last executing test programs: 4.212297886s ago: executing program 0 (id=1692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000001e5911d35d6725010000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000007000000001000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000ec00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0xd8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04006ecb6d7957edbd000001800000020000000000000000000000ff85baeb1a8605be153c135a07df7c3af8cb3b5dbf44bb8716cf1f0b829e068776ebb16342b8c9269077962af679af6c7543231cdbb9767ed9e875873f12a6b16f9477114f02311522142096eb13c3874985487fe8a395adf306668b3b0721e3753337546c0a6705cd8a3c4a4229cc72fc7b5b37e4a4fc13aa517c2d8942e5a7599aaa77d66f791a72f349f06f6e66"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xf, 0x4, 0x2) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000008720000000000000", @ANYRES32=r1, @ANYBLOB="010400"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000300000000000000e400000000018000"/28], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe0ba1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0xffffff07, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x2}, 0x1a980, 0xce0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) 3.921985362s ago: executing program 0 (id=1694): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x40, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x4, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x48800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x5, &(0x7f0000000600)=ANY=[@ANYRES8=r4, @ANYRES8=0x0, @ANYRES16=r5, @ANYRES8=r1, @ANYRES8=r0, @ANYBLOB="22fae2ed7017a67f22a7e7f91e6d43e40fb23ead6eff5ec4b73df2da780332c0421d5b061ef395a8ffb85fdd81cebd0a6fff51d588498f50723130a9832e48282c0a6d8acb623c356983bd7a73c981db17afa2f8dae52efb4b783531cbb4adf38e9951c157ab900ec47f2a565ea7fc46ed6d27a879316bb34d40b932e757413c9cdac18c5df3dd470103a5ee1d4f27fc119b3126644bce0a5040b723db5f3ea1dacbf41c0bdf5558ef9ac030c4c1500537d8d8d8106af8eb67aad54a17bd476538405a4e8e238125a73c4d7d45f3a8bdc83c1423cd2d5baf66f69b56", @ANYBLOB="09561e6fde33ff7210521f7f12a48a809c55ebcaa53353719ac59899bf5bb9395eca35ed17bd1bed3c02967807a223463f271ddd85e7361b011256d86b9d11709536e3dc5d1d8372607cddae67af4ee980f8833e142cfce3f389c6d074c8dcd3bac6b6a058ebb5a499ee1fd63d2eb4e3cfeb7b1bda3d13f7174ddf57014a3028cecb00e57930702acb663e8ba41ddd747fa7c433636a0e6c00844cb47595b4b2f1a16892beb85a79cbf9f40ca9783aac45d0fe0f99"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x400000032, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40010160) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 2.951700954s ago: executing program 0 (id=1700): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0080004549050150d249f398ca259ede00aa47b093dd861fc4ab976f8f429ba360185bbe5332e9a557fb98561397172fefc7d4dc4f4c80b3627c55561e1a6aba2a71d7464dd91dfd17e03d02786734dc0faca58e9c8a9825def8cf797215e22bc0d24abd699a2d34d417f0b5f4fb", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1", 0x1c}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)="0000ffff", 0x0, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000006a001324ffff3adeade9ffe50000000033f8b9cf", 0x18}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000140)) recvmsg$kcm(r4, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1}, 0x80, &(0x7f0000000040)}, 0x0) 2.300386458s ago: executing program 2 (id=1705): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 2.267733459s ago: executing program 2 (id=1706): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (fail_nth: 1) 2.004285875s ago: executing program 2 (id=1707): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64138, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2b, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x2a, 0x5, 0x2, &(0x7f0000000300)) 2.003437615s ago: executing program 3 (id=1708): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, &(0x7f0000000500), 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x4d, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYRES8=r2], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c40)="d8000000100081044e81f782db44b904021d083909000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086dd673d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000084) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000000f7ffffff010000008400000022235e3b9d2f6ce21a9071889d98ce17a4fa3ed672bc72f0fa4fc03b0968c828074d231598a12bee4576d260f93ce36d27943560b8ff58b36e14175d53de1b2903078375658a5ad0eea8796ec47d2250aee8cdb5f97a3cc053b860f0746f4feb7a110aede5f32a517617f0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r10, &(0x7f0000000380), 0x2, 0x0) 1.899967027s ago: executing program 0 (id=1709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64138, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x2a, 0x5, 0x2, &(0x7f0000000300)) 1.711664522s ago: executing program 3 (id=1710): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x40, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x4, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) 1.664966622s ago: executing program 1 (id=1711): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 1.656761843s ago: executing program 3 (id=1712): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000001c00000018000000180000000400"], 0x0, 0x34}, 0x28) 1.515497546s ago: executing program 3 (id=1713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000001e5911d35d6725010000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000007000000001000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000ec00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0xd8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04006ecb6d7957edbd000001800000020000000000000000000000ff85baeb1a8605be153c135a07df7c3af8cb3b5dbf44bb8716cf1f0b829e068776ebb16342b8c9269077962af679af6c7543231cdbb9767ed9e875873f12a6b16f9477114f02311522142096eb13c3874985487fe8a395adf306668b3b0721e3753337546c0a6705cd8a3c4a4229cc72fc7b5b37e4a4fc13aa517c2d8942e5a7599aaa77d66f791a72f349f06f6e66"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xf, 0x4, 0x2) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000008720000000000000", @ANYRES32=r1, @ANYBLOB="010400"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000300000000000000e400000000018000"/28], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x10001, @local, 0x48, 0x7fffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='D', 0x1}], 0x1}, 0x30008041) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0xffffff07, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x2}, 0x1a980, 0xce0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) 1.500653366s ago: executing program 1 (id=1714): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x10, 0x1}]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.419691598s ago: executing program 1 (id=1715): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000800)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) 1.287277041s ago: executing program 3 (id=1716): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="d2581fd59d40e2b84534c88080de580c5d6956245807176e0381bbebc01b49680dacf7f9187e630d8227681dc1537eefb628b33b619415a3bbd7a90115f54b7f8d39124dd78df82104a2", 0x4a}, {&(0x7f0000000400)="3f8ae1287f55e18e6b74177bf542e055ae3eac7d", 0x14}, {&(0x7f0000000440)="255d4ba19574f5ad0f8550ec87d6f45bc0c7b43dfdeb5d3da401f0f9d40e32b617a2a1672a75aeed657f526ef7c0bc98d9b2fcf3c3a6e3be2838689f83a8452d77d9f12a8ced2a8fd221114950edc9fe645c25efa44ce3fef7adc8f6959f5081b93928e74529452484d8aeafc4cc39f315630d7ed38a6d7e72502a367b98d39111cbd5e9c5401382b709ea5659f6e85e12b39912ae976f8e339c8631219f19e4dc56f875bd0754ae7a8b7367b17d6ae67c5e3be186175b180e6048941a1f80fc82da31fef0393243771bb05872761f10d68648a86becbb2181", 0xd9}, {&(0x7f0000000640)="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", 0xfe}], 0x4, &(0x7f0000000780)=[{0x30, 0x118, 0x10, "ff7fb3006dd7041f2f8199a381d3a88fdd7b85f91774d4d2efd2"}, {0x80, 0x3a, 0xf, "5dfdd92267b8fe816bdd53f7aaa0b59e2ab6377ec3a87933c3d00eb47ae91063a5d72616544af4696d07d806054748a9c1352f0b90a6501fef03cb3ec65bd15415cf9de46f66f5686bc0f91a6cbd0cb35dea5bd3055911a09d48db6f507ac973d5aa82e9d607c7609453a5ca8427"}, {0xf0, 0x10c, 0x6, "f98772d8c9c945c4888cda8d4cc3e3b30cc8afbe581c38de1424554c35190ec16333703c0b3a6f5f5a7888caf29f4431d946d840eec0fd8cde144fd2d9fad96a6c4bbd511c4053f27d69e0deb3d7abf70b66c7a42bc80f5c4ddf758e3f4fff2bde4b91134e01a8f43827f8bc6108c5ac2c6da131a1521a52b35a18a43fa1f7304d3402452c0263fef1320ed1587fde34774c76249facef0cf1382fd713a0ea41f9878eab6a21c0c674b1fee0e9b0649ab436e80d84c934f50b26eafd7b57e82d439eba78fea47fd9b5db577e5e7811a0576733d1f81160c717c933d4260610b7"}, {0xf0, 0x102, 0xc, "e31a5a8f30620c9ccc78be0c844843f6343e5ed9ec1acbb4ffe0114dadd2b4a1089636c52155254f543d50a8ed55804a40d4d8f56f79b8426c3254c5ee47933a6728a7d04de6fc1411244f522d0651a334148f96e7a9f6f1b3ad91828982ac3525cb8ee28ad61dc7da48ef2ed017f2fddea9bb3c3e2b3a3c97dc665bc06f88a17172e0128ad106deb9aff7c45713754b1d94ea5fbc75c6c1deac77f5789eeee838848a6a3ef08c765e2b6a6ad151135b0fd117f4d2e4fda6616ae903ac96b13dc4bcc62ce8b67c996b004734251f646f3608a835b5b4b59c0ef1a039"}], 0x290}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0xfce1, 0x24040044}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socket$kcm(0x22, 0x3, 0x0) socketpair(0x1, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r6}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) 1.209449703s ago: executing program 1 (id=1717): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0080004549050150d249f398ca259ede00aa47b093dd861fc4ab976f8f429ba360185bbe5332e9a557fb98561397172fefc7d4dc4f4c80b3627c55561e1a6aba2a71d7464dd91dfd17e03d02786734dc0faca58e9c8a9825def8cf797215e22bc0d24abd699a2d34d417f0b5f4fb", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1", 0x1c}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)="0000ffff", 0x0, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000006a001324ffff3adeade9ffe50000000033f8b9cf", 0x18}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000140)) recvmsg$kcm(r5, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1}, 0x80, &(0x7f0000000040)}, 0x0) 1.111003325s ago: executing program 2 (id=1718): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x40000160) 1.014632297s ago: executing program 2 (id=1719): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="d2581fd59d40e2b84534c88080de580c5d6956245807176e0381bbebc01b49680dacf7f9187e630d8227681dc1537eefb628b33b619415a3bbd7a90115f54b7f8d39124dd78df82104a2", 0x4a}, {&(0x7f0000000400)="3f8ae1287f55e18e6b74177bf542e055ae3eac7d", 0x14}, {&(0x7f0000000440)="255d4ba19574f5ad0f8550ec87d6f45bc0c7b43dfdeb5d3da401f0f9d40e32b617a2a1672a75aeed657f526ef7c0bc98d9b2fcf3c3a6e3be2838689f83a8452d77d9f12a8ced2a8fd221114950edc9fe645c25efa44ce3fef7adc8f6959f5081b93928e74529452484d8aeafc4cc39f315630d7ed38a6d7e72502a367b98d39111cbd5e9c5401382b709ea5659f6e85e12b39912ae976f8e339c8631219f19e4dc56f875bd0754ae7a8b7367b17d6ae67c5e3be186175b180e6048941a1f80fc82da31fef0393243771bb05872761f10d68648a86becbb2181", 0xd9}, {&(0x7f0000000640)="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", 0xfe}], 0x4, &(0x7f0000000780)=[{0x30, 0x118, 0x10, "ff7fb3006dd7041f2f8199a381d3a88fdd7b85f91774d4d2efd2"}, {0x80, 0x3a, 0xf, "5dfdd92267b8fe816bdd53f7aaa0b59e2ab6377ec3a87933c3d00eb47ae91063a5d72616544af4696d07d806054748a9c1352f0b90a6501fef03cb3ec65bd15415cf9de46f66f5686bc0f91a6cbd0cb35dea5bd3055911a09d48db6f507ac973d5aa82e9d607c7609453a5ca8427"}, {0xf0, 0x10c, 0x6, "f98772d8c9c945c4888cda8d4cc3e3b30cc8afbe581c38de1424554c35190ec16333703c0b3a6f5f5a7888caf29f4431d946d840eec0fd8cde144fd2d9fad96a6c4bbd511c4053f27d69e0deb3d7abf70b66c7a42bc80f5c4ddf758e3f4fff2bde4b91134e01a8f43827f8bc6108c5ac2c6da131a1521a52b35a18a43fa1f7304d3402452c0263fef1320ed1587fde34774c76249facef0cf1382fd713a0ea41f9878eab6a21c0c674b1fee0e9b0649ab436e80d84c934f50b26eafd7b57e82d439eba78fea47fd9b5db577e5e7811a0576733d1f81160c717c933d4260610b7"}, {0xf0, 0x102, 0xc, "e31a5a8f30620c9ccc78be0c844843f6343e5ed9ec1acbb4ffe0114dadd2b4a1089636c52155254f543d50a8ed55804a40d4d8f56f79b8426c3254c5ee47933a6728a7d04de6fc1411244f522d0651a334148f96e7a9f6f1b3ad91828982ac3525cb8ee28ad61dc7da48ef2ed017f2fddea9bb3c3e2b3a3c97dc665bc06f88a17172e0128ad106deb9aff7c45713754b1d94ea5fbc75c6c1deac77f5789eeee838848a6a3ef08c765e2b6a6ad151135b0fd117f4d2e4fda6616ae903ac96b13dc4bcc62ce8b67c996b004734251f646f3608a835b5b4b59c0ef1a039"}], 0x290}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0xfce1, 0x24040044}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r5 = socket$kcm(0x22, 0x3, 0x0) socketpair(0x1, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r7}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000001340)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe5c}, 0x10) 959.723749ms ago: executing program 0 (id=1720): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x40, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x4, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) 893.74198ms ago: executing program 0 (id=1721): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x2000000000000216, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xdfffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8797ac540771800000000e998b45a0000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="6a0320891b311a8e11d0e8ed3a6aa4e605811e13e9a3e5579706674f0e8e700401112af0dfc7694bcc1336764b93c37f8e9ec5f5a39b925fc39443cdfa795944bd902fb8122fc1813045e30c259c93c0ca765e5fe5620857771a1b7df72efd0e8d2215720c9e2a0fe0471a5c2d7227a9ede7c9df2ff0df63fab2d3ac31b78d3650d3bdb35c448c05ea82fd9117d150891cc1b1d175a48c2896764dd379e62b97b04fea3fead0475081e5ce2997c4b3d0d92484637b8444359667a54bb5a3902f7725bc0a961942d55dcfa7a97d91a52d95773a", 0xd3}, {&(0x7f0000000680)="1cee460e9e877561f6b9cf3bb9685ccc33d25e0190e6f954f7a264dca1faffa298b0951bced45eed4ba2d4317eaf0b98", 0x30}, {&(0x7f00000006c0)="1183ca359807c47fb6c394d30859d7944fd0c2b23433ba568cb1de20f0ec63014a7ecfecb89f1699ffdf6bb534c4e38c25a7038f6a69765669d9ab93f121ac79092663f5bd6e4a32ae33256bc4ea5febaa101c286363ecc66403d11e449f340d0f17bc93600a6b5642220f461bf876f1c10e4099b45e47d64229b013", 0x7c}, {&(0x7f0000000740)="53b4cbe2f9c38321e0985f7326c39cd2b59854792b9321a08d940816aeaa5a67a12b05ed7410c90cc79236d7f872ec2e3d7c771d1c6a69e035e758b0c8f73905c0349ff39ccf33e476abd4abcf073e30df3d14aaefd597ea352c76f49fc2f9a84b362220c83adfe3bc9853b70a2845d9", 0x70}, {&(0x7f00000007c0)="f867287bf2f72865a14083b07fb91d4918bf1ff2f88b7c66ffe16d54bdce394fd6615f3557f6b9511a7600c9bc2a1e578b8cc30e", 0x34}, {&(0x7f0000000800)="207af1c2755f2b5167afb8ad10c253d1e8b50f55a1c746c2e5754db30003a4d8372807d0b66c6b994491328990d84d53384f568552fb2fd3974b87cc4a686de578ec75039b373a745e254b03650c7d813201d6b066c58a28375ad45c33ede59c37cc4ca52923049781c55b530741b2105172a2e745cc1899a47915be54eb17ecf4ed78b602d181bda9fd1c711e572fdd0542752381cc7658d8a590441357c7fec788a0a75a34b894e1d1aa290684b7345f30ef5b0c28b2ddcf2c7c3f5eb3ace7feec982ceb8f1e980a9c07f4d18f33a7d73e875278c6be3c7fccbc1af854177c8be02585b846e65e69febc504f691e4787fc182443b18d", 0xf7}], 0x6, &(0x7f0000000980)="078ccace31c4594b92ef0fcbc9a6ccec837ddd6cff607d462494d460bc376103b050749ff5cbe858a80537e2159744639856d534238842c1142c337dee647929394d108f10e70c58b05de74a00954a7fbb86a0f51ec398dd61679d81b8444bdeea1afe0b5cede8", 0x67, 0x4041}, 0x20008000) r11 = syz_clone(0x0, &(0x7f00000003c0)="501abe133118ea0fe0987a3d5d26dd759951ec4b5e6e99738d84", 0x1a, &(0x7f0000000400), &(0x7f0000000a40), &(0x7f0000000a80)="5aef8bea99f0afda53ff17ade88376da942e4be71d17a785f48c2ec2c00656fbbf9de0ec48b4fdac96f3948dbb24857eacd0009922697ed0b07481b64336599b3626fb2d3c6f2c54d75f8a787b865105cef034c615f3f35603565422efa11fd1a1fff2c2f74526641c453a3a46eee96f06cb") syz_open_procfs$namespace(r11, &(0x7f0000000b00)='ns/mnt\x00') r12 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000001c0), 0x12) 339.599472ms ago: executing program 3 (id=1722): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003540)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x50, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x20008000) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r3], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000b80)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010100}, 0x2, 0x1, 0x2, 0x2}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x180}, 0x20040800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000bc64000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004000000040000000000df00", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8983, &(0x7f0000000080)) sendmsg$tipc(r10, &(0x7f0000002900)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}}}, 0x10, &(0x7f0000002780)=[{&(0x7f0000000700)="cdb137488cbcf917a20478a643e3b99e480d8712c08e3f89e1978f6c07e3e7bed4c3b2ee713d55cb9840bd085848a5b1ad1e923a9eb6d226a27fdbdb3bb5d0a6d1bbee01d7bc3e7ebf6eacd400fa7d1e4f08d3990978c3e12349dd3cb48cb253fd3b3738a5c9e2f2b8eb0de6bedc90cf5c7ea516ba2d08bb8792099e4a54159aa7489112afe6f1d5", 0x88}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="6f38d7fa9a5f8cd33e6c", 0xa}, {&(0x7f0000002300)="7617ba07d946123adbd82f140c2ad7d309590cd86ce5c8f7d59a13ceb3d69ee45bb40abc62220b4d0816a727aa2ae6ee34f56911c0542cab161cd02917189a0a5ef4c2fe2e967294f818f9127ae0d1b666f33fa94de1c7037628f1", 0x5b}, {&(0x7f0000002380)="eacc05b2e25a63daa185801f74e4f43737f30c92bdf9780ee559c7f08ce532b95410d7c21df7d584f27e5b35b7681d086e482515753eeeece6cfb294c7174a84ba13ca9163fdb7119c8a5df0a831272bc8c77980453a7a6411b80f0611284fcf9416781a2ae8d51cc75047d6d68aaaec1765a038053ee62de71582fc91493040b2c6a88e605d2e7f745404d5b447ae0261713ef9be0ed7e31231399131d8a2f74f31ae85148cadeae12fa1c4586c45a0ac", 0xb1}, {&(0x7f0000002440)="f1c6506adbc59054c34e46cd778bae727b52a774df15f6a6ad5948d8fb06a6513b341c037c5609f6ba3abb8db23f98dfc3c7bd3a20a10628dab0b08dd72a1ba4e503ab50fb1913a41ca5a457", 0x4c}, {&(0x7f00000024c0)="f801af155f0c49cbb3daccb315c127914e7f5d0db88de5fec9b4b4fdca480f24a9a3904d13fb4ca6f63c6ca9a2209ad1b50e7324366fb6fc5249a75b25a351bab6b69287bc9553bb4f279a2488be91a125ca78adedc43cac3cf89c31ece9d7265be90817655320a6f4a7872b2f54d61bd3cee8212f0658f6dd2ac7c8680738f0d0cfdca9802dcc", 0x87}, {&(0x7f0000002580)="47863f17bac536c9d64565dbdb14869d73abf2aca20a6b1ed90ce47a7f449d8cc25fbc6839", 0x25}, {&(0x7f00000025c0)="2a5721cef62ab7ba300c9a89e3981a8dd182e20d51a7ae0f3685346e356fb03f2079e9b88119e120acc9f310e23c77ab82d55b5606456dfc9e26549553e1a24ffb9eb7d4802dda664668c7e84d41d5acbf4abd8ad6f242b829cf7c2bde3094d16e95de56e2e3de828da352f91cdc9c0be27f180696fca5f15edfe4b87c048dba64e47abe1268771f548544ac7e8e94b33c0a96cb67cff665c4882cdb0a44f95f04744fc00c7bac6c454b0e55c34484802e534e73455b2121edd468dff669e3546117fcbe1b1133dad941803f2c9839cba46c14", 0xd3}, {&(0x7f00000026c0)="ae4548d036b12c4e650ebdc99050df6130cc6fcc4152e24b293380e8e1ef39ccbcb7c49f74ba262250a5983e1e9d898655c5db91f3d3e053a4f9a8461e7116cc0141641c2300291b9e5973fe6af7904d38f8407737fa17c4d00e6d9fed3dbc56cd29cfae2b654fdcfb858366e78d909877469e95768544d8f52efce67fe776458546ace61460e799339bfd2926", 0x8d}], 0xa, &(0x7f0000002840)="91fef64607da51abe679e374f34c889138cb669f58a06d17d127e6fc6f0f8db6e0acec9124515cc854789e051bc53b4227d0e15d6ec72374975e8c05b0de0beb9b0a1c5c03630246a9756480998bbf5579205b0d36e712c4e18de7e034710e10d51eb71c78039f0d74a275134965114da0837b611b11e1a7adefdbdbcaaab4d756a16e73886be205f8967a5ee30b2f88caf1f88ad2f40816a1e16eac1e9b75c559e8b0894be0810c59bdfd913f447d2dddf10ae6c9ef", 0xb6, 0x8010}, 0x8000) 214.634405ms ago: executing program 1 (id=1723): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) write$cgroup_subtree(r4, 0x0, 0xfe33) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x2, 0x1, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200100200c0000004e000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r5], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = socket$kcm(0x11, 0x7, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x13, &(0x7f0000000800)=r7, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@ifindex=r6, r0, 0x1f, 0x2008, r0, @value=r7, @void, @void, @void, r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) 103.552467ms ago: executing program 2 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000001e5911d35d6725010000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000007000000001000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000ec00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0xd8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04006ecb6d7957edbd000001800000020000000000000000000000ff85baeb1a8605be153c135a07df7c3af8cb3b5dbf44bb8716cf1f0b829e068776ebb16342b8c9269077962af679af6c7543231cdbb9767ed9e875873f12a6b16f9477114f02311522142096eb13c3874985487fe8a395adf306668b3b0721e3753337546c0a6705cd8a3c4a4229cc72fc7b5b37e4a4fc13aa517c2d8942e5a7599aaa77d66f791a72f349f06f6e66"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xf, 0x4, 0x2) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fef8ffffff71a4f4fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000008720000000000000", @ANYRES32=r1, @ANYBLOB="010400"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000300000000000000e400000000018000"/28], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x10001, @local, 0x48, 0x7fffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='D', 0x1}], 0x1}, 0x30008041) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0xffffff07, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x2}, 0x1a980, 0xce0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) 0s ago: executing program 1 (id=1725): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100"], 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xa, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000940), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000045d1679d023f21451d0d0174c12467300000fe01ce8204edb0208dcd38ea42da503734a6c80bfa6b9f3d81f5b35d4e51346612330ea8f9ecaf755dd79adb5e0bba0bf627739daed380c7d029572ef93253c50a73a02461a3f96b763bdbf82fb02e4f5d3eca24ff6f5ae74a4fc4fd8b89d45a1a7ec88707d4ee37faebf38a1893e7d49418b143564b3417f2ed6709a841de6f5a5e47cd44cf27d7e182247030c5b6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r8, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af0755b798a0", 0x35}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b00060001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3ffffff}}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) kernel console output (not intermixed with test programs): cess `syz.0.9'. [ 86.935705][ T5905] netlink: 'syz.2.16': attribute type 8 has an invalid length. [ 86.952812][ T27] cfg80211: failed to load regulatory.db [ 87.001425][ T5905] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 87.031397][ T5905] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16'. [ 87.291301][ T5911] Zero length message leads to an empty skb [ 87.299165][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.308044][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.328252][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.368862][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.783084][ T5927] netlink: 'syz.0.22': attribute type 9 has an invalid length. [ 88.907220][ T5927] netlink: 399 bytes leftover after parsing attributes in process `syz.0.22'. [ 90.657824][ T5958] netlink: 'syz.0.30': attribute type 9 has an invalid length. [ 90.689205][ T5958] netlink: 399 bytes leftover after parsing attributes in process `syz.0.30'. [ 91.477744][ T5965] netlink: 'syz.1.31': attribute type 29 has an invalid length. [ 91.536116][ T5965] netlink: 'syz.1.31': attribute type 29 has an invalid length. [ 92.532457][ T5985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.38'. [ 92.727439][ T5782] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 93.256212][ T5998] netlink: 'syz.0.41': attribute type 39 has an invalid length. [ 93.480171][ T6002] netlink: 'syz.1.42': attribute type 21 has an invalid length. [ 93.576270][ T6001] netlink: 'syz.3.43': attribute type 9 has an invalid length. [ 93.590355][ T6002] netlink: 128 bytes leftover after parsing attributes in process `syz.1.42'. [ 93.605695][ T6001] netlink: 463 bytes leftover after parsing attributes in process `syz.3.43'. [ 93.629102][ T6002] netlink: 'syz.1.42': attribute type 5 has an invalid length. [ 93.649105][ T6002] netlink: 'syz.1.42': attribute type 6 has an invalid length. [ 93.682812][ T6002] netlink: 3 bytes leftover after parsing attributes in process `syz.1.42'. [ 94.579071][ T6023] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 94.667559][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.49'. [ 94.694757][ T6023] bridge0: port 3(ipvlan1) entered blocking state [ 94.755957][ T6023] bridge0: port 3(ipvlan1) entered disabled state [ 94.780522][ T6023] ipvlan1: entered allmulticast mode [ 94.798711][ T6023] veth0_vlan: entered allmulticast mode [ 94.821843][ T6023] ipvlan1: left allmulticast mode [ 94.831999][ T6023] veth0_vlan: left allmulticast mode [ 94.838094][ T6023] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 95.066468][ T6029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.074335][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 95.081879][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 95.089439][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 95.116212][ T6029] netlink: 'syz.1.52': attribute type 9 has an invalid length. [ 95.165514][ T6029] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.52'. [ 95.314361][ T6040] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.52'. [ 95.568441][ T6047] syzkaller0: entered promiscuous mode [ 95.576756][ T6047] syzkaller0: entered allmulticast mode [ 98.190846][ T5782] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 98.463175][ T6066] validate_nla: 1 callbacks suppressed [ 98.463191][ T6066] netlink: 'syz.1.62': attribute type 21 has an invalid length. [ 98.512671][ T6066] netlink: 128 bytes leftover after parsing attributes in process `syz.1.62'. [ 98.533699][ T6066] netlink: 'syz.1.62': attribute type 5 has an invalid length. [ 98.543114][ T6066] netlink: 'syz.1.62': attribute type 6 has an invalid length. [ 98.552995][ T6066] netlink: 3 bytes leftover after parsing attributes in process `syz.1.62'. [ 98.616688][ T6069] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.63'. [ 98.628505][ T6069] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 98.999177][ T6079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.006787][ T6079] IPv6: NLM_F_CREATE should be set when creating new route [ 99.014638][ T6079] IPv6: NLM_F_CREATE should be set when creating new route [ 99.022198][ T6079] IPv6: NLM_F_CREATE should be set when creating new route [ 99.322159][ T6079] netlink: 'syz.2.67': attribute type 9 has an invalid length. [ 99.355818][ T6079] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.67'. [ 99.620664][ T6084] netlink: 'syz.2.67': attribute type 9 has an invalid length. [ 99.630924][ T6084] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.67'. [ 99.675971][ T6090] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.833578][ T6090] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.68'. [ 100.023067][ T5782] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 101.110689][ T6110] netlink: 'syz.3.74': attribute type 21 has an invalid length. [ 101.157750][ T6110] netlink: 128 bytes leftover after parsing attributes in process `syz.3.74'. [ 101.167317][ T6110] netlink: 'syz.3.74': attribute type 5 has an invalid length. [ 101.198162][ T6110] netlink: 'syz.3.74': attribute type 6 has an invalid length. [ 101.231622][ T6110] netlink: 3 bytes leftover after parsing attributes in process `syz.3.74'. [ 101.973452][ T6132] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 102.029035][ T6132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.79'. [ 102.071563][ T6132] bridge0: port 3(ipvlan1) entered blocking state [ 102.087189][ T6132] bridge0: port 3(ipvlan1) entered disabled state [ 102.094503][ T6132] ipvlan1: entered allmulticast mode [ 102.105891][ T6132] veth0_vlan: entered allmulticast mode [ 102.115508][ T6132] ipvlan1: left allmulticast mode [ 102.121894][ T6132] veth0_vlan: left allmulticast mode [ 102.128506][ T6132] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 102.229684][ T5782] Bluetooth: hci3: unexpected event 0x18 length: 15 < 23 [ 102.424647][ T6140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.432090][ T6140] IPv6: NLM_F_CREATE should be set when creating new route [ 102.439652][ T6140] IPv6: NLM_F_CREATE should be set when creating new route [ 102.447172][ T6140] IPv6: NLM_F_CREATE should be set when creating new route [ 102.526597][ T6145] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.548412][ T6140] netlink: 'syz.0.82': attribute type 9 has an invalid length. [ 102.612676][ T6140] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.82'. [ 102.673307][ T6148] netlink: 128 bytes leftover after parsing attributes in process `syz.3.85'. [ 102.699726][ T6148] netlink: 3 bytes leftover after parsing attributes in process `syz.3.85'. [ 102.874088][ T6149] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.440988][ T6146] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.82'. [ 103.984832][ T5782] Bluetooth: hci1: unexpected event 0x18 length: 15 < 23 [ 104.468494][ T6178] validate_nla: 4 callbacks suppressed [ 104.468505][ T6178] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 104.483154][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 104.498004][ T6178] bridge0: port 3(ipvlan1) entered blocking state [ 104.504779][ T6178] bridge0: port 3(ipvlan1) entered disabled state [ 104.511759][ T6178] ipvlan1: entered allmulticast mode [ 104.517086][ T6178] veth0_vlan: entered allmulticast mode [ 104.525582][ T6178] ipvlan1: left allmulticast mode [ 104.530954][ T6178] veth0_vlan: left allmulticast mode [ 104.536839][ T6178] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 104.790523][ T6184] netlink: 'syz.3.96': attribute type 21 has an invalid length. [ 104.810598][ T6184] netlink: 'syz.3.96': attribute type 5 has an invalid length. [ 104.827071][ T6184] netlink: 'syz.3.96': attribute type 6 has an invalid length. [ 104.849454][ T6184] __nla_validate_parse: 1 callbacks suppressed [ 104.849469][ T6184] netlink: 3 bytes leftover after parsing attributes in process `syz.3.96'. [ 105.459102][ T5782] Bluetooth: hci0: unexpected event 0x18 length: 15 < 23 [ 106.261919][ T6205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.269531][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 106.276973][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 106.284575][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 106.314930][ T6205] netlink: 'syz.3.103': attribute type 9 has an invalid length. [ 106.324614][ T6205] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.103'. [ 106.599393][ T6209] netlink: 'syz.3.103': attribute type 9 has an invalid length. [ 106.611358][ T6209] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.103'. [ 106.833120][ T6221] netlink: 'syz.0.108': attribute type 21 has an invalid length. [ 106.875063][ T6221] netlink: 128 bytes leftover after parsing attributes in process `syz.0.108'. [ 106.915857][ T6221] netlink: 'syz.0.108': attribute type 5 has an invalid length. [ 106.934148][ T6221] netlink: 'syz.0.108': attribute type 6 has an invalid length. [ 106.942715][ T6221] netlink: 3 bytes leftover after parsing attributes in process `syz.0.108'. [ 109.098371][ T6247] netlink: 'syz.3.115': attribute type 9 has an invalid length. [ 109.141828][ T6247] netlink: 399 bytes leftover after parsing attributes in process `syz.3.115'. [ 109.748715][ T6261] netlink: 'syz.2.119': attribute type 21 has an invalid length. [ 109.787528][ T6261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.119'. [ 109.857088][ T6261] netlink: 'syz.2.119': attribute type 5 has an invalid length. [ 109.880131][ T6261] netlink: 'syz.2.119': attribute type 6 has an invalid length. [ 109.889526][ T6261] netlink: 3 bytes leftover after parsing attributes in process `syz.2.119'. [ 110.568828][ T6274] netlink: 'syz.2.122': attribute type 9 has an invalid length. [ 110.577677][ T6274] netlink: 399 bytes leftover after parsing attributes in process `syz.2.122'. [ 112.785801][ T6291] netlink: 'syz.3.128': attribute type 9 has an invalid length. [ 112.810239][ T6291] netlink: 399 bytes leftover after parsing attributes in process `syz.3.128'. [ 112.885656][ T6294] netlink: 'syz.2.129': attribute type 21 has an invalid length. [ 112.985111][ T6294] netlink: 128 bytes leftover after parsing attributes in process `syz.2.129'. [ 113.005876][ T6294] netlink: 'syz.2.129': attribute type 5 has an invalid length. [ 113.044495][ T6294] netlink: 'syz.2.129': attribute type 6 has an invalid length. [ 113.054240][ T6294] netlink: 3 bytes leftover after parsing attributes in process `syz.2.129'. [ 113.563990][ T6305] netlink: 'syz.2.132': attribute type 21 has an invalid length. [ 113.577425][ T6305] netlink: 128 bytes leftover after parsing attributes in process `syz.2.132'. [ 113.587282][ T6305] netlink: 'syz.2.132': attribute type 5 has an invalid length. [ 113.599732][ T6305] netlink: 3 bytes leftover after parsing attributes in process `syz.2.132'. [ 118.820403][ T6327] validate_nla: 2 callbacks suppressed [ 118.820464][ T6327] netlink: 'syz.0.139': attribute type 9 has an invalid length. [ 118.976286][ T6327] netlink: 399 bytes leftover after parsing attributes in process `syz.0.139'. [ 119.624464][ T6341] netlink: 'syz.2.144': attribute type 21 has an invalid length. [ 119.656332][ T6341] netlink: 128 bytes leftover after parsing attributes in process `syz.2.144'. [ 119.666007][ T6341] netlink: 'syz.2.144': attribute type 5 has an invalid length. [ 119.678296][ T6341] netlink: 'syz.2.144': attribute type 6 has an invalid length. [ 119.686508][ T6341] netlink: 3 bytes leftover after parsing attributes in process `syz.2.144'. [ 120.480605][ T6355] netlink: 'syz.3.147': attribute type 21 has an invalid length. [ 120.504673][ T6355] netlink: 128 bytes leftover after parsing attributes in process `syz.3.147'. [ 120.514686][ T6355] netlink: 'syz.3.147': attribute type 5 has an invalid length. [ 120.523901][ T6355] netlink: 'syz.3.147': attribute type 6 has an invalid length. [ 120.533499][ T6355] netlink: 3 bytes leftover after parsing attributes in process `syz.3.147'. [ 121.032053][ T6362] netlink: 'syz.3.149': attribute type 39 has an invalid length. [ 121.345751][ T5782] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 122.366162][ T6374] netlink: 'syz.1.151': attribute type 9 has an invalid length. [ 122.413568][ T6374] netlink: 399 bytes leftover after parsing attributes in process `syz.1.151'. [ 122.520456][ T6382] netlink: 'syz.3.153': attribute type 9 has an invalid length. [ 122.533430][ T6382] netlink: 399 bytes leftover after parsing attributes in process `syz.3.153'. [ 122.700786][ T6386] netlink: 128 bytes leftover after parsing attributes in process `syz.2.154'. [ 122.717803][ T6386] netlink: 3 bytes leftover after parsing attributes in process `syz.2.154'. [ 123.162962][ T6396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.159'. [ 124.088768][ T5782] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 124.898417][ T6417] validate_nla: 3 callbacks suppressed [ 124.898436][ T6417] netlink: 'syz.2.169': attribute type 21 has an invalid length. [ 124.950755][ T6417] netlink: 128 bytes leftover after parsing attributes in process `syz.2.169'. [ 124.958647][ T6415] netlink: 'syz.3.168': attribute type 9 has an invalid length. [ 124.977056][ T6415] netlink: 399 bytes leftover after parsing attributes in process `syz.3.168'. [ 125.021964][ T6417] netlink: 'syz.2.169': attribute type 5 has an invalid length. [ 125.055554][ T6417] netlink: 'syz.2.169': attribute type 6 has an invalid length. [ 125.107226][ T6417] netlink: 3 bytes leftover after parsing attributes in process `syz.2.169'. [ 126.568814][ T6446] netlink: 'syz.1.177': attribute type 39 has an invalid length. [ 126.863679][ T6448] netlink: 'syz.2.179': attribute type 21 has an invalid length. [ 126.872829][ T6448] netlink: 128 bytes leftover after parsing attributes in process `syz.2.179'. [ 126.884429][ T6448] netlink: 'syz.2.179': attribute type 5 has an invalid length. [ 126.894848][ T6448] netlink: 'syz.2.179': attribute type 6 has an invalid length. [ 126.902777][ T6448] netlink: 3 bytes leftover after parsing attributes in process `syz.2.179'. [ 126.965064][ T6450] netlink: 'syz.3.180': attribute type 9 has an invalid length. [ 126.999455][ T6450] netlink: 399 bytes leftover after parsing attributes in process `syz.3.180'. [ 127.059545][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.178'. [ 128.724227][ T6484] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 128.741953][ T6484] netlink: 128 bytes leftover after parsing attributes in process `syz.0.191'. [ 128.751634][ T6484] netlink: 3 bytes leftover after parsing attributes in process `syz.0.191'. [ 129.103657][ T6492] netlink: 399 bytes leftover after parsing attributes in process `syz.0.195'. [ 131.095529][ T6530] validate_nla: 4 callbacks suppressed [ 131.095565][ T6530] netlink: 'syz.0.209': attribute type 9 has an invalid length. [ 131.119763][ T6530] netlink: 399 bytes leftover after parsing attributes in process `syz.0.209'. [ 131.262698][ T6535] netlink: 'syz.3.210': attribute type 29 has an invalid length. [ 131.291275][ T6535] netlink: 'syz.3.210': attribute type 29 has an invalid length. [ 131.693688][ T6544] netlink: 'syz.0.213': attribute type 39 has an invalid length. [ 133.076046][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.088857][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.215312][ T6563] netlink: 'syz.1.219': attribute type 9 has an invalid length. [ 133.269413][ T6563] netlink: 399 bytes leftover after parsing attributes in process `syz.1.219'. [ 133.726896][ T6567] netlink: 'syz.3.222': attribute type 9 has an invalid length. [ 133.735791][ T6567] netlink: 399 bytes leftover after parsing attributes in process `syz.3.222'. [ 134.133373][ T6581] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 134.165091][ T6581] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 135.866120][ T6604] netlink: 'syz.2.235': attribute type 9 has an invalid length. [ 135.974234][ T6604] netlink: 399 bytes leftover after parsing attributes in process `syz.2.235'. [ 136.716259][ T6623] netlink: 'syz.0.238': attribute type 9 has an invalid length. [ 136.724663][ T6623] netlink: 399 bytes leftover after parsing attributes in process `syz.0.238'. [ 139.187736][ T6658] netlink: 'syz.2.251': attribute type 9 has an invalid length. [ 139.208067][ T6661] netlink: 'syz.3.249': attribute type 9 has an invalid length. [ 139.229685][ T6658] netlink: 399 bytes leftover after parsing attributes in process `syz.2.251'. [ 139.259002][ T6661] netlink: 399 bytes leftover after parsing attributes in process `syz.3.249'. [ 141.651468][ T6702] netlink: 'syz.3.263': attribute type 9 has an invalid length. [ 141.759730][ T6702] netlink: 399 bytes leftover after parsing attributes in process `syz.3.263'. [ 143.681438][ T6741] netlink: 'syz.0.278': attribute type 9 has an invalid length. [ 143.698245][ T6741] netlink: 399 bytes leftover after parsing attributes in process `syz.0.278'. [ 145.511274][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 147.823407][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 147.842707][ T6802] netlink: 'syz.1.300': attribute type 9 has an invalid length. [ 147.942448][ T6802] netlink: 399 bytes leftover after parsing attributes in process `syz.1.300'. [ 149.573064][ T6819] netlink: 'syz.0.305': attribute type 9 has an invalid length. [ 149.603707][ T6819] netlink: 399 bytes leftover after parsing attributes in process `syz.0.305'. [ 150.637769][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 152.010272][ T6859] netlink: 'syz.3.318': attribute type 9 has an invalid length. [ 152.018586][ T6859] netlink: 399 bytes leftover after parsing attributes in process `syz.3.318'. [ 152.059209][ T6857] netlink: 'syz.2.317': attribute type 9 has an invalid length. [ 152.067651][ T6857] netlink: 399 bytes leftover after parsing attributes in process `syz.2.317'. [ 155.536474][ T6895] netlink: 'syz.3.330': attribute type 9 has an invalid length. [ 155.547136][ T6895] netlink: 463 bytes leftover after parsing attributes in process `syz.3.330'. [ 157.554863][ T6930] netlink: 'syz.3.340': attribute type 9 has an invalid length. [ 157.628480][ T6930] netlink: 399 bytes leftover after parsing attributes in process `syz.3.340'. [ 158.147160][ T6938] netlink: 'syz.0.343': attribute type 9 has an invalid length. [ 158.157794][ T6938] netlink: 399 bytes leftover after parsing attributes in process `syz.0.343'. [ 160.124880][ T6976] netlink: 'syz.0.359': attribute type 9 has an invalid length. [ 160.201680][ T6976] netlink: 399 bytes leftover after parsing attributes in process `syz.0.359'. [ 160.813772][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.878537][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.896329][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.905864][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.651564][ T6990] syz.1.364 (6990) used greatest stack depth: 20008 bytes left [ 162.112237][ T7016] netlink: 'syz.0.373': attribute type 9 has an invalid length. [ 162.153203][ T7016] netlink: 399 bytes leftover after parsing attributes in process `syz.0.373'. [ 164.004963][ T7046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.080302][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.115557][ T7046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.134157][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.656067][ T7059] netlink: 'syz.3.387': attribute type 9 has an invalid length. [ 164.722667][ T7059] netlink: 399 bytes leftover after parsing attributes in process `syz.3.387'. [ 165.465089][ T7077] netlink: 'syz.3.393': attribute type 8 has an invalid length. [ 165.538815][ T7077] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 165.580774][ T7077] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.393'. [ 166.668552][ T5782] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 167.105726][ T7105] netlink: 'syz.0.404': attribute type 9 has an invalid length. [ 167.124611][ T7105] netlink: 399 bytes leftover after parsing attributes in process `syz.0.404'. [ 168.052396][ T7126] netlink: 'syz.0.409': attribute type 8 has an invalid length. [ 168.082465][ T7126] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 168.101906][ T7126] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.409'. [ 168.412201][ T5782] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 169.045754][ T7140] netlink: 'syz.0.416': attribute type 9 has an invalid length. [ 169.072957][ T7140] netlink: 399 bytes leftover after parsing attributes in process `syz.0.416'. [ 170.841709][ T7169] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.425'. [ 171.396733][ T7175] syzkaller0: entered promiscuous mode [ 171.402938][ T7175] syzkaller0: entered allmulticast mode [ 171.801986][ T7191] netlink: 'syz.0.432': attribute type 9 has an invalid length. [ 171.821322][ T7191] netlink: 399 bytes leftover after parsing attributes in process `syz.0.432'. [ 175.695863][ T7226] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.440'. [ 176.889115][ T7241] netlink: 'syz.1.444': attribute type 9 has an invalid length. [ 176.947128][ T7241] netlink: 399 bytes leftover after parsing attributes in process `syz.1.444'. [ 177.424713][ T7250] syzkaller0: entered promiscuous mode [ 177.430348][ T7250] syzkaller0: entered allmulticast mode [ 178.024463][ T7263] netlink: 'syz.3.453': attribute type 9 has an invalid length. [ 178.151940][ T7263] netlink: 399 bytes leftover after parsing attributes in process `syz.3.453'. [ 185.743784][ T7343] netlink: 'syz.2.476': attribute type 9 has an invalid length. [ 185.983365][ T7343] netlink: 399 bytes leftover after parsing attributes in process `syz.2.476'. [ 188.484276][ T7390] netlink: 'syz.0.488': attribute type 9 has an invalid length. [ 188.493570][ T7390] netlink: 399 bytes leftover after parsing attributes in process `syz.0.488'. [ 190.971481][ T7426] netlink: 'syz.2.499': attribute type 9 has an invalid length. [ 191.004638][ T7426] netlink: 399 bytes leftover after parsing attributes in process `syz.2.499'. [ 191.269708][ T7432] netlink: 'syz.1.500': attribute type 9 has an invalid length. [ 191.278148][ T7432] netlink: 399 bytes leftover after parsing attributes in process `syz.1.500'. [ 193.713155][ T7470] netlink: 'syz.1.512': attribute type 9 has an invalid length. [ 193.723464][ T7470] netlink: 399 bytes leftover after parsing attributes in process `syz.1.512'. [ 194.309093][ T7480] netlink: 'syz.0.514': attribute type 9 has an invalid length. [ 194.338995][ T7480] netlink: 399 bytes leftover after parsing attributes in process `syz.0.514'. [ 194.452969][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469044][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.046697][ T7510] lo: entered promiscuous mode [ 196.245060][ T7514] netlink: 'syz.0.528': attribute type 9 has an invalid length. [ 196.267983][ T7519] netlink: 'syz.3.529': attribute type 9 has an invalid length. [ 196.296947][ T7514] netlink: 399 bytes leftover after parsing attributes in process `syz.0.528'. [ 196.328725][ T7519] netlink: 399 bytes leftover after parsing attributes in process `syz.3.529'. [ 198.496163][ T7556] netlink: 'syz.3.541': attribute type 39 has an invalid length. [ 198.835769][ T7561] netlink: 'syz.2.543': attribute type 9 has an invalid length. [ 198.849424][ T7561] netlink: 399 bytes leftover after parsing attributes in process `syz.2.543'. [ 198.927946][ T7565] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 198.955179][ T7565] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.544'. [ 198.987912][ T7565] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 201.652172][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 201.658511][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 201.664665][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 201.671020][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 201.865962][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 203.768280][ T7664] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 203.776215][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.578'. [ 203.785934][ T7664] dummy0: entered promiscuous mode [ 203.793318][ T7664] dummy0: entered allmulticast mode [ 203.799780][ T7664] bridge0: port 3(dummy0) entered blocking state [ 203.806392][ T7664] bridge0: port 3(dummy0) entered disabled state [ 203.816569][ T7664] bridge0: port 3(dummy0) entered blocking state [ 203.823362][ T7664] bridge0: port 3(dummy0) entered forwarding state [ 203.853461][ T7664] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 203.941360][ T7664] team0: Port device macvlan0 added [ 204.032172][ T7664] syz.2.578 (7664) used greatest stack depth: 19880 bytes left [ 204.780725][ T7681] warning: `syz.2.584' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 206.592436][ T7711] netlink: 'syz.2.593': attribute type 17 has an invalid length. [ 206.606888][ T7711] netlink: 148 bytes leftover after parsing attributes in process `syz.2.593'. [ 207.541013][ T7720] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 207.553908][ T7720] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 207.834831][ T7720] bridge0: port 4(netdevsim0) entered blocking state [ 207.876709][ T7720] bridge0: port 4(netdevsim0) entered disabled state [ 208.118354][ T7720] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 208.295058][ T7720] syz.2.598 (7720) used greatest stack depth: 19784 bytes left [ 208.872790][ T7747] netlink: 'syz.1.607': attribute type 11 has an invalid length. [ 208.922469][ T7747] netlink: 168 bytes leftover after parsing attributes in process `syz.1.607'. [ 209.305898][ T7757] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 209.317153][ T7757] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.610'. [ 209.498366][ T7757] netlink: 191136 bytes leftover after parsing attributes in process `syz.3.610'. [ 209.940430][ T7769] netlink: 'syz.0.613': attribute type 9 has an invalid length. [ 209.967214][ T7769] netlink: 399 bytes leftover after parsing attributes in process `syz.0.613'. [ 210.779553][ T7775] netlink: 'syz.2.616': attribute type 9 has an invalid length. [ 210.788073][ T7775] netlink: 399 bytes leftover after parsing attributes in process `syz.2.616'. [ 211.761948][ T7789] syzkaller0: entered promiscuous mode [ 211.768447][ T7789] syzkaller0: entered allmulticast mode [ 212.890337][ T7808] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.625'. [ 212.906976][ T7808] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 213.306123][ T7810] netlink: 'syz.3.626': attribute type 9 has an invalid length. [ 213.321164][ T7810] netlink: 399 bytes leftover after parsing attributes in process `syz.3.626'. [ 215.248135][ T7795] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 215.262416][ T7795] bridge0: port 4(netdevsim0) entered disabled state [ 215.311106][ T7795] bridge0: port 3(dummy0) entered disabled state [ 215.380774][ T7795] bridge_slave_1: left allmulticast mode [ 215.386621][ T7795] bridge_slave_1: left promiscuous mode [ 215.396964][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.465260][ T7795] bridge_slave_0: left allmulticast mode [ 215.479177][ T7795] bridge_slave_0: left promiscuous mode [ 215.485300][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.629043][ T7822] syz.0.630 uses obsolete (PF_INET,SOCK_PACKET) [ 215.752296][ T7804] netlink: 'syz.1.623': attribute type 10 has an invalid length. [ 215.788445][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.812117][ T7804] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.084322][ T7826] macsec0: entered promiscuous mode [ 216.091653][ T7826] macsec0: entered allmulticast mode [ 216.097259][ T7826] veth1_macvtap: entered allmulticast mode [ 216.147847][ T7833] netlink: 'syz.0.635': attribute type 2 has an invalid length. [ 216.157091][ T7833] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 216.164969][ T7833] netlink: 9 bytes leftover after parsing attributes in process `syz.0.635'. [ 216.280647][ T7837] netlink: 'syz.0.636': attribute type 9 has an invalid length. [ 216.291185][ T7837] netlink: 399 bytes leftover after parsing attributes in process `syz.0.636'. [ 216.669672][ T7846] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 216.897131][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.930082][ T7845] netlink: 'syz.1.638': attribute type 9 has an invalid length. [ 216.941673][ T7845] netlink: 399 bytes leftover after parsing attributes in process `syz.1.638'. [ 216.957413][ T7846] bond0: (slave team0): Enslaving as an active interface with an up link [ 217.407830][ T7855] bridge_slave_1: left allmulticast mode [ 217.433038][ T7855] bridge_slave_1: left promiscuous mode [ 217.450658][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.575996][ T7855] bridge_slave_0: left allmulticast mode [ 217.603224][ T7855] bridge_slave_0: left promiscuous mode [ 217.638037][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.373157][ T7872] netlink: 'syz.3.648': attribute type 9 has an invalid length. [ 218.384170][ T7872] netlink: 399 bytes leftover after parsing attributes in process `syz.3.648'. [ 218.805692][ T7881] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.650'. [ 218.815699][ T7881] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 219.253030][ T7885] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 219.294527][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.305727][ T7885] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.326415][ T7889] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 219.340572][ T7889] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.652'. [ 219.528911][ T7892] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.654'. [ 219.607345][ T7889] netlink: 180180 bytes leftover after parsing attributes in process `syz.2.652'. [ 220.194273][ T7908] netlink: 'syz.1.660': attribute type 9 has an invalid length. [ 220.219152][ T7908] netlink: 399 bytes leftover after parsing attributes in process `syz.1.660'. [ 220.983440][ T7919] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.662'. [ 221.008981][ T7919] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 222.065636][ T7944] netlink: 'syz.1.670': attribute type 9 has an invalid length. [ 222.100604][ T7944] netlink: 399 bytes leftover after parsing attributes in process `syz.1.670'. [ 223.989083][ T7984] netlink: 'syz.2.683': attribute type 9 has an invalid length. [ 223.997275][ T7984] netlink: 399 bytes leftover after parsing attributes in process `syz.2.683'. [ 224.250295][ T7988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.331432][ T8003] netlink: 'syz.1.688': attribute type 12 has an invalid length. [ 225.361774][ T8003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.688'. [ 226.034934][ T8020] netlink: 'syz.2.693': attribute type 9 has an invalid length. [ 226.146911][ T8020] netlink: 399 bytes leftover after parsing attributes in process `syz.2.693'. [ 227.852119][ T8062] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 228.954813][ T8093] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 229.019393][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.047546][ T8093] bond0: (slave team0): Enslaving as an active interface with an up link [ 231.556729][ T8145] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 231.783410][ T8150] netlink: 10 bytes leftover after parsing attributes in process `syz.2.733'. [ 235.952251][ T8231] netlink: 'syz.0.759': attribute type 10 has an invalid length. [ 236.195651][ T8236] netlink: 'syz.1.762': attribute type 27 has an invalid length. [ 236.247693][ T8236] netlink: 'syz.1.762': attribute type 3 has an invalid length. [ 236.305045][ T8236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.762'. [ 238.677267][ T8325] netlink: 10 bytes leftover after parsing attributes in process `syz.3.770'. [ 238.753596][ T8329] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 240.717978][ T8354] netlink: 'syz.0.778': attribute type 9 has an invalid length. [ 240.771796][ T8354] netlink: 399 bytes leftover after parsing attributes in process `syz.0.778'. [ 241.498723][ T8373] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 241.808169][ T8380] netlink: 'syz.0.785': attribute type 9 has an invalid length. [ 241.853552][ T8380] netlink: 399 bytes leftover after parsing attributes in process `syz.0.785'. [ 241.948002][ T8387] netlink: 'syz.1.788': attribute type 21 has an invalid length. [ 241.976773][ T8387] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.999864][ T8387] IPv6: Can't replace route, no match found [ 242.379175][ T8389] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 242.455482][ T8389] team0: Device wg1 is of different type [ 242.585929][ T8391] netlink: 10 bytes leftover after parsing attributes in process `syz.0.789'. [ 242.842471][ T8393] netlink: 'syz.3.790': attribute type 9 has an invalid length. [ 242.867792][ T8393] netlink: 399 bytes leftover after parsing attributes in process `syz.3.790'. [ 243.933638][ T8410] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 244.057129][ T8413] netlink: 'syz.2.797': attribute type 9 has an invalid length. [ 244.066749][ T8413] netlink: 399 bytes leftover after parsing attributes in process `syz.2.797'. [ 244.138355][ T8421] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.800'. [ 244.313608][ T8421] netlink: 'syz.3.800': attribute type 21 has an invalid length. [ 244.362835][ T8421] netlink: 164 bytes leftover after parsing attributes in process `syz.3.800'. [ 244.396198][ T8424] netlink: 184 bytes leftover after parsing attributes in process `syz.3.800'. [ 246.153209][ T51] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 246.272470][ T8441] netlink: 'syz.2.802': attribute type 9 has an invalid length. [ 246.342156][ T8441] netlink: 399 bytes leftover after parsing attributes in process `syz.2.802'. [ 246.555145][ T8451] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 246.605841][ T8453] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 246.634879][ T8453] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.810'. [ 246.637023][ T8448] netlink: 'syz.0.809': attribute type 9 has an invalid length. [ 246.718861][ T8448] netlink: 399 bytes leftover after parsing attributes in process `syz.0.809'. [ 247.105914][ T8468] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.816'. [ 247.225514][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 247.279037][ T8468] netlink: 'syz.0.816': attribute type 21 has an invalid length. [ 247.356744][ T8468] netlink: 'syz.0.816': attribute type 6 has an invalid length. [ 247.418906][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.816'. [ 247.941228][ T8488] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 247.991045][ T8481] netlink: 'syz.2.819': attribute type 9 has an invalid length. [ 248.008743][ T8481] netlink: 399 bytes leftover after parsing attributes in process `syz.2.819'. [ 248.443573][ T8492] syzkaller0: entered promiscuous mode [ 248.458766][ T8492] syzkaller0: entered allmulticast mode [ 248.516587][ T8497] netlink: 'syz.0.824': attribute type 9 has an invalid length. [ 251.576333][ T8515] netlink: 'syz.1.830': attribute type 10 has an invalid length. [ 251.924127][ T8535] netlink: 'syz.3.836': attribute type 9 has an invalid length. [ 251.967107][ T8535] __nla_validate_parse: 1 callbacks suppressed [ 251.967124][ T8535] netlink: 399 bytes leftover after parsing attributes in process `syz.3.836'. [ 252.033049][ T8537] FAULT_INJECTION: forcing a failure. [ 252.033049][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 252.064629][ T8537] CPU: 1 PID: 8537 Comm: syz.0.838 Not tainted syzkaller #0 [ 252.071981][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 252.082049][ T8537] Call Trace: [ 252.085323][ T8537] [ 252.088243][ T8537] dump_stack_lvl+0x18c/0x250 [ 252.092930][ T8537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.099101][ T8537] ? show_regs_print_info+0x20/0x20 [ 252.104314][ T8537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.110483][ T8537] should_fail_ex+0x394/0x4c0 [ 252.115180][ T8537] _copy_from_user+0x2f/0xe0 [ 252.119784][ T8537] bpf_test_init+0xde/0x140 [ 252.124292][ T8537] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 252.129662][ T8537] ? __lock_acquire+0x7d80/0x7d80 [ 252.134690][ T8537] ? lock_chain_count+0x20/0x20 [ 252.139538][ T8537] ? dev_put+0x80/0x80 [ 252.143615][ T8537] ? dev_put+0x80/0x80 [ 252.147687][ T8537] bpf_prog_test_run+0x31f/0x390 [ 252.152636][ T8537] __sys_bpf+0x49d/0x890 [ 252.156878][ T8537] ? bpf_link_show_fdinfo+0x390/0x390 [ 252.162256][ T8537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.168424][ T8537] __x64_sys_bpf+0x7c/0x90 [ 252.172843][ T8537] do_syscall_64+0x55/0xb0 [ 252.177265][ T8537] ? clear_bhb_loop+0x40/0x90 [ 252.181935][ T8537] ? clear_bhb_loop+0x40/0x90 [ 252.186606][ T8537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.192524][ T8537] RIP: 0033:0x7f1a1499de99 [ 252.196939][ T8537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.216548][ T8537] RSP: 002b:00007f1a158c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.224968][ T8537] RAX: ffffffffffffffda RBX: 00007f1a14c25fa0 RCX: 00007f1a1499de99 [ 252.232941][ T8537] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 252.240908][ T8537] RBP: 00007f1a158c0090 R08: 0000000000000000 R09: 0000000000000000 [ 252.248871][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.256836][ T8537] R13: 00007f1a14c26038 R14: 00007f1a14c25fa0 R15: 00007ffe9aaefda8 [ 252.264819][ T8537] [ 252.452579][ T8548] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 252.911663][ T8554] netlink: 'syz.2.845': attribute type 8 has an invalid length. [ 253.008509][ T8554] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.845'. [ 253.052219][ T8550] netlink: 'syz.3.843': attribute type 21 has an invalid length. [ 253.130382][ T8550] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.238085][ T8550] IPv6: Can't replace route, no match found [ 253.287928][ T8557] netlink: 10 bytes leftover after parsing attributes in process `syz.2.845'. [ 253.460278][ T8550] netlink: 'syz.3.843': attribute type 10 has an invalid length. [ 253.537069][ T8550] team0: Device wg1 is of different type [ 253.631877][ T8564] netlink: 'syz.0.848': attribute type 22 has an invalid length. [ 253.663884][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 253.741370][ T8550] syz.3.843 (8550) used greatest stack depth: 19368 bytes left [ 253.765730][ T8564] sctp: [Deprecated]: syz.0.848 (pid 8564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.765730][ T8564] Use struct sctp_sack_info instead [ 254.035939][ T8576] netlink: 'syz.3.850': attribute type 9 has an invalid length. [ 254.047464][ T8576] netlink: 399 bytes leftover after parsing attributes in process `syz.3.850'. [ 254.654155][ T8589] netlink: 'syz.3.853': attribute type 10 has an invalid length. [ 255.346835][ T8600] sctp: [Deprecated]: syz.1.859 (pid 8600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.346835][ T8600] Use struct sctp_sack_info instead [ 255.934010][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.941280][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.346042][ T8617] netlink: 'syz.1.864': attribute type 10 has an invalid length. [ 256.443672][ T8615] netlink: 399 bytes leftover after parsing attributes in process `syz.2.863'. [ 256.963421][ T8633] validate_nla: 1 callbacks suppressed [ 256.963439][ T8633] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 257.011002][ T8633] netlink: 'syz.2.869': attribute type 3 has an invalid length. [ 257.057784][ T8633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.869'. [ 257.531785][ T8645] FAULT_INJECTION: forcing a failure. [ 257.531785][ T8645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.578035][ T8649] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 257.600919][ T8645] CPU: 1 PID: 8645 Comm: syz.0.872 Not tainted syzkaller #0 [ 257.608260][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 257.618333][ T8645] Call Trace: [ 257.621628][ T8645] [ 257.624571][ T8645] dump_stack_lvl+0x18c/0x250 [ 257.629278][ T8645] ? show_regs_print_info+0x20/0x20 [ 257.634502][ T8645] ? load_image+0x420/0x420 [ 257.639033][ T8645] ? __might_fault+0xaa/0x120 [ 257.643727][ T8645] ? __lock_acquire+0x7d80/0x7d80 [ 257.648769][ T8645] ? unix_ioctl+0x259/0x6b0 [ 257.653297][ T8645] should_fail_ex+0x394/0x4c0 [ 257.657999][ T8645] _copy_from_user+0x2f/0xe0 [ 257.662611][ T8645] sock_do_ioctl+0x190/0x310 [ 257.667219][ T8645] ? sock_show_fdinfo+0xb0/0xb0 [ 257.672084][ T8645] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 257.678106][ T8645] sock_ioctl+0x5be/0x7e0 [ 257.682451][ T8645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 257.688632][ T8645] ? sock_poll+0x3e0/0x3e0 [ 257.693067][ T8645] ? tomoyo_file_ioctl+0x11/0x30 [ 257.698026][ T8645] ? tomoyo_path_number_perm+0xa/0x5e0 [ 257.703507][ T8645] ? bpf_lsm_file_ioctl+0x9/0x10 [ 257.708452][ T8645] ? security_file_ioctl+0x80/0xa0 [ 257.713563][ T8645] ? sock_poll+0x3e0/0x3e0 [ 257.717973][ T8645] __se_sys_ioctl+0xfd/0x170 [ 257.722563][ T8645] do_syscall_64+0x55/0xb0 [ 257.726977][ T8645] ? clear_bhb_loop+0x40/0x90 [ 257.731644][ T8645] ? clear_bhb_loop+0x40/0x90 [ 257.736314][ T8645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.742204][ T8645] RIP: 0033:0x7f1a1499de99 [ 257.746616][ T8645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.766237][ T8645] RSP: 002b:00007f1a158c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.774649][ T8645] RAX: ffffffffffffffda RBX: 00007f1a14c25fa0 RCX: 00007f1a1499de99 [ 257.782616][ T8645] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 257.790580][ T8645] RBP: 00007f1a158c0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.798547][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.806513][ T8645] R13: 00007f1a14c26038 R14: 00007f1a14c25fa0 R15: 00007ffe9aaefda8 [ 257.814498][ T8645] [ 258.707102][ T8698] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 259.411354][ T8702] netlink: 'syz.0.877': attribute type 9 has an invalid length. [ 259.436488][ T8703] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 259.448730][ T8702] netlink: 399 bytes leftover after parsing attributes in process `syz.0.877'. [ 259.888056][ T8722] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 261.520727][ T8748] netlink: 'syz.2.891': attribute type 9 has an invalid length. [ 261.564489][ T8751] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 261.584812][ T8748] netlink: 399 bytes leftover after parsing attributes in process `syz.2.891'. [ 262.427664][ T8764] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.897'. [ 262.459666][ T8764] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 263.186379][ T8775] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 263.762590][ T8783] netlink: 'syz.3.904': attribute type 9 has an invalid length. [ 263.888943][ T8783] netlink: 399 bytes leftover after parsing attributes in process `syz.3.904'. [ 264.389463][ T8806] netlink: 'syz.1.911': attribute type 10 has an invalid length. [ 264.586745][ T8810] Q±6ã`Ò˜: renamed from lo (while UP) [ 265.962152][ T8826] netlink: 'syz.3.917': attribute type 9 has an invalid length. [ 265.983096][ T8826] netlink: 399 bytes leftover after parsing attributes in process `syz.3.917'. [ 266.240996][ T8831] netlink: 'syz.1.918': attribute type 9 has an invalid length. [ 266.257353][ T8831] netlink: 399 bytes leftover after parsing attributes in process `syz.1.918'. [ 266.604348][ T8852] FAULT_INJECTION: forcing a failure. [ 266.604348][ T8852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.678860][ T8852] CPU: 1 PID: 8852 Comm: syz.1.924 Not tainted syzkaller #0 [ 266.686231][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.696333][ T8852] Call Trace: [ 266.699671][ T8852] [ 266.702667][ T8852] dump_stack_lvl+0x18c/0x250 [ 266.707410][ T8852] ? show_regs_print_info+0x20/0x20 [ 266.712663][ T8852] ? load_image+0x420/0x420 [ 266.717226][ T8852] ? __lock_acquire+0x7d80/0x7d80 [ 266.722306][ T8852] ? snprintf+0xe9/0x140 [ 266.726614][ T8852] should_fail_ex+0x394/0x4c0 [ 266.731357][ T8852] _copy_to_user+0x2f/0xa0 [ 266.735822][ T8852] simple_read_from_buffer+0xe7/0x150 [ 266.741263][ T8852] proc_fail_nth_read+0x1e8/0x260 [ 266.746350][ T8852] ? proc_fault_inject_write+0x360/0x360 [ 266.752046][ T8852] ? fsnotify_perm+0x271/0x5e0 [ 266.756862][ T8852] ? proc_fault_inject_write+0x360/0x360 [ 266.762561][ T8852] vfs_read+0x298/0x990 [ 266.766789][ T8852] ? kernel_read+0x1e0/0x1e0 [ 266.771436][ T8852] ? __fget_files+0x28/0x460 [ 266.776074][ T8852] ? __fget_files+0x3fc/0x460 [ 266.780803][ T8852] ? __fdget_pos+0x2a3/0x330 [ 266.785413][ T8852] ? ksys_read+0x74/0x260 [ 266.789775][ T8852] ksys_read+0x151/0x260 [ 266.794050][ T8852] ? vfs_write+0x9a0/0x9a0 [ 266.798499][ T8852] ? lockdep_hardirqs_on+0x98/0x150 [ 266.803728][ T8852] do_syscall_64+0x55/0xb0 [ 266.808161][ T8852] ? clear_bhb_loop+0x40/0x90 [ 266.812858][ T8852] ? clear_bhb_loop+0x40/0x90 [ 266.817551][ T8852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.823461][ T8852] RIP: 0033:0x7f5d9d15e6ce [ 266.827908][ T8852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.847545][ T8852] RSP: 002b:00007f5d9e073fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.855991][ T8852] RAX: ffffffffffffffda RBX: 00007f5d9e0746c0 RCX: 00007f5d9d15e6ce [ 266.863978][ T8852] RDX: 000000000000000f RSI: 00007f5d9e0740a0 RDI: 0000000000000007 [ 266.871964][ T8852] RBP: 00007f5d9e074090 R08: 0000000000000000 R09: 0000000000000000 [ 266.879947][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.887932][ T8852] R13: 00007f5d9d426038 R14: 00007f5d9d425fa0 R15: 00007ffd5afc10e8 [ 266.895953][ T8852] [ 267.653717][ T8867] netlink: 'syz.0.929': attribute type 9 has an invalid length. [ 267.662121][ T8867] netlink: 399 bytes leftover after parsing attributes in process `syz.0.929'. [ 267.709019][ T8870] netlink: 'syz.1.928': attribute type 27 has an invalid length. [ 268.036228][ T8870] bond0: (slave bond_slave_0): Releasing backup interface [ 269.460556][ T8898] netlink: 'syz.2.938': attribute type 9 has an invalid length. [ 269.479420][ T8898] netlink: 463 bytes leftover after parsing attributes in process `syz.2.938'. [ 271.180272][ T8935] netlink: 'syz.1.951': attribute type 9 has an invalid length. [ 271.188450][ T8935] netlink: 399 bytes leftover after parsing attributes in process `syz.1.951'. [ 271.815828][ T8948] FAULT_INJECTION: forcing a failure. [ 271.815828][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.863637][ T8948] CPU: 0 PID: 8948 Comm: syz.1.955 Not tainted syzkaller #0 [ 271.870984][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 271.881060][ T8948] Call Trace: [ 271.884353][ T8948] [ 271.887298][ T8948] dump_stack_lvl+0x18c/0x250 [ 271.892012][ T8948] ? show_regs_print_info+0x20/0x20 [ 271.897237][ T8948] ? load_image+0x420/0x420 [ 271.901773][ T8948] ? __lock_acquire+0x7d80/0x7d80 [ 271.906821][ T8948] ? snprintf+0xe9/0x140 [ 271.911086][ T8948] should_fail_ex+0x394/0x4c0 [ 271.915790][ T8948] _copy_to_user+0x2f/0xa0 [ 271.920233][ T8948] simple_read_from_buffer+0xe7/0x150 [ 271.925636][ T8948] proc_fail_nth_read+0x1e8/0x260 [ 271.930704][ T8948] ? proc_fault_inject_write+0x360/0x360 [ 271.936365][ T8948] ? fsnotify_perm+0x271/0x5e0 [ 271.941148][ T8948] ? proc_fault_inject_write+0x360/0x360 [ 271.946814][ T8948] vfs_read+0x298/0x990 [ 271.951012][ T8948] ? kernel_read+0x1e0/0x1e0 [ 271.955631][ T8948] ? __fget_files+0x28/0x460 [ 271.960248][ T8948] ? __fget_files+0x3fc/0x460 [ 271.964962][ T8948] ? __fdget_pos+0x2a3/0x330 [ 271.969575][ T8948] ? ksys_read+0x74/0x260 [ 271.973935][ T8948] ksys_read+0x151/0x260 [ 271.978213][ T8948] ? vfs_write+0x9a0/0x9a0 [ 271.982662][ T8948] ? lockdep_hardirqs_on+0x98/0x150 [ 271.987888][ T8948] do_syscall_64+0x55/0xb0 [ 271.992324][ T8948] ? clear_bhb_loop+0x40/0x90 [ 271.997019][ T8948] ? clear_bhb_loop+0x40/0x90 [ 272.001721][ T8948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.007620][ T8948] RIP: 0033:0x7f5d9d15e6ce [ 272.012033][ T8948] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.031650][ T8948] RSP: 002b:00007f5d9e073fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.040064][ T8948] RAX: ffffffffffffffda RBX: 00007f5d9e0746c0 RCX: 00007f5d9d15e6ce [ 272.048038][ T8948] RDX: 000000000000000f RSI: 00007f5d9e0740a0 RDI: 0000000000000006 [ 272.056004][ T8948] RBP: 00007f5d9e074090 R08: 0000000000000000 R09: 0000000000000000 [ 272.063983][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.071953][ T8948] R13: 00007f5d9d426038 R14: 00007f5d9d425fa0 R15: 00007ffd5afc10e8 [ 272.079936][ T8948] [ 274.322774][ T8977] FAULT_INJECTION: forcing a failure. [ 274.322774][ T8977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.357354][ T8977] CPU: 0 PID: 8977 Comm: syz.3.963 Not tainted syzkaller #0 [ 274.364789][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.374863][ T8977] Call Trace: [ 274.378155][ T8977] [ 274.381096][ T8977] dump_stack_lvl+0x18c/0x250 [ 274.385795][ T8977] ? show_regs_print_info+0x20/0x20 [ 274.391011][ T8977] ? load_image+0x420/0x420 [ 274.395539][ T8977] ? __lock_acquire+0x7d80/0x7d80 [ 274.400592][ T8977] should_fail_ex+0x394/0x4c0 [ 274.405296][ T8977] _copy_from_user+0x2f/0xe0 [ 274.409907][ T8977] __copy_msghdr+0x388/0x560 [ 274.414521][ T8977] ___sys_sendmsg+0x214/0x360 [ 274.419221][ T8977] ? get_pid_task+0x20/0x1e0 [ 274.423840][ T8977] ? __sys_sendmsg+0x2b0/0x2b0 [ 274.428650][ T8977] ? __lock_acquire+0x7d80/0x7d80 [ 274.433718][ T8977] __se_sys_sendmsg+0x1d0/0x2c0 [ 274.438590][ T8977] ? __x64_sys_sendmsg+0x80/0x80 [ 274.443569][ T8977] ? lockdep_hardirqs_on+0x98/0x150 [ 274.448783][ T8977] do_syscall_64+0x55/0xb0 [ 274.453222][ T8977] ? clear_bhb_loop+0x40/0x90 [ 274.457913][ T8977] ? clear_bhb_loop+0x40/0x90 [ 274.462605][ T8977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.468557][ T8977] RIP: 0033:0x7f4f8df9de99 [ 274.472987][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.492615][ T8977] RSP: 002b:00007f4f8eea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.501046][ T8977] RAX: ffffffffffffffda RBX: 00007f4f8e225fa0 RCX: 00007f4f8df9de99 [ 274.509026][ T8977] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 274.517006][ T8977] RBP: 00007f4f8eea0090 R08: 0000000000000000 R09: 0000000000000000 [ 274.524987][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.532967][ T8977] R13: 00007f4f8e226038 R14: 00007f4f8e225fa0 R15: 00007ffc07ffd408 [ 274.540965][ T8977] [ 274.801991][ T8979] netlink: 'syz.1.964': attribute type 9 has an invalid length. [ 274.869995][ T8979] netlink: 399 bytes leftover after parsing attributes in process `syz.1.964'. [ 275.277781][ T8992] sctp: [Deprecated]: syz.2.967 (pid 8992) Use of int in max_burst socket option deprecated. [ 275.277781][ T8992] Use struct sctp_assoc_value instead [ 276.598051][ T9009] netlink: 'syz.0.975': attribute type 9 has an invalid length. [ 276.648370][ T9009] netlink: 399 bytes leftover after parsing attributes in process `syz.0.975'. [ 277.224771][ T9023] netlink: 'syz.0.980': attribute type 9 has an invalid length. [ 277.232903][ T9023] netlink: 399 bytes leftover after parsing attributes in process `syz.0.980'. [ 277.309189][ T9025] sctp: [Deprecated]: syz.1.981 (pid 9025) Use of int in max_burst socket option deprecated. [ 277.309189][ T9025] Use struct sctp_assoc_value instead [ 278.203144][ T9046] netlink: 'syz.3.990': attribute type 9 has an invalid length. [ 278.241505][ T9046] netlink: 463 bytes leftover after parsing attributes in process `syz.3.990'. [ 278.284827][ T9048] netlink: 'syz.2.989': attribute type 9 has an invalid length. [ 278.293819][ T9048] netlink: 399 bytes leftover after parsing attributes in process `syz.2.989'. [ 278.719174][ T9057] sctp: [Deprecated]: syz.3.991 (pid 9057) Use of int in max_burst socket option deprecated. [ 278.719174][ T9057] Use struct sctp_assoc_value instead [ 279.643443][ T9080] FAULT_INJECTION: forcing a failure. [ 279.643443][ T9080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.695624][ T9080] CPU: 0 PID: 9080 Comm: syz.3.998 Not tainted syzkaller #0 [ 279.702968][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 279.713046][ T9080] Call Trace: [ 279.716341][ T9080] [ 279.719280][ T9080] dump_stack_lvl+0x18c/0x250 [ 279.723986][ T9080] ? show_regs_print_info+0x20/0x20 [ 279.729205][ T9080] ? load_image+0x420/0x420 [ 279.733732][ T9080] ? __might_fault+0xaa/0x120 [ 279.738427][ T9080] ? __lock_acquire+0x7d80/0x7d80 [ 279.743481][ T9080] should_fail_ex+0x394/0x4c0 [ 279.748190][ T9080] _copy_from_user+0x2f/0xe0 [ 279.752801][ T9080] __sys_bpf+0x23e/0x890 [ 279.757063][ T9080] ? bpf_link_show_fdinfo+0x390/0x390 [ 279.762464][ T9080] ? lock_chain_count+0x20/0x20 [ 279.767339][ T9080] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 279.773348][ T9080] __x64_sys_bpf+0x7c/0x90 [ 279.777787][ T9080] do_syscall_64+0x55/0xb0 [ 279.782225][ T9080] ? clear_bhb_loop+0x40/0x90 [ 279.786915][ T9080] ? clear_bhb_loop+0x40/0x90 [ 279.791606][ T9080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.797526][ T9080] RIP: 0033:0x7f4f8df9de99 [ 279.801955][ T9080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.821587][ T9080] RSP: 002b:00007f4f8ee7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.830030][ T9080] RAX: ffffffffffffffda RBX: 00007f4f8e226090 RCX: 00007f4f8df9de99 [ 279.838023][ T9080] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 279.846015][ T9080] RBP: 00007f4f8ee7f090 R08: 0000000000000000 R09: 0000000000000000 [ 279.854009][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.862003][ T9080] R13: 00007f4f8e226128 R14: 00007f4f8e226090 R15: 00007ffc07ffd408 [ 279.870016][ T9080] [ 280.256776][ T9092] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1003'. [ 280.399957][ T9092] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1003'. [ 281.785088][ T9110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1010'. [ 281.812502][ T9110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1010'. [ 281.828814][ T9112] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1011'. [ 281.857520][ T9112] FAULT_INJECTION: forcing a failure. [ 281.857520][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 281.917776][ T9112] CPU: 1 PID: 9112 Comm: syz.2.1011 Not tainted syzkaller #0 [ 281.925238][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 281.935352][ T9112] Call Trace: [ 281.938678][ T9112] [ 281.941648][ T9112] dump_stack_lvl+0x18c/0x250 [ 281.946395][ T9112] ? show_regs_print_info+0x20/0x20 [ 281.951652][ T9112] ? load_image+0x420/0x420 [ 281.956216][ T9112] ? verify_lock_unused+0x140/0x140 [ 281.961465][ T9112] ? perf_trace_lock+0x303/0x3b0 [ 281.966480][ T9112] should_fail_ex+0x394/0x4c0 [ 281.971232][ T9112] should_failslab+0x9/0x20 [ 281.975789][ T9112] slab_pre_alloc_hook+0x59/0x300 [ 281.980885][ T9112] kmem_cache_alloc+0x5a/0x2c0 [ 281.985700][ T9112] ? skb_clone+0x1eb/0x370 [ 281.990184][ T9112] skb_clone+0x1eb/0x370 [ 281.994486][ T9112] __netlink_deliver_tap+0x411/0x7f0 [ 281.999861][ T9112] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.005116][ T9112] netlink_deliver_tap+0x19c/0x1b0 [ 282.010284][ T9112] netlink_unicast+0x77b/0x930 [ 282.015140][ T9112] netlink_sendmsg+0x8d0/0xbf0 [ 282.019983][ T9112] ? netlink_getsockopt+0x590/0x590 [ 282.025244][ T9112] ? apparmor_socket_sendmsg+0x8e/0x330 [ 282.030857][ T9112] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 282.036193][ T9112] ? security_socket_sendmsg+0x80/0xa0 [ 282.041699][ T9112] ? netlink_getsockopt+0x590/0x590 [ 282.046965][ T9112] ____sys_sendmsg+0x61b/0x980 [ 282.051806][ T9112] ? __asan_memset+0x22/0x40 [ 282.056462][ T9112] ? __sys_sendmsg_sock+0x30/0x30 [ 282.061541][ T9112] ? __import_iovec+0x5f2/0x850 [ 282.066483][ T9112] ? import_iovec+0x73/0xa0 [ 282.071059][ T9112] ___sys_sendmsg+0x2a6/0x360 [ 282.075798][ T9112] ? __sys_sendmsg+0x2b0/0x2b0 [ 282.080643][ T9112] ? __lock_acquire+0x7d80/0x7d80 [ 282.085755][ T9112] __se_sys_sendmsg+0x1d0/0x2c0 [ 282.090646][ T9112] ? __x64_sys_sendmsg+0x80/0x80 [ 282.095649][ T9112] ? lockdep_hardirqs_on+0x98/0x150 [ 282.100875][ T9112] do_syscall_64+0x55/0xb0 [ 282.105317][ T9112] ? clear_bhb_loop+0x40/0x90 [ 282.110008][ T9112] ? clear_bhb_loop+0x40/0x90 [ 282.114704][ T9112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.120618][ T9112] RIP: 0033:0x7f9d34d9de99 [ 282.125054][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.144682][ T9112] RSP: 002b:00007f9d35d4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.153117][ T9112] RAX: ffffffffffffffda RBX: 00007f9d35025fa0 RCX: 00007f9d34d9de99 [ 282.161100][ T9112] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000009 [ 282.169081][ T9112] RBP: 00007f9d35d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.177063][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.185049][ T9112] R13: 00007f9d35026038 R14: 00007f9d35025fa0 R15: 00007fff6b6c9478 [ 282.193075][ T9112] [ 282.275937][ T9112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.297650][ T9153] netlink: 'syz.0.1023': attribute type 9 has an invalid length. [ 284.306856][ T9153] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1023'. [ 285.021632][ T9150] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1022'. [ 286.615833][ T9182] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1030'. [ 286.657168][ T9182] netlink: get zone limit has 4 unknown bytes [ 287.840143][ T9208] FAULT_INJECTION: forcing a failure. [ 287.840143][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 287.868935][ T9208] CPU: 0 PID: 9208 Comm: syz.2.1045 Not tainted syzkaller #0 [ 287.876381][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.886463][ T9208] Call Trace: [ 287.889763][ T9208] [ 287.892713][ T9208] dump_stack_lvl+0x18c/0x250 [ 287.897436][ T9208] ? show_regs_print_info+0x20/0x20 [ 287.902651][ T9208] ? load_image+0x420/0x420 [ 287.907181][ T9208] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 287.913191][ T9208] should_fail_ex+0x394/0x4c0 [ 287.917894][ T9208] should_failslab+0x9/0x20 [ 287.922426][ T9208] slab_pre_alloc_hook+0x59/0x300 [ 287.927477][ T9208] ? proc_self_get_link+0xe5/0x180 [ 287.932616][ T9208] __kmem_cache_alloc_node+0x53/0x250 [ 287.938014][ T9208] ? proc_self_get_link+0xe5/0x180 [ 287.943154][ T9208] kmalloc_trace+0x2a/0xe0 [ 287.947609][ T9208] proc_self_get_link+0xe5/0x180 [ 287.952582][ T9208] ? proc_setup_self+0x2c0/0x2c0 [ 287.957548][ T9208] pick_link+0x6a8/0xdd0 [ 287.961829][ T9208] step_into+0xc18/0xee0 [ 287.966113][ T9208] ? set_root+0x3a0/0x3a0 [ 287.970470][ T9208] ? lookup_fast+0x14a/0x4c0 [ 287.975087][ T9208] ? security_inode_permission+0xb0/0xf0 [ 287.980752][ T9208] link_path_walk+0x748/0xe40 [ 287.985474][ T9208] ? handle_lookup_down+0x130/0x130 [ 287.990719][ T9208] path_openat+0x291/0x3270 [ 287.995284][ T9208] ? verify_lock_unused+0x140/0x140 [ 288.000544][ T9208] ? do_filp_open+0x430/0x430 [ 288.005255][ T9208] ? irqentry_enter+0x37/0x50 [ 288.009978][ T9208] do_filp_open+0x1f2/0x430 [ 288.014512][ T9208] ? vfs_tmpfile+0x480/0x480 [ 288.019196][ T9208] ? _raw_spin_unlock+0x28/0x40 [ 288.024082][ T9208] ? alloc_fd+0x590/0x640 [ 288.028454][ T9208] do_sys_openat2+0x134/0x1d0 [ 288.033163][ T9208] ? perf_trace_preemptirq_template+0x269/0x330 [ 288.039434][ T9208] ? do_sys_open+0xe0/0xe0 [ 288.043879][ T9208] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 288.049900][ T9208] ? lock_chain_count+0x20/0x20 [ 288.054783][ T9208] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 288.060792][ T9208] __x64_sys_openat+0x139/0x160 [ 288.065678][ T9208] do_syscall_64+0x55/0xb0 [ 288.070120][ T9208] ? clear_bhb_loop+0x40/0x90 [ 288.074821][ T9208] ? clear_bhb_loop+0x40/0x90 [ 288.079529][ T9208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.085454][ T9208] RIP: 0033:0x7f9d34d5e6ce [ 288.089897][ T9208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.109534][ T9208] RSP: 002b:00007f9d35d4dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.117979][ T9208] RAX: ffffffffffffffda RBX: 00007f9d35d4e6c0 RCX: 00007f9d34d5e6ce [ 288.125979][ T9208] RDX: 0000000000000000 RSI: 00007f9d35d4df90 RDI: ffffffffffffff9c [ 288.133983][ T9208] RBP: 00007f9d35d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 288.141984][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.149983][ T9208] R13: 00007f9d35026038 R14: 00007f9d35025fa0 R15: 00007fff6b6c9478 [ 288.157994][ T9208] [ 290.026169][ T9240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.871730][ T9265] netlink: 'syz.1.1051': attribute type 9 has an invalid length. [ 290.965683][ T9265] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1051'. [ 291.920024][ T9281] FAULT_INJECTION: forcing a failure. [ 291.920024][ T9281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.020351][ T9281] CPU: 0 PID: 9281 Comm: syz.3.1058 Not tainted syzkaller #0 [ 292.027794][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.037904][ T9281] Call Trace: [ 292.041214][ T9281] [ 292.044167][ T9281] dump_stack_lvl+0x18c/0x250 [ 292.048877][ T9281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.055068][ T9281] ? show_regs_print_info+0x20/0x20 [ 292.060330][ T9281] ? load_image+0x420/0x420 [ 292.064872][ T9281] should_fail_ex+0x394/0x4c0 [ 292.069591][ T9281] _copy_to_user+0x2f/0xa0 [ 292.074094][ T9281] simple_read_from_buffer+0xe7/0x150 [ 292.079502][ T9281] proc_fail_nth_read+0x1e8/0x260 [ 292.084592][ T9281] ? proc_fault_inject_write+0x360/0x360 [ 292.090263][ T9281] ? fsnotify_perm+0x271/0x5e0 [ 292.095053][ T9281] ? proc_fault_inject_write+0x360/0x360 [ 292.100712][ T9281] vfs_read+0x298/0x990 [ 292.104905][ T9281] ? kernel_read+0x1e0/0x1e0 [ 292.109526][ T9281] ? __fget_files+0x28/0x460 [ 292.114152][ T9281] ? __fget_files+0x3fc/0x460 [ 292.118864][ T9281] ? __fdget_pos+0x2a3/0x330 [ 292.123480][ T9281] ? ksys_read+0x74/0x260 [ 292.127839][ T9281] ksys_read+0x151/0x260 [ 292.132114][ T9281] ? vfs_write+0x9a0/0x9a0 [ 292.136562][ T9281] ? syscall_enter_from_user_mode+0x2e/0x80 [ 292.142497][ T9281] do_syscall_64+0x55/0xb0 [ 292.146946][ T9281] ? clear_bhb_loop+0x40/0x90 [ 292.151649][ T9281] ? clear_bhb_loop+0x40/0x90 [ 292.156344][ T9281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.162264][ T9281] RIP: 0033:0x7f4f8df5e6ce [ 292.166698][ T9281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.186331][ T9281] RSP: 002b:00007f4f8ee9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.194781][ T9281] RAX: ffffffffffffffda RBX: 00007f4f8eea06c0 RCX: 00007f4f8df5e6ce [ 292.202783][ T9281] RDX: 000000000000000f RSI: 00007f4f8eea00a0 RDI: 0000000000000008 [ 292.210822][ T9281] RBP: 00007f4f8eea0090 R08: 0000000000000000 R09: 0000000000000000 [ 292.218823][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.226816][ T9281] R13: 00007f4f8e226038 R14: 00007f4f8e225fa0 R15: 00007ffc07ffd408 [ 292.234831][ T9281] [ 294.630410][ T9325] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1067'. [ 294.647571][ T9325] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 296.918292][ T9358] netlink: 'syz.3.1078': attribute type 21 has an invalid length. [ 296.926838][ T9358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1078'. [ 296.936343][ T9358] netlink: 'syz.3.1078': attribute type 5 has an invalid length. [ 296.946251][ T9358] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1078'. [ 297.755181][ T9369] netlink: 'syz.0.1082': attribute type 9 has an invalid length. [ 297.920886][ T9369] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1082'. [ 298.864507][ T9381] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1084'. [ 298.881275][ T9381] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 300.711912][ T9411] sit0: entered allmulticast mode [ 300.922994][ T9414] sit0: entered promiscuous mode [ 301.283554][ T9421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1102'. [ 301.302938][ T9419] netlink: 'syz.2.1093': attribute type 9 has an invalid length. [ 301.325001][ T9419] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1093'. [ 301.632444][ T9430] netlink: 'syz.3.1098': attribute type 12 has an invalid length. [ 303.266141][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1108'. [ 306.051991][ T9518] netlink: 'syz.2.1121': attribute type 12 has an invalid length. [ 306.060439][ T9518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1121'. [ 306.253388][ T9520] FAULT_INJECTION: forcing a failure. [ 306.253388][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 306.266978][ T9520] CPU: 1 PID: 9520 Comm: syz.2.1122 Not tainted syzkaller #0 [ 306.274397][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 306.284507][ T9520] Call Trace: [ 306.287825][ T9520] [ 306.290793][ T9520] dump_stack_lvl+0x18c/0x250 [ 306.295514][ T9520] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.301725][ T9520] ? show_regs_print_info+0x20/0x20 [ 306.306969][ T9520] ? load_image+0x420/0x420 [ 306.311554][ T9520] should_fail_ex+0x394/0x4c0 [ 306.316294][ T9520] should_failslab+0x9/0x20 [ 306.320840][ T9520] slab_pre_alloc_hook+0x59/0x300 [ 306.325929][ T9520] kmem_cache_alloc+0x5a/0x2c0 [ 306.330759][ T9520] ? skb_clone+0x1eb/0x370 [ 306.335243][ T9520] skb_clone+0x1eb/0x370 [ 306.339543][ T9520] bpf_clone_redirect+0x16d/0x4a0 [ 306.344647][ T9520] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 306.350167][ T9520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 306.356205][ T9520] ? perf_trace_preemptirq_template+0xac/0x330 [ 306.362420][ T9520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 306.368442][ T9520] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 306.373767][ T9520] ? lock_chain_count+0x20/0x20 [ 306.378651][ T9520] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 306.384956][ T9520] ? __local_bh_disable_ip+0x108/0x1a0 [ 306.390459][ T9520] ? __cant_sleep+0x220/0x220 [ 306.395179][ T9520] ? __local_bh_enable_ip+0x13a/0x1c0 [ 306.400601][ T9520] ? _local_bh_enable+0xa0/0xa0 [ 306.405499][ T9520] ? bpf_test_timer_continue+0x135/0x380 [ 306.411177][ T9520] ? bpf_test_run+0x174/0x870 [ 306.415896][ T9520] bpf_test_run+0x2df/0x870 [ 306.420460][ T9520] ? lock_chain_count+0x20/0x20 [ 306.425364][ T9520] ? bpf_test_run+0x174/0x870 [ 306.430088][ T9520] ? dst_hold+0x70/0x70 [ 306.434311][ T9520] ? bpf_prog_test_run_skb+0xd79/0x18f0 [ 306.439917][ T9520] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 306.445395][ T9520] ? cpu_online+0x60/0x60 [ 306.449772][ T9520] bpf_prog_test_run+0x31f/0x390 [ 306.454768][ T9520] __sys_bpf+0x49d/0x890 [ 306.459055][ T9520] ? read_tsc+0x9/0x20 [ 306.463166][ T9520] ? bpf_link_show_fdinfo+0x390/0x390 [ 306.468620][ T9520] ? lock_chain_count+0x20/0x20 [ 306.473508][ T9520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 306.479592][ T9520] __x64_sys_bpf+0x7c/0x90 [ 306.484062][ T9520] do_syscall_64+0x55/0xb0 [ 306.488520][ T9520] ? clear_bhb_loop+0x40/0x90 [ 306.493232][ T9520] ? clear_bhb_loop+0x40/0x90 [ 306.497958][ T9520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.503906][ T9520] RIP: 0033:0x7f9d34d9de99 [ 306.508363][ T9520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.528013][ T9520] RSP: 002b:00007f9d35d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.536570][ T9520] RAX: ffffffffffffffda RBX: 00007f9d35025fa0 RCX: 00007f9d34d9de99 [ 306.544619][ T9520] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 306.552640][ T9520] RBP: 00007f9d35d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 306.560651][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.568685][ T9520] R13: 00007f9d35026038 R14: 00007f9d35025fa0 R15: 00007fff6b6c9478 [ 306.576752][ T9520] [ 306.763456][ T9522] netlink: 'syz.2.1124': attribute type 12 has an invalid length. [ 306.830143][ T9525] FAULT_INJECTION: forcing a failure. [ 306.830143][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 306.868971][ T9525] CPU: 0 PID: 9525 Comm: syz.2.1125 Not tainted syzkaller #0 [ 306.876404][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 306.886486][ T9525] Call Trace: [ 306.889804][ T9525] [ 306.892757][ T9525] dump_stack_lvl+0x18c/0x250 [ 306.897447][ T9525] ? show_regs_print_info+0x20/0x20 [ 306.902661][ T9525] ? load_image+0x420/0x420 [ 306.907168][ T9525] ? __might_sleep+0xe0/0xe0 [ 306.911757][ T9525] ? __lock_acquire+0x7d80/0x7d80 [ 306.916782][ T9525] should_fail_ex+0x394/0x4c0 [ 306.921461][ T9525] should_failslab+0x9/0x20 [ 306.925966][ T9525] slab_pre_alloc_hook+0x59/0x300 [ 306.930997][ T9525] ? kvmalloc_node+0x70/0x180 [ 306.935677][ T9525] ? kvmalloc_node+0x70/0x180 [ 306.940350][ T9525] __kmem_cache_alloc_node+0x53/0x250 [ 306.945727][ T9525] ? kvmalloc_node+0x70/0x180 [ 306.950423][ T9525] __kmalloc_node+0xa6/0x240 [ 306.955028][ T9525] kvmalloc_node+0x70/0x180 [ 306.959542][ T9525] alloc_netdev_mqs+0xa5a/0x1040 [ 306.964498][ T9525] ? ipgre_netlink_parms+0xae0/0xae0 [ 306.969817][ T9525] __ip_tunnel_create+0x303/0x4d0 [ 306.974847][ T9525] ? apparmor_capable+0x137/0x1a0 [ 306.979878][ T9525] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 306.985076][ T9525] ? bpf_lsm_capable+0x9/0x10 [ 306.989760][ T9525] ip_tunnel_ctl+0xc36/0x1910 [ 306.994445][ T9525] ipgre_tunnel_ctl+0x2ae/0xb70 [ 306.999303][ T9525] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 307.004851][ T9525] ? dev_ioctl+0x83c/0x1140 [ 307.009355][ T9525] ? ip_tunnel_update+0xae0/0xae0 [ 307.014388][ T9525] ? dev_ifsioc+0x957/0xc40 [ 307.018895][ T9525] dev_ioctl+0x84c/0x1140 [ 307.023223][ T9525] sock_ioctl+0x74c/0x7e0 [ 307.027547][ T9525] ? sock_poll+0x3e0/0x3e0 [ 307.031985][ T9525] ? bpf_lsm_file_ioctl+0x9/0x10 [ 307.036916][ T9525] ? security_file_ioctl+0x80/0xa0 [ 307.042027][ T9525] ? sock_poll+0x3e0/0x3e0 [ 307.046435][ T9525] __se_sys_ioctl+0xfd/0x170 [ 307.051025][ T9525] do_syscall_64+0x55/0xb0 [ 307.055439][ T9525] ? clear_bhb_loop+0x40/0x90 [ 307.060107][ T9525] ? clear_bhb_loop+0x40/0x90 [ 307.064779][ T9525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.070671][ T9525] RIP: 0033:0x7f9d34d9de99 [ 307.075083][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.094705][ T9525] RSP: 002b:00007f9d35d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.103125][ T9525] RAX: ffffffffffffffda RBX: 00007f9d35025fa0 RCX: 00007f9d34d9de99 [ 307.111097][ T9525] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 307.119065][ T9525] RBP: 00007f9d35d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 307.127034][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.135004][ T9525] R13: 00007f9d35026038 R14: 00007f9d35025fa0 R15: 00007fff6b6c9478 [ 307.142989][ T9525] [ 307.246726][ T9528] FAULT_INJECTION: forcing a failure. [ 307.246726][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 307.276959][ T9528] CPU: 0 PID: 9528 Comm: syz.3.1126 Not tainted syzkaller #0 [ 307.284394][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 307.294474][ T9528] Call Trace: [ 307.297786][ T9528] [ 307.300750][ T9528] dump_stack_lvl+0x18c/0x250 [ 307.305480][ T9528] ? show_regs_print_info+0x20/0x20 [ 307.310716][ T9528] ? load_image+0x420/0x420 [ 307.315254][ T9528] ? __lock_acquire+0x7d80/0x7d80 [ 307.320306][ T9528] ? trace_call_bpf+0xc3/0x6c0 [ 307.325107][ T9528] ? trace_call_bpf+0xc3/0x6c0 [ 307.329905][ T9528] should_fail_ex+0x394/0x4c0 [ 307.334618][ T9528] should_failslab+0x9/0x20 [ 307.339151][ T9528] slab_pre_alloc_hook+0x59/0x300 [ 307.344380][ T9528] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 307.350481][ T9528] ? bpf_test_init+0x9f/0x140 [ 307.355187][ T9528] ? bpf_test_init+0x9f/0x140 [ 307.359889][ T9528] __kmem_cache_alloc_node+0x53/0x250 [ 307.365300][ T9528] ? bpf_test_init+0x9f/0x140 [ 307.370008][ T9528] __kmalloc+0xa7/0x240 [ 307.374197][ T9528] bpf_test_init+0x9f/0x140 [ 307.378736][ T9528] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 307.384125][ T9528] ? __lock_acquire+0x7d80/0x7d80 [ 307.389169][ T9528] ? dev_put+0x80/0x80 [ 307.393250][ T9528] ? dev_put+0x80/0x80 [ 307.397321][ T9528] bpf_prog_test_run+0x31f/0x390 [ 307.402264][ T9528] __sys_bpf+0x49d/0x890 [ 307.406508][ T9528] ? bpf_link_show_fdinfo+0x390/0x390 [ 307.411895][ T9528] ? lock_chain_count+0x20/0x20 [ 307.416868][ T9528] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 307.422856][ T9528] __x64_sys_bpf+0x7c/0x90 [ 307.427271][ T9528] do_syscall_64+0x55/0xb0 [ 307.431691][ T9528] ? clear_bhb_loop+0x40/0x90 [ 307.436359][ T9528] ? clear_bhb_loop+0x40/0x90 [ 307.441031][ T9528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.446925][ T9528] RIP: 0033:0x7f4f8df9de99 [ 307.451350][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.470953][ T9528] RSP: 002b:00007f4f8eea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.479372][ T9528] RAX: ffffffffffffffda RBX: 00007f4f8e225fa0 RCX: 00007f4f8df9de99 [ 307.487346][ T9528] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 307.495311][ T9528] RBP: 00007f4f8eea0090 R08: 0000000000000000 R09: 0000000000000000 [ 307.503277][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.511240][ T9528] R13: 00007f4f8e226038 R14: 00007f4f8e225fa0 R15: 00007ffc07ffd408 [ 307.519230][ T9528] [ 308.224861][ T9541] sit0: entered allmulticast mode [ 308.442219][ T9552] sit0: entered promiscuous mode [ 308.775002][ T9559] netlink: 'syz.1.1134': attribute type 12 has an invalid length. [ 308.828209][ T9561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1133'. [ 308.952966][ T9561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.047813][ T9567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1136'. [ 309.778005][ T9585] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1142'. [ 309.807946][ T9585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.837510][ T9599] delete_channel: no stack [ 311.335768][ T9621] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 311.359421][ T9621] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1155'. [ 311.549711][ T9621] .`: renamed from bond0 (while UP) [ 311.875722][ T9624] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1156'. [ 311.933172][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 312.018051][ T9629] syzkaller0: entered promiscuous mode [ 312.024247][ T9629] syzkaller0: entered allmulticast mode [ 315.242075][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1167'. [ 315.252195][ T9655] netlink: 'syz.0.1167': attribute type 12 has an invalid length. [ 315.260650][ T9655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1167'. [ 315.272329][ T9673] netlink: 'syz.3.1172': attribute type 12 has an invalid length. [ 315.288628][ T9673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1172'. [ 315.428001][ T9689] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1179'. [ 315.465662][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 316.380330][ T9720] FAULT_INJECTION: forcing a failure. [ 316.380330][ T9720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.393930][ T9720] CPU: 0 PID: 9720 Comm: syz.0.1188 Not tainted syzkaller #0 [ 316.401342][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.411417][ T9720] Call Trace: [ 316.414706][ T9720] [ 316.417648][ T9720] dump_stack_lvl+0x18c/0x250 [ 316.422355][ T9720] ? show_regs_print_info+0x20/0x20 [ 316.427606][ T9720] ? load_image+0x420/0x420 [ 316.432139][ T9720] ? __might_fault+0xaa/0x120 [ 316.436845][ T9720] ? __lock_acquire+0x7d80/0x7d80 [ 316.441891][ T9720] ? bpf_percpu_hash_update+0x2b/0x200 [ 316.447373][ T9720] ? __virt_addr_valid+0x10c/0x380 [ 316.452514][ T9720] should_fail_ex+0x394/0x4c0 [ 316.457222][ T9720] _copy_from_user+0x2f/0xe0 [ 316.461832][ T9720] generic_map_update_batch+0x58c/0x800 [ 316.467407][ T9720] ? rcu_read_unlock+0xa0/0xa0 [ 316.472203][ T9720] ? __fdget+0x180/0x210 [ 316.476469][ T9720] ? rcu_read_unlock+0xa0/0xa0 [ 316.481252][ T9720] bpf_map_do_batch+0x3f2/0x600 [ 316.486120][ T9720] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 316.492486][ T9720] __sys_bpf+0x381/0x890 [ 316.496753][ T9720] ? bpf_link_show_fdinfo+0x390/0x390 [ 316.502161][ T9720] ? lock_chain_count+0x20/0x20 [ 316.507043][ T9720] __x64_sys_bpf+0x7c/0x90 [ 316.511483][ T9720] do_syscall_64+0x55/0xb0 [ 316.515927][ T9720] ? clear_bhb_loop+0x40/0x90 [ 316.520623][ T9720] ? clear_bhb_loop+0x40/0x90 [ 316.525320][ T9720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.531252][ T9720] RIP: 0033:0x7f1a1499de99 [ 316.535686][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.555316][ T9720] RSP: 002b:00007f1a158c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.563768][ T9720] RAX: ffffffffffffffda RBX: 00007f1a14c25fa0 RCX: 00007f1a1499de99 [ 316.571763][ T9720] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 316.579760][ T9720] RBP: 00007f1a158c0090 R08: 0000000000000000 R09: 0000000000000000 [ 316.587754][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.595745][ T9720] R13: 00007f1a14c26038 R14: 00007f1a14c25fa0 R15: 00007ffe9aaefda8 [ 316.603753][ T9720] [ 317.333788][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340708][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457128][ T9739] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1194'. [ 317.488489][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 318.570050][ T9771] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1205'. [ 318.636344][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 319.443051][ T9800] netlink: 'syz.1.1214': attribute type 4 has an invalid length. [ 319.488392][ T9800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1214'. [ 321.340891][ T9871] netlink: 'syz.3.1224': attribute type 10 has an invalid length. [ 321.408906][ T9871] bond0: (slave bond_slave_0): Releasing backup interface [ 322.591921][ T9899] netlink: 'syz.2.1229': attribute type 12 has an invalid length. [ 322.732421][ T9899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1229'. [ 325.187331][ T9937] netlink: 'syz.3.1245': attribute type 21 has an invalid length. [ 325.199047][ T9937] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1245'. [ 325.221380][ T9937] netlink: 'syz.3.1245': attribute type 5 has an invalid length. [ 325.235955][ T9937] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1245'. [ 325.502256][ T9949] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 325.511824][ T9949] netlink: 'syz.3.1248': attribute type 2 has an invalid length. [ 325.522880][ T9949] netlink: 'syz.3.1248': attribute type 2 has an invalid length. [ 325.533055][ T9949] netlink: 'syz.3.1248': attribute type 3 has an invalid length. [ 325.548234][ T9949] netlink: 'syz.3.1248': attribute type 4 has an invalid length. [ 325.581966][ T9949] netlink: 'syz.3.1248': attribute type 5 has an invalid length. [ 325.614649][ T9949] netlink: 'syz.3.1248': attribute type 6 has an invalid length. [ 325.633644][ T9949] netlink: 'syz.3.1248': attribute type 7 has an invalid length. [ 325.658751][ T9949] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1248'. [ 325.764716][ T9956] FAULT_INJECTION: forcing a failure. [ 325.764716][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 325.793115][ T9956] CPU: 1 PID: 9956 Comm: syz.1.1250 Not tainted syzkaller #0 [ 325.800552][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.810631][ T9956] Call Trace: [ 325.813932][ T9956] [ 325.816883][ T9956] dump_stack_lvl+0x18c/0x250 [ 325.821597][ T9956] ? show_regs_print_info+0x20/0x20 [ 325.826825][ T9956] ? load_image+0x420/0x420 [ 325.831352][ T9956] ? __might_sleep+0xe0/0xe0 [ 325.835971][ T9956] ? __lock_acquire+0x7d80/0x7d80 [ 325.841023][ T9956] should_fail_ex+0x394/0x4c0 [ 325.845730][ T9956] should_failslab+0x9/0x20 [ 325.850259][ T9956] slab_pre_alloc_hook+0x59/0x300 [ 325.855316][ T9956] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 325.861060][ T9956] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 325.866805][ T9956] __kmem_cache_alloc_node+0x53/0x250 [ 325.872199][ T9956] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 325.877925][ T9956] __kmalloc+0xa7/0x240 [ 325.882083][ T9956] tomoyo_realpath_from_path+0xe6/0x5c0 [ 325.887634][ T9956] ? tomoyo_domain+0xd6/0x120 [ 325.892317][ T9956] tomoyo_path_number_perm+0x248/0x5e0 [ 325.897772][ T9956] ? tomoyo_path_number_perm+0x217/0x5e0 [ 325.903408][ T9956] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 325.908867][ T9956] ? ksys_write+0x1d2/0x260 [ 325.913392][ T9956] ? __fget_files+0x28/0x460 [ 325.917991][ T9956] security_file_ioctl+0x70/0xa0 [ 325.922931][ T9956] __se_sys_ioctl+0x48/0x170 [ 325.927519][ T9956] do_syscall_64+0x55/0xb0 [ 325.931933][ T9956] ? clear_bhb_loop+0x40/0x90 [ 325.936600][ T9956] ? clear_bhb_loop+0x40/0x90 [ 325.941270][ T9956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.947164][ T9956] RIP: 0033:0x7f5d9d19de99 [ 325.951579][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.971195][ T9956] RSP: 002b:00007f5d9e074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.979612][ T9956] RAX: ffffffffffffffda RBX: 00007f5d9d425fa0 RCX: 00007f5d9d19de99 [ 325.987581][ T9956] RDX: 0000200000001200 RSI: 0000000000008b26 RDI: 000000000000000c [ 325.995547][ T9956] RBP: 00007f5d9e074090 R08: 0000000000000000 R09: 0000000000000000 [ 326.003514][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.011478][ T9956] R13: 00007f5d9d426038 R14: 00007f5d9d425fa0 R15: 00007ffd5afc10e8 [ 326.019460][ T9956] [ 326.058214][ T9956] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.444293][ T9986] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1258'. [ 327.470139][ T9986] bridge_slave_0: entered allmulticast mode [ 327.522167][ T9989] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1257'. [ 327.687860][ T9994] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1259'. [ 327.697135][ T9994] netlink: get zone limit has 4 unknown bytes [ 329.919139][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1277'. [ 331.257537][T10062] FAULT_INJECTION: forcing a failure. [ 331.257537][T10062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.319345][T10062] CPU: 0 PID: 10062 Comm: syz.3.1285 Not tainted syzkaller #0 [ 331.326858][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 331.336940][T10062] Call Trace: [ 331.340241][T10062] [ 331.343190][T10062] dump_stack_lvl+0x18c/0x250 [ 331.347891][T10062] ? show_regs_print_info+0x20/0x20 [ 331.353090][T10062] ? load_image+0x420/0x420 [ 331.357601][T10062] ? __might_fault+0xaa/0x120 [ 331.362302][T10062] ? __lock_acquire+0x7d80/0x7d80 [ 331.367344][T10062] should_fail_ex+0x394/0x4c0 [ 331.372018][T10062] _copy_from_user+0x2f/0xe0 [ 331.376625][T10062] __sys_bpf+0x23e/0x890 [ 331.380877][T10062] ? bpf_link_show_fdinfo+0x390/0x390 [ 331.386248][T10062] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.392428][T10062] __x64_sys_bpf+0x7c/0x90 [ 331.396839][T10062] do_syscall_64+0x55/0xb0 [ 331.401246][T10062] ? clear_bhb_loop+0x40/0x90 [ 331.405908][T10062] ? clear_bhb_loop+0x40/0x90 [ 331.410589][T10062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.416504][T10062] RIP: 0033:0x7f4f8df9de99 [ 331.420940][T10062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.440559][T10062] RSP: 002b:00007f4f8eea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.448993][T10062] RAX: ffffffffffffffda RBX: 00007f4f8e225fa0 RCX: 00007f4f8df9de99 [ 331.456977][T10062] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000004 [ 331.464955][T10062] RBP: 00007f4f8eea0090 R08: 0000000000000000 R09: 0000000000000000 [ 331.472937][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.480924][T10062] R13: 00007f4f8e226038 R14: 00007f4f8e225fa0 R15: 00007ffc07ffd408 [ 331.488925][T10062] [ 333.634564][T10116] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1304'. [ 334.860189][T10161] syz.3.1318[10161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.860509][T10161] syz.3.1318[10161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.249485][T10168] validate_nla: 5 callbacks suppressed [ 335.249501][T10168] netlink: 'syz.3.1319': attribute type 11 has an invalid length. [ 335.979083][T10188] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1328'. [ 337.328955][T10225] FAULT_INJECTION: forcing a failure. [ 337.328955][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 337.362399][T10225] CPU: 0 PID: 10225 Comm: syz.1.1340 Not tainted syzkaller #0 [ 337.369931][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 337.380010][T10225] Call Trace: [ 337.383310][T10225] [ 337.386256][T10225] dump_stack_lvl+0x18c/0x250 [ 337.390969][T10225] ? show_regs_print_info+0x20/0x20 [ 337.396197][T10225] ? load_image+0x420/0x420 [ 337.400721][T10225] ? __might_sleep+0xe0/0xe0 [ 337.405330][T10225] ? __lock_acquire+0x7d80/0x7d80 [ 337.410374][T10225] should_fail_ex+0x394/0x4c0 [ 337.415080][T10225] should_failslab+0x9/0x20 [ 337.419608][T10225] slab_pre_alloc_hook+0x59/0x300 [ 337.424675][T10225] ? __ns_get_path+0x2e/0x5f0 [ 337.429381][T10225] kmem_cache_alloc_lru+0x4d/0x2b0 [ 337.434524][T10225] ? new_inode_pseudo+0x82/0x1d0 [ 337.439487][T10225] new_inode_pseudo+0x82/0x1d0 [ 337.444285][T10225] __ns_get_path+0x249/0x5f0 [ 337.448909][T10225] ns_get_path+0x54/0x90 [ 337.453169][T10225] proc_ns_get_link+0xf8/0x240 [ 337.457948][T10225] ? proc_ns_instantiate+0xf0/0xf0 [ 337.463079][T10225] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 337.468642][T10225] ? security_inode_follow_link+0xb7/0x100 [ 337.474470][T10225] ? proc_ns_instantiate+0xf0/0xf0 [ 337.479606][T10225] pick_link+0x666/0xdd0 [ 337.483878][T10225] step_into+0xc18/0xee0 [ 337.488141][T10225] ? rcu_read_lock_any_held+0xb4/0x140 [ 337.493617][T10225] ? rcu_read_lock_bh_held+0x100/0x100 [ 337.499094][T10225] ? set_root+0x3a0/0x3a0 [ 337.503437][T10225] ? d_splice_alias+0x114/0x330 [ 337.508313][T10225] path_openat+0x1656/0x3270 [ 337.512949][T10225] ? do_filp_open+0x430/0x430 [ 337.517657][T10225] do_filp_open+0x1f2/0x430 [ 337.522184][T10225] ? vfs_tmpfile+0x480/0x480 [ 337.526813][T10225] ? _raw_spin_unlock+0x28/0x40 [ 337.531681][T10225] ? alloc_fd+0x590/0x640 [ 337.536038][T10225] do_sys_openat2+0x134/0x1d0 [ 337.540734][T10225] ? perf_trace_preemptirq_template+0x269/0x330 [ 337.546991][T10225] ? do_sys_open+0xe0/0xe0 [ 337.551421][T10225] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.557421][T10225] ? lock_chain_count+0x20/0x20 [ 337.562290][T10225] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.568302][T10225] __x64_sys_openat+0x139/0x160 [ 337.573186][T10225] do_syscall_64+0x55/0xb0 [ 337.577637][T10225] ? clear_bhb_loop+0x40/0x90 [ 337.582347][T10225] ? clear_bhb_loop+0x40/0x90 [ 337.587043][T10225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.592956][T10225] RIP: 0033:0x7f5d9d15e6ce [ 337.597386][T10225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.617011][T10225] RSP: 002b:00007f5d9e073ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 337.625455][T10225] RAX: ffffffffffffffda RBX: 00007f5d9e0746c0 RCX: 00007f5d9d15e6ce [ 337.633452][T10225] RDX: 0000000000000002 RSI: 00007f5d9e073f90 RDI: ffffffffffffff9c [ 337.641538][T10225] RBP: 00007f5d9e074090 R08: 0000000000000000 R09: 0000000000000000 [ 337.649528][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.657519][T10225] R13: 00007f5d9d426038 R14: 00007f5d9d425fa0 R15: 00007ffd5afc10e8 [ 337.665535][T10225] [ 337.736523][T10232] FAULT_INJECTION: forcing a failure. [ 337.736523][T10232] name failslab, interval 1, probability 0, space 0, times 0 [ 337.795858][T10232] CPU: 1 PID: 10232 Comm: syz.0.1341 Not tainted syzkaller #0 [ 337.803418][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 337.813534][T10232] Call Trace: [ 337.816855][T10232] [ 337.819824][T10232] dump_stack_lvl+0x18c/0x250 [ 337.824571][T10232] ? show_regs_print_info+0x20/0x20 [ 337.829832][T10232] ? load_image+0x420/0x420 [ 337.834395][T10232] ? __might_sleep+0xe0/0xe0 [ 337.839034][T10232] ? __lock_acquire+0x7d80/0x7d80 [ 337.844124][T10232] should_fail_ex+0x394/0x4c0 [ 337.848864][T10232] should_failslab+0x9/0x20 [ 337.853417][T10232] slab_pre_alloc_hook+0x59/0x300 [ 337.858498][T10232] ? vfs_write+0x5de/0x9a0 [ 337.862971][T10232] kmem_cache_alloc+0x5a/0x2c0 [ 337.867779][T10232] ? getname_flags+0xbb/0x500 [ 337.872524][T10232] getname_flags+0xbb/0x500 [ 337.877094][T10232] do_sys_openat2+0xda/0x1d0 [ 337.881743][T10232] ? do_sys_open+0xe0/0xe0 [ 337.886212][T10232] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.892253][T10232] ? lock_chain_count+0x20/0x20 [ 337.897172][T10232] __x64_sys_openat+0x139/0x160 [ 337.902093][T10232] do_syscall_64+0x55/0xb0 [ 337.906559][T10232] ? clear_bhb_loop+0x40/0x90 [ 337.911278][T10232] ? clear_bhb_loop+0x40/0x90 [ 337.916015][T10232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.921960][T10232] RIP: 0033:0x7f1a1499de99 [ 337.926431][T10232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.946698][T10232] RSP: 002b:00007f1a158c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 337.955182][T10232] RAX: ffffffffffffffda RBX: 00007f1a14c25fa0 RCX: 00007f1a1499de99 [ 337.963210][T10232] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 337.971240][T10232] RBP: 00007f1a158c0090 R08: 0000000000000000 R09: 0000000000000000 [ 337.979268][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.987292][T10232] R13: 00007f1a14c26038 R14: 00007f1a14c25fa0 R15: 00007ffe9aaefda8 [ 337.995377][T10232] [ 339.584003][T10257] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1351'. [ 339.752925][T10265] netlink: 'syz.3.1353': attribute type 153 has an invalid length. [ 339.798732][T10265] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1353'. [ 340.931351][T10291] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1362'. [ 340.960654][T10294] sit0: entered allmulticast mode [ 341.015673][T10294] sit0: entered promiscuous mode [ 341.161591][T10305] netlink: 'syz.1.1366': attribute type 9 has an invalid length. [ 341.194707][T10305] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1366'. [ 341.275221][T10309] netlink: 'syz.1.1366': attribute type 9 has an invalid length. [ 341.298638][T10309] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1366'. [ 341.606292][T10319] tap0: tun_chr_ioctl cmd 35108 [ 343.209111][T10337] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1375'. [ 343.361792][T10338] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.493950][T10341] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1376'. [ 343.559334][T10341] bridge_slave_1: entered promiscuous mode [ 343.661730][T10349] FAULT_INJECTION: forcing a failure. [ 343.661730][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 343.686883][T10349] CPU: 1 PID: 10349 Comm: syz.2.1379 Not tainted syzkaller #0 [ 343.694399][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.704471][T10349] Call Trace: [ 343.707755][T10349] [ 343.710689][T10349] dump_stack_lvl+0x18c/0x250 [ 343.715376][T10349] ? show_regs_print_info+0x20/0x20 [ 343.720580][T10349] ? load_image+0x420/0x420 [ 343.725082][T10349] ? __lock_acquire+0x7d80/0x7d80 [ 343.730110][T10349] should_fail_ex+0x394/0x4c0 [ 343.734791][T10349] should_failslab+0x9/0x20 [ 343.739293][T10349] slab_pre_alloc_hook+0x59/0x300 [ 343.744340][T10349] ? lock_chain_count+0x20/0x20 [ 343.749184][T10349] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 343.754554][T10349] __kmem_cache_alloc_node+0x53/0x250 [ 343.759928][T10349] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 343.765324][T10349] kmalloc_trace+0x2a/0xe0 [ 343.769744][T10349] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 343.774956][T10349] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 343.780335][T10349] mptcp_sendmsg+0x144c/0x1670 [ 343.785095][T10349] ? aa_sk_perm+0x83c/0x970 [ 343.789600][T10349] ? aa_sk_perm+0x83c/0x970 [ 343.794143][T10349] ? aa_af_perm+0x330/0x330 [ 343.798727][T10349] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 343.805139][T10349] ? mptcp_shutdown+0x80/0x80 [ 343.809816][T10349] ? sock_rps_record_flow+0x19/0x3f0 [ 343.815099][T10349] ? inet_sendmsg+0xce/0x2a0 [ 343.819685][T10349] ? inet_send_prepare+0x250/0x250 [ 343.824795][T10349] ____sys_sendmsg+0x61b/0x980 [ 343.829563][T10349] ? __asan_memset+0x22/0x40 [ 343.834151][T10349] ? __sys_sendmsg_sock+0x30/0x30 [ 343.839172][T10349] ? __import_iovec+0x3fa/0x850 [ 343.844027][T10349] ? import_iovec+0x73/0xa0 [ 343.848538][T10349] ___sys_sendmsg+0x2a6/0x360 [ 343.853216][T10349] ? get_pid_task+0x20/0x1e0 [ 343.857807][T10349] ? __sys_sendmsg+0x2b0/0x2b0 [ 343.862591][T10349] ? __lock_acquire+0x7d80/0x7d80 [ 343.867635][T10349] __se_sys_sendmsg+0x1d0/0x2c0 [ 343.872492][T10349] ? __x64_sys_sendmsg+0x80/0x80 [ 343.877462][T10349] ? lockdep_hardirqs_on+0x98/0x150 [ 343.882671][T10349] do_syscall_64+0x55/0xb0 [ 343.887088][T10349] ? clear_bhb_loop+0x40/0x90 [ 343.891774][T10349] ? clear_bhb_loop+0x40/0x90 [ 343.896443][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.902337][T10349] RIP: 0033:0x7f9d34d9de99 [ 343.906748][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.926349][T10349] RSP: 002b:00007f9d35d4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.934760][T10349] RAX: ffffffffffffffda RBX: 00007f9d35025fa0 RCX: 00007f9d34d9de99 [ 343.942744][T10349] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000003 [ 343.950721][T10349] RBP: 00007f9d35d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.958701][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.966685][T10349] R13: 00007f9d35026038 R14: 00007f9d35025fa0 R15: 00007fff6b6c9478 [ 343.974680][T10349] [ 344.094888][T10352] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1381'. [ 344.333102][T10369] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.921376][T10380] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1390'. [ 345.054064][T10380] team0: Port device team_slave_0 removed [ 345.095096][T10380] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 345.392730][T10384] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1388'. [ 345.419599][T10384] bridge_slave_1: entered promiscuous mode [ 347.068688][T10434] netlink: 'syz.1.1403': attribute type 11 has an invalid length. [ 347.102849][T10436] netlink: 'syz.2.1405': attribute type 6 has an invalid length. [ 347.111683][T10436] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1405'. [ 347.599730][T10446] bridge_slave_0: mtu less than device minimum [ 349.336092][T10457] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.699244][T10483] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1415'. [ 350.929452][T10508] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1424'. [ 351.670314][T10520] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1426'. [ 352.039084][ T3424] wlan1: Trigger new scan to find an IBSS to join [ 352.907593][T10549] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1438'. [ 353.139773][T10556] netlink: 22967 bytes leftover after parsing attributes in process `syz.0.1440'. [ 353.559519][T10571] netlink: 'syz.2.1445': attribute type 10 has an invalid length. [ 353.593379][T10571] team0: Device nlmon0 is of different type [ 353.690278][T10569] .¿: renamed from vlan0 (while UP) [ 354.073677][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 354.156226][T10593] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1453'. [ 354.322897][T10597] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 354.387337][T10602] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1457'. [ 354.425554][T10597] team0: Device hsr_slave_0 failed to register rx_handler [ 354.460443][T10602] openvswitch: netlink: IP tunnel dst address not specified [ 354.614689][T10608] netlink: 'syz.2.1462': attribute type 21 has an invalid length. [ 354.642687][T10597] syz.1.1457 (10597) used greatest stack depth: 19240 bytes left [ 355.565478][T10634] netlink: 'syz.0.1471': attribute type 10 has an invalid length. [ 355.573915][T10634] hsr0: entered promiscuous mode [ 355.580173][T10634] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.039630][ T8304] wlan1: Trigger new scan to find an IBSS to join [ 357.877204][T10679] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1484'. [ 358.041124][ T8694] wlan1: Creating new IBSS network, BSSID be:06:6b:14:d9:49 [ 359.032760][T10706] netlink: 'syz.0.1492': attribute type 12 has an invalid length. [ 359.044727][T10706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1492'. [ 364.244789][T10781] netlink: 'syz.3.1516': attribute type 22 has an invalid length. [ 364.284156][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 365.141357][T10802] netlink: 'syz.2.1523': attribute type 33 has an invalid length. [ 365.161720][T10802] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1523'. [ 365.173490][T10802] `: renamed from ip6tnl0 (while UP) [ 365.194657][T10802] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 365.210732][T10804] netlink: 'syz.3.1524': attribute type 4 has an invalid length. [ 365.220235][T10804] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1524'. [ 365.232210][T10804] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 366.389256][T10845] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1535'. [ 366.432476][T10851] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1537'. [ 366.486813][T10854] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1538'. [ 366.497617][T10854] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1538'. [ 366.570085][T10857] vcan0: entered allmulticast mode [ 366.584276][T10857] netlink: 'syz.3.1538': attribute type 10 has an invalid length. [ 366.612499][T10857] veth0_macvtap: left promiscuous mode [ 366.714158][T10860] netlink: 'syz.1.1539': attribute type 10 has an invalid length. [ 366.733068][T10860] team0: Device wg1 is of different type [ 366.753831][T10860] syz.1.1539 (10860) used greatest stack depth: 19176 bytes left [ 366.866921][T10862] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.740370][T10894] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1549'. [ 368.408123][T10907] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1552'. [ 368.862046][T10934] FAULT_INJECTION: forcing a failure. [ 368.862046][T10934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.875881][T10934] CPU: 1 PID: 10934 Comm: syz.3.1561 Not tainted syzkaller #0 [ 368.883372][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 368.893445][T10934] Call Trace: [ 368.896721][T10934] [ 368.899647][T10934] dump_stack_lvl+0x18c/0x250 [ 368.904471][T10934] ? show_regs_print_info+0x20/0x20 [ 368.909671][T10934] ? load_image+0x420/0x420 [ 368.914193][T10934] ? __might_fault+0xaa/0x120 [ 368.918984][T10934] ? __lock_acquire+0x7d80/0x7d80 [ 368.924017][T10934] ? raw_sendmsg+0x155e/0x1ba0 [ 368.928809][T10934] ? __virt_addr_valid+0x10c/0x380 [ 368.933935][T10934] should_fail_ex+0x394/0x4c0 [ 368.938639][T10934] _copy_from_user+0x2f/0xe0 [ 368.943225][T10934] csum_and_copy_from_iter+0x660/0x1480 [ 368.948782][T10934] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 368.954417][T10934] ? __kmem_cache_alloc_node+0x194/0x250 [ 368.960103][T10934] ? __alloc_skb+0x138/0x2c0 [ 368.964799][T10934] ? rcu_is_watching+0x15/0xb0 [ 368.969575][T10934] ip_generic_getfrag+0x163/0x2f0 [ 368.974629][T10934] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 368.979484][T10934] ? raw_getfrag+0x11d/0x390 [ 368.984083][T10934] ? __alloc_skb+0x1b2/0x2c0 [ 368.988681][T10934] ? skb_put+0x112/0x210 [ 368.992943][T10934] __ip_append_data+0x2f3b/0x3bf0 [ 368.997972][T10934] ? trace_call_bpf+0xc3/0x6c0 [ 369.002778][T10934] ? raw_send_hdrinc+0x1150/0x1150 [ 369.007890][T10934] ? mark_lock+0x94/0x320 [ 369.012223][T10934] ? ip_setup_cork+0x840/0x840 [ 369.016984][T10934] ? ipv4_mtu+0x313/0x430 [ 369.021385][T10934] ? ip_setup_cork+0x527/0x840 [ 369.026160][T10934] ? lockdep_hardirqs_on+0x98/0x150 [ 369.031371][T10934] ip_append_data+0x10d/0x180 [ 369.036050][T10934] ? raw_send_hdrinc+0x1150/0x1150 [ 369.041163][T10934] raw_sendmsg+0x155e/0x1ba0 [ 369.045772][T10934] ? compat_raw_ioctl+0x70/0x70 [ 369.050631][T10934] ? aa_sk_perm+0x83c/0x970 [ 369.055180][T10934] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 369.061599][T10934] ? aa_sock_msg_perm+0x94/0x150 [ 369.066539][T10934] ? sock_rps_record_flow+0x19/0x3f0 [ 369.071848][T10934] ? inet_sendmsg+0x7e/0x2a0 [ 369.076431][T10934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 369.081730][T10934] ? inet_send_prepare+0x250/0x250 [ 369.086842][T10934] ____sys_sendmsg+0x61b/0x980 [ 369.091685][T10934] ? __sys_sendmsg_sock+0x30/0x30 [ 369.096703][T10934] ? __import_iovec+0x3fa/0x850 [ 369.101559][T10934] ? import_iovec+0x73/0xa0 [ 369.106061][T10934] ___sys_sendmsg+0x2a6/0x360 [ 369.110741][T10934] ? __sys_sendmsg+0x2b0/0x2b0 [ 369.115520][T10934] ? trace_call_bpf+0xc3/0x6c0 [ 369.120298][T10934] __se_sys_sendmsg+0x1d0/0x2c0 [ 369.125145][T10934] ? perf_trace_preemptirq_template+0x269/0x330 [ 369.131385][T10934] ? __x64_sys_sendmsg+0x80/0x80 [ 369.136333][T10934] ? lockdep_hardirqs_on+0x98/0x150 [ 369.141535][T10934] do_syscall_64+0x55/0xb0 [ 369.145949][T10934] ? clear_bhb_loop+0x40/0x90 [ 369.150708][T10934] ? clear_bhb_loop+0x40/0x90 [ 369.155399][T10934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.161367][T10934] RIP: 0033:0x7f4f8df9de99 [ 369.165792][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.185400][T10934] RSP: 002b:00007f4f8eea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.193814][T10934] RAX: ffffffffffffffda RBX: 00007f4f8e225fa0 RCX: 00007f4f8df9de99 [ 369.201781][T10934] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 369.209760][T10934] RBP: 00007f4f8eea0090 R08: 0000000000000000 R09: 0000000000000000 [ 369.217733][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.225705][T10934] R13: 00007f4f8e226038 R14: 00007f4f8e225fa0 R15: 00007ffc07ffd408 [ 369.233690][T10934] [ 369.716192][T10949] netlink: 'syz.0.1567': attribute type 10 has an invalid length. [ 369.735712][T10949] veth1_macvtap: left promiscuous mode [ 369.840337][T10950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.863820][T10950] netlink: 'syz.0.1567': attribute type 9 has an invalid length. [ 369.872999][T10950] netlink: 181676 bytes leftover after parsing attributes in process `syz.0.1567'. [ 369.946155][T10956] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1569'. [ 370.123174][T10960] netlink: 'syz.0.1570': attribute type 46 has an invalid length. [ 370.132537][T10960] netlink: 'syz.0.1570': attribute type 46 has an invalid length. [ 370.279826][T10965] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 370.288221][T10965] netlink: 'syz.0.1572': attribute type 2 has an invalid length. [ 370.296670][T10965] netlink: 'syz.0.1572': attribute type 2 has an invalid length. [ 370.305752][T10965] netlink: 'syz.0.1572': attribute type 3 has an invalid length. [ 370.314004][T10965] netlink: 'syz.0.1572': attribute type 4 has an invalid length. [ 370.336967][T10965] netlink: 'syz.0.1572': attribute type 5 has an invalid length. [ 370.353653][T10965] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1572'. [ 370.987733][T10987] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1576'. [ 371.086396][T10987] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1576'. [ 371.181616][T10987] vcan0: entered allmulticast mode [ 371.219213][T10987] veth0_macvtap: left promiscuous mode [ 371.466130][T10992] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1578'. [ 371.700460][T11002] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1580'. [ 371.914858][T11008] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1590'. [ 372.294494][T11017] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1584'. [ 373.395823][T11043] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1592'. [ 373.501845][T11049] vcan0: entered allmulticast mode [ 373.525971][T11049] veth0_macvtap: left promiscuous mode [ 374.389970][T11076] veth1_macvtap: left allmulticast mode [ 374.398291][T11076] veth1_macvtap: left promiscuous mode [ 374.664972][T11077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.952082][T11085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.270267][T11105] __nla_validate_parse: 7 callbacks suppressed [ 375.270304][T11105] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1611'. [ 375.512072][T11114] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1612'. [ 375.521348][T11114] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1612'. [ 375.879522][T11122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1614'. [ 375.890297][T11122] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1614'. [ 375.955488][T11124] vcan0: entered allmulticast mode [ 375.966743][T11124] validate_nla: 17 callbacks suppressed [ 375.966756][T11124] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 375.981841][T11124] veth0_macvtap: left promiscuous mode [ 376.992926][T11139] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 377.020779][T11139] veth1_macvtap: left promiscuous mode [ 377.091964][T11143] FAULT_INJECTION: forcing a failure. [ 377.091964][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 377.104929][T11143] CPU: 1 PID: 11143 Comm: syz.1.1621 Not tainted syzkaller #0 [ 377.112416][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 377.122488][T11143] Call Trace: [ 377.125779][T11143] [ 377.128728][T11143] dump_stack_lvl+0x18c/0x250 [ 377.133439][T11143] ? show_regs_print_info+0x20/0x20 [ 377.138669][T11143] ? load_image+0x420/0x420 [ 377.143210][T11143] ? __might_sleep+0xe0/0xe0 [ 377.147862][T11143] ? __lock_acquire+0x7d80/0x7d80 [ 377.152914][T11143] should_fail_ex+0x394/0x4c0 [ 377.157621][T11143] should_failslab+0x9/0x20 [ 377.162156][T11143] slab_pre_alloc_hook+0x59/0x300 [ 377.167212][T11143] ? __request_module+0x2ed/0x600 [ 377.172257][T11143] ? __request_module+0x2ed/0x600 [ 377.177304][T11143] __kmem_cache_alloc_node+0x53/0x250 [ 377.182712][T11143] ? __request_module+0x2ed/0x600 [ 377.187757][T11143] __kmalloc_node_track_caller+0xa4/0x230 [ 377.193512][T11143] kstrdup+0x3b/0x80 [ 377.197436][T11143] __request_module+0x2ed/0x600 [ 377.202314][T11143] ? module_enforce_rwx_sections+0x150/0x150 [ 377.208335][T11143] ? can_get_proto+0x1d/0x280 [ 377.213166][T11143] ? can_get_proto+0x1d/0x280 [ 377.217871][T11143] ? can_get_proto+0x234/0x280 [ 377.222667][T11143] can_create+0x9b/0x4e0 [ 377.226939][T11143] __sock_create+0x49e/0x940 [ 377.231562][T11143] __sys_socketpair+0x1c1/0x550 [ 377.236444][T11143] __x64_sys_socketpair+0x9b/0xb0 [ 377.241496][T11143] do_syscall_64+0x55/0xb0 [ 377.245936][T11143] ? clear_bhb_loop+0x40/0x90 [ 377.250629][T11143] ? clear_bhb_loop+0x40/0x90 [ 377.255326][T11143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.261251][T11143] RIP: 0033:0x7f5d9d19de99 [ 377.265686][T11143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.285313][T11143] RSP: 002b:00007f5d9e074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 377.293808][T11143] RAX: ffffffffffffffda RBX: 00007f5d9d425fa0 RCX: 00007f5d9d19de99 [ 377.301799][T11143] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000001d [ 377.309794][T11143] RBP: 00007f5d9e074090 R08: 0000000000000000 R09: 0000000000000000 [ 377.317788][T11143] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 377.325779][T11143] R13: 00007f5d9d426038 R14: 00007f5d9d425fa0 R15: 00007ffd5afc10e8 [ 377.333819][T11143] [ 377.352144][T11143] can: request_module (can-proto-0) failed. [ 377.654258][T11155] netlink: 'syz.0.1630': attribute type 10 has an invalid length. [ 377.701281][T11157] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1624'. [ 377.755766][T11157] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1624'. [ 377.912130][T11160] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1625'. [ 378.763953][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.770503][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.890215][T11178] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1629'. [ 380.360281][T11208] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1638'. [ 380.380377][T11208] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1638'. [ 380.795732][T11219] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1641'. [ 381.406191][T11232] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1643'. [ 381.806265][T11237] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1645'. [ 381.865921][T11243] FAULT_INJECTION: forcing a failure. [ 381.865921][T11243] name failslab, interval 1, probability 0, space 0, times 0 [ 381.881251][T11243] CPU: 0 PID: 11243 Comm: syz.3.1648 Not tainted syzkaller #0 [ 381.888745][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.898824][T11243] Call Trace: [ 381.902147][T11243] [ 381.905099][T11243] dump_stack_lvl+0x18c/0x250 [ 381.909812][T11243] ? show_regs_print_info+0x20/0x20 [ 381.915047][T11243] ? load_image+0x420/0x420 [ 381.919586][T11243] ? __might_sleep+0xe0/0xe0 [ 381.924203][T11243] ? __lock_acquire+0x7d80/0x7d80 [ 381.929254][T11243] should_fail_ex+0x394/0x4c0 [ 381.933959][T11243] should_failslab+0x9/0x20 [ 381.938496][T11243] slab_pre_alloc_hook+0x59/0x300 [ 381.943545][T11243] ? percpu_ref_put+0x12/0x100 [ 381.948327][T11243] ? apparmor_sk_alloc_security+0x77/0x100 [ 381.954166][T11243] __kmem_cache_alloc_node+0x53/0x250 [ 381.959575][T11243] ? apparmor_sk_alloc_security+0x77/0x100 [ 381.965415][T11243] kmalloc_trace+0x2a/0xe0 [ 381.969864][T11243] apparmor_sk_alloc_security+0x77/0x100 [ 381.975527][T11243] security_sk_alloc+0x6e/0xa0 [ 381.980349][T11243] sk_prot_alloc+0x101/0x210 [ 381.984968][T11243] sk_alloc+0x3a/0x350 [ 381.989067][T11243] inet_create+0x7a9/0xfe0 [ 381.993502][T11243] ? inet_create+0x9d/0xfe0 [ 381.998029][T11243] __sock_create+0x49e/0x940 [ 382.002653][T11243] udp_sock_create4+0xc6/0x480 [ 382.007513][T11243] ? free_zapped_rcu+0x250/0x250 [ 382.012472][T11243] ? erspan_exit_batch_net+0x30/0x30 [ 382.017791][T11243] rxrpc_lookup_local+0xd16/0x1700 [ 382.023016][T11243] ? rxrpc_local_dont_fragment+0x70/0x70 [ 382.028688][T11243] ? __local_bh_enable_ip+0x13a/0x1c0 [ 382.034095][T11243] ? __local_bh_enable_ip+0x13a/0x1c0 [ 382.039501][T11243] ? do_raw_spin_unlock+0x121/0x230 [ 382.044732][T11243] rxrpc_sendmsg+0x2f3/0x5b0 [ 382.049421][T11243] ? rxrpc_getsockopt+0x150/0x150 [ 382.054493][T11243] ____sys_sendmsg+0x61b/0x980 [ 382.059294][T11243] ? __sys_sendmsg_sock+0x30/0x30 [ 382.064334][T11243] ? __import_iovec+0x3fa/0x850 [ 382.069200][T11243] ? import_iovec+0x73/0xa0 [ 382.073738][T11243] ___sys_sendmsg+0x2a6/0x360 [ 382.078457][T11243] ? __sys_sendmsg+0x2b0/0x2b0 [ 382.083255][T11243] ? perf_trace_preemptirq_template+0x269/0x330 [ 382.089568][T11243] __se_sys_sendmsg+0x1d0/0x2c0 [ 382.094456][T11243] ? perf_trace_preemptirq_template+0x269/0x330 [ 382.100733][T11243] ? __x64_sys_sendmsg+0x80/0x80 [ 382.105717][T11243] ? lockdep_hardirqs_on+0x98/0x150 [ 382.110948][T11243] do_syscall_64+0x55/0xb0 [ 382.115384][T11243] ? clear_bhb_loop+0x40/0x90 [ 382.120077][T11243] ? clear_bhb_loop+0x40/0x90 [ 382.124773][T11243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.130692][T11243] RIP: 0033:0x7f4f8df9de99 [ 382.135131][T11243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.154767][T11243] RSP: 002b:00007f4f8eea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.163215][T11243] RAX: ffffffffffffffda RBX: 00007f4f8e225fa0 RCX: 00007f4f8df9de99 [ 382.171215][T11243] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 382.179214][T11243] RBP: 00007f4f8eea0090 R08: 0000000000000000 R09: 0000000000000000 [ 382.187212][T11243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.195217][T11243] R13: 00007f4f8e226038 R14: 00007f4f8e225fa0 R15: 00007ffc07ffd408 [ 382.203314][T11243] [ 382.633326][T11261] hsr0: left promiscuous mode [ 383.527486][T11274] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1656'. [ 383.583762][T11280] netlink: 'syz.0.1664': attribute type 10 has an invalid length. [ 383.934929][T11289] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1660'. [ 384.867532][T11321] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1668'. [ 384.886717][T11321] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1668'. [ 384.953275][T11323] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1669'. [ 384.985562][T11326] netlink: 'syz.0.1668': attribute type 10 has an invalid length. [ 385.135086][T11330] netlink: 'syz.3.1671': attribute type 10 has an invalid length. [ 385.427397][T11337] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1674'. [ 385.440851][T11337] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1674'. [ 385.514030][T11340] netlink: 'syz.1.1674': attribute type 10 has an invalid length. [ 385.805217][T11346] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1677'. [ 385.882458][T11350] netlink: 'syz.3.1679': attribute type 10 has an invalid length. [ 385.892504][T11350] veth1_macvtap: left promiscuous mode [ 386.068240][T11354] netlink: 'syz.3.1681': attribute type 10 has an invalid length. [ 386.163777][T11358] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1682'. [ 386.373630][T11366] netlink: 'syz.1.1683': attribute type 9 has an invalid length. [ 386.388234][T11366] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1683'. [ 387.216887][T11381] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1688'. [ 387.225354][T11384] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1690'. [ 387.235533][T11384] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1690'. [ 387.273359][T11386] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 387.302969][T11387] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 387.332257][T11390] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1691'. [ 387.342417][T11390] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1691'. [ 387.405556][T11392] netlink: 'syz.1.1691': attribute type 10 has an invalid length. [ 388.154648][ T51] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 389.440351][T11426] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 389.782992][T11435] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 389.986619][T11443] FAULT_INJECTION: forcing a failure. [ 389.986619][T11443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.000298][T11443] CPU: 0 PID: 11443 Comm: syz.2.1706 Not tainted syzkaller #0 [ 390.007779][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 390.017856][T11443] Call Trace: [ 390.021136][T11443] [ 390.024056][T11443] dump_stack_lvl+0x18c/0x250 [ 390.028741][T11443] ? show_regs_print_info+0x20/0x20 [ 390.033955][T11443] ? load_image+0x420/0x420 [ 390.038471][T11443] ? __might_fault+0xaa/0x120 [ 390.043169][T11443] ? __lock_acquire+0x7d80/0x7d80 [ 390.048217][T11443] should_fail_ex+0x394/0x4c0 [ 390.052928][T11443] _copy_from_user+0x2f/0xe0 [ 390.057516][T11443] ___sys_sendmsg+0x1c7/0x360 [ 390.062192][T11443] ? get_pid_task+0x20/0x1e0 [ 390.066808][T11443] ? __sys_sendmsg+0x2b0/0x2b0 [ 390.071608][T11443] ? __lock_acquire+0x7d80/0x7d80 [ 390.076636][T11443] __se_sys_sendmsg+0x1d0/0x2c0 [ 390.081521][T11443] ? __x64_sys_sendmsg+0x80/0x80 [ 390.086479][T11443] ? lockdep_hardirqs_on+0x98/0x150 [ 390.091673][T11443] do_syscall_64+0x55/0xb0 [ 390.096122][T11443] ? clear_bhb_loop+0x40/0x90 [ 390.100818][T11443] ? clear_bhb_loop+0x40/0x90 [ 390.105494][T11443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.111391][T11443] RIP: 0033:0x7f9d34d9de99 [ 390.115797][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.135413][T11443] RSP: 002b:00007f9d35d4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.143828][T11443] RAX: ffffffffffffffda RBX: 00007f9d35025fa0 RCX: 00007f9d34d9de99 [ 390.151818][T11443] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 390.159795][T11443] RBP: 00007f9d35d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 390.167970][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.175956][T11443] R13: 00007f9d35026038 R14: 00007f9d35025fa0 R15: 00007fff6b6c9478 [ 390.183932][T11443] [ 390.283675][T11447] netlink: 'syz.3.1708': attribute type 5 has an invalid length. [ 390.340027][T11447] netlink: 'syz.3.1708': attribute type 33 has an invalid length. [ 390.348406][T11447] `: renamed from ip6tnl0 (while UP) [ 390.378261][T11447] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 391.011113][T11477] __nla_validate_parse: 8 callbacks suppressed [ 391.011133][T11477] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1716'. [ 391.028437][T11477] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1716'. [ 391.057582][T11479] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1717'. [ 391.094092][T11480] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 391.244467][T11486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1719'. [ 391.255247][T11486] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1719'. [ 391.317984][T11489] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 392.152439][T11495] netlink: 'syz.3.1722': attribute type 9 has an invalid length. [ 392.173075][T11495] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1722'. [ 392.230897][T11491] ------------[ cut here ]------------ [ 392.236826][T11491] WARNING: CPU: 1 PID: 11491 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 392.246983][T11491] Modules linked in: [ 392.252092][T11491] CPU: 1 PID: 11491 Comm: syz.0.1721 Not tainted syzkaller #0 [ 392.260005][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 392.270438][T11491] RIP: 0010:perf_pending_task+0x357/0x480 [ 392.276204][T11491] Code: e8 9e d0 d5 ff 84 db 75 10 e8 05 ce d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cd d5 ff e8 b0 85 4f ff eb e9 e8 e9 cd d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 392.298612][T11491] RSP: 0018:ffffc9000b57f9c8 EFLAGS: 00010293 [ 392.305890][T11491] RAX: ffffffff81b11787 RBX: ffff88805c690468 RCX: ffff888023b19e00 [ 392.313971][T11491] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 392.322081][T11491] RBP: ffff88805c690228 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 392.330124][T11491] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff888023b19e00 [ 392.338131][T11491] R13: ffff8880237f0530 R14: 0000000000000000 R15: 1ffff1100b8d2045 [ 392.346294][T11491] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 392.355531][T11491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.362255][T11491] CR2: 00007f1a158c0990 CR3: 000000001cb3f000 CR4: 00000000003506e0 [ 392.370320][T11491] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 392.378322][T11491] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 392.386375][T11491] Call Trace: [ 392.389734][T11491] [ 392.392685][T11491] task_work_run+0x1d4/0x260 [ 392.397308][T11491] ? task_work_cancel+0x220/0x220 [ 392.402448][T11491] do_exit+0x986/0x2530 [ 392.406973][T11491] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 392.413154][T11491] ? put_task_struct+0xc0/0xc0 [ 392.417962][T11491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.424209][T11491] ? lockdep_hardirqs_on+0x98/0x150 [ 392.429515][T11491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.435764][T11491] do_group_exit+0x22d/0x2f0 [ 392.440609][T11491] get_signal+0x12a6/0x1390 [ 392.445173][T11491] arch_do_signal_or_restart+0xc2/0x7b0 [ 392.450902][T11491] ? mutex_unlock+0x10/0x10 [ 392.455520][T11491] ? get_sigframe_size+0x20/0x20 [ 392.460597][T11491] ? ksys_write+0x201/0x260 [ 392.465142][T11491] ? exit_to_user_mode_loop+0x3b/0x110 [ 392.470714][T11491] exit_to_user_mode_loop+0x70/0x110 [ 392.476040][T11491] exit_to_user_mode_prepare+0xee/0x180 [ 392.481672][T11491] syscall_exit_to_user_mode+0x1a/0x50 [ 392.487174][T11491] do_syscall_64+0x61/0xb0 [ 392.491687][T11491] ? clear_bhb_loop+0x40/0x90 [ 392.496398][T11491] ? clear_bhb_loop+0x40/0x90 [ 392.501210][T11491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.507447][T11491] RIP: 0033:0x7f1a1499de99 [ 392.511925][T11491] Code: Unable to access opcode bytes at 0x7f1a1499de6f. [ 392.519017][T11491] RSP: 002b:00007f1a158c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.527464][T11491] RAX: 0000000000000012 RBX: 00007f1a14c25fa0 RCX: 00007f1a1499de99 [ 392.535533][T11491] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 392.543575][T11491] RBP: 00007f1a14a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 392.551637][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.559716][T11491] R13: 00007f1a14c26038 R14: 00007f1a14c25fa0 R15: 00007ffe9aaefda8 [ 392.567736][T11491] [ 392.570836][T11491] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 392.578136][T11491] CPU: 1 PID: 11491 Comm: syz.0.1721 Not tainted syzkaller #0 [ 392.585615][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 392.595692][T11491] Call Trace: [ 392.598987][T11491] [ 392.601937][T11491] dump_stack_lvl+0x18c/0x250 [ 392.606651][T11491] ? show_regs_print_info+0x20/0x20 [ 392.611881][T11491] ? load_image+0x420/0x420 [ 392.616414][T11491] panic+0x2ca/0x720 [ 392.620324][T11491] ? bpf_jit_dump+0xd0/0xd0 [ 392.624864][T11491] __warn+0x2e0/0x470 [ 392.628869][T11491] ? perf_pending_task+0x357/0x480 [ 392.634012][T11491] ? perf_pending_task+0x357/0x480 [ 392.639157][T11491] report_bug+0x2be/0x4f0 [ 392.643539][T11491] ? perf_pending_task+0x357/0x480 [ 392.648682][T11491] ? perf_pending_task+0x357/0x480 [ 392.653824][T11491] ? perf_pending_task+0x359/0x480 [ 392.658964][T11491] handle_bug+0xcf/0x120 [ 392.663270][T11491] exc_invalid_op+0x1a/0x50 [ 392.667797][T11491] asm_exc_invalid_op+0x1a/0x20 [ 392.672676][T11491] RIP: 0010:perf_pending_task+0x357/0x480 [ 392.678423][T11491] Code: e8 9e d0 d5 ff 84 db 75 10 e8 05 ce d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cd d5 ff e8 b0 85 4f ff eb e9 e8 e9 cd d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 392.698055][T11491] RSP: 0018:ffffc9000b57f9c8 EFLAGS: 00010293 [ 392.704157][T11491] RAX: ffffffff81b11787 RBX: ffff88805c690468 RCX: ffff888023b19e00 [ 392.712150][T11491] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 392.720120][T11491] RBP: ffff88805c690228 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 392.728112][T11491] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff888023b19e00 [ 392.736077][T11491] R13: ffff8880237f0530 R14: 0000000000000000 R15: 1ffff1100b8d2045 [ 392.744058][T11491] ? perf_pending_task+0x357/0x480 [ 392.749178][T11491] ? perf_pending_task+0x357/0x480 [ 392.754297][T11491] task_work_run+0x1d4/0x260 [ 392.758887][T11491] ? task_work_cancel+0x220/0x220 [ 392.763913][T11491] do_exit+0x986/0x2530 [ 392.768087][T11491] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 392.774095][T11491] ? put_task_struct+0xc0/0xc0 [ 392.778883][T11491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.785075][T11491] ? lockdep_hardirqs_on+0x98/0x150 [ 392.790283][T11491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.796446][T11491] do_group_exit+0x22d/0x2f0 [ 392.801044][T11491] get_signal+0x12a6/0x1390 [ 392.805582][T11491] arch_do_signal_or_restart+0xc2/0x7b0 [ 392.811135][T11491] ? mutex_unlock+0x10/0x10 [ 392.815636][T11491] ? get_sigframe_size+0x20/0x20 [ 392.820583][T11491] ? ksys_write+0x201/0x260 [ 392.825091][T11491] ? exit_to_user_mode_loop+0x3b/0x110 [ 392.830557][T11491] exit_to_user_mode_loop+0x70/0x110 [ 392.835837][T11491] exit_to_user_mode_prepare+0xee/0x180 [ 392.841382][T11491] syscall_exit_to_user_mode+0x1a/0x50 [ 392.846838][T11491] do_syscall_64+0x61/0xb0 [ 392.851251][T11491] ? clear_bhb_loop+0x40/0x90 [ 392.855918][T11491] ? clear_bhb_loop+0x40/0x90 [ 392.860588][T11491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.866483][T11491] RIP: 0033:0x7f1a1499de99 [ 392.870892][T11491] Code: Unable to access opcode bytes at 0x7f1a1499de6f. [ 392.877895][T11491] RSP: 002b:00007f1a158c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.886304][T11491] RAX: 0000000000000012 RBX: 00007f1a14c25fa0 RCX: 00007f1a1499de99 [ 392.894268][T11491] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 392.902233][T11491] RBP: 00007f1a14a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 392.910233][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.918217][T11491] R13: 00007f1a14c26038 R14: 00007f1a14c25fa0 R15: 00007ffe9aaefda8 [ 392.926206][T11491] [ 392.929356][T11491] Kernel Offset: disabled [ 392.933673][T11491] Rebooting in 86400 seconds..