_sendmsg+0x80/0x80 [ 266.604040][ T7525] ? lockdep_hardirqs_on+0x94/0x140 [ 266.609269][ T7525] do_syscall_64+0x4c/0xa0 [ 266.613701][ T7525] ? clear_bhb_loop+0x60/0xb0 [ 266.618396][ T7525] ? clear_bhb_loop+0x60/0xb0 [ 266.623149][ T7525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.629072][ T7525] RIP: 0033:0x7f181f38eec9 [ 266.633788][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.654225][ T7525] RSP: 002b:00007f1820263038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.662656][ T7525] RAX: ffffffffffffffda RBX: 00007f181f5e5fa0 RCX: 00007f181f38eec9 [ 266.670646][ T7525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.678656][ T7525] RBP: 00007f1820263090 R08: 0000000000000000 R09: 0000000000000000 [ 266.686675][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.694766][ T7525] R13: 00007f181f5e6038 R14: 00007f181f5e5fa0 R15: 00007ffe82bc2168 [ 266.702973][ T7525] [ 266.893938][ T7531] netlink: 'syz.0.1112': attribute type 10 has an invalid length. [ 266.913953][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1112'. [ 267.013291][ T7533] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1111'. [ 267.354672][ T7553] FAULT_INJECTION: forcing a failure. [ 267.354672][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 267.486114][ T7553] CPU: 0 PID: 7553 Comm: syz.4.1118 Not tainted syzkaller #0 [ 267.493551][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.503640][ T7553] Call Trace: [ 267.506930][ T7553] [ 267.509874][ T7553] dump_stack_lvl+0x168/0x22e [ 267.514675][ T7553] ? show_regs_print_info+0x12/0x12 [ 267.519905][ T7553] ? load_image+0x3b0/0x3b0 [ 267.524443][ T7553] ? __might_sleep+0xd0/0xd0 [ 267.529061][ T7553] ? __lock_acquire+0x7c50/0x7c50 [ 267.534115][ T7553] should_fail_ex+0x399/0x4d0 [ 267.538826][ T7553] should_failslab+0x5/0x20 [ 267.543354][ T7553] slab_pre_alloc_hook+0x59/0x310 [ 267.548410][ T7553] kmem_cache_alloc_node+0x5a/0x320 [ 267.553632][ T7553] ? __alloc_skb+0xfc/0x7e0 [ 267.558165][ T7553] __alloc_skb+0xfc/0x7e0 [ 267.562527][ T7553] ? netlink_autobind+0xda/0x300 [ 267.567544][ T7553] netlink_sendmsg+0x645/0xbc0 [ 267.572350][ T7553] ? netlink_getsockopt+0x540/0x540 [ 267.577634][ T7553] ? aa_sock_msg_perm+0x94/0x150 [ 267.582614][ T7553] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 267.587943][ T7553] ? security_socket_sendmsg+0x7c/0xa0 [ 267.593459][ T7553] ? netlink_getsockopt+0x540/0x540 [ 267.598748][ T7553] ____sys_sendmsg+0x59b/0x970 [ 267.603547][ T7553] ? __sys_sendmsg_sock+0x30/0x30 [ 267.608582][ T7553] ? __import_iovec+0x315/0x500 [ 267.613448][ T7553] ? import_iovec+0x6f/0xa0 [ 267.618005][ T7553] ___sys_sendmsg+0x21c/0x290 [ 267.622685][ T7553] ? __sys_sendmsg+0x270/0x270 [ 267.627465][ T7553] ? __lock_acquire+0x7c50/0x7c50 [ 267.632608][ T7553] ? __fdget+0x17c/0x200 [ 267.636879][ T7553] __se_sys_sendmsg+0x19e/0x270 [ 267.641740][ T7553] ? ct_nmi_exit+0x145/0x1c0 [ 267.646390][ T7553] ? __x64_sys_sendmsg+0x80/0x80 [ 267.651344][ T7553] ? lockdep_hardirqs_on+0x94/0x140 [ 267.656574][ T7553] do_syscall_64+0x4c/0xa0 [ 267.660991][ T7553] ? clear_bhb_loop+0x60/0xb0 [ 267.665670][ T7553] ? clear_bhb_loop+0x60/0xb0 [ 267.670354][ T7553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.676249][ T7553] RIP: 0033:0x7f181f38eec9 [ 267.680665][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.700283][ T7553] RSP: 002b:00007f1820263038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.708708][ T7553] RAX: ffffffffffffffda RBX: 00007f181f5e5fa0 RCX: 00007f181f38eec9 [ 267.716679][ T7553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 267.724739][ T7553] RBP: 00007f1820263090 R08: 0000000000000000 R09: 0000000000000000 [ 267.732717][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.740694][ T7553] R13: 00007f181f5e6038 R14: 00007f181f5e5fa0 R15: 00007ffe82bc2168 [ 267.748688][ T7553] [ 268.064525][ T7558] netlink: 'syz.0.1119': attribute type 4 has an invalid length. [ 268.094306][ T7558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1119'. [ 268.128065][ T7558] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.060498][ T7570] device syzkaller0 entered promiscuous mode [ 269.225867][ T7574] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 269.262702][ T7574] syzkaller0: Linktype set failed because interface is up [ 269.362396][ T126] syzkaller0: tun_net_xmit 48 [ 269.925432][ T7586] IPv6: Can't replace route, no match found [ 270.011643][ T7586] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1127'. [ 273.882560][ T7604] netlink: 'syz.1.1134': attribute type 29 has an invalid length. [ 276.354727][ T7593] netlink: 'syz.4.1130': attribute type 10 has an invalid length. [ 276.362622][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1130'. [ 276.393384][ T7604] netlink: 'syz.1.1134': attribute type 29 has an invalid length. [ 276.424570][ T7614] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1137'. [ 277.900444][ T7652] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 277.941842][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1149'. [ 280.659989][ T7699] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 281.494681][ T7720] IPv6: Can't replace route, no match found [ 281.539799][ T7720] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1168'. [ 281.660886][ T7722] netlink: 'syz.4.1169': attribute type 29 has an invalid length. [ 281.705114][ T7722] netlink: 'syz.4.1169': attribute type 29 has an invalid length. [ 281.750174][ T7728] netlink: 'syz.4.1169': attribute type 29 has an invalid length. [ 282.197947][ T7731] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 282.228306][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 282.497764][ T7738] IPv6: Can't replace route, no match found [ 282.538383][ T7738] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.593530][ T7738] netlink: 'syz.0.1175': attribute type 10 has an invalid length. [ 282.913637][ T7750] netlink: 'syz.0.1179': attribute type 13 has an invalid length. [ 282.976797][ T7750] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1179'. [ 283.049866][ T7753] netlink: 'syz.1.1180': attribute type 4 has an invalid length. [ 283.062184][ T7753] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1180'. [ 283.080237][ T7753] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 283.312578][ T7758] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 283.342329][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1183'. [ 283.690134][ T7770] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1187'. [ 284.570445][ T7789] netlink: 'syz.4.1193': attribute type 13 has an invalid length. [ 284.583968][ T7789] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1193'. [ 284.747570][ T7796] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1196'. [ 285.114552][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 285.139016][ T7803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.303696][ T7807] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1200'. [ 285.427661][ T7810] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1200'. [ 285.592596][ T7813] IPv6: Can't replace route, no match found [ 285.913853][ T7823] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 286.379231][ T7826] delete_channel: no stack [ 287.045500][ T7848] device syzkaller0 entered promiscuous mode [ 287.080932][ T7851] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 287.141248][ T7851] syzkaller0: Linktype set failed because interface is up [ 287.180758][ T4332] syzkaller0: tun_net_xmit 48 [ 287.209120][ T7854] __nla_validate_parse: 5 callbacks suppressed [ 287.209156][ T7854] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1216'. [ 287.529312][ T7856] validate_nla: 2 callbacks suppressed [ 287.529349][ T7856] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 289.941616][ T7858] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1218'. [ 289.950898][ T7856] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 289.960115][ T7867] netlink: 'syz.2.1220': attribute type 13 has an invalid length. [ 289.971659][ T7867] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1220'. [ 290.011733][ T7868] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1221'. [ 290.251963][ T7877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1225'. [ 290.401604][ T7882] netlink: 'syz.1.1226': attribute type 13 has an invalid length. [ 290.414481][ T7882] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1226'. [ 290.593869][ T7890] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 290.629224][ T7890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1230'. [ 291.647651][ T7906] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 291.679875][ T7906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1236'. [ 291.735596][ T7911] netlink: 'syz.3.1235': attribute type 3 has an invalid length. [ 291.743524][ T7911] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1235'. [ 291.786247][ T7912] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 292.008204][ T7912] device veth0_vlan left promiscuous mode [ 292.098194][ T7912] device veth0_vlan entered promiscuous mode [ 292.188835][ T7912] team0: Device veth0_vlan failed to register rx_handler [ 294.636698][ T7943] netlink: 'syz.4.1247': attribute type 10 has an invalid length. [ 294.662319][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1247'. [ 294.812523][ T7947] IPv6: Can't replace route, no match found [ 294.858594][ T7947] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1249'. [ 295.541434][ T7964] netlink: 'syz.2.1255': attribute type 10 has an invalid length. [ 295.549847][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1255'. [ 296.529512][ T7980] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1260'. [ 296.597988][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1265'. [ 296.827142][ T7993] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1266'. [ 296.953273][ T7993] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 297.008776][ T7993] device veth0_vlan left promiscuous mode [ 297.063127][ T7993] device veth0_vlan entered promiscuous mode [ 297.105873][ T7998] FAULT_INJECTION: forcing a failure. [ 297.105873][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.128970][ T7993] team0: Device veth0_vlan failed to register rx_handler [ 297.194590][ T7998] CPU: 0 PID: 7998 Comm: syz.0.1268 Not tainted syzkaller #0 [ 297.202028][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.212185][ T7998] Call Trace: [ 297.215476][ T7998] [ 297.218412][ T7998] dump_stack_lvl+0x168/0x22e [ 297.223107][ T7998] ? show_regs_print_info+0x12/0x12 [ 297.228316][ T7998] ? load_image+0x3b0/0x3b0 [ 297.232837][ T7998] ? __might_fault+0xa6/0x120 [ 297.237539][ T7998] should_fail_ex+0x399/0x4d0 [ 297.242236][ T7998] copyin+0x1b/0x120 [ 297.246146][ T7998] _copy_from_iter+0x45a/0x10c0 [ 297.251018][ T7998] ? copyout_mc+0x110/0x110 [ 297.255537][ T7998] ? __virt_addr_valid+0x188/0x540 [ 297.260675][ T7998] ? __virt_addr_valid+0x188/0x540 [ 297.265802][ T7998] ? __virt_addr_valid+0x465/0x540 [ 297.270931][ T7998] ? __check_object_size+0x500/0xa40 [ 297.276228][ T7998] netlink_sendmsg+0x746/0xbc0 [ 297.281013][ T7998] ? netlink_getsockopt+0x540/0x540 [ 297.286227][ T7998] ? aa_sock_msg_perm+0x94/0x150 [ 297.291181][ T7998] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 297.296480][ T7998] ? security_socket_sendmsg+0x7c/0xa0 [ 297.301958][ T7998] ? netlink_getsockopt+0x540/0x540 [ 297.307169][ T7998] ____sys_sendmsg+0x59b/0x970 [ 297.311956][ T7998] ? __sys_sendmsg_sock+0x30/0x30 [ 297.316992][ T7998] ? __import_iovec+0x315/0x500 [ 297.321865][ T7998] ? import_iovec+0x6f/0xa0 [ 297.326389][ T7998] ___sys_sendmsg+0x21c/0x290 [ 297.331084][ T7998] ? __sys_sendmsg+0x270/0x270 [ 297.335899][ T7998] ? __lock_acquire+0x7c50/0x7c50 [ 297.340974][ T7998] ? __fdget+0x17c/0x200 [ 297.345251][ T7998] __se_sys_sendmsg+0x19e/0x270 [ 297.350123][ T7998] ? __x64_sys_sendmsg+0x80/0x80 [ 297.355091][ T7998] ? lockdep_hardirqs_on+0x94/0x140 [ 297.360314][ T7998] do_syscall_64+0x4c/0xa0 [ 297.364747][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 297.369437][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 297.374126][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.380029][ T7998] RIP: 0033:0x7f939218eec9 [ 297.384489][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.404114][ T7998] RSP: 002b:00007f9392f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.412545][ T7998] RAX: ffffffffffffffda RBX: 00007f93923e5fa0 RCX: 00007f939218eec9 [ 297.420529][ T7998] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 297.428568][ T7998] RBP: 00007f9392f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.436553][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.444540][ T7998] R13: 00007f93923e6038 R14: 00007f93923e5fa0 R15: 00007ffcb5b9f628 [ 297.452540][ T7998] [ 297.499218][ T7996] netlink: 'syz.1.1267': attribute type 29 has an invalid length. [ 297.571492][ T7996] netlink: 'syz.1.1267': attribute type 29 has an invalid length. [ 297.605427][ T7999] netlink: 'syz.1.1267': attribute type 29 has an invalid length. [ 298.173232][ T8020] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 298.181627][ T8020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1275'. [ 298.750448][ T8030] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 298.775419][ T8030] team0: Device geneve1 is up. Set it down before adding it as a team port [ 298.833742][ T8032] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1279'. [ 299.354186][ T8051] netlink: 'syz.0.1288': attribute type 4 has an invalid length. [ 299.361978][ T8051] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1288'. [ 299.437911][ T8051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 299.776498][ T8075] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1293'. [ 299.831038][ T8080] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1294'. [ 300.343814][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'. [ 300.388258][ T8093] tc_dump_action: action bad kind [ 303.641346][ T8097] device wg2 left promiscuous mode [ 303.668836][ T8093] device wg2 entered promiscuous mode [ 303.928041][ T8119] device syzkaller0 entered promiscuous mode [ 303.935864][ T8120] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1307'. [ 303.954300][ T8124] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1309'. [ 303.975506][ T4332] syzkaller0: tun_net_xmit 48 [ 303.986473][ T8127] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 303.992638][ T8127] syzkaller0: Linktype set failed because interface is up [ 306.796964][ T8133] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1313'. [ 306.829026][ T8165] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 306.872156][ T8165] device syzkaller0 entered promiscuous mode [ 309.168280][ T8171] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1323'. [ 309.178822][ T8179] netlink: 'syz.4.1325': attribute type 10 has an invalid length. [ 309.439732][ T8197] IPv6: Can't replace route, no match found [ 309.519842][ T8197] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1332'. [ 310.197938][ T8194] netlink: 'syz.3.1330': attribute type 29 has an invalid length. [ 310.214572][ T8194] netlink: 'syz.3.1330': attribute type 29 has an invalid length. [ 310.815046][ T8213] À: port 1(vlan0) entered blocking state [ 310.824919][ T8213] À: port 1(vlan0) entered disabled state [ 310.860645][ T8213] device vlan0 entered promiscuous mode [ 311.614722][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 311.634468][ T8235] tc_dump_action: action bad kind [ 311.641294][ T8236] device wg2 left promiscuous mode [ 311.665234][ T8237] device wg2 entered promiscuous mode [ 311.820020][ T8243] IPv6: Can't replace route, no match found [ 311.858000][ T8243] netlink: 'syz.2.1343': attribute type 10 has an invalid length. [ 311.983031][ T8255] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1346'. [ 313.130990][ T8279] FAULT_INJECTION: forcing a failure. [ 313.130990][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.164298][ T8279] CPU: 1 PID: 8279 Comm: syz.2.1356 Not tainted syzkaller #0 [ 313.171726][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.181816][ T8279] Call Trace: [ 313.185119][ T8279] [ 313.188062][ T8279] dump_stack_lvl+0x168/0x22e [ 313.192768][ T8279] ? show_regs_print_info+0x12/0x12 [ 313.197991][ T8279] ? load_image+0x3b0/0x3b0 [ 313.202527][ T8279] ? __might_fault+0xa6/0x120 [ 313.207244][ T8279] should_fail_ex+0x399/0x4d0 [ 313.211952][ T8279] copyin+0x1b/0x120 [ 313.215878][ T8279] _copy_from_iter+0x45a/0x10c0 [ 313.220764][ T8279] ? copyout_mc+0x110/0x110 [ 313.225296][ T8279] ? __virt_addr_valid+0x188/0x540 [ 313.230431][ T8279] ? __virt_addr_valid+0x188/0x540 [ 313.235547][ T8279] ? __virt_addr_valid+0x465/0x540 [ 313.240662][ T8279] ? __check_object_size+0x500/0xa40 [ 313.245946][ T8279] netlink_sendmsg+0x746/0xbc0 [ 313.250721][ T8279] ? netlink_getsockopt+0x540/0x540 [ 313.255918][ T8279] ? aa_sock_msg_perm+0x94/0x150 [ 313.260867][ T8279] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 313.266154][ T8279] ? security_socket_sendmsg+0x7c/0xa0 [ 313.271623][ T8279] ? netlink_getsockopt+0x540/0x540 [ 313.276825][ T8279] ____sys_sendmsg+0x59b/0x970 [ 313.281600][ T8279] ? __sys_sendmsg_sock+0x30/0x30 [ 313.286621][ T8279] ? __import_iovec+0x315/0x500 [ 313.291484][ T8279] ? import_iovec+0x6f/0xa0 [ 313.295993][ T8279] ___sys_sendmsg+0x21c/0x290 [ 313.300672][ T8279] ? __sys_sendmsg+0x270/0x270 [ 313.305450][ T8279] ? __lock_acquire+0x7c50/0x7c50 [ 313.310487][ T8279] ? __fdget+0x17c/0x200 [ 313.314732][ T8279] __se_sys_sendmsg+0x19e/0x270 [ 313.319591][ T8279] ? __x64_sys_sendmsg+0x80/0x80 [ 313.324537][ T8279] ? lockdep_hardirqs_on+0x94/0x140 [ 313.329744][ T8279] do_syscall_64+0x4c/0xa0 [ 313.334181][ T8279] ? clear_bhb_loop+0x60/0xb0 [ 313.338872][ T8279] ? clear_bhb_loop+0x60/0xb0 [ 313.343568][ T8279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.349465][ T8279] RIP: 0033:0x7fa612b8eec9 [ 313.353875][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.373495][ T8279] RSP: 002b:00007fa6139d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.381911][ T8279] RAX: ffffffffffffffda RBX: 00007fa612de5fa0 RCX: 00007fa612b8eec9 [ 313.389884][ T8279] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 313.397866][ T8279] RBP: 00007fa6139d8090 R08: 0000000000000000 R09: 0000000000000000 [ 313.405845][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.413823][ T8279] R13: 00007fa612de6038 R14: 00007fa612de5fa0 R15: 00007ffed5f50e18 [ 313.421806][ T8279] [ 316.308604][ T8291] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 316.342103][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1359'. [ 316.356996][ T8289] netlink: 'syz.2.1360': attribute type 10 has an invalid length. [ 316.366844][ T8289] team0: Device geneve1 is up. Set it down before adding it as a team port [ 316.381141][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 316.421903][ T8292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.601474][ T8294] À: port 1(vlan0) entered blocking state [ 316.645172][ T8294] À: port 1(vlan0) entered disabled state [ 316.679052][ T8294] device vlan0 entered promiscuous mode [ 317.772596][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.779078][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.751364][ T8354] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1380'. [ 318.770167][ T8356] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 318.801184][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 319.368904][ T8382] netlink: 'syz.1.1387': attribute type 29 has an invalid length. [ 319.379847][ T8382] netlink: 'syz.1.1387': attribute type 29 has an invalid length. [ 319.393161][ T8382] netlink: 'syz.1.1387': attribute type 29 has an invalid length. [ 319.812172][ T8395] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1394'. [ 319.887201][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 319.928077][ T8394] tc_dump_action: action bad kind [ 319.953326][ T8394] device wg2 left promiscuous mode [ 320.024354][ T8401] device wg2 entered promiscuous mode [ 320.991339][ T8421] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 321.041521][ T8421] team0: Device dummy0 is up. Set it down before adding it as a team port [ 321.063689][ T8421] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 321.551915][ T8421] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 321.564053][ T8426] netlink: 'syz.4.1404': attribute type 10 has an invalid length. [ 321.590974][ T8426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1404'. [ 322.615484][ T8455] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1413'. [ 322.628977][ T8458] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1414'. [ 322.797088][ T8463] tun0: tun_chr_ioctl cmd 1074025680 [ 322.856892][ T8463] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1416'. [ 322.945720][ T8468] netlink: 'syz.4.1416': attribute type 11 has an invalid length. [ 322.991379][ T8468] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1416'. [ 323.035808][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.129564][ T8497] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1427'. [ 324.162541][ T8499] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1428'. [ 324.614098][ T8512] netlink: 'syz.3.1433': attribute type 10 has an invalid length. [ 324.666739][ T8514] netlink: 'syz.0.1434': attribute type 11 has an invalid length. [ 325.066612][ T8522] IPv6: Can't replace route, no match found [ 325.161063][ T8522] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1438'. [ 325.615991][ T8537] netlink: 'syz.1.1442': attribute type 21 has an invalid length. [ 325.632173][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 325.662775][ T8535] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1443'. [ 325.678816][ T8530] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1440'. [ 325.696759][ T8540] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1445'. [ 326.381141][ T8563] netlink: 'syz.0.1451': attribute type 29 has an invalid length. [ 326.398863][ T8563] netlink: 'syz.0.1451': attribute type 29 has an invalid length. [ 326.420174][ T8563] netlink: 'syz.0.1451': attribute type 29 has an invalid length. [ 327.063034][ T8585] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1459'. [ 327.240008][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 327.260853][ T8593] tc_dump_action: action bad kind [ 327.292263][ T8593] device wg2 left promiscuous mode [ 327.334764][ T8593] device wg2 entered promiscuous mode [ 327.436490][ T8597] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1464'. [ 327.559654][ T8604] IPv6: Can't replace route, no match found [ 327.586186][ T8604] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 327.651155][ T8604] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 327.695090][ T8610] FAULT_INJECTION: forcing a failure. [ 327.695090][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 327.774288][ T8610] CPU: 1 PID: 8610 Comm: syz.3.1469 Not tainted syzkaller #0 [ 327.781709][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.791777][ T8610] Call Trace: [ 327.795062][ T8610] [ 327.797986][ T8610] dump_stack_lvl+0x168/0x22e [ 327.802661][ T8610] ? show_regs_print_info+0x12/0x12 [ 327.807851][ T8610] ? load_image+0x3b0/0x3b0 [ 327.812351][ T8610] ? __might_sleep+0xd0/0xd0 [ 327.816939][ T8610] ? __lock_acquire+0x7c50/0x7c50 [ 327.821961][ T8610] should_fail_ex+0x399/0x4d0 [ 327.826636][ T8610] should_failslab+0x5/0x20 [ 327.831131][ T8610] slab_pre_alloc_hook+0x59/0x310 [ 327.836144][ T8610] ? rtnl_newlink+0xe7/0x1ff0 [ 327.840811][ T8610] __kmem_cache_alloc_node+0x4f/0x260 [ 327.846171][ T8610] ? rtnl_newlink+0xe7/0x1ff0 [ 327.850842][ T8610] kmalloc_trace+0x26/0xe0 [ 327.855263][ T8610] rtnl_newlink+0xe7/0x1ff0 [ 327.859772][ T8610] ? do_syscall_64+0x4c/0xa0 [ 327.864354][ T8610] ? __mutex_trylock_common+0x14f/0x250 [ 327.869889][ T8610] ? rtnl_setlink+0x450/0x450 [ 327.874555][ T8610] ? trace_raw_output_contention_end+0xd0/0xd0 [ 327.880700][ T8610] ? rcu_is_watching+0x11/0xa0 [ 327.885458][ T8610] ? trace_contention_end+0x5f/0x170 [ 327.890731][ T8610] ? __mutex_lock+0x19e/0xaf0 [ 327.895431][ T8610] ? rtnetlink_rcv_msg+0x740/0xed0 [ 327.900532][ T8610] ? rcu_read_unlock+0x8c/0xa0 [ 327.905287][ T8610] ? mutex_lock_nested+0x10/0x10 [ 327.910222][ T8610] ? rtnl_setlink+0x450/0x450 [ 327.914892][ T8610] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 327.919994][ T8610] rtnetlink_rcv_msg+0x79b/0xed0 [ 327.924928][ T8610] ? rtnetlink_bind+0x80/0x80 [ 327.929593][ T8610] ? __local_bh_enable_ip+0x12a/0x1b0 [ 327.934960][ T8610] ? lockdep_hardirqs_on+0x94/0x140 [ 327.940151][ T8610] ? __local_bh_enable_ip+0x12a/0x1b0 [ 327.945519][ T8610] ? _local_bh_enable+0xa0/0xa0 [ 327.950367][ T8610] ? __dev_queue_xmit+0x26f/0x3760 [ 327.955476][ T8610] ? __dev_queue_xmit+0x26f/0x3760 [ 327.960585][ T8610] ? __dev_queue_xmit+0x15c9/0x3760 [ 327.965780][ T8610] ? __dev_queue_xmit+0x26f/0x3760 [ 327.970887][ T8610] ? netdev_core_pick_tx+0x340/0x340 [ 327.976163][ T8610] ? ref_tracker_free+0x630/0x7c0 [ 327.981183][ T8610] ? refcount_inc+0x70/0x70 [ 327.985676][ T8610] ? __copy_skb_header+0x417/0x5a0 [ 327.990779][ T8610] ? __skb_clone+0x480/0x790 [ 327.995364][ T8610] netlink_rcv_skb+0x1de/0x420 [ 328.000127][ T8610] ? rtnetlink_bind+0x80/0x80 [ 328.004797][ T8610] ? netlink_ack+0x1100/0x1100 [ 328.009558][ T8610] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.014748][ T8610] netlink_unicast+0x74d/0x8d0 [ 328.019509][ T8610] netlink_sendmsg+0x89e/0xbc0 [ 328.024269][ T8610] ? netlink_getsockopt+0x540/0x540 [ 328.029457][ T8610] ? aa_sock_msg_perm+0x94/0x150 [ 328.034394][ T8610] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.039666][ T8610] ? security_socket_sendmsg+0x7c/0xa0 [ 328.045115][ T8610] ? netlink_getsockopt+0x540/0x540 [ 328.050302][ T8610] ____sys_sendmsg+0x59b/0x970 [ 328.055064][ T8610] ? __sys_sendmsg_sock+0x30/0x30 [ 328.060076][ T8610] ? __import_iovec+0x315/0x500 [ 328.064925][ T8610] ? import_iovec+0x6f/0xa0 [ 328.069422][ T8610] ___sys_sendmsg+0x21c/0x290 [ 328.074091][ T8610] ? __sys_sendmsg+0x270/0x270 [ 328.078863][ T8610] ? __lock_acquire+0x7c50/0x7c50 [ 328.083891][ T8610] ? __fdget+0x17c/0x200 [ 328.088126][ T8610] __se_sys_sendmsg+0x19e/0x270 [ 328.092969][ T8610] ? __x64_sys_sendmsg+0x80/0x80 [ 328.097910][ T8610] ? lockdep_hardirqs_on+0x94/0x140 [ 328.103100][ T8610] do_syscall_64+0x4c/0xa0 [ 328.107504][ T8610] ? clear_bhb_loop+0x60/0xb0 [ 328.112168][ T8610] ? clear_bhb_loop+0x60/0xb0 [ 328.116833][ T8610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.122713][ T8610] RIP: 0033:0x7f5ee8f8eec9 [ 328.127117][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.146708][ T8610] RSP: 002b:00007f5ee71f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.155112][ T8610] RAX: ffffffffffffffda RBX: 00007f5ee91e5fa0 RCX: 00007f5ee8f8eec9 [ 328.163072][ T8610] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 328.171052][ T8610] RBP: 00007f5ee71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 328.179012][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.186970][ T8610] R13: 00007f5ee91e6038 R14: 00007f5ee91e5fa0 R15: 00007ffe01a24788 [ 328.194941][ T8610] [ 331.778524][ T8654] FAULT_INJECTION: forcing a failure. [ 331.778524][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 331.837538][ T8657] __nla_validate_parse: 2 callbacks suppressed [ 331.837553][ T8657] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1484'. [ 331.853199][ T8654] CPU: 1 PID: 8654 Comm: syz.1.1483 Not tainted syzkaller #0 [ 331.860601][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.870668][ T8654] Call Trace: [ 331.873952][ T8654] [ 331.876893][ T8654] dump_stack_lvl+0x168/0x22e [ 331.881587][ T8654] ? show_regs_print_info+0x12/0x12 [ 331.886804][ T8654] ? load_image+0x3b0/0x3b0 [ 331.891325][ T8654] ? verify_lock_unused+0x140/0x140 [ 331.896528][ T8654] should_fail_ex+0x399/0x4d0 [ 331.901217][ T8654] should_failslab+0x5/0x20 [ 331.905721][ T8654] slab_pre_alloc_hook+0x59/0x310 [ 331.910739][ T8654] kmem_cache_alloc+0x56/0x2f0 [ 331.915490][ T8654] ? skb_clone+0x1e7/0x370 [ 331.919905][ T8654] skb_clone+0x1e7/0x370 [ 331.924148][ T8654] __netlink_deliver_tap+0x3ed/0x800 [ 331.929437][ T8654] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.934628][ T8654] netlink_deliver_tap+0x19c/0x1b0 [ 331.939729][ T8654] netlink_unicast+0x728/0x8d0 [ 331.944492][ T8654] netlink_sendmsg+0x89e/0xbc0 [ 331.949256][ T8654] ? netlink_getsockopt+0x540/0x540 [ 331.954445][ T8654] ? aa_sock_msg_perm+0x94/0x150 [ 331.959380][ T8654] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 331.964650][ T8654] ? security_socket_sendmsg+0x7c/0xa0 [ 331.970103][ T8654] ? netlink_getsockopt+0x540/0x540 [ 331.975295][ T8654] ____sys_sendmsg+0x59b/0x970 [ 331.980060][ T8654] ? __sys_sendmsg_sock+0x30/0x30 [ 331.985077][ T8654] ? __import_iovec+0x315/0x500 [ 331.989929][ T8654] ? import_iovec+0x6f/0xa0 [ 331.994431][ T8654] ___sys_sendmsg+0x21c/0x290 [ 331.999102][ T8654] ? __sys_sendmsg+0x270/0x270 [ 332.003872][ T8654] ? __lock_acquire+0x7c50/0x7c50 [ 332.008905][ T8654] ? __fdget+0x17c/0x200 [ 332.013146][ T8654] __se_sys_sendmsg+0x19e/0x270 [ 332.017989][ T8654] ? __x64_sys_sendmsg+0x80/0x80 [ 332.022929][ T8654] ? lockdep_hardirqs_on+0x94/0x140 [ 332.028124][ T8654] do_syscall_64+0x4c/0xa0 [ 332.032530][ T8654] ? clear_bhb_loop+0x60/0xb0 [ 332.037198][ T8654] ? clear_bhb_loop+0x60/0xb0 [ 332.041868][ T8654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.047748][ T8654] RIP: 0033:0x7f591818eec9 [ 332.052153][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.071748][ T8654] RSP: 002b:00007f5918f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.080151][ T8654] RAX: ffffffffffffffda RBX: 00007f59183e5fa0 RCX: 00007f591818eec9 [ 332.088113][ T8654] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 332.096079][ T8654] RBP: 00007f5918f77090 R08: 0000000000000000 R09: 0000000000000000 [ 332.104037][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.111995][ T8654] R13: 00007f59183e6038 R14: 00007f59183e5fa0 R15: 00007ffe23a5d198 [ 332.119968][ T8654] [ 332.851782][ T8654] netlink: 'syz.1.1483': attribute type 4 has an invalid length. [ 332.861863][ T8654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1483'. [ 332.881331][ T8654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 333.349943][ T8688] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1494'. Connection to 10.128.1.74 closed by remote host. [ 350.003227][ T8700] ------------[ cut here ]------------ [ 350.008890][ T8700] WARNING: CPU: 1 PID: 8700 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 350.018612][ T8700] Modules linked in: [ 350.022514][ T8700] CPU: 1 PID: 8700 Comm: syz.4.1497 Not tainted syzkaller #0 [ 350.030022][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.040132][ T8700] RIP: 0010:perf_pending_task+0x358/0x470 [ 350.045993][ T8700] Code: ff 84 db 75 14 e8 88 d3 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 74 d3 da ff e8 37 85 5a ff eb e5 e8 68 d3 da ff <0f> 0b e9 f3 fe ff ff e8 5c d3 da ff 48 c7 c7 10 03 bc 8c 4c 89 f6 [ 350.065658][ T8700] RSP: 0018:ffffc90004917920 EFLAGS: 00010293 [ 350.071737][ T8700] RAX: ffffffff81a5fb88 RBX: ffff88807b559058 RCX: ffff88802a971dc0 [ 350.079775][ T8700] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 350.087824][ T8700] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100552e4f9 [ 350.095868][ T8700] R10: ffffed100552e4f9 R11: 1ffff1100552e4f8 R12: ffff88802a971dc0 [ 350.103844][ T8700] R13: ffff888042a83960 R14: ffff88807b558e20 R15: 1ffff1100f6ab1c4 [ 350.111858][ T8700] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 350.120988][ T8700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.127611][ T8700] CR2: 0000000100000000 CR3: 00000000270ca000 CR4: 00000000003506e0 [ 350.135622][ T8700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.143642][ T8700] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 350.151788][ T8700] Call Trace: [ 350.155106][ T8700] [ 350.158057][ T8700] task_work_run+0x1ca/0x250 [ 350.162666][ T8700] ? task_work_cancel+0x230/0x230 [ 350.167918][ T8700] ? do_raw_spin_unlock+0x11d/0x230 [ 350.173152][ T8700] do_exit+0x93e/0x2400 [ 350.177382][ T8700] ? put_task_struct+0x80/0x80 [ 350.182158][ T8700] ? lockdep_hardirqs_on+0x94/0x140 [ 350.187414][ T8700] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.193587][ T8700] do_group_exit+0x217/0x2d0 [ 350.198257][ T8700] get_signal+0x1272/0x1350 [ 350.202799][ T8700] arch_do_signal_or_restart+0xb0/0x1230 [ 350.208499][ T8700] ? do_futex+0x310/0x320 [ 350.212845][ T8700] ? irqentry_enter+0x33/0x50 [ 350.217592][ T8700] ? get_sigframe_size+0x10/0x10 [ 350.222532][ T8700] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 350.228587][ T8700] ? lockdep_hardirqs_on+0x94/0x140 [ 350.233799][ T8700] ? exit_to_user_mode_loop+0x3b/0x110 [ 350.239320][ T8700] exit_to_user_mode_loop+0x70/0x110 [ 350.244646][ T8700] exit_to_user_mode_prepare+0xee/0x180 [ 350.250217][ T8700] syscall_exit_to_user_mode+0x16/0x40 [ 350.255747][ T8700] do_syscall_64+0x58/0xa0 [ 350.260176][ T8700] ? clear_bhb_loop+0x60/0xb0 [ 350.264908][ T8700] ? clear_bhb_loop+0x60/0xb0 [ 350.269597][ T8700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.275515][ T8700] RIP: 0033:0x7f181f38eec9 [ 350.279934][ T8700] Code: Unable to access opcode bytes at 0x7f181f38ee9f. [ 350.286983][ T8700] RSP: 002b:00007f18202630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 350.295449][ T8700] RAX: fffffffffffffe00 RBX: 00007f181f5e5fa8 RCX: 00007f181f38eec9 [ 350.303434][ T8700] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f181f5e5fa8 [ 350.311460][ T8700] RBP: 00007f181f5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 350.319478][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.327504][ T8700] R13: 00007f181f5e6038 R14: 00007ffe82bc2080 R15: 00007ffe82bc2168 [ 350.335549][ T8700] [ 350.338588][ T8700] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.345869][ T8700] CPU: 1 PID: 8700 Comm: syz.4.1497 Not tainted syzkaller #0 [ 350.353241][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.363303][ T8700] Call Trace: [ 350.366589][ T8700] [ 350.369520][ T8700] dump_stack_lvl+0x168/0x22e [ 350.374203][ T8700] ? memcpy+0x3c/0x60 [ 350.378194][ T8700] ? show_regs_print_info+0x12/0x12 [ 350.383395][ T8700] ? load_image+0x3b0/0x3b0 [ 350.387920][ T8700] panic+0x2c9/0x710 [ 350.391834][ T8700] ? bpf_jit_dump+0xd0/0xd0 [ 350.396355][ T8700] __warn+0x2f8/0x4f0 [ 350.400344][ T8700] ? perf_pending_task+0x358/0x470 [ 350.405458][ T8700] ? perf_pending_task+0x358/0x470 [ 350.410554][ T8700] report_bug+0x2ba/0x4f0 [ 350.414871][ T8700] ? perf_pending_task+0x358/0x470 [ 350.419971][ T8700] handle_bug+0x3a/0x70 [ 350.424117][ T8700] exc_invalid_op+0x16/0x40 [ 350.428616][ T8700] asm_exc_invalid_op+0x16/0x20 [ 350.433455][ T8700] RIP: 0010:perf_pending_task+0x358/0x470 [ 350.439166][ T8700] Code: ff 84 db 75 14 e8 88 d3 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 74 d3 da ff e8 37 85 5a ff eb e5 e8 68 d3 da ff <0f> 0b e9 f3 fe ff ff e8 5c d3 da ff 48 c7 c7 10 03 bc 8c 4c 89 f6 [ 350.458771][ T8700] RSP: 0018:ffffc90004917920 EFLAGS: 00010293 [ 350.464837][ T8700] RAX: ffffffff81a5fb88 RBX: ffff88807b559058 RCX: ffff88802a971dc0 [ 350.472806][ T8700] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 350.480769][ T8700] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100552e4f9 [ 350.488731][ T8700] R10: ffffed100552e4f9 R11: 1ffff1100552e4f8 R12: ffff88802a971dc0 [ 350.496688][ T8700] R13: ffff888042a83960 R14: ffff88807b558e20 R15: 1ffff1100f6ab1c4 [ 350.504655][ T8700] ? perf_pending_task+0x358/0x470 [ 350.509766][ T8700] task_work_run+0x1ca/0x250 [ 350.514358][ T8700] ? task_work_cancel+0x230/0x230 [ 350.519380][ T8700] ? do_raw_spin_unlock+0x11d/0x230 [ 350.524584][ T8700] do_exit+0x93e/0x2400 [ 350.528747][ T8700] ? put_task_struct+0x80/0x80 [ 350.533504][ T8700] ? lockdep_hardirqs_on+0x94/0x140 [ 350.538697][ T8700] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.544848][ T8700] do_group_exit+0x217/0x2d0 [ 350.549434][ T8700] get_signal+0x1272/0x1350 [ 350.553945][ T8700] arch_do_signal_or_restart+0xb0/0x1230 [ 350.559569][ T8700] ? do_futex+0x310/0x320 [ 350.563890][ T8700] ? irqentry_enter+0x33/0x50 [ 350.568559][ T8700] ? get_sigframe_size+0x10/0x10 [ 350.573482][ T8700] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 350.579460][ T8700] ? lockdep_hardirqs_on+0x94/0x140 [ 350.584647][ T8700] ? exit_to_user_mode_loop+0x3b/0x110 [ 350.590097][ T8700] exit_to_user_mode_loop+0x70/0x110 [ 350.595372][ T8700] exit_to_user_mode_prepare+0xee/0x180 [ 350.600906][ T8700] syscall_exit_to_user_mode+0x16/0x40 [ 350.606356][ T8700] do_syscall_64+0x58/0xa0 [ 350.610759][ T8700] ? clear_bhb_loop+0x60/0xb0 [ 350.615418][ T8700] ? clear_bhb_loop+0x60/0xb0 [ 350.620083][ T8700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.625981][ T8700] RIP: 0033:0x7f181f38eec9 [ 350.630382][ T8700] Code: Unable to access opcode bytes at 0x7f181f38ee9f. [ 350.637381][ T8700] RSP: 002b:00007f18202630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 350.645783][ T8700] RAX: fffffffffffffe00 RBX: 00007f181f5e5fa8 RCX: 00007f181f38eec9 [ 350.653739][ T8700] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f181f5e5fa8 [ 350.661695][ T8700] RBP: 00007f181f5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 350.669650][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.677604][ T8700] R13: 00007f181f5e6038 R14: 00007ffe82bc2080 R15: 00007ffe82bc2168 [ 350.685570][ T8700] [ 350.688713][ T8700] Kernel Offset: disabled [ 350.693024][ T8700] Rebooting in 86400 seconds..