last executing test programs: 11.578848448s ago: executing program 0 (id=5530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 11.507636549s ago: executing program 0 (id=5531): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 10.864895239s ago: executing program 0 (id=5537): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000000000007, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10.673027862s ago: executing program 1 (id=5540): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7e}, 0x38) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100aaaa"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) 10.252546938s ago: executing program 0 (id=5543): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x112245, 0x0, 0x7ffffffd, 0x7, 0x2, 0x72a2, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5c"], 0xffdd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9200000000000056080000010000008500000007000000b70000000000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) openat$cgroup_ro(r5, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.252177268s ago: executing program 1 (id=5544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9.823159716s ago: executing program 4 (id=5546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 9.666982788s ago: executing program 1 (id=5547): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_devices(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x9}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 8.974089149s ago: executing program 4 (id=5550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x682}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.668926743s ago: executing program 3 (id=5551): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfff7fff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x7b000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8.535828776s ago: executing program 4 (id=5553): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x18, 0xf8, 0x9, 0x5, 0x10000, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1d0, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x6de8f710, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x22}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2000000, 0x20, 0x0, &(0x7f0000000400)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48788a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.448859747s ago: executing program 3 (id=5554): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0)) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x0, 0x3, 0x6, 0x10000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) 8.188779341s ago: executing program 1 (id=5555): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0xc3, 0xd1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5f9f}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0xf0ff1f00000005) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) write$cgroup_devices(r2, 0x0, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r2}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.990232834s ago: executing program 2 (id=5556): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x33, &(0x7f0000000180), 0x4) 7.352902374s ago: executing program 0 (id=5557): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x40000003, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x1121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x1d72b053}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.950809041s ago: executing program 1 (id=5558): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000", @ANYRES32, @ANYRES64], 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xd68, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)="fb1cd6", 0x3}], 0x1}, 0x20000000) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001040)=""/190, 0xbe}], 0x1, &(0x7f0000001480)=""/103, 0x67}, 0x120) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000000000001152027b8445ff2bb9509bb5328e8a052cc411325440773d65c92dbab2c10729128a2f44303b966006032911b625c05000c3e6c9c0956debd5446010b1b213b25677362835ae7167400dfbf5a8c47adebdca8efa16e7cce1bceb53c66c3a3858", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000c00)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="080935bde916"}) 6.762835363s ago: executing program 3 (id=5559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x9}, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xf4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xdd\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\ty\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xdb\xa9\xd3\x01\xb2\xc7\xf8%\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86P\x0f\x11\x93\xc7\x7f\x05\x00\x00\x00\x00\x00\x00\x00\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14B\a\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f\'OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xebp\x82\xae\xd2M:\xa2*\xd4vk=>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x913\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x88\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gnc\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5P}j`\x95OC\xdf\xfd\xbcK\x17J@w1\xfc\x14\xe5[\xde\xa78\xce\x14#\xba\x13:\xb0\x80{\x04\x13\xb8&{\x8cH\x12\xae\x13\x86\xa5&7Wl\x8f\xfe\xee\xa8\xb6v\"\xe4\xcd\xb5\xad\xc4^\xcd\x93\"\x84\xe9|\x92e\x00\x00\x00\x8ai}\xad1\xb8\xdc\xe9\x88\xca%\xe8\xd4O\xd9\x05F\xf5i\xb3\x96\x19\x85\xfezdT\xd6fJ\x8e\x80S\xe5\x91\xb2\xb6Q\x93_\n%\xcdc\xddZR0W\x1d\xfc\x87\xeb\xab\xbaY5\xceP\xf7xO\x83\"\xb9\xb2\xb7\x85\\\xcd\x03I\x82.\x99x\xdfA\xfcK\xee\xa43z\x99\xd0\xd0\xd86\xa1\x02\xc8\xdedw\x9eN\xef\xcc\x80\xe2\xc69\x1d9E\x02\xb3\xccnk\xa8eb\x1d\xf4\x91') 6.653454185s ago: executing program 2 (id=5560): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.506440988s ago: executing program 0 (id=5561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, r2, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0)="ad", &(0x7f0000000000)=""/3, 0x2}, 0x20) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 6.032338725s ago: executing program 3 (id=5562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) close(0x3) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.08349965s ago: executing program 3 (id=5563): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0xa, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, @perf_config_ext={0x1eb, 0x10001}, 0x2018, 0x0, 0x0, 0x2, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x0, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 3.971613277s ago: executing program 2 (id=5564): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) 2.640915789s ago: executing program 2 (id=5565): r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x70f, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2.360958583s ago: executing program 4 (id=5566): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x5, 0x0, 0x0, 0x0, 0x10, 0x81420, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x8001}, 0x300, 0x103, 0x200001, 0x5, 0x29e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34040851}, 0x40) 2.360696313s ago: executing program 3 (id=5567): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000780), &(0x7f0000000740)}, 0x22) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000017c0)={0xffffffffffffffff, &(0x7f00000006c0)="81bd", &(0x7f00000016c0)=""/232}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000240)}, 0x10) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000160000000c00", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @alu={0x7, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) 1.698005923s ago: executing program 2 (id=5568): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.469781487s ago: executing program 4 (id=5569): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x5d6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 644.97916ms ago: executing program 2 (id=5570): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 108.972719ms ago: executing program 1 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 4 (id=5572): perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 5 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.679677][T15715] RSP: 002b:00007f034fce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.688160][T15715] RAX: ffffffffffffffda RBX: 00007f034f015fa0 RCX: 00007f034ed9ce59 [ 801.696190][T15715] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000004 [ 801.704224][T15715] RBP: 00007f034fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 801.712262][T15715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.720289][T15715] R13: 00007f034f016038 R14: 00007f034f015fa0 R15: 00007ffe3cf77178 [ 801.728342][T15715] [ 801.860890][T15717] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 802.222289][T15717] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.241087][T15717] bond0: (slave team0): Enslaving as an active interface with an up link [ 802.769267][T15743] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3716'. [ 802.783100][T15743] delete_channel: no stack [ 803.177243][T15749] bond0: (slave team0): Error: Slave device does not support XDP [ 803.306119][T15755] ref_ctr_offset mismatch. inode: 0x1cf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 803.735685][T15766] netlink: 'syz.3.3720': attribute type 22 has an invalid length. [ 803.752559][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 804.721169][T15784] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.3726'. [ 804.981445][T15790] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3730'. [ 805.008567][T15790] delete_channel: no stack [ 805.219990][T15797] netlink: 'syz.4.3733': attribute type 33 has an invalid length. [ 805.249117][T15797] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3733'. [ 805.330910][T15800] netlink: 'syz.3.3734': attribute type 22 has an invalid length. [ 805.354776][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'. [ 805.826340][T15805] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3736'. [ 807.747931][T15831] tipc: Started in network mode [ 807.756858][T15831] tipc: Node identity 9215a268, cluster identity 4711 [ 807.777297][T15831] tipc: Node number set to 2450891368 [ 807.787099][T15835] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3745'. [ 807.799848][T15836] delete_channel: no stack [ 807.855013][T15834] netlink: 'syz.2.3744': attribute type 29 has an invalid length. [ 807.878472][T15834] netlink: 'syz.2.3744': attribute type 29 has an invalid length. [ 807.992956][T15838] bond0: (slave team0): Error: Slave device does not support XDP [ 808.098220][T15843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'. [ 808.159202][T15843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'. [ 808.180205][T15846] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3747'. [ 808.215766][T15845] netlink: 'syz.4.3748': attribute type 22 has an invalid length. [ 808.241731][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3748'. [ 808.563250][T15854] netlink: 'syz.4.3752': attribute type 33 has an invalid length. [ 808.575384][T15854] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3752'. [ 808.596271][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.602797][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.118576][T15881] delete_channel: no stack [ 811.272612][T15872] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3755'. [ 811.293678][T15880] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3758'. [ 811.602907][T15892] netlink: 'syz.2.3761': attribute type 3 has an invalid length. [ 811.621785][T15892] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3761'. [ 811.641096][T15894] netlink: 'syz.4.3762': attribute type 22 has an invalid length. [ 811.659063][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3762'. [ 811.925743][T15902] netlink: 'syz.1.3766': attribute type 33 has an invalid length. [ 811.977890][T15904] netlink: 'syz.3.3778': attribute type 3 has an invalid length. [ 812.180767][T15910] bond0: (slave team0): Error: Slave device does not support XDP [ 812.690130][T15928] delete_channel: no stack [ 813.740817][T15936] __nla_validate_parse: 4 callbacks suppressed [ 813.740858][T15936] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3775'. [ 814.668274][T15949] netlink: 'syz.0.3780': attribute type 22 has an invalid length. [ 814.711310][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 814.730080][T15943] bond0: (slave team0): Error: Slave device does not support XDP [ 815.060387][T15956] netlink: 'syz.3.3783': attribute type 3 has an invalid length. [ 815.102210][T15956] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3783'. [ 815.283895][T15963] bond0: (slave team0): Error: Slave device does not support XDP [ 815.343530][T15971] netlink: 'syz.0.3788': attribute type 33 has an invalid length. [ 815.366965][T15971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3788'. [ 815.405846][T15976] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3789'. [ 815.437819][T15976] delete_channel: no stack [ 815.852836][T12597] Bluetooth: hci2: command 0x0406 tx timeout [ 815.989780][T15988] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3802'. [ 816.066574][T15988] delete_channel: no stack [ 816.082817][T15985] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3790'. [ 816.788650][T16001] netlink: 'syz.1.3794': attribute type 22 has an invalid length. [ 816.813615][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 817.018663][T16006] netlink: 'syz.0.3795': attribute type 33 has an invalid length. [ 817.032944][T16006] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3795'. [ 817.326452][T16010] bond0: (slave team0): Error: Slave device does not support XDP [ 817.366204][T16014] netlink: 'syz.0.3799': attribute type 3 has an invalid length. [ 817.395748][T16014] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3799'. [ 817.627587][T16024] netlink: 'syz.1.3803': attribute type 33 has an invalid length. [ 817.655780][T16026] netlink: 'syz.4.3804': attribute type 10 has an invalid length. [ 817.881499][T16036] delete_channel: no stack [ 818.548652][T16041] netlink: 'syz.3.3805': attribute type 29 has an invalid length. [ 818.911116][T16053] netlink: 'syz.1.3810': attribute type 33 has an invalid length. [ 818.939403][T16053] __nla_validate_parse: 2 callbacks suppressed [ 818.939443][T16053] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3810'. [ 819.337770][T16063] netlink: 'syz.2.3813': attribute type 22 has an invalid length. [ 819.392460][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3813'. [ 819.498977][T16061] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3811'. [ 820.163089][T16076] netlink: 'syz.1.3816': attribute type 3 has an invalid length. [ 820.176645][T16080] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3818'. [ 820.203881][T16076] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3816'. [ 820.225608][T16081] delete_channel: no stack [ 820.856455][T16101] netlink: 'syz.0.3821': attribute type 29 has an invalid length. [ 820.968281][T16103] netlink: 4547 bytes leftover after parsing attributes in process `syz.3.3824'. [ 821.121589][T16107] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3825'. [ 821.863262][T16115] bond0: (slave team0): Error: Slave device does not support XDP [ 821.907888][T16119] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3831'. [ 821.931267][T16119] delete_channel: no stack [ 822.114602][T16123] validate_nla: 1 callbacks suppressed [ 822.114786][T16123] netlink: 'syz.0.3832': attribute type 3 has an invalid length. [ 822.168388][T16130] netlink: 'syz.3.3833': attribute type 21 has an invalid length. [ 822.174228][T16123] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3832'. [ 822.490952][T16140] netlink: 'syz.3.3837': attribute type 33 has an invalid length. [ 822.530270][T16140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3837'. [ 822.829505][T16152] netlink: 'syz.0.3839': attribute type 29 has an invalid length. [ 824.402431][T16175] delete_channel: no stack [ 824.868533][T16182] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3846'. [ 824.917835][T16185] delete_channel: no stack [ 825.222542][T16191] netlink: 'syz.0.3850': attribute type 3 has an invalid length. [ 825.286819][T16191] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3850'. [ 827.200956][T16215] netlink: 'syz.1.3856': attribute type 29 has an invalid length. [ 827.827724][T16228] bond0: (slave team0): Error: Slave device does not support XDP [ 827.904066][T16229] netlink: 'syz.2.3860': attribute type 10 has an invalid length. [ 827.956534][T16229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3860'. [ 828.381508][T16229] batman_adv: batadv0: Adding interface: vlan1 [ 828.502017][T16229] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.571708][T16229] batman_adv: batadv0: Interface activated: vlan1 [ 828.942765][T16248] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3864'. [ 828.961050][T16248] delete_channel: no stack [ 829.383099][T16252] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3866'. [ 829.442493][T16252] device bridge_slave_1 entered promiscuous mode [ 829.587571][T16255] netlink: 'syz.2.3867': attribute type 3 has an invalid length. [ 829.621724][T16255] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3867'. [ 830.492014][T16277] netlink: 'syz.3.3874': attribute type 33 has an invalid length. [ 830.514110][T16277] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3874'. [ 830.562727][T16275] netlink: 'syz.1.3872': attribute type 29 has an invalid length. [ 830.677333][T16274] bond0: (slave team0): Error: Slave device does not support XDP [ 831.036570][T16287] ref_ctr_offset mismatch. inode: 0x2d7 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 831.149496][T16291] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3878'. [ 831.178667][T16291] delete_channel: no stack [ 831.299389][T16295] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3880'. [ 831.767607][T16303] netlink: 'syz.3.3883': attribute type 3 has an invalid length. [ 831.820139][T16303] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3883'. [ 832.742413][T16308] netlink: 'syz.4.3886': attribute type 33 has an invalid length. [ 832.784028][T16308] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3886'. [ 833.163171][T16318] bond0: (slave team0): Error: Slave device does not support XDP [ 833.941234][T16334] ref_ctr_offset mismatch. inode: 0x2ec offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 834.424815][T16337] netlink: 'syz.2.3891': attribute type 29 has an invalid length. [ 834.747750][T16349] netlink: 'syz.3.3893': attribute type 29 has an invalid length. [ 835.462643][T16361] netlink: 'syz.4.3897': attribute type 3 has an invalid length. [ 835.501335][T16361] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3897'. [ 835.628958][T16366] netlink: 'syz.0.3900': attribute type 22 has an invalid length. [ 835.644182][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3900'. [ 835.812283][T16368] bond0: (slave team0): Error: Slave device does not support XDP [ 836.273535][ T5480] Bluetooth: hci3: command 0x0406 tx timeout [ 836.713688][T16392] netlink: 'syz.0.3907': attribute type 29 has an invalid length. [ 837.502258][T16415] netlink: 'syz.1.3915': attribute type 3 has an invalid length. [ 837.531110][T16415] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3915'. [ 837.804450][T16421] netlink: 'syz.3.3917': attribute type 22 has an invalid length. [ 837.833334][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 837.906610][T16423] bond0: (slave team0): Error: Slave device does not support XDP [ 838.196957][T16434] ref_ctr_offset mismatch. inode: 0x3cf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 838.991701][T16446] netlink: 'syz.1.3929': attribute type 3 has an invalid length. [ 839.054209][T16446] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3929'. [ 840.797004][T16473] ref_ctr_offset mismatch. inode: 0x306 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 841.359624][T16492] netlink: 'syz.4.3943': attribute type 3 has an invalid length. [ 841.406587][T16492] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3943'. [ 842.037366][T16502] netlink: 'syz.4.3947': attribute type 33 has an invalid length. [ 842.056345][T16502] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3947'. [ 842.265780][T16511] ref_ctr_offset mismatch. inode: 0x3f0 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 842.448143][T16513] FAULT_INJECTION: forcing a failure. [ 842.448143][T16513] name failslab, interval 1, probability 0, space 0, times 0 [ 842.462572][T16513] CPU: 0 PID: 16513 Comm: syz.4.3950 Not tainted syzkaller #0 [ 842.470112][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 842.480224][T16513] Call Trace: [ 842.483550][T16513] [ 842.486544][T16513] dump_stack_lvl+0x188/0x24e [ 842.491269][T16513] ? sctp_sendmsg+0x1686/0x2940 [ 842.496173][T16513] ? ___sys_sendmsg+0x2a2/0x360 [ 842.501074][T16513] ? show_regs_print_info+0x12/0x12 [ 842.506371][T16513] ? load_image+0x410/0x410 [ 842.510946][T16513] should_fail_ex+0x390/0x4c0 [ 842.515675][T16513] should_failslab+0x5/0x20 [ 842.520229][T16513] slab_pre_alloc_hook+0x59/0x300 [ 842.525300][T16513] ? sctp_add_bind_addr+0x89/0x350 [ 842.530464][T16513] __kmem_cache_alloc_node+0x4f/0x270 [ 842.535901][T16513] ? sctp_add_bind_addr+0x89/0x350 [ 842.541067][T16513] kmalloc_trace+0x26/0xe0 [ 842.545549][T16513] sctp_add_bind_addr+0x89/0x350 [ 842.550541][T16513] sctp_copy_local_addr_list+0x317/0x4d0 [ 842.556230][T16513] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 842.562005][T16513] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 842.568123][T16513] ? sctp_v4_is_any+0x31/0x50 [ 842.572850][T16513] ? sctp_copy_one_addr+0x93/0x660 [ 842.578020][T16513] sctp_bind_addr_copy+0xaf/0x3c0 [ 842.583099][T16513] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 842.589574][T16513] sctp_connect_new_asoc+0x2f5/0x6a0 [ 842.594948][T16513] ? __sctp_connect+0xd80/0xd80 [ 842.599956][T16513] ? __local_bh_enable_ip+0x136/0x1c0 [ 842.605392][T16513] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 842.611008][T16513] ? security_sctp_bind_connect+0x85/0xb0 [ 842.616799][T16513] sctp_sendmsg+0x1686/0x2940 [ 842.621551][T16513] ? sctp_getsockopt+0x8a0/0x8a0 [ 842.626546][T16513] ? __lock_acquire+0x7bd0/0x7bd0 [ 842.631628][T16513] ? aa_af_perm+0x340/0x340 [ 842.636183][T16513] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 842.642679][T16513] ? inet_sendmsg+0xca/0x2a0 [ 842.647330][T16513] ? inet_send_prepare+0x250/0x250 [ 842.652514][T16513] ____sys_sendmsg+0x5ed/0x9a0 [ 842.657346][T16513] ? __sys_sendmsg_sock+0x30/0x30 [ 842.662427][T16513] ? __import_iovec+0x306/0x510 [ 842.667343][T16513] ? import_iovec+0x6f/0xa0 [ 842.671905][T16513] ___sys_sendmsg+0x2a2/0x360 [ 842.676649][T16513] ? __sys_sendmsg+0x2a0/0x2a0 [ 842.681491][T16513] ? __lock_acquire+0x7bd0/0x7bd0 [ 842.686609][T16513] __se_sys_sendmsg+0x1c3/0x2b0 [ 842.691597][T16513] ? __x64_sys_sendmsg+0x80/0x80 [ 842.696605][T16513] ? lockdep_hardirqs_on+0x94/0x140 [ 842.701863][T16513] do_syscall_64+0x4c/0xa0 [ 842.706327][T16513] ? clear_bhb_loop+0x60/0xb0 [ 842.711054][T16513] ? clear_bhb_loop+0x60/0xb0 [ 842.715787][T16513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.721745][T16513] RIP: 0033:0x7f034ed9ce59 [ 842.726212][T16513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.745907][T16513] RSP: 002b:00007f034fce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.754387][T16513] RAX: ffffffffffffffda RBX: 00007f034f015fa0 RCX: 00007f034ed9ce59 [ 842.762438][T16513] RDX: 0000000000008081 RSI: 0000200000002500 RDI: 0000000000000003 [ 842.770469][T16513] RBP: 00007f034fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 842.778669][T16513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.786700][T16513] R13: 00007f034f016038 R14: 00007f034f015fa0 R15: 00007ffe3cf77178 [ 842.794736][T16513] [ 842.848511][T16515] bond0: (slave team0): Error: Slave device does not support XDP [ 843.154200][T16526] netlink: 'syz.0.3954': attribute type 2 has an invalid length. [ 843.264472][T16526] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3954'. [ 843.587792][T16530] FAULT_INJECTION: forcing a failure. [ 843.587792][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 843.639507][T16528] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3953'. [ 843.729046][T16530] CPU: 1 PID: 16530 Comm: syz.4.3955 Not tainted syzkaller #0 [ 843.736599][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.746713][T16530] Call Trace: [ 843.750050][T16530] [ 843.753029][T16530] dump_stack_lvl+0x188/0x24e [ 843.757773][T16530] ? show_regs_print_info+0x12/0x12 [ 843.763031][T16530] ? load_image+0x410/0x410 [ 843.767596][T16530] ? __might_sleep+0xd0/0xd0 [ 843.772237][T16530] ? __lock_acquire+0x7bd0/0x7bd0 [ 843.777330][T16530] ? lock_chain_count+0x20/0x20 [ 843.782268][T16530] should_fail_ex+0x390/0x4c0 [ 843.787006][T16530] should_failslab+0x5/0x20 [ 843.791558][T16530] slab_pre_alloc_hook+0x59/0x300 [ 843.796645][T16530] kmem_cache_alloc_node+0x5a/0x310 [ 843.801905][T16530] ? __alloc_skb+0xf9/0x7d0 [ 843.806474][T16530] __alloc_skb+0xf9/0x7d0 [ 843.810891][T16530] netlink_sendmsg+0x654/0xbd0 [ 843.815715][T16530] ? lockdep_hardirqs_on+0x94/0x140 [ 843.820982][T16530] ? netlink_getsockopt+0x550/0x550 [ 843.826260][T16530] ? netlink_getsockopt+0x550/0x550 [ 843.831516][T16530] ____sys_sendmsg+0x5ed/0x9a0 [ 843.836344][T16530] ? __sys_sendmsg_sock+0x30/0x30 [ 843.841427][T16530] ? __import_iovec+0x306/0x510 [ 843.846339][T16530] ? import_iovec+0x6f/0xa0 [ 843.850901][T16530] ___sys_sendmsg+0x2a2/0x360 [ 843.855638][T16530] ? __sys_sendmsg+0x2a0/0x2a0 [ 843.860480][T16530] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 843.866295][T16530] __se_sys_sendmsg+0x1c3/0x2b0 [ 843.871217][T16530] ? __x64_sys_sendmsg+0x80/0x80 [ 843.876208][T16530] ? lockdep_hardirqs_on+0x94/0x140 [ 843.881486][T16530] ? __x64_sys_sendmsg+0x5f/0x80 [ 843.886486][T16530] do_syscall_64+0x4c/0xa0 [ 843.890948][T16530] ? clear_bhb_loop+0x60/0xb0 [ 843.895679][T16530] ? clear_bhb_loop+0x60/0xb0 [ 843.900409][T16530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.906368][T16530] RIP: 0033:0x7f034ed9ce59 [ 843.910833][T16530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.930511][T16530] RSP: 002b:00007f034fce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.939001][T16530] RAX: ffffffffffffffda RBX: 00007f034f015fa0 RCX: 00007f034ed9ce59 [ 843.947032][T16530] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 843.955054][T16530] RBP: 00007f034fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 843.963072][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.971074][T16530] R13: 00007f034f016038 R14: 00007f034f015fa0 R15: 00007ffe3cf77178 [ 843.979096][T16530] [ 844.337370][T16537] netlink: 'syz.2.3957': attribute type 3 has an invalid length. [ 844.389100][T16537] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3957'. [ 845.390630][T16554] ref_ctr_offset mismatch. inode: 0x405 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 845.758817][T16561] bond0: (slave team0): Error: Slave device does not support XDP [ 847.272427][T16590] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3973'. [ 847.698126][T16602] netlink: 'syz.1.3977': attribute type 3 has an invalid length. [ 847.746305][T16602] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3977'. [ 847.818099][T16605] ref_ctr_offset mismatch. inode: 0x471 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 848.859323][T16608] bond0: (slave team0): Error: Slave device does not support XDP [ 849.057672][T16625] ref_ctr_offset mismatch. inode: 0x41b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 850.711404][T16650] netlink: 'syz.1.3993': attribute type 3 has an invalid length. [ 850.732189][T16645] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3992'. [ 850.741501][T16650] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3993'. [ 851.051140][T16659] bond0: (slave team0): Error: Slave device does not support XDP [ 851.551874][T16682] netlink: 'syz.1.4009': attribute type 21 has an invalid length. [ 851.608143][T16682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4009'. [ 851.771145][T16680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.789336][T16680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.534909][T16680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.542416][T16680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.592425][T16691] ref_ctr_offset mismatch. inode: 0x344 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 853.098826][T16705] netlink: 'syz.4.4007': attribute type 22 has an invalid length. [ 853.140052][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4007'. [ 853.517331][T16715] netlink: 'syz.4.4012': attribute type 3 has an invalid length. [ 853.539370][T16716] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4011'. [ 853.552102][T16715] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4012'. [ 854.774464][T16730] ref_ctr_offset mismatch. inode: 0x490 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 855.902295][T16745] netlink: 'syz.4.4018': attribute type 21 has an invalid length. [ 855.910910][T16745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4018'. [ 855.950341][T16749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.960218][T16749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.969095][T16749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.977590][T16749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.037958][T16751] IPv6: Can't replace route, no match found [ 856.045056][T16758] netlink: 'syz.2.4022': attribute type 22 has an invalid length. [ 856.052936][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 856.103026][T16755] bond0: (slave team0): Error: Slave device does not support XDP [ 856.422859][T16771] netlink: 'syz.2.4025': attribute type 3 has an invalid length. [ 856.452431][T16777] netlink: 'syz.1.4035': attribute type 22 has an invalid length. [ 856.466878][T16771] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4025'. [ 856.491525][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4035'. [ 857.344247][T16791] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4029'. [ 857.812239][T16801] ref_ctr_offset mismatch. inode: 0x368 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 858.257683][T16806] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4030'. [ 858.710742][T16814] bond0: (slave team0): Error: Slave device does not support XDP [ 859.286518][T16829] netlink: 'syz.0.4041': attribute type 22 has an invalid length. [ 859.310092][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4041'. [ 860.127053][T16848] ref_ctr_offset mismatch. inode: 0x382 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 860.475268][T16853] bond0: (slave team0): Error: Slave device does not support XDP [ 860.752435][T16855] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4048'. [ 861.002017][T16869] bond0: (slave team0): Error: Slave device does not support XDP [ 861.592761][T16883] netlink: 'syz.3.4055': attribute type 22 has an invalid length. [ 861.724757][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 863.592436][T16918] netlink: 'syz.0.4065': attribute type 29 has an invalid length. [ 863.602129][T16920] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4066'. [ 864.025902][T16928] netlink: 'syz.0.4067': attribute type 21 has an invalid length. [ 864.066228][T16928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4067'. [ 864.095339][T16934] netlink: 'syz.3.4071': attribute type 22 has an invalid length. [ 864.105124][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4071'. [ 865.334522][T16956] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.4077'. [ 865.458690][T16956] openvswitch: netlink: Flow actions attr not present in new flow. [ 865.500480][T16960] netlink: 'syz.4.4078': attribute type 29 has an invalid length. [ 866.085230][T16980] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4080'. [ 866.411129][T16982] IPv6: NLM_F_CREATE should be specified when creating new route [ 866.419557][T16982] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4080'. [ 866.528990][T16975] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4081'. [ 866.691428][T16989] netlink: 'syz.1.4085': attribute type 33 has an invalid length. [ 866.719080][T16989] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4085'. [ 866.885860][T16993] netlink: 'syz.2.4086': attribute type 22 has an invalid length. [ 866.920018][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4086'. [ 867.730423][T17000] netlink: 'syz.1.4089': attribute type 21 has an invalid length. [ 867.753051][T17000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4089'. [ 867.945383][T17004] FAULT_INJECTION: forcing a failure. [ 867.945383][T17004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.033880][T17004] CPU: 1 PID: 17004 Comm: syz.2.4091 Not tainted syzkaller #0 [ 868.041436][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.051544][T17004] Call Trace: [ 868.054866][T17004] [ 868.057832][T17004] dump_stack_lvl+0x188/0x24e [ 868.062565][T17004] ? show_regs_print_info+0x12/0x12 [ 868.067820][T17004] ? load_image+0x410/0x410 [ 868.072472][T17004] ? __might_fault+0xa6/0x120 [ 868.077203][T17004] should_fail_ex+0x390/0x4c0 [ 868.081927][T17004] copyin+0x1b/0x120 [ 868.085870][T17004] _copy_from_iter+0x447/0x1130 [ 868.090771][T17004] ? copyout_mc+0x110/0x110 [ 868.095324][T17004] ? __virt_addr_valid+0x188/0x540 [ 868.100492][T17004] ? __virt_addr_valid+0x188/0x540 [ 868.105664][T17004] ? __virt_addr_valid+0x467/0x540 [ 868.110833][T17004] ? __phys_addr_symbol+0x2b/0x70 [ 868.115923][T17004] ? __check_object_size+0x4f6/0xa70 [ 868.121256][T17004] netlink_sendmsg+0x755/0xbd0 [ 868.126068][T17004] ? lockdep_hardirqs_on+0x94/0x140 [ 868.131320][T17004] ? netlink_getsockopt+0x550/0x550 [ 868.136572][T17004] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 868.142175][T17004] ? security_socket_sendmsg+0x7c/0xa0 [ 868.147697][T17004] ? netlink_getsockopt+0x550/0x550 [ 868.152924][T17004] ____sys_sendmsg+0x5ed/0x9a0 [ 868.157731][T17004] ? __sys_sendmsg_sock+0x30/0x30 [ 868.162807][T17004] ? __import_iovec+0x306/0x510 [ 868.167688][T17004] ? import_iovec+0x6f/0xa0 [ 868.172220][T17004] ___sys_sendmsg+0x2a2/0x360 [ 868.176926][T17004] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.181729][T17004] ? ktime_get+0x7b/0x270 [ 868.186108][T17004] __se_sys_sendmsg+0x1c3/0x2b0 [ 868.190985][T17004] ? perf_trace_preemptirq_template+0x268/0x320 [ 868.197264][T17004] ? __x64_sys_sendmsg+0x80/0x80 [ 868.202245][T17004] ? lockdep_hardirqs_on+0x94/0x140 [ 868.207505][T17004] do_syscall_64+0x4c/0xa0 [ 868.211946][T17004] ? clear_bhb_loop+0x60/0xb0 [ 868.216655][T17004] ? clear_bhb_loop+0x60/0xb0 [ 868.221358][T17004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.227281][T17004] RIP: 0033:0x7f58f3d9ce59 [ 868.231730][T17004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.251451][T17004] RSP: 002b:00007f58f4be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.259892][T17004] RAX: ffffffffffffffda RBX: 00007f58f4015fa0 RCX: 00007f58f3d9ce59 [ 868.267890][T17004] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 868.275884][T17004] RBP: 00007f58f4be6090 R08: 0000000000000000 R09: 0000000000000000 [ 868.283878][T17004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.291871][T17004] R13: 00007f58f4016038 R14: 00007f58f4015fa0 R15: 00007ffd5f7d7ed8 [ 868.299883][T17004] [ 868.438254][T17013] netlink: 'syz.1.4093': attribute type 29 has an invalid length. [ 869.117606][T17025] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4098'. [ 869.189051][T17027] netlink: 'syz.1.4099': attribute type 33 has an invalid length. [ 869.203528][T17027] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4099'. [ 869.361134][T17030] netlink: 'syz.3.4100': attribute type 3 has an invalid length. [ 869.397990][T17030] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4100'. [ 869.448286][T17034] netlink: 'syz.0.4101': attribute type 22 has an invalid length. [ 869.494080][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4101'. [ 870.044101][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.050544][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.978427][T17041] netlink: 'syz.2.4104': attribute type 21 has an invalid length. [ 870.989111][T17041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4104'. [ 872.899952][T17069] netlink: 'syz.3.4113': attribute type 33 has an invalid length. [ 872.928367][T17069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4113'. [ 872.991905][T17073] netlink: 'syz.1.4115': attribute type 3 has an invalid length. [ 873.024069][T17073] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4115'. [ 873.301910][T17081] netlink: 'syz.0.4117': attribute type 22 has an invalid length. [ 873.333731][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'. [ 873.569045][T17088] netlink: 'syz.1.4119': attribute type 21 has an invalid length. [ 873.638624][T17088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4119'. [ 873.949633][T17100] netlink: 'syz.2.4121': attribute type 29 has an invalid length. [ 874.570877][T17106] FAULT_INJECTION: forcing a failure. [ 874.570877][T17106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.597571][T17106] CPU: 1 PID: 17106 Comm: syz.3.4124 Not tainted syzkaller #0 [ 874.605128][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 874.615238][T17106] Call Trace: [ 874.618565][T17106] [ 874.621547][T17106] dump_stack_lvl+0x188/0x24e [ 874.626285][T17106] ? show_regs_print_info+0x12/0x12 [ 874.631538][T17106] ? load_image+0x410/0x410 [ 874.636106][T17106] ? __lock_acquire+0x7bd0/0x7bd0 [ 874.641196][T17106] should_fail_ex+0x390/0x4c0 [ 874.645920][T17106] _copy_from_user+0x2c/0x170 [ 874.650651][T17106] __sys_bpf+0x2ea/0x780 [ 874.654961][T17106] ? bpf_link_show_fdinfo+0x380/0x380 [ 874.660425][T17106] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 874.666757][T17106] __x64_sys_bpf+0x78/0x90 [ 874.671274][T17106] do_syscall_64+0x4c/0xa0 [ 874.675768][T17106] ? clear_bhb_loop+0x60/0xb0 [ 874.680500][T17106] ? clear_bhb_loop+0x60/0xb0 [ 874.685236][T17106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.691242][T17106] RIP: 0033:0x7f237459ce59 [ 874.695735][T17106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.715397][T17106] RSP: 002b:00007f23754ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.723865][T17106] RAX: ffffffffffffffda RBX: 00007f2374815fa0 RCX: 00007f237459ce59 [ 874.731880][T17106] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 874.739893][T17106] RBP: 00007f23754ed090 R08: 0000000000000000 R09: 0000000000000000 [ 874.747985][T17106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.755988][T17106] R13: 00007f2374816038 R14: 00007f2374815fa0 R15: 00007fff75dece28 [ 874.764005][T17106] [ 875.370085][T17121] netlink: 'syz.2.4129': attribute type 33 has an invalid length. [ 875.393600][T17121] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4129'. [ 875.439837][T17127] netlink: 'syz.3.4132': attribute type 22 has an invalid length. [ 875.468420][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4132'. [ 876.213815][T17148] netlink: 'syz.1.4139': attribute type 29 has an invalid length. [ 876.241334][T17146] netlink: 'syz.2.4138': attribute type 21 has an invalid length. [ 876.269074][T17146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4138'. [ 876.706310][T17174] netlink: 'syz.0.4145': attribute type 33 has an invalid length. [ 876.718803][T17174] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4145'. [ 876.868554][T17176] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4146'. [ 876.899930][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4147'. [ 879.777709][T17218] validate_nla: 3 callbacks suppressed [ 879.777730][T17218] netlink: 'syz.0.4160': attribute type 22 has an invalid length. [ 879.841535][T17220] netlink: 'syz.1.4161': attribute type 3 has an invalid length. [ 879.878614][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4160'. [ 879.899055][T17220] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4161'. [ 879.929419][T17225] netlink: 'syz.2.4157': attribute type 33 has an invalid length. [ 879.939420][T17225] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4157'. [ 880.337276][T17228] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4159'. [ 881.072142][T17261] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4172'. [ 881.181976][T17263] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.4172'. [ 881.767530][T17268] netlink: 'syz.2.4174': attribute type 29 has an invalid length. [ 881.817894][T17277] netlink: 'syz.1.4175': attribute type 22 has an invalid length. [ 881.833055][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'. [ 881.862881][T17274] netlink: 'syz.4.4176': attribute type 33 has an invalid length. [ 881.876144][T17274] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4176'. [ 882.256833][T17282] netlink: 'syz.4.4178': attribute type 22 has an invalid length. [ 882.274247][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4178'. [ 884.321605][T17312] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4185'. [ 884.397898][T17312] bridge_slave_1: default FDB implementation only supports local addresses [ 884.495639][T17301] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4182'. [ 884.659919][T17316] netlink: 'syz.0.4187': attribute type 33 has an invalid length. [ 884.688711][T17316] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4187'. [ 885.036433][T17324] netlink: 'syz.0.4190': attribute type 22 has an invalid length. [ 885.089541][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 885.437134][T17329] netlink: 'syz.1.4191': attribute type 29 has an invalid length. [ 886.518211][T17361] netlink: 'syz.3.4200': attribute type 29 has an invalid length. [ 887.347761][T17369] netlink: 'syz.4.4203': attribute type 3 has an invalid length. [ 887.378239][T17371] netlink: 'syz.2.4204': attribute type 22 has an invalid length. [ 887.400253][T17369] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4203'. [ 887.431859][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 887.531276][T17374] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4201'. [ 889.548239][T17416] netlink: 'syz.4.4213': attribute type 29 has an invalid length. [ 889.907137][T17424] netlink: 'syz.1.4216': attribute type 29 has an invalid length. [ 890.671475][T17433] netlink: 'syz.2.4217': attribute type 22 has an invalid length. [ 890.684172][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4217'. [ 890.976928][T17442] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4221'. [ 891.457590][T17454] netlink: 'syz.3.4224': attribute type 22 has an invalid length. [ 891.490996][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4224'. [ 891.776210][T17459] netlink: 'syz.3.4226': attribute type 33 has an invalid length. [ 891.824744][T17459] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4226'. [ 891.979732][T17466] netlink: 'syz.4.4227': attribute type 3 has an invalid length. [ 892.016340][T17464] netlink: 'syz.4.4227': attribute type 3 has an invalid length. [ 892.063548][T17466] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4227'. [ 892.083603][T17464] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4227'. [ 892.381869][T17474] netlink: 'syz.3.4231': attribute type 29 has an invalid length. [ 893.161187][T17486] netlink: 'syz.1.4236': attribute type 22 has an invalid length. [ 893.187699][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 893.989772][T17492] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4239'. [ 894.931426][T17504] netlink: 'syz.0.4242': attribute type 33 has an invalid length. [ 894.953656][T17504] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4242'. [ 895.080881][T17509] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4244'. [ 895.121761][T17516] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4247'. [ 895.136183][T17516] delete_channel: no stack [ 895.157165][T17508] bond0: (slave team0): Error: Slave device does not support XDP [ 895.378110][T17523] netlink: 'syz.3.4250': attribute type 22 has an invalid length. [ 895.394831][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4250'. [ 895.994374][T17534] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4253'. [ 897.302978][T17551] netlink: 'syz.4.4258': attribute type 33 has an invalid length. [ 897.311690][T17551] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4258'. [ 897.355553][T17552] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4260'. [ 897.406721][T17553] netlink: 'syz.2.4256': attribute type 22 has an invalid length. [ 897.421938][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 897.432304][T17552] delete_channel: no stack [ 897.608202][T17559] bridge_slave_1: default FDB implementation only supports local addresses [ 897.742677][T17561] netlink: 'syz.1.4263': attribute type 22 has an invalid length. [ 897.957939][T17568] bond0: (slave team0): Error: Slave device does not support XDP [ 898.010315][T17576] netlink: 'syz.0.4265': attribute type 29 has an invalid length. [ 898.219262][T17583] netlink: 'syz.4.4266': attribute type 29 has an invalid length. [ 898.345784][T17583] netlink: 'syz.4.4266': attribute type 29 has an invalid length. [ 898.438377][T17586] netlink: 'syz.4.4266': attribute type 29 has an invalid length. [ 898.512475][T17580] netlink: 'syz.4.4266': attribute type 29 has an invalid length. [ 898.702448][T17580] netlink: 'syz.4.4266': attribute type 29 has an invalid length. [ 898.947234][T17590] __nla_validate_parse: 2 callbacks suppressed [ 898.947280][T17590] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4270'. [ 899.990617][T17599] netlink: 'syz.1.4272': attribute type 33 has an invalid length. [ 900.043846][T17599] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4272'. [ 900.056164][T17605] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4275'. [ 900.076219][T17605] delete_channel: no stack [ 900.267827][T17607] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4276'. [ 900.291057][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'. [ 902.004690][T17636] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4286'. [ 902.120678][T17638] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4284'. [ 903.078154][T17645] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4298'. [ 903.283823][T17647] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4288'. [ 905.318069][T17668] validate_nla: 2 callbacks suppressed [ 905.318107][T17668] netlink: 'syz.0.4294': attribute type 22 has an invalid length. [ 905.335197][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4294'. [ 905.392485][T17669] netlink: 'syz.1.4293': attribute type 3 has an invalid length. [ 905.404206][T17669] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4293'. [ 905.450333][T17666] bond0: (slave team0): Error: Slave device does not support XDP [ 905.615387][T17678] netlink: 'syz.2.4299': attribute type 33 has an invalid length. [ 905.623295][T17678] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4299'. [ 905.731336][T17689] netlink: 'syz.1.4300': attribute type 21 has an invalid length. [ 905.742105][T17689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4300'. [ 905.918454][T17695] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4305'. [ 905.952382][T17695] bridge_slave_1: default FDB implementation only supports local addresses [ 906.452396][T17705] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4306'. [ 906.839717][T17712] netlink: 'syz.1.4309': attribute type 22 has an invalid length. [ 906.856015][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'. [ 907.880754][T17723] netlink: 'syz.1.4322': attribute type 22 has an invalid length. [ 907.904816][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4322'. [ 907.955852][T17726] netlink: 'syz.2.4312': attribute type 3 has an invalid length. [ 907.986368][T17726] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4312'. [ 908.136164][T17738] netlink: 'syz.4.4315': attribute type 33 has an invalid length. [ 908.177872][T17738] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4315'. [ 908.196957][T17739] netlink: 'syz.3.4317': attribute type 21 has an invalid length. [ 908.682240][T17748] netlink: 'syz.4.4321': attribute type 10 has an invalid length. [ 908.930234][T17748] bond0: (slave team0): Releasing backup interface [ 911.229526][T17748] team0 (unregistering): Port device team_slave_0 removed [ 911.296905][T17748] team0 (unregistering): Port device team_slave_1 removed [ 911.353463][T17760] netlink: 'syz.3.4325': attribute type 29 has an invalid length. [ 911.361409][T17765] __nla_validate_parse: 1 callbacks suppressed [ 911.361426][T17765] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4324'. [ 911.579198][T17772] netlink: 'syz.4.4329': attribute type 22 has an invalid length. [ 911.632476][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4329'. [ 912.793757][T17793] netlink: 'syz.4.4335': attribute type 3 has an invalid length. [ 912.801617][T17793] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4335'. [ 914.668114][T17781] netlink: 'syz.1.4332': attribute type 33 has an invalid length. [ 914.676407][T17781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4332'. [ 915.418849][T17814] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4341'. [ 915.654903][T17821] netlink: 'syz.4.4344': attribute type 22 has an invalid length. [ 915.685181][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4344'. [ 915.925081][T17826] netlink: 'syz.0.4347': attribute type 33 has an invalid length. [ 915.933212][T17826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4347'. [ 916.047926][T17829] netlink: 'syz.3.4348': attribute type 10 has an invalid length. [ 916.235540][T17829] bond0: (slave team0): Releasing backup interface [ 916.320157][T17840] netlink: 'syz.0.4350': attribute type 3 has an invalid length. [ 916.328797][T17840] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4350'. [ 916.387853][T17829] team0 (unregistering): Port device team_slave_0 removed [ 916.499920][T17829] team0 (unregistering): Port device team_slave_1 removed [ 916.584945][T17835] netlink: 'syz.4.4349': attribute type 29 has an invalid length. [ 917.473055][T17855] netlink: 'syz.0.4352': attribute type 22 has an invalid length. [ 917.491247][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 918.207935][T17881] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4363'. [ 918.518118][T17883] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4360'. [ 921.582442][T17895] netlink: 'syz.1.4366': attribute type 10 has an invalid length. [ 923.266867][T17895] team0 (unregistering): Port device team_slave_0 removed [ 923.316624][T17895] team0 (unregistering): Port device team_slave_1 removed [ 923.357287][T17919] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.4372'. [ 923.400385][T17919] netlink: zone id is out of range [ 923.421177][T17919] netlink: zone id is out of range [ 923.441785][T17919] netlink: get zone limit has 8 unknown bytes [ 924.095311][T17941] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4377'. [ 924.634371][T17948] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4380'. [ 924.646318][T17948] bridge_slave_1: default FDB implementation only supports local addresses [ 927.334250][T17979] netlink: 'syz.3.4388': attribute type 29 has an invalid length. [ 928.819830][T17991] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4393'. [ 928.850719][T17991] bridge_slave_1: default FDB implementation only supports local addresses [ 929.103147][T17994] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4394'. [ 931.480075][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.486490][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.035543][T18024] netlink: 'syz.2.4402': attribute type 33 has an invalid length. [ 932.053557][T18024] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4402'. [ 932.193082][T18032] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4406'. [ 932.274962][T18034] netlink: 'syz.1.4405': attribute type 29 has an invalid length. [ 933.782854][T18057] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4410'. [ 935.152672][T18069] netlink: 'syz.1.4419': attribute type 33 has an invalid length. [ 935.164046][T18069] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4419'. [ 935.396764][T18077] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4421'. [ 936.529664][T18089] netlink: 'syz.4.4424': attribute type 29 has an invalid length. [ 936.863267][T18097] netlink: 'syz.1.4428': attribute type 3 has an invalid length. [ 936.872113][T18097] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4428'. [ 938.393542][T18102] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4430'. [ 938.419036][T18108] netlink: 'syz.4.4431': attribute type 33 has an invalid length. [ 938.463839][T18108] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4431'. [ 938.532537][T18106] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4429'. [ 941.753025][T18132] netlink: 'syz.3.4440': attribute type 3 has an invalid length. [ 941.790700][T18132] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4440'. [ 941.945426][T18143] netlink: 'syz.2.4441': attribute type 29 has an invalid length. [ 943.152626][T18158] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4448'. [ 948.334936][T18207] netlink: 'syz.0.4461': attribute type 29 has an invalid length. [ 951.791727][T18228] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4463'. [ 954.559191][T18250] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4481'. [ 955.260921][T18253] netlink: 'syz.3.4473': attribute type 3 has an invalid length. [ 955.295645][T18253] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4473'. [ 957.475062][T18274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4477'. [ 957.493120][T18274] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 957.511365][T18274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 957.528585][T18265] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4487'. [ 962.567587][T18317] netlink: 'syz.0.4491': attribute type 29 has an invalid length. [ 962.915337][T18334] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4494'. [ 962.977760][T18334] delete_channel: no stack [ 963.038374][T18331] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4495'. [ 964.649533][T18344] netlink: 'syz.2.4498': attribute type 33 has an invalid length. [ 964.666827][T18344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4498'. [ 966.574655][T18356] netlink: 'syz.1.4499': attribute type 21 has an invalid length. [ 966.582659][T18356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4499'. [ 966.643215][T18360] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4503'. [ 970.041133][T18379] netlink: 'syz.0.4507': attribute type 29 has an invalid length. [ 970.408452][T18399] netlink: 'syz.1.4513': attribute type 33 has an invalid length. [ 970.462633][T18399] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4513'. [ 970.921145][T18404] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4510'. [ 973.579772][T18416] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4516'. [ 974.183136][T18422] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4521'. [ 974.406552][T18425] netlink: 'syz.3.4519': attribute type 21 has an invalid length. [ 974.426653][T18425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4519'. [ 974.664998][T18427] netlink: 'syz.1.4522': attribute type 29 has an invalid length. [ 974.872378][T18438] netlink: 'syz.3.4525': attribute type 33 has an invalid length. [ 974.881282][T18438] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4525'. [ 975.020051][T18433] bond0: (slave team0): Error: Slave device does not support XDP [ 975.135160][T18443] delete_channel: no stack [ 975.749427][T18442] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4527'. [ 977.276530][T18458] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4532'. [ 977.290576][T18458] bridge_slave_1: default FDB implementation only supports local addresses [ 977.301306][T18466] netlink: 'syz.0.4535': attribute type 21 has an invalid length. [ 977.352550][T18466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4535'. [ 977.594600][T18478] netlink: 'syz.3.4537': attribute type 33 has an invalid length. [ 977.650380][T18478] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4537'. [ 977.795065][T18472] bond0: (slave team0): Error: Slave device does not support XDP [ 978.256410][T18489] delete_channel: no stack [ 979.535103][T18491] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4541'. [ 979.565629][T18492] netlink: 'syz.0.4539': attribute type 29 has an invalid length. [ 979.982446][T18499] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4543'. [ 980.035473][T18499] delete_channel: no stack [ 980.175476][T18503] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4553'. [ 980.478679][T18515] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4548'. [ 980.630796][T18514] netlink: 'syz.4.4549': attribute type 3 has an invalid length. [ 980.694726][T18514] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4549'. [ 980.760776][T18518] netlink: 'syz.3.4550': attribute type 21 has an invalid length. [ 980.900982][T18518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4550'. [ 981.364802][T18525] netlink: 'syz.4.4552': attribute type 33 has an invalid length. [ 981.372721][T18525] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4552'. [ 981.532093][T18527] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4554'. [ 981.599129][T18527] delete_channel: no stack [ 981.646163][T18529] netlink: 'syz.4.4555': attribute type 3 has an invalid length. [ 981.697298][T18529] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4555'. [ 981.998219][T18546] netlink: 'syz.1.4556': attribute type 29 has an invalid length. [ 984.169411][T18570] netlink: 'syz.2.4565': attribute type 33 has an invalid length. [ 984.185601][T18570] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4565'. [ 984.432206][T18578] netlink: 'syz.2.4567': attribute type 21 has an invalid length. [ 984.494574][T18580] netlink: 'syz.3.4568': attribute type 3 has an invalid length. [ 984.516480][T18578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4567'. [ 984.535467][T18580] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4568'. [ 984.685116][T18588] netlink: 'syz.0.4570': attribute type 3 has an invalid length. [ 984.693736][T18588] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4570'. [ 985.426265][T18592] netlink: 'syz.2.4573': attribute type 29 has an invalid length. [ 985.707012][T18600] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4575'. [ 985.823144][T18600] delete_channel: no stack [ 987.444183][T18617] netlink: 'syz.2.4579': attribute type 33 has an invalid length. [ 987.472308][T18617] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4579'. [ 987.614974][T18628] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4583'. [ 987.648221][T18628] delete_channel: no stack [ 987.747117][T18631] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4584'. [ 987.763536][T18631] bridge_slave_1: default FDB implementation only supports local addresses [ 988.635524][T18648] netlink: 'syz.3.4589': attribute type 29 has an invalid length. [ 990.443419][T18657] netlink: 'syz.1.4594': attribute type 33 has an invalid length. [ 990.470649][T18657] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4594'. [ 990.502560][T18661] netlink: 'syz.2.4592': attribute type 3 has an invalid length. [ 990.554104][T18661] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4592'. [ 990.583754][T18664] netlink: 'syz.3.4595': attribute type 3 has an invalid length. [ 990.606856][T18664] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4595'. [ 990.695225][T18666] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4596'. [ 990.801877][T18672] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4597'. [ 991.856136][T18696] netlink: 'syz.4.4605': attribute type 29 has an invalid length. [ 992.614985][T18710] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4608'. [ 992.924346][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.930862][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.834259][T18721] netlink: 'syz.1.4610': attribute type 3 has an invalid length. [ 993.858716][T18721] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4610'. [ 994.097019][T18726] netlink: 'syz.2.4613': attribute type 3 has an invalid length. [ 994.106484][T18726] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4613'. [ 994.315416][T18733] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4615'. [ 994.350490][T18733] bridge_slave_1: default FDB implementation only supports local addresses [ 995.679561][T18753] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4622'. [ 995.690708][T18758] netlink: 'syz.3.4620': attribute type 29 has an invalid length. [ 996.402015][T18781] netlink: 'syz.0.4629': attribute type 1 has an invalid length. [ 999.696299][T18804] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1001.432182][T18819] netlink: 'syz.3.4637': attribute type 29 has an invalid length. [ 1002.370714][T18834] netlink: 'syz.4.4641': attribute type 25 has an invalid length. [ 1002.413887][T18834] netlink: 'syz.4.4641': attribute type 29 has an invalid length. [ 1002.451265][T18835] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1006.095864][T18851] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1006.275241][T18855] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4648'. [ 1007.034801][T18873] netlink: 'syz.1.4654': attribute type 29 has an invalid length. [ 1007.919005][T18890] delete_channel: no stack [ 1008.445599][T18889] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1011.590940][T18898] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4662'. [ 1011.615505][T18894] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1012.351893][T18925] device macsec0 entered promiscuous mode [ 1013.540216][T18933] netlink: 'syz.4.4669': attribute type 29 has an invalid length. [ 1013.924744][T18952] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1014.141581][T18958] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 1014.161037][T18958] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4675'. [ 1014.235576][T18958] netlink: 'syz.3.4675': attribute type 29 has an invalid length. [ 1014.771408][T18953] mac80211_hwsim hwsim80 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1014.797298][T18958] netlink: 'syz.3.4675': attribute type 29 has an invalid length. [ 1015.232910][T18972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.285027][T18972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.424529][T18985] delete_channel: no stack [ 1017.539272][T18972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.560226][T18972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.624654][T18972] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1017.653280][T18972] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1017.662570][T18972] batman_adv: batadv0: Interface deactivated: vlan1 [ 1017.687573][T18972] batman_adv: batadv0: Removing interface: vlan1 [ 1017.944452][T18977] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4683'. [ 1017.953737][T18990] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4680'. [ 1017.963143][T18987] netlink: 'syz.0.4684': attribute type 29 has an invalid length. [ 1018.180437][T19003] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1018.205427][T19004] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1018.220006][T19003] delete_channel: no stack [ 1018.264957][T18999] device macsec0 entered promiscuous mode [ 1018.753788][ T5000] wlan1: Trigger new scan to find an IBSS to join [ 1018.920497][T19027] netlink: 'syz.3.4697': attribute type 25 has an invalid length. [ 1018.929492][T19027] netlink: 'syz.3.4697': attribute type 29 has an invalid length. [ 1018.945649][T19027] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4697'. [ 1019.221680][T19029] netlink: 'syz.3.4698': attribute type 29 has an invalid length. [ 1019.575873][T19034] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4699'. [ 1019.591440][T19034] delete_channel: no stack [ 1019.948567][T19042] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1020.097578][T19045] device macsec0 entered promiscuous mode [ 1020.105333][T19049] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4703'. [ 1020.144020][T19049] delete_channel: no stack [ 1021.077392][T19078] netlink: 'syz.2.4714': attribute type 29 has an invalid length. [ 1021.793655][ T4319] wlan1: Trigger new scan to find an IBSS to join [ 1022.685073][ T30] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1022.768891][T19084] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1022.805160][T19084] delete_channel: no stack [ 1022.859357][T19090] netlink: 'syz.1.4718': attribute type 21 has an invalid length. [ 1022.912545][T19090] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1022.940377][T19085] bond0: (slave team0): Error: Slave device does not support XDP [ 1022.981046][T19096] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4720'. [ 1023.002480][T19098] FAULT_INJECTION: forcing a failure. [ 1023.002480][T19098] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.017112][T19098] CPU: 0 PID: 19098 Comm: syz.4.4721 Not tainted syzkaller #0 [ 1023.024639][T19098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1023.034741][T19098] Call Trace: [ 1023.038061][T19098] [ 1023.041050][T19098] dump_stack_lvl+0x188/0x24e [ 1023.045786][T19098] ? show_regs_print_info+0x12/0x12 [ 1023.051040][T19098] ? load_image+0x410/0x410 [ 1023.055615][T19098] should_fail_ex+0x390/0x4c0 [ 1023.060365][T19098] should_failslab+0x5/0x20 [ 1023.064913][T19098] slab_pre_alloc_hook+0x59/0x300 [ 1023.069994][T19098] ? arch_stack_walk+0xf2/0x140 [ 1023.075024][T19098] kmem_cache_alloc+0x56/0x2f0 [ 1023.079846][T19098] ? dst_alloc+0x101/0x160 [ 1023.084359][T19098] dst_alloc+0x101/0x160 [ 1023.088672][T19098] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1023.094808][T19098] ? ip_route_output_key_hash+0x139/0x330 [ 1023.098487][T19096] delete_channel: no stack [ 1023.100569][T19098] ip_route_output_key_hash+0x1ef/0x330 [ 1023.100635][T19098] ? ___sys_sendmsg+0x2a2/0x360 [ 1023.115548][T19098] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 1023.120669][T19098] ? ip_route_input_rcu+0x30a0/0x30a0 [ 1023.126100][T19098] ? make_kuid+0x1d7/0x680 [ 1023.130580][T19098] ? __put_user_ns+0x50/0x50 [ 1023.135230][T19098] ip_route_output_flow+0x26/0x150 [ 1023.140400][T19098] rxrpc_init_peer+0x2be/0x730 [ 1023.145225][T19098] ? rxrpc_new_incoming_peer+0x590/0x590 [ 1023.150928][T19098] ? __raw_spin_lock_init+0x41/0x100 [ 1023.156279][T19098] ? rxrpc_lookup_peer+0x41b/0x800 [ 1023.161475][T19098] rxrpc_lookup_peer+0x42b/0x800 [ 1023.166476][T19098] rxrpc_connect_call+0x122/0x1500 [ 1023.171644][T19098] ? lock_chain_count+0x20/0x20 [ 1023.176556][T19098] ? __local_bh_enable_ip+0x136/0x1c0 [ 1023.182016][T19098] ? rxrpc_put_bundle+0xb0/0xb0 [ 1023.186919][T19098] ? __local_bh_enable_ip+0x136/0x1c0 [ 1023.192348][T19098] ? _local_bh_enable+0xa0/0xa0 [ 1023.197254][T19098] rxrpc_new_client_call+0x87e/0xe10 [ 1023.202601][T19098] ? rxrpc_do_sendmsg+0xbd7/0x10e0 [ 1023.207776][T19098] rxrpc_do_sendmsg+0xbd7/0x10e0 [ 1023.212765][T19098] ? rxrpc_process_local_events+0xa40/0xa40 [ 1023.218735][T19098] ? rxrpc_look_up_server_security+0x530/0x530 [ 1023.224957][T19098] ? rxrpc_sendmsg+0x45b/0x890 [ 1023.229775][T19098] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1023.235103][T19098] ? rxrpc_getsockopt+0x150/0x150 [ 1023.240172][T19098] ____sys_sendmsg+0x5ed/0x9a0 [ 1023.244999][T19098] ? __sys_sendmsg_sock+0x30/0x30 [ 1023.250061][T19098] ? __import_iovec+0x306/0x510 [ 1023.254969][T19098] ? import_iovec+0x6f/0xa0 [ 1023.259520][T19098] ___sys_sendmsg+0x2a2/0x360 [ 1023.264284][T19098] ? __sys_sendmsg+0x2a0/0x2a0 [ 1023.269131][T19098] ? __lock_acquire+0x7bd0/0x7bd0 [ 1023.274230][T19098] __se_sys_sendmsg+0x1c3/0x2b0 [ 1023.279133][T19098] ? __x64_sys_sendmsg+0x80/0x80 [ 1023.284123][T19098] ? lockdep_hardirqs_on+0x94/0x140 [ 1023.289372][T19098] do_syscall_64+0x4c/0xa0 [ 1023.293837][T19098] ? clear_bhb_loop+0x60/0xb0 [ 1023.298554][T19098] ? clear_bhb_loop+0x60/0xb0 [ 1023.303278][T19098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.309228][T19098] RIP: 0033:0x7f034ed9ce59 [ 1023.313679][T19098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.333586][T19098] RSP: 002b:00007f034fce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.342046][T19098] RAX: ffffffffffffffda RBX: 00007f034f015fa0 RCX: 00007f034ed9ce59 [ 1023.350070][T19098] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1023.358081][T19098] RBP: 00007f034fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.366094][T19098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1023.374105][T19098] R13: 00007f034f016038 R14: 00007f034f015fa0 R15: 00007ffe3cf77178 [ 1023.382215][T19098] [ 1024.065437][T19129] netlink: 'syz.3.4726': attribute type 29 has an invalid length. [ 1027.297778][T19220] netlink: 'syz.3.4733': attribute type 21 has an invalid length. [ 1027.306919][T19220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4733'. [ 1027.487086][T19215] netlink: 'syz.4.4732': attribute type 1 has an invalid length. [ 1027.514084][T19215] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1027.557321][T19218] netlink: 'syz.4.4732': attribute type 29 has an invalid length. [ 1027.581044][T19218] netlink: 'syz.4.4732': attribute type 29 has an invalid length. [ 1028.298136][T19232] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1028.331647][T19232] delete_channel: no stack [ 1028.470106][T19234] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1028.479643][T19239] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4741'. [ 1029.159736][T19258] netlink: 'syz.3.4747': attribute type 21 has an invalid length. [ 1029.199173][T19258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4747'. [ 1029.460776][T19264] netlink: 'syz.0.4749': attribute type 1 has an invalid length. [ 1029.479476][T19264] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.4749'. [ 1031.494202][T19276] netlink: 'syz.2.4753': attribute type 1 has an invalid length. [ 1031.502980][T19276] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4753'. [ 1031.526847][T19276] netlink: 'syz.2.4753': attribute type 29 has an invalid length. [ 1031.542318][T19276] netlink: 'syz.2.4753': attribute type 29 has an invalid length. [ 1032.644269][T19288] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4755'. [ 1032.684366][T19290] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1032.723774][T19291] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1032.739299][T19291] delete_channel: no stack [ 1033.201007][T19308] netlink: 'syz.4.4764': attribute type 29 has an invalid length. [ 1035.018529][T19330] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1035.224888][T19339] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4773'. [ 1036.275149][T19347] netlink: 'syz.3.4776': attribute type 29 has an invalid length. [ 1039.006212][T19420] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1040.196007][T19418] netlink: 'syz.3.4783': attribute type 29 has an invalid length. [ 1040.219868][T19418] netlink: 'syz.3.4783': attribute type 29 has an invalid length. [ 1040.230976][T19428] netlink: 'syz.3.4783': attribute type 29 has an invalid length. [ 1040.942393][T19437] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4788'. [ 1044.030333][T19493] netlink: 'syz.1.4796': attribute type 3 has an invalid length. [ 1044.050040][T19493] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1044.121066][T19501] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4795'. [ 1044.248457][T19504] netlink: 'syz.3.4797': attribute type 21 has an invalid length. [ 1044.364213][T19504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1044.541333][T19505] netlink: 'syz.0.4793': attribute type 29 has an invalid length. [ 1044.887588][T19511] netlink: 'syz.2.4798': attribute type 3 has an invalid length. [ 1044.896025][T19511] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1048.235168][T19552] netlink: 'syz.1.4809': attribute type 33 has an invalid length. [ 1048.266424][T19550] netlink: 'syz.0.4811': attribute type 3 has an invalid length. [ 1048.292195][T19550] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1048.345937][T19553] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1048.416955][T19557] netlink: 'syz.4.4812': attribute type 21 has an invalid length. [ 1048.451280][T19557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1048.698320][T19566] netlink: 'syz.1.4813': attribute type 29 has an invalid length. [ 1050.059187][T19619] netlink: 'syz.0.4825': attribute type 33 has an invalid length. [ 1050.131100][T19623] netlink: 'syz.1.4826': attribute type 3 has an invalid length. [ 1050.141679][T19623] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1050.335005][T19633] netlink: 'syz.0.4827': attribute type 21 has an invalid length. [ 1050.343102][T19633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4827'. [ 1051.850023][T19651] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1051.911301][T19652] netlink: 'syz.4.4832': attribute type 29 has an invalid length. [ 1052.117868][T19663] netlink: 'syz.3.4837': attribute type 33 has an invalid length. [ 1052.221155][T19660] FAULT_INJECTION: forcing a failure. [ 1052.221155][T19660] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.234185][T19660] CPU: 1 PID: 19660 Comm: syz.4.4836 Not tainted syzkaller #0 [ 1052.241708][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.251819][T19660] Call Trace: [ 1052.255197][T19660] [ 1052.258189][T19660] dump_stack_lvl+0x188/0x24e [ 1052.262938][T19660] ? show_regs_print_info+0x12/0x12 [ 1052.268202][T19660] ? load_image+0x410/0x410 [ 1052.272771][T19660] ? __rt6_find_exception_rcu+0x138/0x4d0 [ 1052.278551][T19660] should_fail_ex+0x390/0x4c0 [ 1052.283292][T19660] should_failslab+0x5/0x20 [ 1052.287846][T19660] slab_pre_alloc_hook+0x59/0x300 [ 1052.292924][T19660] kmem_cache_alloc+0x56/0x2f0 [ 1052.297752][T19660] ? dst_alloc+0x101/0x160 [ 1052.302235][T19660] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 1052.307924][T19660] dst_alloc+0x101/0x160 [ 1052.312231][T19660] ip6_pol_route+0x98d/0x12a0 [ 1052.316973][T19660] ? ip6_pol_route+0x16d/0x12a0 [ 1052.321890][T19660] ? trace_fib6_table_lookup+0x250/0x250 [ 1052.327663][T19660] fib6_rule_lookup+0x35c/0x5e0 [ 1052.332581][T19660] ? ip6_route_output_flags_noref+0x390/0x390 [ 1052.338711][T19660] ? fib6_lookup+0x2d0/0x2d0 [ 1052.343369][T19660] ? dev_get_by_index_rcu+0xea/0x100 [ 1052.348718][T19660] ? __ipv6_addr_type+0xff/0x2e0 [ 1052.353716][T19660] ? ip6_route_output_flags_noref+0x1b9/0x390 [ 1052.359858][T19660] ip6_route_output_flags+0xe3/0x330 [ 1052.365200][T19660] ? ip6_route_output_flags+0x27/0x330 [ 1052.370726][T19660] icmpv6_xrlim_allow+0xbd/0x640 [ 1052.375720][T19660] ? in6_dev_put+0x80/0x80 [ 1052.380187][T19660] ? make_kuid+0x1d7/0x680 [ 1052.384659][T19660] ? dev_put+0x70/0x70 [ 1052.388778][T19660] ? __put_user_ns+0x50/0x50 [ 1052.393431][T19660] ? bpf_lsm_xfrm_decode_session+0x5/0x10 [ 1052.399216][T19660] icmp6_send+0xf13/0x1a60 [ 1052.403715][T19660] ? icmp6_send+0xb7d/0x1a60 [ 1052.408367][T19660] ? icmpv6_push_pending_frames+0x4b0/0x4b0 [ 1052.414324][T19660] ? trace_event_raw_event_fib6_table_lookup+0x780/0xaf0 [ 1052.421539][T19660] ? ip6_neigh_lookup+0x148/0x480 [ 1052.426621][T19660] ? rt6_uncached_list_del+0x170/0x170 [ 1052.432147][T19660] ip6_link_failure+0x37/0x4c0 [ 1052.436967][T19660] ? ip6_negative_advice+0x310/0x310 [ 1052.442397][T19660] ip_tunnel_xmit+0x1f50/0x25d0 [ 1052.447397][T19660] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1052.453716][T19660] ? ip_tunnel_xmit+0x100/0x25d0 [ 1052.458718][T19660] ? netif_skb_features+0xafa/0x1630 [ 1052.464061][T19660] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1052.469158][T19660] ? verify_lock_unused+0x140/0x140 [ 1052.474412][T19660] ? skb_push+0x8a/0xd0 [ 1052.478630][T19660] ? gre_build_header+0x251/0x9a0 [ 1052.483723][T19660] gre_tap_xmit+0x519/0x710 [ 1052.488289][T19660] dev_hard_start_xmit+0x292/0x8b0 [ 1052.493475][T19660] sch_direct_xmit+0x24d/0x4a0 [ 1052.498304][T19660] ? do_raw_spin_lock+0x2f0/0x2f0 [ 1052.503423][T19660] ? mrp_pdu_append_vecattr_event+0x1670/0x1670 [ 1052.509721][T19660] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1052.515774][T19660] __dev_queue_xmit+0x180d/0x3810 [ 1052.520871][T19660] ? __dev_queue_xmit+0x281/0x3810 [ 1052.526063][T19660] ? netdev_core_pick_tx+0x360/0x360 [ 1052.531403][T19660] ? kasan_check_range+0xc/0x290 [ 1052.536407][T19660] ? eth_header+0x117/0x200 [ 1052.541053][T19660] ? memcpy+0x3c/0x60 [ 1052.545085][T19660] ? eth_header+0x117/0x200 [ 1052.549650][T19660] ? llc_sysctl_exit+0x60/0x60 [ 1052.554465][T19660] ? neigh_resolve_output+0x5f1/0x700 [ 1052.559927][T19660] ip6_finish_output2+0xdc6/0x15c0 [ 1052.565116][T19660] ? ip6_finish_output2+0x58f/0x15c0 [ 1052.570468][T19660] ? nf_hook+0x390/0x390 [ 1052.574765][T19660] ? ip6_mtu+0x31a/0x3f0 [ 1052.579061][T19660] ? ip6_finish_output+0x563/0x7f0 [ 1052.584233][T19660] rawv6_send_hdrinc+0xd9f/0x16a0 [ 1052.589320][T19660] ? rawv6_send_hdrinc+0xb17/0x16a0 [ 1052.594587][T19660] ? rawv6_probe_proto_opt+0x300/0x300 [ 1052.600101][T19660] ? txopt_get+0x340/0x3f0 [ 1052.604582][T19660] ? rawv6_push_pending_frames+0x920/0x920 [ 1052.610440][T19660] ? fl6_sock_lookup+0xc0/0xc0 [ 1052.615272][T19660] rawv6_sendmsg+0x11a7/0x1710 [ 1052.620104][T19660] ? perf_trace_preemptirq_template+0x268/0x320 [ 1052.626418][T19660] ? compat_rawv6_ioctl+0x60/0x60 [ 1052.631514][T19660] ? lock_chain_count+0x20/0x20 [ 1052.636433][T19660] ? rcu_is_watching+0x11/0xa0 [ 1052.641285][T19660] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1052.647523][T19660] ? inet_sendmsg+0x7a/0x2a0 [ 1052.652171][T19660] ? inet_send_prepare+0x250/0x250 [ 1052.657341][T19660] ____sys_sendmsg+0x5ed/0x9a0 [ 1052.662178][T19660] ? __sys_sendmsg_sock+0x30/0x30 [ 1052.667254][T19660] ? __import_iovec+0x306/0x510 [ 1052.672168][T19660] ? import_iovec+0x6f/0xa0 [ 1052.676731][T19660] ___sys_sendmsg+0x2a2/0x360 [ 1052.681495][T19660] ? __sys_sendmsg+0x2a0/0x2a0 [ 1052.686386][T19660] ? ktime_get+0x7b/0x270 [ 1052.690806][T19660] __se_sys_sendmsg+0x1c3/0x2b0 [ 1052.695719][T19660] ? perf_trace_preemptirq_template+0x268/0x320 [ 1052.702030][T19660] ? __x64_sys_sendmsg+0x80/0x80 [ 1052.707049][T19660] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.712320][T19660] do_syscall_64+0x4c/0xa0 [ 1052.716797][T19660] ? clear_bhb_loop+0x60/0xb0 [ 1052.721532][T19660] ? clear_bhb_loop+0x60/0xb0 [ 1052.726272][T19660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.732227][T19660] RIP: 0033:0x7f034ed9ce59 [ 1052.736697][T19660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.756364][T19660] RSP: 002b:00007f034fce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.764843][T19660] RAX: ffffffffffffffda RBX: 00007f034f015fa0 RCX: 00007f034ed9ce59 [ 1052.772868][T19660] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1052.780899][T19660] RBP: 00007f034fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.788937][T19660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.796964][T19660] R13: 00007f034f016038 R14: 00007f034f015fa0 R15: 00007ffe3cf77178 [ 1052.805016][T19660] [ 1054.356109][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.362581][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.413448][T19704] bond0: (slave team0): Error: Slave device does not support XDP [ 1056.110373][T19710] netlink: 'syz.0.4850': attribute type 33 has an invalid length. [ 1056.122144][T19709] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1056.220494][T19712] netlink: 'syz.4.4853': attribute type 1 has an invalid length. [ 1056.273535][T10665] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1057.217536][T19729] netlink: 'syz.2.4858': attribute type 21 has an invalid length. [ 1057.237107][T19729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1057.260257][T19738] netlink: 'syz.1.4862': attribute type 21 has an invalid length. [ 1058.371847][T19749] netlink: 'syz.0.4865': attribute type 33 has an invalid length. [ 1058.380100][T19753] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4866'. [ 1058.420910][T19753] bridge_slave_1: default FDB implementation only supports local addresses [ 1058.556385][T19755] netlink: 'syz.0.4867': attribute type 3 has an invalid length. [ 1058.586063][T19755] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1058.738540][T19764] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1058.813197][T19764] netlink: 'syz.2.4871': attribute type 2 has an invalid length. [ 1058.844189][T19764] netlink: 'syz.2.4871': attribute type 8 has an invalid length. [ 1058.895812][T19764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1058.935964][T19767] netlink: 'syz.2.4871': attribute type 2 has an invalid length. [ 1058.973696][T19767] netlink: 'syz.2.4871': attribute type 8 has an invalid length. [ 1059.079202][T19767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1059.144447][T19774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1059.261640][T19777] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4876'. [ 1064.312100][T19801] validate_nla: 4 callbacks suppressed [ 1064.312123][T19801] netlink: 'syz.4.4885': attribute type 29 has an invalid length. [ 1064.362307][T19798] netlink: 'syz.1.4883': attribute type 3 has an invalid length. [ 1064.371558][T19798] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1064.382889][T19801] netlink: 'syz.4.4885': attribute type 29 has an invalid length. [ 1064.440898][T19803] netlink: 'syz.4.4885': attribute type 29 has an invalid length. [ 1065.114670][T19814] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1065.172182][T19813] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1065.202579][T19813] device batadv_slave_1 entered promiscuous mode [ 1065.229477][T19814] netlink: 'syz.3.4888': attribute type 2 has an invalid length. [ 1065.246130][T19814] netlink: 'syz.3.4888': attribute type 8 has an invalid length. [ 1065.255113][T19814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1065.285794][T19818] netlink: 'syz.3.4888': attribute type 11 has an invalid length. [ 1065.313881][T19818] netlink: 'syz.3.4888': attribute type 6 has an invalid length. [ 1065.337802][T19814] netlink: 'syz.3.4888': attribute type 2 has an invalid length. [ 1065.343831][T19818] netlink: 125060 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1065.384623][T19814] netlink: 'syz.3.4888': attribute type 8 has an invalid length. [ 1065.443976][T19814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1065.492414][T19825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4890'. [ 1065.788604][ T5480] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1066.151685][T19845] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4899'. [ 1066.389861][T19846] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1068.806392][T19867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4905'. [ 1069.560495][T19899] validate_nla: 8 callbacks suppressed [ 1069.560517][T19899] netlink: 'syz.3.4917': attribute type 21 has an invalid length. [ 1069.591677][T19899] __nla_validate_parse: 3 callbacks suppressed [ 1069.591701][T19899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4917'. [ 1070.379104][T19907] netlink: 'syz.4.4919': attribute type 3 has an invalid length. [ 1070.409277][T19907] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1070.435033][T19909] netlink: 'syz.2.4920': attribute type 29 has an invalid length. [ 1070.462763][T19909] netlink: 'syz.2.4920': attribute type 29 has an invalid length. [ 1070.527936][T19911] netlink: 'syz.2.4920': attribute type 29 has an invalid length. [ 1071.076665][T19921] netlink: 'syz.4.4922': attribute type 21 has an invalid length. [ 1071.101340][T19921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4922'. [ 1072.237799][T19930] netlink: 'syz.4.4926': attribute type 3 has an invalid length. [ 1072.252543][T19928] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1072.262206][T19930] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4926'. [ 1072.278789][T19928] bridge_slave_1: default FDB implementation only supports local addresses [ 1072.326948][T19933] netlink: 'syz.2.4927': attribute type 33 has an invalid length. [ 1072.547378][T19943] netlink: 'syz.3.4931': attribute type 1 has an invalid length. [ 1072.978697][T19950] netlink: 463 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1073.389859][T19966] netlink: 'syz.0.4936': attribute type 21 has an invalid length. [ 1073.446764][T19964] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1073.486957][T19966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4936'. [ 1074.158526][T19976] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1074.177019][T19976] bridge_slave_1: default FDB implementation only supports local addresses [ 1075.305753][T19982] validate_nla: 1 callbacks suppressed [ 1075.305773][T19982] netlink: 'syz.3.4942': attribute type 33 has an invalid length. [ 1075.326251][T19980] netlink: 'syz.1.4943': attribute type 29 has an invalid length. [ 1075.348337][T19980] netlink: 'syz.1.4943': attribute type 29 has an invalid length. [ 1075.368573][T19986] netlink: 'syz.1.4943': attribute type 29 has an invalid length. [ 1075.402865][T19987] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4946'. [ 1075.617502][T19998] netlink: 'syz.0.4950': attribute type 3 has an invalid length. [ 1075.633787][T19998] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1076.099152][T20011] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1076.132978][T20011] netlink: 'syz.0.4952': attribute type 2 has an invalid length. [ 1076.142942][T20011] netlink: 'syz.0.4952': attribute type 8 has an invalid length. [ 1076.152325][T20011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1076.248724][T20011] netlink: 'syz.0.4952': attribute type 11 has an invalid length. [ 1076.261219][T20011] netlink: 'syz.0.4952': attribute type 6 has an invalid length. [ 1076.270200][T20011] netlink: 125060 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1076.281724][T20012] netlink: 'syz.0.4952': attribute type 2 has an invalid length. [ 1076.298378][T20012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1076.946032][T20022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4955'. [ 1077.176099][T20023] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1077.188142][T20023] bridge_slave_1: default FDB implementation only supports local addresses [ 1077.220888][T20029] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1077.248376][T20029] device batadv_slave_1 entered promiscuous mode [ 1077.652085][T20034] delete_channel: no stack [ 1078.759483][T20033] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1080.375190][T20082] validate_nla: 12 callbacks suppressed [ 1080.375543][T20082] netlink: 'syz.1.4975': attribute type 3 has an invalid length. [ 1080.472900][T20083] netlink: 'syz.0.4973': attribute type 21 has an invalid length. [ 1080.484759][T20083] __nla_validate_parse: 8 callbacks suppressed [ 1080.484780][T20083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4973'. [ 1080.516805][T20084] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4974'. [ 1080.544222][T20084] device batadv_slave_1 entered promiscuous mode [ 1080.798807][T20096] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1080.881842][T20096] delete_channel: no stack [ 1083.969507][T20112] netlink: 'syz.0.4981': attribute type 33 has an invalid length. [ 1084.121087][T20121] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4985'. [ 1084.431674][T20125] netlink: 'syz.0.4986': attribute type 3 has an invalid length. [ 1084.476922][T20124] netlink: 'syz.2.4987': attribute type 3 has an invalid length. [ 1084.489465][T20125] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4986'. [ 1084.502422][T20124] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1084.587985][T20132] netlink: 'syz.1.4989': attribute type 21 has an invalid length. [ 1084.628378][T20132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4989'. [ 1084.839494][T20136] bond0: (slave team0): Error: Slave device does not support XDP [ 1085.298040][T20151] netlink: 'syz.0.5003': attribute type 21 has an invalid length. [ 1085.316612][T20151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5003'. [ 1085.484800][T20160] netlink: 'syz.3.4995': attribute type 33 has an invalid length. [ 1086.261556][T20168] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4997'. [ 1086.271140][T20168] bridge_slave_1: default FDB implementation only supports local addresses [ 1086.701037][T20172] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5011'. [ 1086.846073][T20179] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5000'. [ 1086.862964][T20179] delete_channel: no stack [ 1087.363494][T20183] netlink: 'syz.4.5001': attribute type 3 has an invalid length. [ 1087.404277][T20183] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1087.625835][T20195] netlink: 'syz.3.5017': attribute type 3 has an invalid length. [ 1087.642032][T20192] netlink: 'syz.2.5005': attribute type 1 has an invalid length. [ 1087.655936][T20195] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5017'. [ 1087.999162][T20207] netlink: 'syz.0.5007': attribute type 29 has an invalid length. [ 1088.045170][T20206] netlink: 'syz.4.5010': attribute type 21 has an invalid length. [ 1088.053130][T20206] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1088.274641][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1088.351166][T20222] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1088.361122][T20222] bridge_slave_1: default FDB implementation only supports local addresses [ 1091.788677][T20241] FAULT_INJECTION: forcing a failure. [ 1091.788677][T20241] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.834572][T20241] CPU: 0 PID: 20241 Comm: syz.0.5024 Not tainted syzkaller #0 [ 1091.842116][T20241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1091.852222][T20241] Call Trace: [ 1091.855555][T20241] [ 1091.858527][T20241] dump_stack_lvl+0x188/0x24e [ 1091.863283][T20241] ? show_regs_print_info+0x12/0x12 [ 1091.868534][T20241] ? load_image+0x410/0x410 [ 1091.873100][T20241] ? __might_sleep+0xd0/0xd0 [ 1091.877746][T20241] ? __lock_acquire+0x7bd0/0x7bd0 [ 1091.882839][T20241] should_fail_ex+0x390/0x4c0 [ 1091.887575][T20241] should_failslab+0x5/0x20 [ 1091.892120][T20241] slab_pre_alloc_hook+0x59/0x300 [ 1091.897197][T20241] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1091.903680][T20241] __kmem_cache_alloc_node+0x4f/0x270 [ 1091.909113][T20241] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1091.915590][T20241] __kmalloc+0xa3/0x240 [ 1091.919815][T20241] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1091.926127][T20241] ? xdp_convert_buff_to_md+0x200/0x200 [ 1091.931745][T20241] ? __fget_files+0x28/0x460 [ 1091.936403][T20241] ? __fget_files+0x3fc/0x460 [ 1091.941148][T20241] ? xdp_convert_buff_to_md+0x200/0x200 [ 1091.946789][T20241] bpf_prog_test_run+0x31c/0x390 [ 1091.951796][T20241] __sys_bpf+0x62b/0x780 [ 1091.956120][T20241] ? bpf_link_show_fdinfo+0x380/0x380 [ 1091.961567][T20241] ? lock_chain_count+0x20/0x20 [ 1091.966492][T20241] __x64_sys_bpf+0x78/0x90 [ 1091.970975][T20241] do_syscall_64+0x4c/0xa0 [ 1091.975450][T20241] ? clear_bhb_loop+0x60/0xb0 [ 1091.980172][T20241] ? clear_bhb_loop+0x60/0xb0 [ 1091.984903][T20241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.990850][T20241] RIP: 0033:0x7f215499ce59 [ 1091.995307][T20241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.014962][T20241] RSP: 002b:00007f21558b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.023428][T20241] RAX: ffffffffffffffda RBX: 00007f2154c15fa0 RCX: 00007f215499ce59 [ 1092.031453][T20241] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 1092.039457][T20241] RBP: 00007f21558b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.047461][T20241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.055460][T20241] R13: 00007f2154c16038 R14: 00007f2154c15fa0 R15: 00007ffea5d71ce8 [ 1092.063482][T20241] [ 1092.086813][T20245] netlink: 'syz.2.5021': attribute type 3 has an invalid length. [ 1092.143593][T20245] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1092.392272][T20254] netlink: 'syz.0.5025': attribute type 1 has an invalid length. [ 1092.462019][T20259] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5028'. [ 1092.509836][T20259] bridge_slave_1: default FDB implementation only supports local addresses [ 1092.553618][T20257] netlink: 'syz.3.5027': attribute type 21 has an invalid length. [ 1092.571865][T20257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1092.848167][T20268] netlink: 'syz.1.5029': attribute type 29 has an invalid length. [ 1092.886954][T20267] netlink: 'syz.3.5031': attribute type 1 has an invalid length. [ 1094.447335][T20292] netlink: 'syz.2.5036': attribute type 29 has an invalid length. [ 1094.483743][T20296] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5041'. [ 1094.499750][T20296] bridge_slave_1: default FDB implementation only supports local addresses [ 1094.582648][T20298] netlink: 'syz.3.5042': attribute type 21 has an invalid length. [ 1094.610121][T20298] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5042'. [ 1094.708928][T20306] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1094.802625][T20308] netlink: 'syz.4.5045': attribute type 1 has an invalid length. [ 1094.959357][T20313] netlink: 'syz.1.5047': attribute type 1 has an invalid length. [ 1095.502173][T20331] netlink: 'syz.2.5056': attribute type 29 has an invalid length. [ 1095.750263][T20340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1097.688759][T20380] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5069'. [ 1098.158155][T20372] validate_nla: 4 callbacks suppressed [ 1098.158177][T20372] netlink: 'syz.3.5063': attribute type 29 has an invalid length. [ 1099.696786][T20388] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5070'. [ 1099.714899][T20388] device hsr_slave_0 left promiscuous mode [ 1099.731074][T20388] device hsr_slave_1 left promiscuous mode [ 1099.813231][T20397] netlink: 'syz.4.5074': attribute type 21 has an invalid length. [ 1099.828826][T20397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5074'. [ 1099.839717][T20410] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1099.863770][T20415] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1099.894228][T20415] bridge_slave_1: default FDB implementation only supports local addresses [ 1100.046194][T20421] netlink: 'syz.0.5077': attribute type 2 has an invalid length. [ 1101.626370][T20448] FAULT_INJECTION: forcing a failure. [ 1101.626370][T20448] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.640893][T20448] CPU: 0 PID: 20448 Comm: syz.4.5086 Not tainted syzkaller #0 [ 1101.648439][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1101.658549][T20448] Call Trace: [ 1101.661885][T20448] [ 1101.664859][T20448] dump_stack_lvl+0x188/0x24e [ 1101.669604][T20448] ? show_regs_print_info+0x12/0x12 [ 1101.674866][T20448] ? load_image+0x410/0x410 [ 1101.679453][T20448] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1101.685502][T20448] ? __lock_acquire+0x7bd0/0x7bd0 [ 1101.690601][T20448] should_fail_ex+0x390/0x4c0 [ 1101.695319][T20448] should_failslab+0x5/0x20 [ 1101.699852][T20448] slab_pre_alloc_hook+0x59/0x300 [ 1101.704923][T20448] kmem_cache_alloc+0x56/0x2f0 [ 1101.709715][T20448] ? __build_skb+0x27/0x3b0 [ 1101.714257][T20448] __build_skb+0x27/0x3b0 [ 1101.718700][T20448] ? build_skb+0x14/0x230 [ 1101.723065][T20448] build_skb+0x1e/0x230 [ 1101.727252][T20448] bpf_prog_test_run_skb+0x38d/0x18e0 [ 1101.732661][T20448] ? __fget_files+0x28/0x460 [ 1101.737285][T20448] ? __fget_files+0x3fc/0x460 [ 1101.742013][T20448] ? cpu_online+0xa0/0xa0 [ 1101.746462][T20448] bpf_prog_test_run+0x31c/0x390 [ 1101.751438][T20448] __sys_bpf+0x62b/0x780 [ 1101.755719][T20448] ? bpf_link_show_fdinfo+0x380/0x380 [ 1101.761146][T20448] ? lock_chain_count+0x20/0x20 [ 1101.766050][T20448] __x64_sys_bpf+0x78/0x90 [ 1101.770508][T20448] do_syscall_64+0x4c/0xa0 [ 1101.774991][T20448] ? clear_bhb_loop+0x60/0xb0 [ 1101.779700][T20448] ? clear_bhb_loop+0x60/0xb0 [ 1101.784412][T20448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1101.790353][T20448] RIP: 0033:0x7f034ed9ce59 [ 1101.794805][T20448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.814465][T20448] RSP: 002b:00007f034fce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1101.822911][T20448] RAX: ffffffffffffffda RBX: 00007f034f015fa0 RCX: 00007f034ed9ce59 [ 1101.830915][T20448] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1101.838913][T20448] RBP: 00007f034fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.846915][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.854920][T20448] R13: 00007f034f016038 R14: 00007f034f015fa0 R15: 00007ffe3cf77178 [ 1101.862936][T20448] [ 1102.324467][T20442] delete_channel: no stack [ 1102.539622][T20451] netlink: 'syz.4.5088': attribute type 21 has an invalid length. [ 1102.644303][T20451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5088'. [ 1104.130177][T20476] netlink: 'syz.2.5093': attribute type 1 has an invalid length. [ 1104.317694][T20486] netlink: 'syz.0.5098': attribute type 3 has an invalid length. [ 1104.333898][T20486] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5098'. [ 1104.346202][T20485] netlink: 'syz.4.5096': attribute type 13 has an invalid length. [ 1104.383473][T20485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5096'. [ 1104.413007][T20485] syz_tun: refused to change device tx_queue_len [ 1104.451085][T20489] netlink: 'syz.3.5100': attribute type 3 has an invalid length. [ 1104.465465][T20485] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1104.466417][T20489] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5100'. [ 1104.696573][T20500] netlink: 'syz.3.5102': attribute type 21 has an invalid length. [ 1104.729254][T20500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1104.964999][T20507] device syzkaller0 entered promiscuous mode [ 1108.273431][T20535] netlink: 'syz.4.5111': attribute type 1 has an invalid length. [ 1108.446967][T20542] netlink: 'syz.3.5113': attribute type 3 has an invalid length. [ 1108.467649][T20542] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5113'. [ 1108.536801][T20546] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5115'. [ 1108.574714][T20546] bridge_slave_1: default FDB implementation only supports local addresses [ 1108.606716][T20550] netlink: 'syz.0.5114': attribute type 3 has an invalid length. [ 1108.623695][T20550] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5114'. [ 1108.759289][T20556] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1108.790138][T20556] bridge_slave_1: default FDB implementation only supports local addresses [ 1108.986674][T20560] netlink: 'syz.4.5117': attribute type 21 has an invalid length. [ 1109.021197][T20560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5117'. [ 1110.424987][T20583] netlink: 'syz.0.5123': attribute type 13 has an invalid length. [ 1110.457857][T20583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5123'. [ 1111.259066][T20597] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5128'. [ 1111.284612][T20597] bridge_slave_1: default FDB implementation only supports local addresses [ 1111.395862][T20602] netlink: 'syz.1.5130': attribute type 3 has an invalid length. [ 1111.415072][T20602] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5130'. [ 1111.523138][T20606] netlink: 'syz.3.5132': attribute type 21 has an invalid length. [ 1111.542090][T20606] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5132'. [ 1114.409989][T20652] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1114.440174][T20652] bridge_slave_1: default FDB implementation only supports local addresses [ 1114.850611][T20657] netlink: 'syz.3.5144': attribute type 13 has an invalid length. [ 1114.879477][T20657] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1114.920410][T20657] syz_tun: refused to change device tx_queue_len [ 1114.944234][T20657] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1115.073188][T20670] netlink: 'syz.0.5149': attribute type 8 has an invalid length. [ 1115.101771][T20670] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1115.122662][T20670] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1115.816836][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.823452][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.759683][T20676] netlink: 'syz.2.5150': attribute type 21 has an invalid length. [ 1116.767861][T20676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5150'. [ 1117.069723][T20695] netlink: 'syz.0.5155': attribute type 21 has an invalid length. [ 1117.093046][T20695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5155'. [ 1117.125342][T20695] netlink: 'syz.0.5155': attribute type 1 has an invalid length. [ 1117.133180][T20695] netlink: 'syz.0.5155': attribute type 4 has an invalid length. [ 1117.202149][T20695] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5155'. [ 1117.787862][T20716] netlink: 'syz.3.5163': attribute type 1 has an invalid length. [ 1118.127806][T20729] netlink: 'syz.4.5167': attribute type 21 has an invalid length. [ 1118.178824][T20729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5167'. [ 1119.357704][T20753] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.5175'. [ 1119.516073][T20753] device syzkaller0 entered promiscuous mode [ 1119.546353][T20761] netlink: 'syz.4.5177': attribute type 28 has an invalid length. [ 1119.563703][T20761] netlink: 'syz.4.5177': attribute type 29 has an invalid length. [ 1119.582238][T20761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5177'. [ 1122.181614][T20779] netlink: 'syz.1.5182': attribute type 21 has an invalid length. [ 1122.189757][T20779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5182'. [ 1122.199022][T19169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1122.220935][T20796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.440287][T20804] netlink: 'syz.1.5191': attribute type 1 has an invalid length. [ 1122.647857][T20811] netlink: 'syz.0.5195': attribute type 27 has an invalid length. [ 1122.676926][T20811] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5195'. [ 1123.082440][T20823] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 1123.261515][T20833] netlink: 'syz.1.5201': attribute type 21 has an invalid length. [ 1123.270170][T20833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5201'. [ 1123.533286][T20836] netlink: 'syz.3.5204': attribute type 2 has an invalid length. [ 1123.914686][T20852] netlink: 'syz.3.5210': attribute type 1 has an invalid length. [ 1124.535705][T20877] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5220'. [ 1124.566237][T20877] bridge_slave_1: default FDB implementation only supports local addresses [ 1124.601446][T20878] netlink: 'syz.0.5219': attribute type 21 has an invalid length. [ 1124.625173][T20878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5219'. [ 1125.524590][T20906] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1125.569401][T20906] bridge_slave_1: default FDB implementation only supports local addresses [ 1125.583638][T20907] netlink: 'syz.1.5230': attribute type 1 has an invalid length. [ 1125.856148][T20917] netlink: 'syz.2.5234': attribute type 21 has an invalid length. [ 1125.884689][T20917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5234'. [ 1126.138478][T20928] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.5238'. [ 1126.247731][T20928] netlink: 60583 bytes leftover after parsing attributes in process `syz.0.5238'. [ 1126.716494][T20945] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1127.287316][T20963] device syzkaller0 entered promiscuous mode [ 1127.407452][T20970] À: port 1(vlan0) entered blocking state [ 1127.413903][T20970] À: port 1(vlan0) entered disabled state [ 1127.421141][T20970] device vlan0 entered promiscuous mode [ 1127.440524][T20965] validate_nla: 5 callbacks suppressed [ 1127.440561][T20965] netlink: 'syz.0.5255': attribute type 10 has an invalid length. [ 1127.511693][T20965] device wlan1 left promiscuous mode [ 1129.462602][T20980] netlink: 'syz.4.5260': attribute type 10 has an invalid length. [ 1129.470632][T20980] __nla_validate_parse: 1 callbacks suppressed [ 1129.470649][T20980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1129.487739][T20980] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1129.509395][T20990] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1129.520380][T20990] bridge_slave_1: default FDB implementation only supports local addresses [ 1129.671978][T20992] netlink: 'syz.4.5264': attribute type 1 has an invalid length. [ 1130.456550][T21002] netlink: 'syz.0.5266': attribute type 21 has an invalid length. [ 1130.474466][T21002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5266'. [ 1130.763394][T21021] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5273'. [ 1130.789770][T21022] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5272'. [ 1131.230515][T21031] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1131.331428][T21033] netlink: 'syz.4.5278': attribute type 1 has an invalid length. [ 1131.568193][T21044] netlink: 'syz.1.5281': attribute type 21 has an invalid length. [ 1131.608546][T21044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5281'. [ 1133.961377][T21056] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5286'. [ 1134.132688][T21063] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.5288'. [ 1134.160344][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5288'. [ 1134.575214][T21083] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 1135.134852][T21095] __nla_validate_parse: 1 callbacks suppressed [ 1135.134873][T21095] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5300'. [ 1135.307512][T21093] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1135.337979][T21102] FAULT_INJECTION: forcing a failure. [ 1135.337979][T21102] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.472674][T21102] CPU: 1 PID: 21102 Comm: syz.2.5303 Not tainted syzkaller #0 [ 1135.480219][T21102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1135.490340][T21102] Call Trace: [ 1135.493661][T21102] [ 1135.496634][T21102] dump_stack_lvl+0x188/0x24e [ 1135.501370][T21102] ? show_regs_print_info+0x12/0x12 [ 1135.506620][T21102] ? load_image+0x410/0x410 [ 1135.511180][T21102] ? __might_sleep+0xd0/0xd0 [ 1135.515835][T21102] ? __lock_acquire+0x7bd0/0x7bd0 [ 1135.520919][T21102] should_fail_ex+0x390/0x4c0 [ 1135.525648][T21102] should_failslab+0x5/0x20 [ 1135.530203][T21102] slab_pre_alloc_hook+0x59/0x300 [ 1135.535302][T21102] kmem_cache_alloc_node+0x5a/0x310 [ 1135.540549][T21102] ? __alloc_skb+0xf9/0x7d0 [ 1135.545111][T21102] __alloc_skb+0xf9/0x7d0 [ 1135.549489][T21102] netlink_sendmsg+0x654/0xbd0 [ 1135.554309][T21102] ? netlink_getsockopt+0x550/0x550 [ 1135.559562][T21102] ? aa_sock_msg_perm+0x94/0x150 [ 1135.564604][T21102] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1135.569940][T21102] ? security_socket_sendmsg+0x7c/0xa0 [ 1135.575480][T21102] ? netlink_getsockopt+0x550/0x550 [ 1135.580731][T21102] ____sys_sendmsg+0x5ed/0x9a0 [ 1135.585544][T21102] ? __sys_sendmsg_sock+0x30/0x30 [ 1135.590620][T21102] ? __import_iovec+0x306/0x510 [ 1135.595504][T21102] ? import_iovec+0x6f/0xa0 [ 1135.600042][T21102] ___sys_sendmsg+0x2a2/0x360 [ 1135.604757][T21102] ? __sys_sendmsg+0x2a0/0x2a0 [ 1135.609571][T21102] ? __lock_acquire+0x7bd0/0x7bd0 [ 1135.614668][T21102] __se_sys_sendmsg+0x1c3/0x2b0 [ 1135.619544][T21102] ? ct_nmi_exit+0x145/0x1c0 [ 1135.624263][T21102] ? __x64_sys_sendmsg+0x80/0x80 [ 1135.629241][T21102] ? lockdep_hardirqs_on+0x94/0x140 [ 1135.634475][T21102] do_syscall_64+0x4c/0xa0 [ 1135.638916][T21102] ? clear_bhb_loop+0x60/0xb0 [ 1135.643617][T21102] ? clear_bhb_loop+0x60/0xb0 [ 1135.648417][T21102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.654357][T21102] RIP: 0033:0x7f58f3d9ce59 [ 1135.658808][T21102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.678449][T21102] RSP: 002b:00007f58f4be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.686893][T21102] RAX: ffffffffffffffda RBX: 00007f58f4015fa0 RCX: 00007f58f3d9ce59 [ 1135.694894][T21102] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 1135.702893][T21102] RBP: 00007f58f4be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.710909][T21102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.718913][T21102] R13: 00007f58f4016038 R14: 00007f58f4015fa0 R15: 00007ffd5f7d7ed8 [ 1135.726933][T21102] [ 1136.904766][T21135] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5314'. [ 1136.923878][T21135] bridge_slave_1: default FDB implementation only supports local addresses [ 1136.968677][T21137] FAULT_INJECTION: forcing a failure. [ 1136.968677][T21137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1136.989632][T21134] netlink: 'syz.2.5313': attribute type 1 has an invalid length. [ 1137.048465][T21137] CPU: 1 PID: 21137 Comm: syz.1.5315 Not tainted syzkaller #0 [ 1137.056020][T21137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1137.066126][T21137] Call Trace: [ 1137.069451][T21137] [ 1137.072423][T21137] dump_stack_lvl+0x188/0x24e [ 1137.077166][T21137] ? show_regs_print_info+0x12/0x12 [ 1137.082420][T21137] ? load_image+0x410/0x410 [ 1137.086994][T21137] ? __lock_acquire+0x7bd0/0x7bd0 [ 1137.092083][T21137] should_fail_ex+0x390/0x4c0 [ 1137.096814][T21137] prepare_alloc_pages+0x1e1/0x5b0 [ 1137.102080][T21137] __alloc_pages+0x130/0x4f0 [ 1137.106730][T21137] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1137.112952][T21137] ? zone_statistics+0x170/0x170 [ 1137.117966][T21137] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1137.123488][T21137] bpf_prog_test_run_xdp+0xb24/0xf80 [ 1137.128834][T21137] ? __lock_acquire+0x7bd0/0x7bd0 [ 1137.134195][T21137] ? dev_put+0x80/0x80 [ 1137.138338][T21137] ? dev_put+0x80/0x80 [ 1137.142474][T21137] bpf_prog_test_run+0x31c/0x390 [ 1137.147474][T21137] __sys_bpf+0x62b/0x780 [ 1137.151782][T21137] ? bpf_link_show_fdinfo+0x380/0x380 [ 1137.157310][T21137] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1137.163534][T21137] __x64_sys_bpf+0x78/0x90 [ 1137.167991][T21137] do_syscall_64+0x4c/0xa0 [ 1137.172448][T21137] ? clear_bhb_loop+0x60/0xb0 [ 1137.177176][T21137] ? clear_bhb_loop+0x60/0xb0 [ 1137.181895][T21137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.187833][T21137] RIP: 0033:0x7fda1c19ce59 [ 1137.192283][T21137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.211928][T21137] RSP: 002b:00007fda1d14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1137.220378][T21137] RAX: ffffffffffffffda RBX: 00007fda1c415fa0 RCX: 00007fda1c19ce59 [ 1137.228467][T21137] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1137.236469][T21137] RBP: 00007fda1d14a090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.244469][T21137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.252468][T21137] R13: 00007fda1c416038 R14: 00007fda1c415fa0 R15: 00007ffc41a07418 [ 1137.260480][T21137] [ 1138.730804][T21153] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1139.264092][T21177] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5326'. [ 1139.286070][T21177] bridge_slave_1: default FDB implementation only supports local addresses [ 1139.569979][T21187] netlink: 'syz.4.5331': attribute type 1 has an invalid length. [ 1139.917156][T21198] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5337'. [ 1139.950003][T21198] bridge_slave_1: default FDB implementation only supports local addresses [ 1140.982973][T21201] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5338'. [ 1141.186024][T21217] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 1141.263075][T21220] netlink: 'syz.2.5343': attribute type 1 has an invalid length. [ 1141.443475][T21224] netlink: 'syz.0.5345': attribute type 1 has an invalid length. [ 1141.616622][T21235] netlink: 'syz.0.5350': attribute type 1 has an invalid length. [ 1143.093178][T21247] bond0: (slave team0): Error: Slave device does not support XDP [ 1143.156233][T21256] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5355'. [ 1143.367052][T21267] netlink: 'syz.2.5360': attribute type 1 has an invalid length. [ 1143.728333][T21279] netlink: 'syz.4.5367': attribute type 1 has an invalid length. [ 1143.935116][T21289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5368'. [ 1144.884745][T21303] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1145.179685][T21311] netlink: 'syz.4.5378': attribute type 1 has an invalid length. [ 1145.334217][T21316] netlink: 'syz.3.5379': attribute type 10 has an invalid length. [ 1147.350870][T21348] netlink: 'syz.1.5391': attribute type 10 has an invalid length. [ 1147.367724][T21348] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5391'. [ 1147.427556][T21347] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1147.465677][T21355] netlink: 'syz.4.5393': attribute type 1 has an invalid length. [ 1148.085254][T21373] FAULT_INJECTION: forcing a failure. [ 1148.085254][T21373] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.122691][T21373] CPU: 1 PID: 21373 Comm: syz.3.5399 Not tainted syzkaller #0 [ 1148.130246][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1148.140353][T21373] Call Trace: [ 1148.143675][T21373] [ 1148.146650][T21373] dump_stack_lvl+0x188/0x24e [ 1148.151412][T21373] ? show_regs_print_info+0x12/0x12 [ 1148.156662][T21373] ? load_image+0x410/0x410 [ 1148.161226][T21373] ? __might_sleep+0xd0/0xd0 [ 1148.165870][T21373] ? __lock_acquire+0x7bd0/0x7bd0 [ 1148.170955][T21373] should_fail_ex+0x390/0x4c0 [ 1148.175673][T21373] should_failslab+0x5/0x20 [ 1148.180205][T21373] slab_pre_alloc_hook+0x59/0x300 [ 1148.185260][T21373] ? __lock_acquire+0x130c/0x7bd0 [ 1148.190404][T21373] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1148.196162][T21373] __kmem_cache_alloc_node+0x4f/0x270 [ 1148.201570][T21373] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1148.207409][T21373] __kmalloc+0xa3/0x240 [ 1148.211605][T21373] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1148.217188][T21373] ? tomoyo_domain+0xd2/0x120 [ 1148.221902][T21373] ? tomoyo_path_number_perm+0x205/0x650 [ 1148.227577][T21373] tomoyo_path_number_perm+0x22f/0x650 [ 1148.233069][T21373] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1148.238564][T21373] ? ksys_write+0x1ce/0x260 [ 1148.243102][T21373] ? common_file_perm+0x171/0x1c0 [ 1148.248178][T21373] ? __fget_files+0x28/0x460 [ 1148.252808][T21373] security_file_ioctl+0x6c/0xa0 [ 1148.257781][T21373] __se_sys_ioctl+0x48/0x170 [ 1148.262401][T21373] do_syscall_64+0x4c/0xa0 [ 1148.266843][T21373] ? clear_bhb_loop+0x60/0xb0 [ 1148.271545][T21373] ? clear_bhb_loop+0x60/0xb0 [ 1148.276275][T21373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.282203][T21373] RIP: 0033:0x7f237459ce59 [ 1148.286640][T21373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.306538][T21373] RSP: 002b:00007f23754cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.314975][T21373] RAX: ffffffffffffffda RBX: 00007f2374816090 RCX: 00007f237459ce59 [ 1148.322977][T21373] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 1148.330976][T21373] RBP: 00007f23754cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.338970][T21373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.346961][T21373] R13: 00007f2374816128 R14: 00007f2374816090 R15: 00007fff75dece28 [ 1148.354969][T21373] [ 1148.393576][T21373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1148.415351][T21377] netlink: 'syz.4.5400': attribute type 2 has an invalid length. [ 1148.434599][T21377] netlink: 'syz.4.5400': attribute type 1 has an invalid length. [ 1148.442407][T21377] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.5400'. [ 1148.605180][T21382] netlink: 'syz.1.5402': attribute type 1 has an invalid length. [ 1149.549102][T21393] netlink: 'syz.3.5406': attribute type 29 has an invalid length. [ 1149.576295][T21393] netlink: 'syz.3.5406': attribute type 29 has an invalid length. [ 1150.131687][T21405] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5407'. [ 1150.334511][T21409] netlink: 'syz.1.5408': attribute type 1 has an invalid length. [ 1150.801178][T21430] netlink: 'syz.4.5417': attribute type 1 has an invalid length. [ 1151.274525][T21437] netlink: 'syz.0.5418': attribute type 1 has an invalid length. [ 1152.616566][T21451] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1152.638697][T21451] delete_channel: no stack [ 1153.699762][T21468] netlink: 'syz.2.5426': attribute type 2 has an invalid length. [ 1153.743605][T21468] netlink: 'syz.2.5426': attribute type 1 has an invalid length. [ 1153.856797][T21459] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1154.066849][T21472] ref_ctr_offset mismatch. inode: 0xa40 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1154.329761][T21485] netlink: 'syz.4.5433': attribute type 1 has an invalid length. [ 1155.463046][T21494] netlink: 'syz.1.5437': attribute type 1 has an invalid length. [ 1155.557759][T21497] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5438'. [ 1155.623218][T21497] delete_channel: no stack [ 1156.201018][T21515] netlink: 175 bytes leftover after parsing attributes in process `syz.3.5441'. [ 1156.407346][T21519] netlink: 'syz.3.5441': attribute type 10 has an invalid length. [ 1156.448182][T21520] netlink: 'syz.1.5444': attribute type 21 has an invalid length. [ 1156.494824][T21520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5444'. [ 1157.487732][T21511] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5442'. [ 1158.530632][T21542] netlink: 'syz.4.5449': attribute type 27 has an invalid length. [ 1158.619500][T21542] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5449'. [ 1158.760265][T21552] delete_channel: no stack [ 1159.505927][T21550] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1159.516246][T21551] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5449'. [ 1159.780745][T21561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5456'. [ 1159.878300][T21562] netlink: 'syz.2.5454': attribute type 1 has an invalid length. [ 1160.451396][T21575] netlink: 'syz.4.5458': attribute type 21 has an invalid length. [ 1160.465908][T21575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1161.655210][T21588] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1162.007552][T21609] delete_channel: no stack [ 1162.415624][T21605] netlink: 'syz.4.5464': attribute type 10 has an invalid length. [ 1162.469457][T21606] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1163.527051][T21624] netlink: 'syz.1.5471': attribute type 1 has an invalid length. [ 1164.930765][T21632] netlink: 'syz.4.5473': attribute type 21 has an invalid length. [ 1164.940005][T21632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1165.171484][T21635] bond0: (slave team0): Error: Slave device does not support XDP [ 1165.260810][T21638] netlink: 'syz.1.5474': attribute type 21 has an invalid length. [ 1165.289374][T21638] netlink: 'syz.1.5474': attribute type 1 has an invalid length. [ 1165.351265][T21638] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1165.479206][T21640] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1165.895912][T21644] netlink: 'syz.2.5478': attribute type 1 has an invalid length. [ 1165.913978][T21648] netlink: 'syz.3.5479': attribute type 1 has an invalid length. [ 1166.158789][T21654] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1166.187110][T21654] delete_channel: no stack [ 1167.525233][T21673] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.5485'. [ 1170.161660][T21684] FAULT_INJECTION: forcing a failure. [ 1170.161660][T21684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.186033][T21684] CPU: 0 PID: 21684 Comm: syz.2.5488 Not tainted syzkaller #0 [ 1170.193582][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.203681][T21684] Call Trace: [ 1170.207006][T21684] [ 1170.209988][T21684] dump_stack_lvl+0x188/0x24e [ 1170.214725][T21684] ? show_regs_print_info+0x12/0x12 [ 1170.219965][T21684] ? load_image+0x410/0x410 [ 1170.224538][T21684] ? __might_fault+0xa6/0x120 [ 1170.229275][T21684] should_fail_ex+0x390/0x4c0 [ 1170.234009][T21684] copyin+0x1b/0x120 [ 1170.237957][T21684] _copy_from_iter+0x447/0x1130 [ 1170.242871][T21684] ? copyout_mc+0x110/0x110 [ 1170.247419][T21684] ? __virt_addr_valid+0x188/0x540 [ 1170.252591][T21684] ? __virt_addr_valid+0x188/0x540 [ 1170.257759][T21684] ? __virt_addr_valid+0x467/0x540 [ 1170.262920][T21684] ? __phys_addr_symbol+0x2b/0x70 [ 1170.267995][T21684] ? __check_object_size+0x4f6/0xa70 [ 1170.273328][T21684] netlink_sendmsg+0x755/0xbd0 [ 1170.278149][T21684] ? netlink_getsockopt+0x550/0x550 [ 1170.283397][T21684] ? aa_sock_msg_perm+0x94/0x150 [ 1170.288385][T21684] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1170.293728][T21684] ? security_socket_sendmsg+0x7c/0xa0 [ 1170.299229][T21684] ? netlink_getsockopt+0x550/0x550 [ 1170.304464][T21684] ____sys_sendmsg+0x5ed/0x9a0 [ 1170.309270][T21684] ? __sys_sendmsg_sock+0x30/0x30 [ 1170.314330][T21684] ? __import_iovec+0x306/0x510 [ 1170.319219][T21684] ? import_iovec+0x6f/0xa0 [ 1170.323752][T21684] ___sys_sendmsg+0x2a2/0x360 [ 1170.328460][T21684] ? __sys_sendmsg+0x2a0/0x2a0 [ 1170.333281][T21684] ? __lock_acquire+0x7bd0/0x7bd0 [ 1170.338358][T21684] __se_sys_sendmsg+0x1c3/0x2b0 [ 1170.343246][T21684] ? __x64_sys_sendmsg+0x80/0x80 [ 1170.348228][T21684] ? lockdep_hardirqs_on+0x94/0x140 [ 1170.353466][T21684] do_syscall_64+0x4c/0xa0 [ 1170.357916][T21684] ? clear_bhb_loop+0x60/0xb0 [ 1170.362641][T21684] ? clear_bhb_loop+0x60/0xb0 [ 1170.367352][T21684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.373288][T21684] RIP: 0033:0x7f58f3d9ce59 [ 1170.377740][T21684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.397381][T21684] RSP: 002b:00007f58f4be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.405821][T21684] RAX: ffffffffffffffda RBX: 00007f58f4015fa0 RCX: 00007f58f3d9ce59 [ 1170.413816][T21684] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1170.421815][T21684] RBP: 00007f58f4be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.429818][T21684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.437835][T21684] R13: 00007f58f4016038 R14: 00007f58f4015fa0 R15: 00007ffd5f7d7ed8 [ 1170.445871][T21684] [ 1170.523985][T21688] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 1170.595862][T21691] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5491'. [ 1171.343134][T21706] netlink: 'syz.0.5493': attribute type 21 has an invalid length. [ 1171.381075][T21706] netlink: 'syz.0.5493': attribute type 1 has an invalid length. [ 1171.433884][T21706] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.5493'. [ 1171.699226][T21714] delete_channel: no stack [ 1171.874731][T21710] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5495'. [ 1174.304292][T21723] netlink: 'syz.4.5498': attribute type 46 has an invalid length. [ 1174.312200][T21723] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1176.253641][T21738] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 1177.270047][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.276790][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.562243][T21766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1177.643544][T21767] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5505'. [ 1179.189647][T21798] netlink: 'syz.4.5513': attribute type 1 has an invalid length. [ 1179.375190][T21805] netlink: 'syz.3.5516': attribute type 1 has an invalid length. [ 1184.033128][T21840] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1189.771747][T21961] device lo entered promiscuous mode [ 1189.863805][T21961] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1196.414117][T21998] [ 1196.416859][T21998] ============================= [ 1196.421794][T21998] WARNING: suspicious RCU usage [ 1196.426883][T21998] syzkaller #0 Not tainted [ 1196.431337][T21998] ----------------------------- [ 1196.436427][T21998] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1196.445090][T21998] [ 1196.445090][T21998] other info that might help us debug this: [ 1196.445090][T21998] [ 1196.455421][T21998] [ 1196.455421][T21998] rcu_scheduler_active = 2, debug_locks = 1 [ 1196.463578][T21998] 1 lock held by syz.1.5571/21998: [ 1196.468764][T21998] #0: ffffffff8cb2dce0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1196.479108][T21998] [ 1196.479108][T21998] stack backtrace: [ 1196.485309][T21998] CPU: 1 PID: 21998 Comm: syz.1.5571 Not tainted syzkaller #0 [ 1196.492824][T21998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1196.503014][T21998] Call Trace: [ 1196.506321][T21998] [ 1196.509281][T21998] dump_stack_lvl+0x188/0x24e [ 1196.514005][T21998] ? show_regs_print_info+0x12/0x12 [ 1196.519235][T21998] ? load_image+0x410/0x410 [ 1196.523783][T21998] lockdep_rcu_suspicious+0x1dd/0x300 [ 1196.529201][T21998] get_callchain_entry+0x2a5/0x3b0 [ 1196.534356][T21998] get_perf_callchain+0xc4/0x490 [ 1196.539365][T21998] ? put_callchain_entry+0xb0/0xb0 [ 1196.544548][T21998] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1196.550605][T21998] ? preempt_schedule_common+0xa5/0xd0 [ 1196.556109][T21998] __bpf_get_stack+0x2de/0x520 [ 1196.560955][T21998] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 1196.567151][T21998] ? bpf_prog_b7720614f1130d08_F+0x29/0x2b [ 1196.572998][T21998] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1196.578246][T21998] bpf_prog_b7720614f1130d08_F+0x29/0x2b [ 1196.583916][T21998] bpf_prog_19484586d131c401+0x18/0x21 [ 1196.589411][T21998] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1196.594853][T21998] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 1196.600611][T21998] ? sock_gen_cookie+0x60/0x60 [ 1196.605414][T21998] ? sock_gen_cookie+0x60/0x60 [ 1196.610229][T21998] bpf_prog_test_run+0x31c/0x390 [ 1196.615214][T21998] __sys_bpf+0x62b/0x780 [ 1196.619499][T21998] ? bpf_link_show_fdinfo+0x380/0x380 [ 1196.624997][T21998] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1196.630945][T21998] ? lock_chain_count+0x20/0x20 [ 1196.635844][T21998] __x64_sys_bpf+0x78/0x90 [ 1196.640304][T21998] do_syscall_64+0x4c/0xa0 [ 1196.644774][T21998] ? clear_bhb_loop+0x60/0xb0 [ 1196.649489][T21998] ? clear_bhb_loop+0x60/0xb0 [ 1196.654193][T21998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.660128][T21998] RIP: 0033:0x7fda1c19ce59 [ 1196.664572][T21998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.684224][T21998] RSP: 002b:00007fda1d14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1196.692733][T21998] RAX: ffffffffffffffda RBX: 00007fda1c415fa0 RCX: 00007fda1c19ce59 [ 1196.700756][T21998] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1196.708775][T21998] RBP: 00007fda1c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1196.716781][T21998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.724807][T21998] R13: 00007fda1c416038 R14: 00007fda1c415fa0 R15: 00007ffc41a07418 [ 1196.732822][T21998]