last executing test programs: 15.804092099s ago: executing program 2 (id=3073): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x502, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 15.461278599s ago: executing program 2 (id=3077): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200000d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) 15.137196188s ago: executing program 2 (id=3080): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x210, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xcc, 0x100000, 0x1, 0x4, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a4000140200007", 0x3b}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r3) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5d00e85ca600", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004880) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x59, 0x9, 0x8, 0x6, 0x0, 0x6, 0x20584, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x2f0, 0x9}, 0x8000, 0x3, 0x101, 0x7, 0x4, 0x81, 0x81, 0x0, 0x8001, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 14.692354514s ago: executing program 2 (id=3084): r0 = socket$kcm(0x29, 0x2, 0x0) syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000b05d25a806f8c6394f90224fc602f00000004000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000880)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f0000000040), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x5b6}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000280)={'sit0\x00', 0x600}) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="da", 0x1}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x10000, 0xc2ba, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) 13.58179918s ago: executing program 2 (id=3094): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 4.297819017s ago: executing program 3 (id=3150): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a910000000}, 0x5015, 0xfffffffffffffff9, 0x81, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYBLOB="2e0ff95e266a4ea0415162bf19ec92696da7f2eda6ee30e9f2d5dcba4c3290ead6870b5837e40ba9e1de485dd2e10e1673f0d85f9f9397c270c4f97f13110151652db38dce599fc855a64fb1b1382472679eb6c516214097b5c0e6e3e987c05a13e46764d4a61e5ee5cc10793941f181dc66f0caa57e52ea303c727a7257c641696264c816dc73181f26d509a1150c9702ffe282ac53e4327697f090ad63b14c0fcf560ee82e6d8af934dd07a117f0f2325594179c9d3ba695dbaa0690e7a889cde52555462d3154844e39311581a16291", @ANYRES8=r3, @ANYBLOB="000000000200000000000000000000ef00"/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x2000}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x1c3) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) sendmsg$sock(r7, &(0x7f0000000880)={&(0x7f00000001c0)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="6ffc27ba425183e2b0c0cc4a0018f4e5008dd08685e6fca4805a9c2519de03d8f5aba571bc482dcf015bb0476702ee9b14aeeb521f7bfd4b3fd77299b9a3c9924b96d7ae25ae1716db942e0460a454c4635846ec41e4931c442cf7c284684e74421924c2ef3fa36d36a2fdbc854e4c0aca3dee440e3748d0ccbeafe432172470c108c9d87daf0d99335a6a7c6a4db061eb4e8a2f95e204e844bc7b1835ad43658fd6b77892a29a34d39e3bc03394a5d8d388c484ec9489265ecc7a92230211dd8c597b012829004600d573", 0xcb}, {&(0x7f0000000640)="03e63bcdb8e0b954e29db02ddcc59ee6d729221ec0378c1e03ddcfa8949fe60fe5695bdf26d385c6336a3307f657b3084cfe6689508a11e49104ed42029d50528488fb3e25fa3be48861e8154402142b169ac2a3828a1f3e34f812c5c2079f41b95ad26fabe2f9d57d99b66e1be258f281e55f3b0e3ea16144d88451b74f34e4883f9ad17668be232458ff8eb00f540a3006d1b7af496a6451010673ba4251a790e77c978139691a19d406fa015b7a32ad8dd723403dbfc98b0195866d334a6f9430656a57b61220d1458fdb4e93a83fd7696cdd1223b21e1cfd7b68ffa42ebf56796e5cc568d4075cd601a6e9c5d04ece8dd834821f4fe4fc", 0xf9}, {&(0x7f0000000300)="3407ebb64b0ab8394bc3a44a8cca7549a50fba2ea9d80f9afbc822a5825de8019f1473173c7fe5a89aa4e1be00d23eaac0e794019941f75ddf39a7d5ccfc56732f37f9552e625f0359e589a108f017be8c8ba3248b5e61e0b237fbd04d07a2eb82f70a06b9f86c1c12219cdefe756a2cfcb987ebc6d36c00c3ba1a7a6f5693fed23a39093a0d876e457feb6fc96e839bcc0ad2c3aff83cc18cb8ba4105d418cbd8b12749ef3094a23e352f6608d15ca399d320547f859222093d8297ea1a2fb6", 0xc0}, {&(0x7f0000000240)="68cec13bc27560b8bc14cad8071f26d71302e0c63d197d652937addabde0ae38fc033bc2b3c95408453a612a732b830d7c339992921eb5a877759379ff626f141d5998cbc779905698b5c862e2a5661f0f260d128112c873b2e3bf25e0c6", 0x5e}, {&(0x7f0000001980)="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", 0x1000}, {0x0}], 0x6, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r10}, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000740)=r11, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8912, &(0x7f00000002c0)={'bridge_slave_0\x00', @random="bc1a091f2845"}) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r6], 0xfe33) 3.975246156s ago: executing program 4 (id=3152): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1144ca, 0x10000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x70, 0x4, 0x8, 0x80, 0x0, 0xffffffff, 0x42000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0xa280, 0xffff, 0x7, 0x0, 0x56, 0x1, 0xdb82, 0x0, 0x7, 0x0, 0x8f}, 0xffffffffffffffff, 0xd, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)="2fd6c55f297c9a0bc468d781264c8e88af16291a8fecdd6acc391050cb45ea38884e0367b16436a71178efe32d6cfe8af3851b7c824d6f2d4844c2a3db67841560dc6459a2ecb80d76b55cd14c6a9a7c8274d3578d2c18e8bb01f3b088c8acf4104891b5846ec22f710c119c1a31b4905dfc33e8e1d10bbcbaeca8afdde6", 0x7e}, {&(0x7f0000000940)="0a025005ace28dfe62f08b33056a033f16e7ed8e9dd38861e8b4158c2c8cab39327af8182734734a6d29f84f2f33b691e53596a25698456a9d14f86cfaace2a13a9fd925d7dd4c4d85c48295218db6fda567ce5d9e111397337b2e0b8fd377ebd013aa5437092993be87e60e79eb050fb906751d476cff1e9e263e50f5a819eec12284295518a4bfc5e9287b04a706a6c02062ba4b017130efc670af1a22752fcf8345b01d85088affcacf74ccbc46667e931853ba20fc242b4cd590f47e54766f3ca09f56ae22ebdf2912114be5a5cd694f3117afebeed9993fd6ce78551ba7bf25bea4818b623fa9fe279332", 0xed}], 0x2, 0x0, 0x0, 0xd0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 3.669917244s ago: executing program 3 (id=3154): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 3.268087858s ago: executing program 4 (id=3155): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8a, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000001000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x20) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', r0}, 0x94) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0xffff2950, @dev={0xfe, 0x80, '\x00', 0x35}, 0xf47}, 0x80, 0x0, 0x0, &(0x7f0000000f80)=[{0xf0, 0x3a, 0x10000, "f9bba955ac868539eaa213634ac6d58c12e75d7dc9b352137786a8e58b55b8900948b0c04e4ff13309ec07fa479847720ce44af4e0e4d2687538a4a3c47012bd2ce9f85c30dfbcb66f6867d2f39f79202281bf9b494a73c15a4e7827d8cf0f64071731f33f7b02e7c59461a3bb7687b7ae01ec99a4ae7931ecab1d9e41366af9ec087169c25312bc0ec8c42e1946d5a879942ff40d24ed1847793af23d90a68c56f84e842f3a26fb06612aca20def7830ec2f318e3f456dc2c1fc3e0b40f6565a6e59846438f30694bf6b00e3158d147168f37d0dc8bb8bf9791d1c092aa7734"}, {0x60, 0x1, 0xfffffa13, "baa1002ce05c1452ee25bbcb1f7e41fbcc30c698f73cdfd39a8a6b9a0fd8d4a7bdcadb8c112c59bd85b41cf54017f34d1114e383c50390239a1b7d2c1a4dee9dbe85213c72186fe5bea10d"}, {0x30, 0x88, 0x9b, "443fe45b631aee674de35d44115e8d34af34824d649f52c98c0c309a"}, {0x58, 0x112, 0x800, "b91303a2c03e7168bd3bde643d0d3f9078ee82657720e7f2fe0562944d846a0d5e3ab51b956e242e20735bb53a0575241b875bb3db097a6854e248f53f3a5f9b506d69"}, {0x28, 0x116, 0x9, "0e305a2b162ae82763c6e2c192cc8cb3b19fe755"}, {0x30, 0x113, 0xddd, "03319915309ab62dd67a28bab508a622f946cd4f4e99f89703"}, {0x48, 0x84, 0x7fffffff, "803d50ad0859ed3793871fbae6c8bc4d3937477916ddb1c58ec09d2f4456dd62f98b2b1b76e6b278fb0a0ec7b51fad14527e06"}], 0x278}, 0x8041) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) 2.901864769s ago: executing program 4 (id=3159): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="000026d4f47f000000000087a4000000000000000000000014000000000000000000000002000000000000000000000014000000000000000200000000000000004eab000000110000000000000000000000010000000000000000000000110000000000000002004c4d010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a00412b054e7704a00000000a8acbd919209c14dddeb3c9754f9a09cf68e545e9996980cc4da9e55575abca3"], 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="a49afdaaa861301248d38d6aa9f559f9ee97901a4549a594b9e3a8ddaa1cfcafaf970a11c602bfd4295aac150fb6f1e8bf33080b79e4391d33e8d2c10ca7025847f4a047a4e12a721f6b58e0c7da5aa1da8b2406c40194f72790fe2f50e64ba07c7da5595ed99aa7cd26bc6a128cd40927aa133ec5b28919097881752e6dbc548c46dcfd72751c4af0edca59278d767de6adb370ed3a53729d81c079e5b7c4e040df4ee0e58dba59b0ea3c528ec0fe5954c3c73f1544d9ae9829bee76098bcd72e14b2ba16942a8575e21a12d00b37af", 0xd0}, {&(0x7f0000000000)="c6018f5555e4f6909fdaf522addf09ea74639a24f39f6ca6112b98891a4f3aa4235b93254a687c865fb520c7", 0x2c}, {&(0x7f0000000080)="f653e37695a0ad1eb1b15e3cf63060b82509e1", 0x13}, {&(0x7f00000002c0)="14ed0a433499cbb42803", 0xa}, {&(0x7f0000000980)="e6b423b83868546f204655638a7da75891aed6373289054bc0c71c29615222ac53e511a9a873a33375a4f5bdf0b26d420dd8db08b68638bcdc4ca022d2cab2e0a52449cc630995d1497a44f73a87eaf383362a729aa67bc38b2574919ce546aa8102eda178e5b83227235f649e2be3e631b5cc0a85e8df1012cde9579f56ac6862bae28b5baa13ac8ef9a213e1ba928748ff7777996a558d65259c62faedf8e68eef963a0ef8d1583f24886b326dfa65562bf9853f1e372b9fb67338e9e1ef275ba23f2c8238", 0xc6}, {&(0x7f0000000300)="e6276b74bdaf6583ae4b0a159b6fc3dd46e84d9e366ae56eb49a13b747d6a80352c08684dfad9de41f0294593980126838f326cb3417def6580f751f7dcd527b1bcf8627099d5ebd3fd211b825ae393b63f85202edbbec2c9fc6cec1f6d89a821848cafc059e60459e2710cc0b39c86e46498fba9a5bcf732021af95212f2e16d53b37b3ed10fc8539dd2d7441b4b1cef82adc024b4dedb2575f851eafb6", 0x9e}, {&(0x7f0000000400)="e4a899a75e2ae49f35d5743af25f34806a5404e5d0c510a4d5376365afba6ab3a7747ca61baefc5ae273898afafaf72f761fb93a186c21f0cd9e33047de2626e4d467639b3aa6fa7f90fbb84263f1493b1ce4830df6f81a11ce6509946c4a11d9d21eb5ace2a7bcd40c0edfc1dc3ef7e2707ba55", 0x74}, {&(0x7f0000000640)="dc5f364668292fc2379bab14de4caebe1d4cc4d19ea76e64db81d5393ef541", 0x1f}, {&(0x7f0000000680)="e4af6c0a8c4a185ad8529236a7334b3c0605bf58c37428fad9709c6d3882b0df3eb8c95147c355b232f725484f127708435421abf8624d315bc14fe814f5e54b45c17e6a76bf9ea601b5c47c2e7a7e350eb9d955c8f9cbfe3ecadfb3f7b0a9f21595c9b0d4f7245bb45aaaa4df9c898e920e24fb76fad29d46fabc54b210f549de49186d67032a3d5a077228dd9decac8cbd9b21", 0x94}, {&(0x7f00000007c0)="d67a3f2f87c0d2452645", 0xa}], 0xa}, 0x400c0) perf_event_open(&(0x7f0000000480)={0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1a890, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x8000000}, 0xffffffffffffffff, 0xfffffffffffffffe, r5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) 2.848152053s ago: executing program 0 (id=3160): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 2.516815052s ago: executing program 3 (id=3161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r0, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000001400)=[{}], 0x8, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0xaf, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0x20, &(0x7f00000017c0)={&(0x7f00000016c0)=""/62, 0x3e, 0x0, &(0x7f0000001700)=""/172, 0xac}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="0200090000040000000800"/21, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=@bloom_filter={0x1e, 0xe, 0x5, 0xfff, 0x2800, r8, 0x3, '\x00', r6, 0xffffffffffffffff, 0x800004, 0x1, 0x3, 0x7}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x2, 0x2, 0x4, 0x2, 0x4, 0x63, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0xaea, 0xcc, &(0x7f0000000400)=""/204, 0x41100, 0x20, '\x00', r6, 0x25, r4, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r2, r1, r2, r2, r2, r1, r10, r4], &(0x7f0000000600)=[{0x0, 0x5, 0x1, 0x6}, {0x0, 0x2, 0x1, 0x5}, {0x4, 0x3, 0xe, 0xc}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{0x1, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x12, 0x3c, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000002fc0)=""/4096, 0x5ecbbc2f8940bfa5, 0x24, '\x00', r6, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0xc, 0x80000001, 0xfff}, 0x10, r7, r0, 0x2, &(0x7f0000001980)=[r8, r9, r11, 0x1], &(0x7f00000019c0)=[{0x1, 0x3, 0x7, 0xc}, {0x3, 0x1, 0x6, 0x1}], 0x10, 0xe2cb}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b6, 0x1b6, 0xa, [@typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @datasec={0x3, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x6}, {0x4, 0x0, 0x9}, {0x2, 0x8, 0xffffffff}, {0x3, 0xfffffeff, 0x6e4}], "f467"}, @fwd={0xd}, @struct={0x4, 0x9, 0x0, 0x4, 0x0, 0xc6, [{0x7, 0x4, 0x2}, {0x7, 0x0, 0x1}, {0x0, 0x1, 0xfffffff7}, {0x1, 0x0, 0x72}, {0x6, 0x5, 0xfffffff7}, {0x5, 0x4, 0x7d}, {0x1, 0x3, 0x9}, {0x8, 0x1, 0x7}, {0x6, 0x2, 0x9}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x64, 0x6}, @enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0x8, 0x5}, {0xc, 0xe7}, {0x8, 0x3}, {0xd, 0x1}, {0xa, 0x36f}, {0xd, 0x3}, {0x9, 0x8}, {0x8, 0x9}, {0xf, 0xfffffff7}]}, @union={0xb, 0x9, 0x0, 0x5, 0x0, 0x7, [{0x7, 0x4, 0x2}, {0xa, 0x2, 0xe1}, {0xe, 0x0, 0xc6}, {0xf, 0x5, 0x3}, {0x10, 0x5, 0xc0000}, {0x10, 0x2, 0x5}, {0x4, 0x0, 0xfff}, {0x7, 0x4, 0x7}, {0xd, 0x4, 0x369bd5a8}]}, @ptr={0xc}]}, {0x0, [0x30, 0x5f, 0x30, 0x5f, 0x30, 0x30, 0x30, 0x30]}}, &(0x7f0000001cc0)=""/208, 0x1da, 0xd0, 0x1, 0x6}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002e80)={r12, 0x20, &(0x7f0000002e40)={&(0x7f0000001e00)=""/63, 0x3f, 0x0, &(0x7f0000001e40)=""/4096, 0x1000}}, 0x10) 2.496485323s ago: executing program 0 (id=3162): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 2.427576738s ago: executing program 1 (id=3163): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a910000000}, 0x5015, 0xfffffffffffffff9, 0x81, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYBLOB="2e0ff95e266a4ea0415162bf19ec92696da7f2eda6ee30e9f2d5dcba4c3290ead6870b5837e40ba9e1de485dd2e10e1673f0d85f9f9397c270c4f97f13110151652db38dce599fc855a64fb1b1382472679eb6c516214097b5c0e6e3e987c05a13e46764d4a61e5ee5cc10793941f181dc66f0caa57e52ea303c727a7257c641696264c816dc73181f26d509a1150c9702ffe282ac53e4327697f090ad63b14c0fcf560ee82e6d8af934dd07a117f0f2325594179c9d3ba695dbaa0690e7a889cde52555462d3154844e39311581a16291", @ANYRES8=r3, @ANYBLOB="000000000200000000000000000000ef00"/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x2000}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x1c3) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) sendmsg$sock(r7, &(0x7f0000000880)={&(0x7f00000001c0)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="6ffc27ba425183e2b0c0cc4a0018f4e5008dd08685e6fca4805a9c2519de03d8f5aba571bc482dcf015bb0476702ee9b14aeeb521f7bfd4b3fd77299b9a3c9924b96d7ae25ae1716db942e0460a454c4635846ec41e4931c442cf7c284684e74421924c2ef3fa36d36a2fdbc854e4c0aca3dee440e3748d0ccbeafe432172470c108c9d87daf0d99335a6a7c6a4db061eb4e8a2f95e204e844bc7b1835ad43658fd6b77892a29a34d39e3bc03394a5d8d388c484ec9489265ecc7a92230211dd8c597b012829004600d573", 0xcb}, {&(0x7f0000000640)="03e63bcdb8e0b954e29db02ddcc59ee6d729221ec0378c1e03ddcfa8949fe60fe5695bdf26d385c6336a3307f657b3084cfe6689508a11e49104ed42029d50528488fb3e25fa3be48861e8154402142b169ac2a3828a1f3e34f812c5c2079f41b95ad26fabe2f9d57d99b66e1be258f281e55f3b0e3ea16144d88451b74f34e4883f9ad17668be232458ff8eb00f540a3006d1b7af496a6451010673ba4251a790e77c978139691a19d406fa015b7a32ad8dd723403dbfc98b0195866d334a6f9430656a57b61220d1458fdb4e93a83fd7696cdd1223b21e1cfd7b68ffa42ebf56796e5cc568d4075cd601a6e9c5d04ece8dd834821f4fe4fc", 0xf9}, {&(0x7f0000000300)="3407ebb64b0ab8394bc3a44a8cca7549a50fba2ea9d80f9afbc822a5825de8019f1473173c7fe5a89aa4e1be00d23eaac0e794019941f75ddf39a7d5ccfc56732f37f9552e625f0359e589a108f017be8c8ba3248b5e61e0b237fbd04d07a2eb82f70a06b9f86c1c12219cdefe756a2cfcb987ebc6d36c00c3ba1a7a6f5693fed23a39093a0d876e457feb6fc96e839bcc0ad2c3aff83cc18cb8ba4105d418cbd8b12749ef3094a23e352f6608d15ca399d320547f859222093d8297ea1a2fb6", 0xc0}, {&(0x7f0000000240)="68cec13bc27560b8bc14cad8071f26d71302e0c63d197d652937addabde0ae38fc033bc2b3c95408453a612a732b830d7c339992921eb5a877759379ff626f141d5998cbc779905698b5c862e2a5661f0f260d128112c873b2e3bf25e0c6", 0x5e}, {&(0x7f0000001980)="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", 0x1000}, {0x0}], 0x6, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r10}, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000740)=r11, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8912, &(0x7f00000002c0)={'bridge_slave_0\x00', @random="bc1a091f2845"}) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r6], 0xfe33) 2.265872137s ago: executing program 4 (id=3164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1144ca, 0x10000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x70, 0x4, 0x8, 0x80, 0x0, 0xffffffff, 0x42000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0xa280, 0xffff, 0x7, 0x0, 0x56, 0x1, 0xdb82, 0x0, 0x7, 0x0, 0x8f}, 0xffffffffffffffff, 0xd, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)="2fd6c55f297c9a0bc468d781264c8e88af16291a8fecdd6acc391050cb45ea38884e0367b16436a71178efe32d6cfe8af3851b7c824d6f2d4844c2a3db67841560dc6459a2ecb80d76b55cd14c6a9a7c8274d3578d2c18e8bb01f3b088c8acf4104891b5846ec22f710c119c1a31b4905dfc33e8e1d10bbcbaeca8afdde6", 0x7e}, {&(0x7f0000000940)="0a025005ace28dfe62f08b33056a033f16e7ed8e9dd38861e8b4158c2c8cab39327af8182734734a6d29f84f2f33b691e53596a25698456a9d14f86cfaace2a13a9fd925d7dd4c4d85c48295218db6fda567ce5d9e111397337b2e0b8fd377ebd013aa5437092993be87e60e79eb050fb906751d476cff1e9e263e50f5a819eec12284295518a4bfc5e9287b04a706a6c02062ba4b017130efc670af1a22752fcf8345b01d85088affcacf74ccbc46667e931853ba20fc242b4cd590f47e54766f3ca09f56ae22ebdf2912114be5a5cd694f3117afebeed9993fd6ce78551ba7bf25bea4818b623fa9fe279332", 0xed}], 0x2, 0x0, 0x0, 0xd0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 2.095249087s ago: executing program 0 (id=3165): r0 = socket$kcm(0x29, 0x2, 0x0) syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000b05d25a806f8c6394f90224fc602f00000004000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x0, 0x3, 0x8000}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000880)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000040), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x5b6}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'sit0\x00', 0x600}) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="da", 0x1}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x10000, 0xc2ba, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) 2.05333229s ago: executing program 1 (id=3166): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.966462975s ago: executing program 3 (id=3167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18fdffffff000000000000000018080000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x200000, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000004000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1fffffffffffff34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 1.654918183s ago: executing program 0 (id=3168): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8a, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000001000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x20) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', r0}, 0x94) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0xffff2950, @dev={0xfe, 0x80, '\x00', 0x35}, 0xf47}, 0x80, 0x0, 0x0, &(0x7f0000000f80)=[{0xf0, 0x3a, 0x10000, "f9bba955ac868539eaa213634ac6d58c12e75d7dc9b352137786a8e58b55b8900948b0c04e4ff13309ec07fa479847720ce44af4e0e4d2687538a4a3c47012bd2ce9f85c30dfbcb66f6867d2f39f79202281bf9b494a73c15a4e7827d8cf0f64071731f33f7b02e7c59461a3bb7687b7ae01ec99a4ae7931ecab1d9e41366af9ec087169c25312bc0ec8c42e1946d5a879942ff40d24ed1847793af23d90a68c56f84e842f3a26fb06612aca20def7830ec2f318e3f456dc2c1fc3e0b40f6565a6e59846438f30694bf6b00e3158d147168f37d0dc8bb8bf9791d1c092aa7734"}, {0x60, 0x1, 0xfffffa13, "baa1002ce05c1452ee25bbcb1f7e41fbcc30c698f73cdfd39a8a6b9a0fd8d4a7bdcadb8c112c59bd85b41cf54017f34d1114e383c50390239a1b7d2c1a4dee9dbe85213c72186fe5bea10d"}, {0x30, 0x88, 0x9b, "443fe45b631aee674de35d44115e8d34af34824d649f52c98c0c309a"}, {0x58, 0x112, 0x800, "b91303a2c03e7168bd3bde643d0d3f9078ee82657720e7f2fe0562944d846a0d5e3ab51b956e242e20735bb53a0575241b875bb3db097a6854e248f53f3a5f9b506d69"}, {0x28, 0x116, 0x9, "0e305a2b162ae82763c6e2c192cc8cb3b19fe755"}, {0x30, 0x113, 0xddd, "03319915309ab62dd67a28bab508a622f946cd4f4e99f89703"}, {0x48, 0x84, 0x7fffffff, "803d50ad0859ed3793871fbae6c8bc4d3937477916ddb1c58ec09d2f4456dd62f98b2b1b76e6b278fb0a0ec7b51fad14527e06"}], 0x278}, 0x8041) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) 1.632649664s ago: executing program 1 (id=3169): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 1.521715731s ago: executing program 4 (id=3170): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) 836.559861ms ago: executing program 1 (id=3171): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/263, 0x26, 0x107, 0x1}, 0x20) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 832.621421ms ago: executing program 0 (id=3172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x502, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 562.739877ms ago: executing program 3 (id=3173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18fdffffff000000000000000018080000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x200000, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000004000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1fffffffffffff34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 517.53363ms ago: executing program 1 (id=3174): syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 383.405388ms ago: executing program 0 (id=3175): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x6, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000001f0000000000000000004095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff5}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r4) r5 = socket$kcm(0x10, 0xf, 0x10) recvmsg$kcm(r5, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x6, 0x9, 0x2, 0xcb, 0x0, 0x6, 0x100, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6fc0, 0x2, @perf_config_ext={0x2, 0x8}, 0x2000, 0x8, 0x6, 0x8, 0x81, 0x8b, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) 76.796236ms ago: executing program 4 (id=3176): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a910000000}, 0x5015, 0xfffffffffffffff9, 0x81, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYBLOB="2e0ff95e266a4ea0415162bf19ec92696da7f2eda6ee30e9f2d5dcba4c3290ead6870b5837e40ba9e1de485dd2e10e1673f0d85f9f9397c270c4f97f13110151652db38dce599fc855a64fb1b1382472679eb6c516214097b5c0e6e3e987c05a13e46764d4a61e5ee5cc10793941f181dc66f0caa57e52ea303c727a7257c641696264c816dc73181f26d509a1150c9702ffe282ac53e4327697f090ad63b14c0fcf560ee82e6d8af934dd07a117f0f2325594179c9d3ba695dbaa0690e7a889cde52555462d3154844e39311581a16291", @ANYRES8=r3, @ANYBLOB="000000000200000000000000000000ef00"/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x2000}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x1c3) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) sendmsg$sock(r7, &(0x7f0000000880)={&(0x7f00000001c0)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="6ffc27ba425183e2b0c0cc4a0018f4e5008dd08685e6fca4805a9c2519de03d8f5aba571bc482dcf015bb0476702ee9b14aeeb521f7bfd4b3fd77299b9a3c9924b96d7ae25ae1716db942e0460a454c4635846ec41e4931c442cf7c284684e74421924c2ef3fa36d36a2fdbc854e4c0aca3dee440e3748d0ccbeafe432172470c108c9d87daf0d99335a6a7c6a4db061eb4e8a2f95e204e844bc7b1835ad43658fd6b77892a29a34d39e3bc03394a5d8d388c484ec9489265ecc7a92230211dd8c597b012829004600d573", 0xcb}, {&(0x7f0000000640)="03e63bcdb8e0b954e29db02ddcc59ee6d729221ec0378c1e03ddcfa8949fe60fe5695bdf26d385c6336a3307f657b3084cfe6689508a11e49104ed42029d50528488fb3e25fa3be48861e8154402142b169ac2a3828a1f3e34f812c5c2079f41b95ad26fabe2f9d57d99b66e1be258f281e55f3b0e3ea16144d88451b74f34e4883f9ad17668be232458ff8eb00f540a3006d1b7af496a6451010673ba4251a790e77c978139691a19d406fa015b7a32ad8dd723403dbfc98b0195866d334a6f9430656a57b61220d1458fdb4e93a83fd7696cdd1223b21e1cfd7b68ffa42ebf56796e5cc568d4075cd601a6e9c5d04ece8dd834821f4fe4fc", 0xf9}, {&(0x7f0000000300)="3407ebb64b0ab8394bc3a44a8cca7549a50fba2ea9d80f9afbc822a5825de8019f1473173c7fe5a89aa4e1be00d23eaac0e794019941f75ddf39a7d5ccfc56732f37f9552e625f0359e589a108f017be8c8ba3248b5e61e0b237fbd04d07a2eb82f70a06b9f86c1c12219cdefe756a2cfcb987ebc6d36c00c3ba1a7a6f5693fed23a39093a0d876e457feb6fc96e839bcc0ad2c3aff83cc18cb8ba4105d418cbd8b12749ef3094a23e352f6608d15ca399d320547f859222093d8297ea1a2fb6", 0xc0}, {&(0x7f0000000240)="68cec13bc27560b8bc14cad8071f26d71302e0c63d197d652937addabde0ae38fc033bc2b3c95408453a612a732b830d7c339992921eb5a877759379ff626f141d5998cbc779905698b5c862e2a5661f0f260d128112c873b2e3bf25e0c6", 0x5e}, {&(0x7f0000001980)="9094279ac991aa268dc71a6319d4c1b77ccc559d212d477cf2d471796af37b39da6dc9bce1ccce30fb2bc8d00652390b33babbdb05820f8ae708c58be0f784a60ac72b1ac16b8bde6dfe357fb021dee22fdc172d539f3fa0bbce1efecce2c96c5522b393d348804de4a35e8a5685438608a196d8f856637d74b6b086391c5c564cab3661bcc79d42a3ede95dceeddd3de3b1d4162c5e74645e1a971eaa3915d9ae51f53e040212ff31a0894b999a5bdf4e2dfd4a0017c1fd94991b9056540a60539db13ca6d7a08982363b8acd35b96802d5f271fc33b8594741d5e4b57c2b9d63b03113cc88cfc14c7b8d7a5bdda1c1aa30bc0c043959e2994a4fd015efd6b43f8c776a3824e945f7739b73746e5034d4fc7139bd7cafc723092f190847941831eb281b06f534a352f47a5a3f3b424ac7b3a24bdb31b0cbd42eecfdd8f1088515ecf3069fa9cc9c555c526b9a9a262e7f1a6126e2e3100e3c55ffd49324391b611584b1d1355d4072fa79dfe560e462ae4c7f92cd7b1e4c4a3b168dc150db71e868a4f0bd82f76b6d8c753c11dd41e7b5ad8be998b897ea4946d96b55d8f3973650cee638c93c73d9c84794d83124dcad1b51b8f81e7c8256c49f5b85d2a395ecd69b42c9ec878a6b1835e79a2917ba588f5f3df56019a65d9a02143cf57ea999967730a72c9ac12ba3e56eb8d6d0aa22f6d23a514e20badc7b32cfe2b9466f83e6f2326dbdf56eac72516ff6ed03d99405ca90e89d4e20f3d1317c22ac6b536f97af3b8ec5c1e9284e7d5b9d15c3c8b2c37d47d0af6daa37cbf4ddc953589be3937a1cdc32c9659336109164f7002f92286e06cf135bb05b7a3d197cf706b7c3a7b52bb78d099ed556b918a955dbb5e7b7b3a6df18b15014e373e3d26199bfd07709605e9cab1a78130c1ce0fb5b0e2ca343a972cd0ddf743317553496844bafe0c74c54249605e87ec5898d34bb23734d7d21857869f841f8c71377a19e7afe60ae2501796c6125b44ff6e1c858ac3683ae94992c69fb411c9f6e04f68064658ef01b0592a2bc9446f7d0011a33625b6eada48f1c90f9dbc2c18fa7ceaf7ffc1834d73c644e515a65c6cb6a3d99949d8031f3492eba8a07c803a8c3014d5776454270688926d0562e5cfeb2dc146e296209ac6f471e092bfe3233d7c8b32679e4d749d0a071b926c4454fba6b1503cb9f9f7f55351463b0e30626813bac3fbc0a92a62ab8585324f7edb188cc2cdbb335e072a866552da8056fc25f3d6e0da110d2ba9b14bc03458f3eb31e14ab617272c2e4920f6780486411e50ee98071fa20a9e3533f69623cc79fb1f05bc403661106aa2f6532d25be75359adc64f1c39f8ff4f56e3b8dbf2bbd7ac735c044cc77df37ba01fc5b69d3c411046bc394114db746c169098d788b659b04c45de3511f17889d49c7cec026db24da9f4b269b22954e56dcb8f6ac223579ac1ccaa5c9a4ed02df6b9e6a416fac04c9e0ed2866b38c3fae0d0b926a33cb09dd2dbbca5e6d58337d0812f846a584399f43185ae05a093b0d809084aac106ceb09a872d61d4b1f2898f05a4d355894280900db99eabed10c3c4aa4c1d60152fd1484144045869b7a4378d84c255573105df3209c7263706f386a507e7b25610cd7220520d01e58a36909bef3ce396c070777b08ef4ec8e9e175c74fbb759f575dd0e191399682678f6aef0c5dc79e11ba9f61288aa1c3cbe37390408281400fcae897c37d4ed9edf680733cdbf669eaa0e0d1bd4c4d0de51174c393ecaa959210ba2cb66e45885e73923700c0b9f0b8d47d0918d15d93ecdad6aa2656bc7f74081641826b7304ada5dd6c3d1628936ce3c6047a9bc4873d2a6621a0b5865f0a115f7ba090a19cc5c2649ccfa4242abb494523f2234d7f188ca733dc4ca622844b42793e01cb24522cd6802e30c6ea014b9b8276eee51235c8de641b5b2fc24ff65a29578191bb21a3bf6d5ab89d9aa15ff61db8a8688f703036a482e7a815325ec726149ff7b0fe0b657737b7cae5938d58b497e05a8682843dac3e4b8148927721d7b7c2e936be3d42bbf24debe8076b0894ed51d2b0f50304f0214bcca2a69e8d5d2c6bd8b8ee5258d67ac0e98d65f3a1d961d47a6a73af3250b795cfd19bdbfba6e8d4786b571607fcd82a2db8e670b8c13c5868d3bd827a285acd4aa50fce90cd4f89f1c836e32e03cfd4dbe21a506d081521fb77fa1bd16b2b58c3a36aa2a40ad0e27b0c414f16c19b7489a75365d4f38cfe47e86e3edbe2154b19bf3f7fa73875113ac61c525475f3f327db0d1396691460a7198b2ee5cd2c406630862e16415c1bcbf7f1915738a58af7249c20d382800b0dd1592eaf51d78e839777cf1bb06c26009c0c78533eeb387be1b4757722066ea922ce7e9bea11f8ce89a62e0476166ca24d100189e27f93d4d3c92274db6663bffa0a82e79ec962630bb94fbc5c9935cb9a653c9099b276930da875d097244292efac74f760be2d26fa4ae82403d673ca04a1144b218dab3c80521356f486379d525cccdd57a84db98506b76249fac2eac06318717676225b5c6faf2fb947f14dcdbbba737e865124dbbd02f8308553fbd97e7a9f1e3721b2be444b8451571de0501dc612aaae361a1bc81d828b51c276966bf065dcb2cf3bd293ac88b019c2a51790e2fc7acca0729bd3136518c4976544bf689b12e354e3d3245c2280dd20a3091267c307fe3bda0145eb9c741321a7d393cdcb7f05fba93ed0cce30dd3a9a51928a3ac2f8b916b002cf6fea523d192fb5f950eca2ae8e2cfd531b08b64fb8ee805ee75a54daf6614ca235bdc6d081ed19db9f0324766fd146bbf5d74f4f1b53bcaabd123815a9bd56c7fabf5271c0380eb11ec2f187912ca8793acbbf4210a5c88dec0896d1ef3cf0783fb0ec76f6e5b9faf88dfa58425b0e01f5c4f9bdd83efc3780892c242c501fafd0c5c2510aa3c100480fe3f7fde9adf5edc6a150fbe7f88a0cb46a407035e8a3fe27d25df89377625b2ead4dbef009c70decee3baa63428d628c099fd744b912469c84a0b9aec0acef6cc5fa8828cec402b7a3ac01f5f6080c3c67ba6f84e85c866f373482ce44829295e8c77d33d772adf19726b1a16027fbfe0ba1fbad8be87f5681f1e7fb17b7d19a022a37c6813b3600305caeb1e2a35523b1a912978edfb731ca730e370796d272b2034c3f2359da5dbd76ad978004d1bc7c0dafe74e3776fc9ab059db1b41deacc5bfd3c405ad391b263d04ec20f86fbfe27e702b8e89c19b318a67e1a6e02c1401d31f2bcf17c5f5172776978de773e4232089fef00ac6be5756767f91c6401bb0955407d87cb84209eb7f056a107654f2b666a2982f362a2dddf045f83d3c258f1d0875571e13478a4c331d5f4437d5b288e50f5c7febad981de7b095c9a5caee2f559e3eac0eda1b997c946a68e3d7d2d84744f8fd470a0ce36998dd9ffaf0af82e654c9a0a29ce0153a84aaa6ad3d79496939b4b09b620ebf9017606684c62bfe5e24e8537481f3ac43600a477f7e640a53f4f8b88dc349a7b1faa86c548458ffe644dc5108c503d4a49f5e83c651556fa4609ddd211c90d8f4e7d45dbbc11c36a19df31d6854373402eb665604d666dc6fd69474978c583f6cb9e571e4116e70aa6e7faa9178ebea78e7408d3b80eef7356cce04d48cc5981590732deb985a93f2cfb9e5e2160e73aa33294ed878315953aacfd23b0ab4c9248eb689d268dc83e20e1cd2fbf56d3e82b8d3e545d3f77e5af8ed96cfffbe8132ec1857d2322df5e4f4115143e56b715be4e81652d1ef1a7f744d0f71d02c263c3e94b377c6cfcfc1f539e5c3e95a08ca6222ea5464301fb8cff7c8c774f9d8a9b1e605d45a8a37397201c29c899db822d2a4c3f28e66024317372ff0f821ac5a030cf9b44578ed3322b9fa70306f4a9da703b4a8bb3ec883cfa162c13ff986a3e822f019ae19d3a27bd34acfb9424179540ecf5bc66217e42c857373ea451e2f19a337f007009da3f111cb74c8e907f14f5c3b9496bb8008394d37dc5bebf922807d12ffed843b3658c6a96292037330959444e967a60a7a400730e27cc7674fc67508fb9d37051e585708ed6247b8b545862648b4e64cae7198de6e2d7fd420289900fa47a717aa2a10b38be6263518c0d48c3cf552b7f3d4fed7109a3be1f0ecaa28310367432257f005517abbac2ca74e0b07697d35715a257010f1c64b4ec39f5f10e38239940fed0b0f52c12cf608f61edb86e36f4796f1ec6f35a78569b89c498ee1bebca081c4450a0c919e40c56bf0d1861dc0312b1f01047c13d9e37a47fda4573e251c4c6f43ffa254340a4d8ecf2e92f8820d572b6eacdd78d258dabb939686c5c13ccd80f9f46696897f3a6122b6551153929ba99e8fbe6f9b0199bbb1bfed95a1c4e58b55fcdf308f9980044363555d289cd436e8c5f36bf75a04f25005059e47a76d5e6f8519b0c953b51c79de617aa7dcb2ccef9545a1b4719bb66b37b62591bb2e1c29565917f8bc60b6d481e83fdc83782fe53f517f3bc58bedc02597884586adbae0ee1e0ee5141a3b82a1635cbaedf12a2c0f0644e03be2302173e3ed5f448e2c20657e30490322a8e5330761dc3281a5bc0aced3f3190f60c850097cc76358e735d1daa6026951ceee1a7dfb3d30ed9035163632cedcd578e2b7a055dfb56b11e3ea5f85de3c06659b62d476f7f4141437b8f87afde5f153632ab8ca32f50e19c7f74a969ba5fd9eae22fd8908d973fc71f21613f18c8c3315672e4244754b9519cffe080d43044e636dfeb6187066484c94f665d378bb701df27d2800a46f1e05a10834e54c69d44e17681d82742ce0d259ca37e0e3f6ed0d80defe1d98ed7e41b77f4d9304ced64b01f2372ecb0865f885425239783973b6c2052476354921917842c4afd15ad0d627cba103868ddd9c5db5865dac8a223620d9697b1245fa178e57befa25c20879d55a309cd0dc6c9a4de45250729d23a22cda1f0b07423531a23003ebb4ee9c9dbda3c06f9c6230f7d00dbc97ef137a00f282c01e9521f3e2b0d1e35e752be07f4c34d6c739dbdb22d5b1aad4a1dc65757ee40d0b06e11f248979257106db0f2fe90d2812c8e7fa89fd9fcfff5341472d8fe0b9298a9db9067d84b553b6f87c059b84ef7470954c9a96e3d8ec888a02f3bbac23d365e0a947eee92a7021078b9eb0eaff3557cfddcbe31adb8dbf07fc6bd4dd29594ff425d538f053b71a4418a363913291b8428c0dff271a4e2dbf7f95399794fc13565e61d7b6d2ecb97c7dd70b1f2ec04a6b31e784e3391fb4c4aad6dcc5124871e4fc62b60e7fd913c80300989a80452ede348f5d300c3095dc2d402ffbebebcaed06c2f364dd0fb12872a48b6bb7a28336287482216cc877a1aec13446e9461c57431f15def3d1b22b961b634e3cae0fbf4d02e9f5b21e41a54c546339931b5566fb41a005faaef749c1997de0c13f8dac9d2af35c6d3e8167a3603866d58b6aaf1ccc64a3a23851213062aa8b1de9171bd2cf3db05292282eda33a5f164a5e0827837fa1cc214f2ed2664c832a317e77a17614069e61061756bb5577b1cf4447197d51679b5808b5eb51f685de502cd4c6618eb4ce1e0434e5a80d2a6d6a8dc4d5b5c0c08345d537c23ec94efaf05625ca2f2583d894ba82a9a70543420d2306970d3efb9c985888912c23ef948867551b7562deeee62cf00d684df97b71833ac20ec0faac410fe6c282f33672ab7f42fe58c05469d554824de34a9afe2ececa5c8a0b747d13e", 0x1000}, {0x0}], 0x6, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r10}, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000740)=r11, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8912, &(0x7f00000002c0)={'bridge_slave_0\x00', @random="bc1a091f2845"}) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r6], 0xfe33) 62.918307ms ago: executing program 1 (id=3177): r0 = socket$kcm(0x29, 0x2, 0x0) syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000b05d25a806f8c6394f90224fc602f00000004000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x0, 0x3, 0x8000}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000880)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000040), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x5b6}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'sit0\x00', 0x600}) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="da", 0x1}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x10000, 0xc2ba, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) 44.237948ms ago: executing program 2 (id=3096): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 0s ago: executing program 3 (id=3178): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): :0x7f3ab919acb9 [ 232.646002][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.665743][ T7200] RSP: 002b:00007f3aba083028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.674301][ T7200] RAX: ffffffffffffffda RBX: 00007f3ab9415fa0 RCX: 00007f3ab919acb9 [ 232.682503][ T7200] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 232.690872][ T7200] RBP: 00007f3aba083090 R08: 0000000000000000 R09: 0000000000000000 [ 232.699147][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.707259][ T7200] R13: 00007f3ab9416038 R14: 00007f3ab9415fa0 R15: 00007ffe38a1e328 [ 232.715385][ T7200] [ 233.203609][ T7209] __nla_validate_parse: 6 callbacks suppressed [ 233.203650][ T7209] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1111'. [ 233.567991][ T7213] validate_nla: 5 callbacks suppressed [ 233.568033][ T7213] netlink: 'syz.0.1112': attribute type 39 has an invalid length. [ 233.626029][ T7221] netlink: 'syz.1.1114': attribute type 39 has an invalid length. [ 235.573865][ T7219] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1115'. [ 235.584747][ T7221] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 235.603870][ T7229] netlink: 'syz.4.1118': attribute type 39 has an invalid length. [ 235.619266][ T7221] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 235.666094][ T7221] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 235.829765][ T7232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1119'. [ 235.878087][ T7232] netlink: 'syz.0.1119': attribute type 39 has an invalid length. [ 235.968611][ T7236] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 236.043406][ T7238] netlink: 'syz.2.1121': attribute type 39 has an invalid length. [ 236.901091][ T7252] syz.2.1127[7252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.901239][ T7252] syz.2.1127[7252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.075161][ T7255] netlink: 'syz.1.1129': attribute type 10 has an invalid length. [ 237.210256][ T7259] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1130'. [ 237.236197][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1131'. [ 237.274601][ T7267] netlink: 'syz.0.1131': attribute type 39 has an invalid length. [ 237.338876][ T7266] netlink: 'syz.2.1133': attribute type 39 has an invalid length. [ 237.375790][ T7263] netlink: 'syz.3.1132': attribute type 39 has an invalid length. [ 237.691576][ T7273] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1135'. [ 239.064611][ T7290] team0: Port device dummy0 added [ 239.165125][ T7299] validate_nla: 2 callbacks suppressed [ 239.165149][ T7299] netlink: 'syz.4.1144': attribute type 39 has an invalid length. [ 239.184787][ T7305] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 239.194275][ T7301] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1145'. [ 239.463946][ T7307] netlink: 'syz.1.1147': attribute type 39 has an invalid length. [ 239.793516][ T7313] netlink: 'syz.4.1150': attribute type 39 has an invalid length. [ 240.207824][ T7322] netlink: 'syz.3.1153': attribute type 39 has an invalid length. [ 240.392237][ T7326] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1154'. [ 240.668707][ T7334] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 240.868669][ T7343] netlink: 'syz.1.1161': attribute type 39 has an invalid length. [ 241.324822][ T7349] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.566465][ T7353] netlink: 'syz.2.1165': attribute type 39 has an invalid length. [ 241.781969][ T7361] FAULT_INJECTION: forcing a failure. [ 241.781969][ T7361] name failslab, interval 1, probability 0, space 0, times 0 [ 241.795383][ T7361] CPU: 1 PID: 7361 Comm: syz.0.1168 Not tainted syzkaller #0 [ 241.803006][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.813228][ T7361] Call Trace: [ 241.816535][ T7361] [ 241.819582][ T7361] dump_stack_lvl+0x188/0x24e [ 241.824309][ T7361] ? show_regs_print_info+0x12/0x12 [ 241.829543][ T7361] ? load_image+0x400/0x400 [ 241.834173][ T7361] ? __might_sleep+0xd0/0xd0 [ 241.839331][ T7361] ? __lock_acquire+0x7d10/0x7d10 [ 241.844496][ T7361] should_fail_ex+0x399/0x4d0 [ 241.849223][ T7361] should_failslab+0x5/0x20 [ 241.855075][ T7361] slab_pre_alloc_hook+0x59/0x310 [ 241.860302][ T7361] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 241.866339][ T7361] __kmem_cache_alloc_node+0x4f/0x260 [ 241.871797][ T7361] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 241.877735][ T7361] __kmalloc+0xa0/0x240 [ 241.881930][ T7361] tomoyo_realpath_from_path+0xdf/0x5d0 [ 241.887708][ T7361] ? tomoyo_path_number_perm+0x205/0x650 [ 241.893392][ T7361] tomoyo_path_number_perm+0x22f/0x650 [ 241.899012][ T7361] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 241.904774][ T7361] ? ksys_write+0x1c0/0x250 [ 241.909342][ T7361] ? common_file_perm+0x171/0x1c0 [ 241.914420][ T7361] ? __fget_files+0x28/0x4b0 [ 241.919225][ T7361] ? __fget_files+0x28/0x4b0 [ 241.923893][ T7361] security_file_ioctl+0x6c/0xa0 [ 241.928958][ T7361] __se_sys_ioctl+0x48/0x170 [ 241.933603][ T7361] do_syscall_64+0x4c/0xa0 [ 241.938423][ T7361] ? clear_bhb_loop+0x60/0xb0 [ 241.943515][ T7361] ? clear_bhb_loop+0x60/0xb0 [ 241.948519][ T7361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.954545][ T7361] RIP: 0033:0x7f3ab919acb9 [ 241.959174][ T7361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.979351][ T7361] RSP: 002b:00007f3aba083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.987896][ T7361] RAX: ffffffffffffffda RBX: 00007f3ab9415fa0 RCX: 00007f3ab919acb9 [ 241.996071][ T7361] RDX: 0000200000000180 RSI: 000000004004743b RDI: 0000000000000003 [ 242.004218][ T7361] RBP: 00007f3aba083090 R08: 0000000000000000 R09: 0000000000000000 [ 242.012309][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.020408][ T7361] R13: 00007f3ab9416038 R14: 00007f3ab9415fa0 R15: 00007ffe38a1e328 [ 242.028614][ T7361] [ 242.039001][ T7362] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1169'. [ 242.118607][ T7361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.200778][ T7364] netlink: 'syz.3.1170': attribute type 39 has an invalid length. [ 242.358304][ T7370] netlink: 'syz.1.1173': attribute type 39 has an invalid length. [ 242.680212][ T7376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'. [ 242.897100][ T7381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1177'. [ 243.101292][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1189'. [ 243.401763][ T7395] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1181'. [ 243.450968][ T7395] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1181'. [ 243.466061][ T7397] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1182'. [ 244.058630][ T7416] FAULT_INJECTION: forcing a failure. [ 244.058630][ T7416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.150782][ T7416] CPU: 1 PID: 7416 Comm: syz.1.1187 Not tainted syzkaller #0 [ 244.158447][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.168740][ T7416] Call Trace: [ 244.172271][ T7416] [ 244.175353][ T7416] dump_stack_lvl+0x188/0x24e [ 244.180111][ T7416] ? show_regs_print_info+0x12/0x12 [ 244.185399][ T7416] ? load_image+0x400/0x400 [ 244.190249][ T7416] ? __lock_acquire+0x7d10/0x7d10 [ 244.195475][ T7416] should_fail_ex+0x399/0x4d0 [ 244.200245][ T7416] _copy_from_user+0x2c/0x170 [ 244.205176][ T7416] iovec_from_user+0x143/0x360 [ 244.210421][ T7416] __import_iovec+0x6d/0x500 [ 244.215601][ T7416] import_iovec+0x6f/0xa0 [ 244.220184][ T7416] ___sys_sendmsg+0x252/0x360 [ 244.225149][ T7416] ? __sys_sendmsg+0x290/0x290 [ 244.230008][ T7416] ? __lock_acquire+0x7d10/0x7d10 [ 244.235391][ T7416] __se_sys_sendmsg+0x1bb/0x2a0 [ 244.240938][ T7416] ? __x64_sys_sendmsg+0x80/0x80 [ 244.246169][ T7416] ? lockdep_hardirqs_on+0x94/0x140 [ 244.251432][ T7416] do_syscall_64+0x4c/0xa0 [ 244.255902][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 244.260894][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 244.265625][ T7416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.271602][ T7416] RIP: 0033:0x7f8b1fd9acb9 [ 244.276055][ T7416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.296225][ T7416] RSP: 002b:00007f8b20c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.304862][ T7416] RAX: ffffffffffffffda RBX: 00007f8b20015fa0 RCX: 00007f8b1fd9acb9 [ 244.312886][ T7416] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 244.321172][ T7416] RBP: 00007f8b20c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 244.330139][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.338382][ T7416] R13: 00007f8b20016038 R14: 00007f8b20015fa0 R15: 00007ffec4c085e8 [ 244.346778][ T7416] [ 247.183461][ T7418] __nla_validate_parse: 1 callbacks suppressed [ 247.183481][ T7418] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1190'. [ 247.200492][ T7424] validate_nla: 6 callbacks suppressed [ 247.200508][ T7424] netlink: 'syz.3.1188': attribute type 39 has an invalid length. [ 247.242444][ T7427] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 247.312114][ T7427] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 247.366413][ T7427] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 247.498587][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1195'. [ 247.513644][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1194'. [ 247.557098][ T7436] netlink: 'syz.0.1195': attribute type 39 has an invalid length. [ 247.569961][ T7432] netlink: 'syz.2.1194': attribute type 39 has an invalid length. [ 247.633597][ T7438] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1196'. [ 248.788477][ T7466] netlink: 'syz.2.1203': attribute type 10 has an invalid length. [ 248.803605][ T7447] delete_channel: no stack [ 248.805869][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.833938][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.853913][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.863859][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.023357][ T7470] netlink: 'syz.2.1204': attribute type 27 has an invalid length. [ 249.044830][ T7470] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 249.353134][ T7479] netlink: 'syz.3.1208': attribute type 39 has an invalid length. [ 249.379437][ T7476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1207'. [ 249.412150][ T7476] netlink: 'syz.2.1207': attribute type 39 has an invalid length. [ 249.698572][ T7488] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1211'. [ 249.843399][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1212'. [ 249.926118][ T7495] netlink: 'syz.3.1212': attribute type 39 has an invalid length. [ 250.061355][ T7496] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 251.130217][ T7522] FAULT_INJECTION: forcing a failure. [ 251.130217][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 251.201248][ T7522] CPU: 1 PID: 7522 Comm: syz.4.1220 Not tainted syzkaller #0 [ 251.208896][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.219181][ T7522] Call Trace: [ 251.222585][ T7522] [ 251.225566][ T7522] dump_stack_lvl+0x188/0x24e [ 251.230323][ T7522] ? show_regs_print_info+0x12/0x12 [ 251.235849][ T7522] ? load_image+0x400/0x400 [ 251.240691][ T7522] ? __lock_acquire+0x7d10/0x7d10 [ 251.247011][ T7522] should_fail_ex+0x399/0x4d0 [ 251.253252][ T7522] should_failslab+0x5/0x20 [ 251.258097][ T7522] slab_pre_alloc_hook+0x59/0x310 [ 251.263444][ T7522] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 251.268535][ T7522] __kmem_cache_alloc_node+0x4f/0x260 [ 251.274040][ T7522] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 251.279475][ T7522] kmalloc_trace+0x26/0xe0 [ 251.284059][ T7522] rxrpc_alloc_call+0x2d4/0xbf0 [ 251.288983][ T7522] rxrpc_new_client_call+0xf3/0xd30 [ 251.294234][ T7522] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 251.299472][ T7522] ? do_raw_read_unlock+0x39/0x70 [ 251.304618][ T7522] rxrpc_do_sendmsg+0xab9/0x10c0 [ 251.309773][ T7522] ? rxrpc_process_local_events+0xa50/0xa50 [ 251.315736][ T7522] ? rxrpc_look_up_server_security+0x530/0x530 [ 251.322150][ T7522] ? rxrpc_sendmsg+0x467/0x890 [ 251.327237][ T7522] ? rxrpc_getsockopt+0x150/0x150 [ 251.332502][ T7522] ____sys_sendmsg+0x5be/0x970 [ 251.337580][ T7522] ? __sys_sendmsg_sock+0x30/0x30 [ 251.342727][ T7522] ? __import_iovec+0x315/0x500 [ 251.347706][ T7522] ? import_iovec+0x6f/0xa0 [ 251.352509][ T7522] ___sys_sendmsg+0x2a2/0x360 [ 251.357447][ T7522] ? __sys_sendmsg+0x290/0x290 [ 251.362624][ T7522] ? __lock_acquire+0x7d10/0x7d10 [ 251.368142][ T7522] __se_sys_sendmsg+0x1bb/0x2a0 [ 251.373144][ T7522] ? __x64_sys_sendmsg+0x80/0x80 [ 251.379905][ T7522] ? lockdep_hardirqs_on+0x94/0x140 [ 251.385258][ T7522] do_syscall_64+0x4c/0xa0 [ 251.389912][ T7522] ? clear_bhb_loop+0x60/0xb0 [ 251.394753][ T7522] ? clear_bhb_loop+0x60/0xb0 [ 251.399635][ T7522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.406087][ T7522] RIP: 0033:0x7fcda299acb9 [ 251.410534][ T7522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.430695][ T7522] RSP: 002b:00007fcda3905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.439392][ T7522] RAX: ffffffffffffffda RBX: 00007fcda2c16180 RCX: 00007fcda299acb9 [ 251.447572][ T7522] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 000000000000000b [ 251.456810][ T7522] RBP: 00007fcda3905090 R08: 0000000000000000 R09: 0000000000000000 [ 251.465001][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.473190][ T7522] R13: 00007fcda2c16218 R14: 00007fcda2c16180 R15: 00007ffd95286c78 [ 251.481331][ T7522] [ 251.589256][ T7528] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1226'. [ 251.741688][ T7530] netlink: 'syz.1.1225': attribute type 39 has an invalid length. [ 251.772621][ T7535] device bond0 entered promiscuous mode [ 251.780811][ T7535] device bond_slave_0 entered promiscuous mode [ 251.791111][ T7535] device bond_slave_1 entered promiscuous mode [ 252.072766][ T7538] syz.2.1228[7538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.072906][ T7538] syz.2.1228[7538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.203103][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1229'. [ 252.256946][ T7545] netlink: 'syz.3.1229': attribute type 39 has an invalid length. [ 253.242887][ T7567] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1239'. [ 253.458385][ T7571] device bond0 entered promiscuous mode [ 253.464204][ T7571] device bond_slave_0 entered promiscuous mode [ 253.494242][ T7571] device bond_slave_1 entered promiscuous mode [ 254.123337][ T7583] syz.4.1245[7583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.123475][ T7583] syz.4.1245[7583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.288505][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1248'. [ 254.413554][ T7599] netlink: 'syz.1.1248': attribute type 39 has an invalid length. [ 254.540412][ T7591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.064852][ T7611] FAULT_INJECTION: forcing a failure. [ 255.064852][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.101351][ T7611] CPU: 0 PID: 7611 Comm: syz.4.1254 Not tainted syzkaller #0 [ 255.109554][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.120448][ T7611] Call Trace: [ 255.123882][ T7611] [ 255.127846][ T7611] dump_stack_lvl+0x188/0x24e [ 255.133145][ T7611] ? show_regs_print_info+0x12/0x12 [ 255.138814][ T7611] ? load_image+0x400/0x400 [ 255.143747][ T7611] ? __lock_acquire+0x7d10/0x7d10 [ 255.150080][ T7611] should_fail_ex+0x399/0x4d0 [ 255.156251][ T7611] _copy_from_user+0x2c/0x170 [ 255.161159][ T7611] iovec_from_user+0x143/0x360 [ 255.166097][ T7611] __import_iovec+0x6d/0x500 [ 255.170925][ T7611] import_iovec+0x6f/0xa0 [ 255.175331][ T7611] ___sys_sendmsg+0x252/0x360 [ 255.180104][ T7611] ? __sys_sendmsg+0x290/0x290 [ 255.185087][ T7611] ? __lock_acquire+0x7d10/0x7d10 [ 255.190335][ T7611] __se_sys_sendmsg+0x1bb/0x2a0 [ 255.195369][ T7611] ? ct_nmi_exit+0x145/0x1c0 [ 255.200822][ T7611] ? __x64_sys_sendmsg+0x80/0x80 [ 255.205964][ T7611] ? lockdep_hardirqs_on+0x94/0x140 [ 255.212443][ T7611] do_syscall_64+0x4c/0xa0 [ 255.217660][ T7611] ? clear_bhb_loop+0x60/0xb0 [ 255.222685][ T7611] ? clear_bhb_loop+0x60/0xb0 [ 255.228160][ T7611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.234653][ T7611] RIP: 0033:0x7fcda299acb9 [ 255.239525][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.261467][ T7611] RSP: 002b:00007fcda3947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.270329][ T7611] RAX: ffffffffffffffda RBX: 00007fcda2c15fa0 RCX: 00007fcda299acb9 [ 255.278374][ T7611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 255.286575][ T7611] RBP: 00007fcda3947090 R08: 0000000000000000 R09: 0000000000000000 [ 255.294857][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.302982][ T7611] R13: 00007fcda2c16038 R14: 00007fcda2c15fa0 R15: 00007ffd95286c78 [ 255.311209][ T7611] [ 255.730535][ T7619] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1256'. [ 256.132978][ T7627] netlink: 'syz.3.1261': attribute type 39 has an invalid length. [ 256.467520][ T7633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1264'. [ 256.546299][ T7634] netlink: 'syz.2.1264': attribute type 39 has an invalid length. [ 256.729851][ T7636] syz.1.1265[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.730018][ T7636] syz.1.1265[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.983589][ T7644] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1268'. [ 257.031698][ T7642] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1267'. [ 257.081371][ T7638] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 257.118503][ T7644] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 257.149454][ T7644] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1268'. [ 257.509624][ T7651] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1271'. [ 257.585113][ T7646] netlink: 'syz.2.1269': attribute type 39 has an invalid length. [ 257.606360][ T7648] netlink: 'syz.1.1270': attribute type 39 has an invalid length. [ 257.733453][ T7655] netlink: 'syz.0.1272': attribute type 39 has an invalid length. [ 258.202673][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1275'. [ 258.277761][ T7664] netlink: 'syz.1.1275': attribute type 39 has an invalid length. [ 258.593966][ T7667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1277'. [ 258.618876][ T7667] netlink: 'syz.0.1277': attribute type 39 has an invalid length. [ 258.707406][ T7675] netlink: 'syz.4.1280': attribute type 39 has an invalid length. [ 258.763407][ T7677] syz.1.1281[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.763547][ T7677] syz.1.1281[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.979951][ T7684] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1282'. [ 259.028547][ T7683] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1283'. [ 259.287592][ T7689] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1287'. [ 259.406680][ T7693] netlink: 'syz.2.1287': attribute type 10 has an invalid length. [ 259.431876][ T7693] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1287'. [ 259.719063][ T7687] netlink: 'syz.1.1284': attribute type 39 has an invalid length. [ 259.733327][ T7691] netlink: 'syz.3.1286': attribute type 39 has an invalid length. [ 259.763662][ T7694] netlink: 'syz.4.1285': attribute type 39 has an invalid length. [ 260.697482][ T7717] syz.0.1294[7717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.697624][ T7717] syz.0.1294[7717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.142499][ T7722] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1297'. [ 261.771483][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.778328][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.001096][ T7738] syz.0.1310[7738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.001265][ T7738] syz.0.1310[7738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.328693][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.402031][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.442295][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.479284][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.513999][ T7741] batman_adv: batadv0: Interface deactivated: wlan0 [ 262.522725][ T7741] batman_adv: batadv0: Removing interface: wlan0 [ 262.690100][ T7742] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 262.700512][ T7742] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 262.723676][ T7748] validate_nla: 6 callbacks suppressed [ 262.723718][ T7748] netlink: 'syz.1.1305': attribute type 39 has an invalid length. [ 262.730067][ T7742] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 262.763720][ T7749] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1303'. [ 262.819773][ T7753] netlink: 'syz.0.1303': attribute type 10 has an invalid length. [ 262.856018][ T7753] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1303'. [ 263.224364][ T7756] netlink: 'syz.2.1307': attribute type 10 has an invalid length. [ 263.238254][ T7756] device bond0 left promiscuous mode [ 263.249879][ T7756] device bond_slave_0 left promiscuous mode [ 263.268947][ T7756] device bond_slave_1 left promiscuous mode [ 263.410895][ T7765] netlink: 'syz.1.1311': attribute type 39 has an invalid length. [ 263.614257][ T7768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1312'. [ 263.677588][ T7768] netlink: 'syz.3.1312': attribute type 39 has an invalid length. [ 263.792290][ T7775] syz.0.1315[7775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.792444][ T7775] syz.0.1315[7775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.869151][ T7774] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1314'. [ 264.011642][ T7778] netlink: 'syz.1.1316': attribute type 39 has an invalid length. [ 264.105704][ T7780] netlink: 'syz.2.1317': attribute type 10 has an invalid length. [ 264.379388][ T7789] netlink: 'syz.2.1321': attribute type 39 has an invalid length. [ 264.583038][ T7794] netlink: 'syz.3.1323': attribute type 39 has an invalid length. [ 264.976421][ T7800] netlink: 'syz.4.1327': attribute type 39 has an invalid length. [ 265.018096][ T7802] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1326'. [ 265.183952][ T7804] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1328'. [ 265.382688][ T7808] syz.0.1329[7808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.382818][ T7808] syz.0.1329[7808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.610760][ T7813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1331'. [ 265.657839][ T7816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1332'. [ 265.900043][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1333'. [ 266.414142][ T7839] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1342'. [ 267.865102][ T7870] __nla_validate_parse: 3 callbacks suppressed [ 267.865143][ T7870] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1353'. [ 267.996344][ T7878] validate_nla: 9 callbacks suppressed [ 267.996379][ T7878] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 268.011360][ T7878] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1356'. [ 268.046022][ T7875] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1355'. [ 268.075814][ T7872] netlink: 'syz.3.1354': attribute type 39 has an invalid length. [ 268.542064][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1362'. [ 268.556819][ T7892] netlink: 'syz.1.1363': attribute type 39 has an invalid length. [ 268.583209][ T7890] netlink: 'syz.2.1362': attribute type 39 has an invalid length. [ 268.650513][ T7894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1364'. [ 268.680754][ T7894] netlink: 'syz.0.1364': attribute type 39 has an invalid length. [ 268.772503][ T7898] netlink: 'syz.4.1365': attribute type 39 has an invalid length. [ 268.922115][ T7903] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 268.942749][ T7904] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1366'. [ 269.293804][ T7914] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1371'. [ 269.360797][ T7914] netlink: 'syz.4.1371': attribute type 39 has an invalid length. [ 269.967687][ T7930] syz.0.1377[7930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.967844][ T7930] syz.0.1377[7930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.224197][ T7934] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1379'. [ 270.361736][ T7940] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 270.670769][ T7952] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1387'. [ 270.700851][ T7954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1388'. [ 270.720408][ T7954] netlink: 'syz.1.1388': attribute type 39 has an invalid length. [ 270.884244][ T7932] FAULT_INJECTION: forcing a failure. [ 270.884244][ T7932] name failslab, interval 1, probability 0, space 0, times 0 [ 270.914670][ T7932] CPU: 0 PID: 7932 Comm: syz.4.1378 Not tainted syzkaller #0 [ 270.922322][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.937663][ T7932] Call Trace: [ 270.945175][ T7932] [ 270.961458][ T7932] dump_stack_lvl+0x188/0x24e [ 270.966410][ T7932] ? show_regs_print_info+0x12/0x12 [ 270.971783][ T7932] ? load_image+0x400/0x400 [ 270.976535][ T7932] ? __might_sleep+0xd0/0xd0 [ 270.981237][ T7932] ? __lock_acquire+0x7d10/0x7d10 [ 270.986340][ T7932] should_fail_ex+0x399/0x4d0 [ 270.991179][ T7932] should_failslab+0x5/0x20 [ 270.995928][ T7932] slab_pre_alloc_hook+0x59/0x310 [ 271.001030][ T7932] kmem_cache_alloc_node+0x5a/0x320 [ 271.006543][ T7932] ? __alloc_skb+0xfc/0x7e0 [ 271.011297][ T7932] __alloc_skb+0xfc/0x7e0 [ 271.015665][ T7932] alloc_skb_with_frags+0xa7/0x710 [ 271.020896][ T7932] ? __lock_acquire+0x12f4/0x7d10 [ 271.026046][ T7932] ? rcu_is_watching+0x11/0xa0 [ 271.030942][ T7932] sock_alloc_send_pskb+0x87f/0x9a0 [ 271.036313][ T7932] ? sock_kzfree_s+0x50/0x50 [ 271.041368][ T7932] ? fib4_rule_action+0x8b/0x330 [ 271.046374][ T7932] ? fib4_rule_action+0x8b/0x330 [ 271.051439][ T7932] ? fib_rules_lookup+0x8fd/0xb40 [ 271.056970][ T7932] __ip_append_data+0x25fb/0x3850 [ 271.062065][ T7932] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 271.067143][ T7932] ? ip_route_output_key_hash+0x139/0x330 [ 271.072996][ T7932] ? ip_setup_cork+0x850/0x850 [ 271.077987][ T7932] ? ipv4_mtu+0x2c8/0x3e0 [ 271.082610][ T7932] ? ip_setup_cork+0x532/0x850 [ 271.087636][ T7932] ip_make_skb+0x227/0x440 [ 271.092315][ T7932] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 271.097325][ T7932] ? ip_flush_pending_frames+0x250/0x250 [ 271.103341][ T7932] ? __lock_acquire+0x7d10/0x7d10 [ 271.109379][ T7932] udp_sendmsg+0x1afb/0x23b0 [ 271.114153][ T7932] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 271.119573][ T7932] ? udp_cmsg_send+0x350/0x350 [ 271.124428][ T7932] ? aa_sk_perm+0x81f/0x950 [ 271.129352][ T7932] ? aa_af_perm+0x340/0x340 [ 271.134778][ T7932] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 271.141445][ T7932] ? sock_rps_record_flow+0x19/0x3f0 [ 271.147711][ T7932] ? inet_send_prepare+0x260/0x260 [ 271.153287][ T7932] ? inet_sendmsg+0x78/0x2f0 [ 271.158570][ T7932] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 271.164304][ T7932] ? security_socket_sendmsg+0x7c/0xa0 [ 271.169911][ T7932] ? inet_send_prepare+0x260/0x260 [ 271.175092][ T7932] kernel_sendmsg+0x255/0x380 [ 271.180014][ T7932] ? sock_sendmsg+0x370/0x370 [ 271.185471][ T7932] rxrpc_send_abort_packet+0x414/0x720 [ 271.191078][ T7932] ? trace_rxrpc_tx_packet+0x250/0x250 [ 271.196661][ T7932] ? __local_bh_enable_ip+0x136/0x1c0 [ 271.202335][ T7932] ? rxrpc_notify_socket+0x65/0x530 [ 271.208560][ T7932] ? rxrpc_abort_call+0x49/0x60 [ 271.213535][ T7932] ? rxrpc_abort_call+0x49/0x60 [ 271.219069][ T7932] rxrpc_release_calls_on_socket+0x277/0x320 [ 271.226010][ T7932] rxrpc_release+0x271/0x440 [ 271.230735][ T7932] sock_close+0xd5/0x240 [ 271.237564][ T7932] ? sock_mmap+0x90/0x90 [ 271.242308][ T7932] __fput+0x22c/0x920 [ 271.246598][ T7932] task_work_run+0x1d0/0x260 [ 271.251899][ T7932] ? task_work_cancel+0x220/0x220 [ 271.257266][ T7932] get_signal+0x11a6/0x1350 [ 271.262037][ T7932] arch_do_signal_or_restart+0xc4/0x1350 [ 271.267930][ T7932] ? kick_process+0xd4/0x140 [ 271.272569][ T7932] ? task_work_add+0x2cb/0x330 [ 271.277422][ T7932] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 271.283030][ T7932] ? get_sigframe_size+0x10/0x10 [ 271.288669][ T7932] ? exit_to_user_mode_loop+0x3b/0x110 [ 271.294614][ T7932] exit_to_user_mode_loop+0x70/0x110 [ 271.299946][ T7932] exit_to_user_mode_prepare+0xee/0x180 [ 271.305800][ T7932] syscall_exit_to_user_mode+0x16/0x40 [ 271.311593][ T7932] do_syscall_64+0x58/0xa0 [ 271.316214][ T7932] ? clear_bhb_loop+0x60/0xb0 [ 271.321113][ T7932] ? clear_bhb_loop+0x60/0xb0 [ 271.325981][ T7932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.331911][ T7932] RIP: 0033:0x7fcda299acb9 [ 271.336553][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.357472][ T7932] RSP: 002b:00007fcda3947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 271.366376][ T7932] RAX: fffffffffffffe00 RBX: 00007fcda2c15fa0 RCX: 00007fcda299acb9 [ 271.374471][ T7932] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 271.382744][ T7932] RBP: 00007fcda3947090 R08: 0000000000000000 R09: 0000000000000000 [ 271.391458][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.399617][ T7932] R13: 00007fcda2c16038 R14: 00007fcda2c15fa0 R15: 00007ffd95286c78 [ 271.408144][ T7932] [ 272.077128][ T7966] syz.1.1393[7966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.077274][ T7966] syz.1.1393[7966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.908909][ T7989] __nla_validate_parse: 2 callbacks suppressed [ 272.908950][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1401'. [ 273.081027][ T7995] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1402'. [ 273.372872][ T8004] validate_nla: 6 callbacks suppressed [ 273.372915][ T8004] netlink: 'syz.0.1406': attribute type 39 has an invalid length. [ 273.491434][ T8006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1408'. [ 273.534283][ T8006] netlink: 'syz.2.1408': attribute type 39 has an invalid length. [ 273.749900][ T8008] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1409'. [ 273.986452][ T8016] syz.1.1412[8016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.986603][ T8016] syz.1.1412[8016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.078667][ T8011] netlink: 'syz.0.1410': attribute type 39 has an invalid length. [ 274.180003][ T8019] netlink: 'syz.2.1411': attribute type 10 has an invalid length. [ 274.571295][ T8028] netlink: 'syz.2.1417': attribute type 39 has an invalid length. [ 274.700208][ T8033] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1419'. [ 274.755023][ T8033] netlink: 'syz.3.1419': attribute type 39 has an invalid length. [ 275.015585][ T8038] netlink: 'syz.4.1421': attribute type 39 has an invalid length. [ 275.134375][ T8043] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1422'. [ 275.476226][ T8046] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1423'. [ 275.576123][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1425'. [ 275.658571][ T8051] netlink: 'syz.3.1425': attribute type 39 has an invalid length. [ 275.793934][ T8055] syz.2.1427[8055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.813152][ T8055] syz.2.1427[8055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.891615][ T8058] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 276.139735][ T8062] netlink: 'syz.1.1430': attribute type 39 has an invalid length. [ 276.561319][ T8075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1436'. [ 276.832910][ T8083] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1437'. [ 277.297592][ T8093] syz.2.1442[8093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.297735][ T8093] syz.2.1442[8093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.154315][ T8113] __nla_validate_parse: 2 callbacks suppressed [ 278.154378][ T8113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1451'. [ 278.273736][ T8117] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1453'. [ 278.540760][ T8123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1456'. [ 278.563518][ T8125] validate_nla: 7 callbacks suppressed [ 278.563559][ T8125] netlink: 'syz.3.1455': attribute type 39 has an invalid length. [ 278.606509][ T8123] netlink: 'syz.4.1456': attribute type 39 has an invalid length. [ 278.717603][ T8127] syz.0.1457[8127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.717747][ T8127] syz.0.1457[8127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.924278][ T8129] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 279.361317][ T8141] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1463'. [ 279.467604][ T8144] netlink: 'syz.0.1465': attribute type 39 has an invalid length. [ 279.514059][ T8147] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1466'. [ 279.634688][ T8151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1467'. [ 279.741925][ T8153] netlink: 'syz.1.1467': attribute type 39 has an invalid length. [ 279.842308][ T8155] netlink: 'syz.2.1468': attribute type 39 has an invalid length. [ 280.004927][ T8157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1469'. [ 280.141843][ T8157] netlink: 'syz.0.1469': attribute type 39 has an invalid length. [ 280.461839][ T8166] syz.4.1472[8166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.461974][ T8166] syz.4.1472[8166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.538269][ T8169] netlink: 'syz.3.1473': attribute type 10 has an invalid length. [ 280.567803][ T8169] device bond0 left promiscuous mode [ 280.590245][ T8169] device bond_slave_0 left promiscuous mode [ 280.600627][ T8169] device bond_slave_1 left promiscuous mode [ 280.834936][ T8176] netlink: 'syz.3.1477': attribute type 39 has an invalid length. [ 280.952042][ T8180] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1479'. [ 281.182195][ T8185] netlink: 'syz.2.1480': attribute type 39 has an invalid length. [ 281.367593][ T8194] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1482'. [ 281.530650][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1483'. [ 281.867304][ T8202] syz.2.1486[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.867439][ T8202] syz.2.1486[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.301323][ T8238] syz.3.1503[8238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.345515][ T8238] syz.3.1503[8238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.457934][ T8245] __nla_validate_parse: 4 callbacks suppressed [ 283.457956][ T8245] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1504'. [ 283.563980][ T8248] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1507'. [ 283.756255][ T8256] validate_nla: 9 callbacks suppressed [ 283.756294][ T8256] netlink: 'syz.2.1510': attribute type 39 has an invalid length. [ 283.830623][ T8260] netlink: 'syz.0.1512': attribute type 39 has an invalid length. [ 284.019133][ T8263] netlink: 'syz.3.1513': attribute type 39 has an invalid length. [ 284.309917][ T8266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1514'. [ 284.370422][ T8268] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 284.405326][ T8266] netlink: 'syz.2.1514': attribute type 39 has an invalid length. [ 284.597608][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1517'. [ 284.631080][ T8275] netlink: 'syz.1.1517': attribute type 39 has an invalid length. [ 284.824499][ T8280] syz.2.1520[8280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.824641][ T8280] syz.2.1520[8280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.961796][ T8284] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1522'. [ 285.224814][ T8291] netlink: 'syz.3.1526': attribute type 39 has an invalid length. [ 285.280081][ T8293] netlink: 'syz.2.1525': attribute type 39 has an invalid length. [ 285.479837][ T8300] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1528'. [ 285.540223][ T8299] netlink: 'syz.4.1529': attribute type 39 has an invalid length. [ 285.742132][ T8302] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 285.836737][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1532'. [ 285.958776][ T8310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1534'. [ 286.086475][ T8312] syz.3.1535[8312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.086614][ T8312] syz.3.1535[8312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.453965][ T8314] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1536'. [ 287.407699][ T8339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1547'. [ 287.572018][ T8343] syz.4.1549[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.572146][ T8343] syz.4.1549[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.566573][ T8369] __nla_validate_parse: 3 callbacks suppressed [ 288.566593][ T8369] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1560'. [ 288.706328][ T8369] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1560'. [ 288.774364][ T8373] validate_nla: 12 callbacks suppressed [ 288.774410][ T8373] netlink: 'syz.4.1562': attribute type 39 has an invalid length. [ 288.892243][ T8379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1564'. [ 288.914205][ T8379] netlink: 'syz.3.1564': attribute type 39 has an invalid length. [ 289.178838][ T8382] syz.0.1565[8382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.178984][ T8382] syz.0.1565[8382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.541483][ T8392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1569'. [ 289.602716][ T8393] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1570'. [ 289.653270][ T8399] netlink: 'syz.1.1569': attribute type 39 has an invalid length. [ 289.732472][ T8401] netlink: 'syz.3.1572': attribute type 10 has an invalid length. [ 289.895998][ T8407] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1573'. [ 289.942891][ T8404] netlink: 'syz.0.1574': attribute type 39 has an invalid length. [ 289.985123][ T8406] netlink: 'syz.4.1575': attribute type 39 has an invalid length. [ 290.372906][ T8417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1578'. [ 290.407616][ T8417] netlink: 'syz.1.1578': attribute type 39 has an invalid length. [ 290.457720][ T8419] netlink: 'syz.3.1580': attribute type 39 has an invalid length. [ 290.483309][ T8423] syz.4.1581[8423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.483454][ T8423] syz.4.1581[8423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.885835][ T8434] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 290.928926][ T8435] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1584'. [ 291.090879][ T8442] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1589'. [ 291.156528][ T8443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1588'. [ 291.176859][ T8442] netlink: 'syz.4.1589': attribute type 10 has an invalid length. [ 291.729335][ T8458] syz.2.1596[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.729477][ T8458] syz.2.1596[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.067849][ T8486] syz.1.1609[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.108441][ T8486] syz.1.1609[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.661826][ T8496] __nla_validate_parse: 5 callbacks suppressed [ 293.661937][ T8496] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1613'. [ 293.787272][ T8504] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1614'. [ 293.938680][ T8512] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1620'. [ 293.982625][ T8512] validate_nla: 9 callbacks suppressed [ 293.982647][ T8512] netlink: 'syz.4.1620': attribute type 10 has an invalid length. [ 294.005789][ T8512] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1620'. [ 294.019037][ T8507] netlink: 'syz.0.1617': attribute type 10 has an invalid length. [ 294.028635][ T8510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1618'. [ 294.056333][ T8510] netlink: 'syz.1.1618': attribute type 39 has an invalid length. [ 294.404624][ T8519] syz.4.1623[8519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.404769][ T8519] syz.4.1623[8519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.649334][ T8522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1624'. [ 294.711131][ T8526] netlink: 'syz.1.1624': attribute type 39 has an invalid length. [ 294.821994][ T8528] netlink: 'syz.2.1626': attribute type 39 has an invalid length. [ 295.031629][ T8533] netlink: 'syz.3.1628': attribute type 39 has an invalid length. [ 295.051808][ T8534] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1629'. [ 295.479136][ T8544] netlink: 'syz.3.1633': attribute type 10 has an invalid length. [ 295.495320][ T8546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1634'. [ 295.514757][ T8546] netlink: 'syz.2.1634': attribute type 39 has an invalid length. [ 295.661599][ T8552] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1636'. [ 295.764083][ T8554] syz.3.1637[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.764215][ T8554] syz.3.1637[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.186449][ T8562] netlink: 'syz.3.1641': attribute type 39 has an invalid length. [ 296.250386][ T8565] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1642'. [ 296.305474][ T8566] netlink: 'syz.1.1643': attribute type 39 has an invalid length. [ 297.030441][ T8583] syz.0.1651[8583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.030599][ T8583] syz.0.1651[8583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.174308][ T8615] syz.4.1665[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.281506][ T8615] syz.4.1665[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.735722][ T8628] __nla_validate_parse: 8 callbacks suppressed [ 298.735767][ T8628] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1670'. [ 298.772471][ T8632] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1672'. [ 298.801238][ T8632] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1672'. [ 298.985618][ T8639] validate_nla: 10 callbacks suppressed [ 298.985642][ T8639] netlink: 'syz.3.1674': attribute type 39 has an invalid length. [ 299.173812][ T8644] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 299.270350][ T8647] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1678'. [ 299.359104][ T8650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1679'. [ 299.379176][ T8650] netlink: 'syz.2.1679': attribute type 39 has an invalid length. [ 299.538270][ T8653] netlink: 'syz.0.1681': attribute type 39 has an invalid length. [ 299.764112][ T8656] syz.3.1682[8656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.764276][ T8656] syz.3.1682[8656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.399702][ T8665] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1686'. [ 300.463985][ T8667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1687'. [ 300.511590][ T8667] netlink: 'syz.0.1687': attribute type 39 has an invalid length. [ 300.689264][ T8674] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1690'. [ 300.874548][ T8678] netlink: 'syz.1.1691': attribute type 10 has an invalid length. [ 300.929387][ T8677] netlink: 'syz.2.1692': attribute type 39 has an invalid length. [ 301.077720][ T8686] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1694'. [ 301.168901][ T8688] syz.1.1696[8688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.169065][ T8688] syz.1.1696[8688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.238707][ T8691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1697'. [ 301.281868][ T8691] netlink: 'syz.2.1697': attribute type 39 has an invalid length. [ 301.709167][ T8699] netlink: 'syz.0.1700': attribute type 39 has an invalid length. [ 302.039383][ T8706] netlink: 'syz.3.1705': attribute type 10 has an invalid length. [ 302.319772][ T8716] syz.1.1709[8716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.319905][ T8716] syz.1.1709[8716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.648676][ T8754] syz.4.1725[8754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.648832][ T8754] syz.4.1725[8754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.051648][ T8768] __nla_validate_parse: 10 callbacks suppressed [ 304.051668][ T8768] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1732'. [ 304.158320][ T8765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1730'. [ 304.231810][ T8771] validate_nla: 8 callbacks suppressed [ 304.231831][ T8771] netlink: 'syz.0.1730': attribute type 39 has an invalid length. [ 304.289866][ T8769] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1731'. [ 304.592236][ T8780] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1737'. [ 304.631244][ T8778] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 304.755535][ T8782] netlink: 'syz.2.1736': attribute type 39 has an invalid length. [ 304.880529][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1739'. [ 304.928284][ T8788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1749'. [ 304.957297][ T8789] netlink: 'syz.1.1739': attribute type 39 has an invalid length. [ 305.013228][ T8788] netlink: 'syz.0.1749': attribute type 39 has an invalid length. [ 305.307162][ T8798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1742'. [ 305.343514][ T8798] netlink: 'syz.2.1742': attribute type 39 has an invalid length. [ 305.426947][ T8800] syz.0.1743[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.427096][ T8800] syz.0.1743[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.830362][ T8812] netlink: 'syz.4.1747': attribute type 39 has an invalid length. [ 306.019320][ T8817] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 306.084445][ T8818] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1748'. [ 306.240210][ T8823] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1753'. [ 306.355085][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1754'. [ 306.413335][ T8830] netlink: 'syz.4.1754': attribute type 39 has an invalid length. [ 306.500929][ T8829] netlink: 'syz.0.1756': attribute type 39 has an invalid length. [ 306.993083][ T8841] syz.0.1760[8841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.993242][ T8841] syz.0.1760[8841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.644450][ T8885] syz.3.1778[8885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.644603][ T8885] syz.3.1778[8885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.146017][ T8901] __nla_validate_parse: 10 callbacks suppressed [ 309.146037][ T8901] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1784'. [ 309.240902][ T8903] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1786'. [ 309.378230][ T8908] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1788'. [ 309.492003][ T8908] validate_nla: 9 callbacks suppressed [ 309.492023][ T8908] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 309.507725][ T8908] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1788'. [ 309.591960][ T8913] netlink: 'syz.3.1790': attribute type 39 has an invalid length. [ 309.906736][ T8920] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 310.002751][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1794'. [ 310.045354][ T8922] netlink: 'syz.2.1794': attribute type 39 has an invalid length. [ 310.067145][ T8924] syz.1.1795[8924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.067291][ T8924] syz.1.1795[8924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.308974][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1798'. [ 310.423108][ T8930] netlink: 'syz.4.1798': attribute type 39 has an invalid length. [ 310.440252][ T8934] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1797'. [ 310.649668][ T8938] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1800'. [ 310.661694][ T8936] netlink: 'syz.1.1799': attribute type 39 has an invalid length. [ 310.981507][ T8948] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1804'. [ 311.083757][ T8948] netlink: 'syz.2.1804': attribute type 10 has an invalid length. [ 311.133945][ T8948] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1804'. [ 311.250385][ T8954] netlink: 'syz.4.1807': attribute type 39 has an invalid length. [ 311.330477][ T8958] syz.0.1809[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.330636][ T8958] syz.0.1809[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.539461][ T8963] netlink: 'syz.3.1810': attribute type 10 has an invalid length. [ 311.737498][ T8971] netlink: 'syz.3.1814': attribute type 39 has an invalid length. [ 312.803472][ T8999] syz.4.1824[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.803608][ T8999] syz.4.1824[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.407950][ T9045] __nla_validate_parse: 10 callbacks suppressed [ 314.407974][ T9045] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1844'. [ 314.483924][ T9047] syz.2.1843[9047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.484243][ T9047] syz.2.1843[9047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.534776][ T9050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1845'. [ 314.571127][ T9050] validate_nla: 11 callbacks suppressed [ 314.571163][ T9050] netlink: 'syz.3.1845': attribute type 39 has an invalid length. [ 314.909883][ T9058] netlink: 'syz.0.1848': attribute type 39 has an invalid length. [ 315.063367][ T9062] netlink: 'syz.2.1850': attribute type 39 has an invalid length. [ 315.417450][ T9072] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1854'. [ 315.428819][ T9070] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 315.492031][ T9072] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 315.510624][ T9072] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1854'. [ 315.610512][ T9077] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1855'. [ 315.832531][ T9082] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1858'. [ 315.969828][ T9087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1860'. [ 316.052199][ T9084] netlink: 'syz.3.1859': attribute type 39 has an invalid length. [ 316.069286][ T9088] netlink: 'syz.1.1860': attribute type 39 has an invalid length. [ 316.213196][ T9091] syz.4.1861[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.213363][ T9091] syz.4.1861[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.653393][ T9102] netlink: 'syz.0.1866': attribute type 39 has an invalid length. [ 316.787951][ T9106] netlink: 'syz.4.1867': attribute type 10 has an invalid length. [ 316.811178][ T9105] netlink: 'syz.1.1868': attribute type 39 has an invalid length. [ 316.906015][ T9111] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1870'. [ 317.017108][ T9111] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1870'. [ 317.060973][ T9116] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1872'. [ 317.871025][ T9135] syz.4.1878[9135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.871162][ T9135] syz.4.1878[9135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.349096][ T9168] syz.3.1894[9168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.349246][ T9168] syz.3.1894[9168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.598303][ T9180] __nla_validate_parse: 7 callbacks suppressed [ 319.598325][ T9180] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1897'. [ 319.823776][ T9184] validate_nla: 8 callbacks suppressed [ 319.823842][ T9184] netlink: 'syz.3.1899': attribute type 39 has an invalid length. [ 320.071440][ T9188] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 320.154033][ T9190] netlink: 'syz.1.1902': attribute type 39 has an invalid length. [ 320.186591][ T9192] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1903'. [ 320.511776][ T9199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1906'. [ 320.661474][ T9199] netlink: 'syz.0.1906': attribute type 10 has an invalid length. [ 320.705504][ T9199] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1906'. [ 320.827585][ T9206] syz.2.1909[9206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.827733][ T9206] syz.2.1909[9206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.996129][ T9212] netlink: 'syz.4.1911': attribute type 39 has an invalid length. [ 321.090740][ T9210] netlink: 'syz.1.1910': attribute type 39 has an invalid length. [ 321.504037][ T9222] netlink: 'syz.4.1915': attribute type 10 has an invalid length. [ 321.654956][ T9227] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1916'. [ 321.745006][ T9229] netlink: 'syz.1.1917': attribute type 39 has an invalid length. [ 321.759322][ T9231] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1918'. [ 322.294679][ T9240] syz.1.1923[9240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.294840][ T9240] syz.1.1923[9240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.781254][ T9248] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1925'. [ 322.926399][ T9250] netlink: 'syz.3.1926': attribute type 39 has an invalid length. [ 322.942741][ T9248] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 322.977670][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.984739][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.995468][ T9248] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1925'. [ 323.363817][ T9260] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1930'. [ 324.052084][ T9278] syz.2.1938[9278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.052251][ T9278] syz.2.1938[9278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.157204][ T9282] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1937'. [ 324.828330][ T9295] validate_nla: 5 callbacks suppressed [ 324.828390][ T9295] netlink: 'syz.1.1943': attribute type 10 has an invalid length. [ 324.964607][ T9297] netlink: 'syz.0.1945': attribute type 39 has an invalid length. [ 325.063148][ T9300] __nla_validate_parse: 2 callbacks suppressed [ 325.063217][ T9300] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1946'. [ 325.464621][ T9309] syz.3.1950[9309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.464771][ T9309] syz.3.1950[9309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.614071][ T9311] netlink: 'syz.0.1952': attribute type 39 has an invalid length. [ 325.689887][ T9318] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1954'. [ 325.812280][ T9318] netlink: 'syz.4.1954': attribute type 10 has an invalid length. [ 325.885640][ T9318] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1954'. [ 326.183252][ T9328] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1956'. [ 326.280067][ T9332] netlink: 'syz.0.1958': attribute type 10 has an invalid length. [ 326.386071][ T9335] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1960'. [ 326.552725][ T9340] netlink: 'syz.0.1962': attribute type 39 has an invalid length. [ 326.721101][ T9342] netlink: 'syz.1.1963': attribute type 39 has an invalid length. [ 327.036651][ T9349] syz.4.1966[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.036795][ T9349] syz.4.1966[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.274491][ T9360] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1970'. [ 327.372948][ T9358] netlink: 'syz.0.1969': attribute type 39 has an invalid length. [ 327.461569][ T9360] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 327.485408][ T9360] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1970'. [ 327.705638][ T9364] netlink: 'syz.4.1973': attribute type 10 has an invalid length. [ 327.748600][ T9370] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1974'. [ 328.301986][ T9384] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1979'. [ 328.444057][ T9386] syz.3.1981[9386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.444202][ T9386] syz.3.1981[9386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.189107][ T9400] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1986'. [ 330.201094][ T9417] validate_nla: 5 callbacks suppressed [ 330.201134][ T9417] netlink: 'syz.1.1992': attribute type 39 has an invalid length. [ 330.304355][ T9419] syz.4.1994[9419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.304493][ T9419] syz.4.1994[9419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.076821][ T9437] netlink: 'syz.4.2000': attribute type 39 has an invalid length. [ 331.108781][ T9435] __nla_validate_parse: 2 callbacks suppressed [ 331.108823][ T9435] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1999'. [ 331.260696][ T9443] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2002'. [ 331.288452][ T9441] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2001'. [ 331.318716][ T9443] netlink: 'syz.3.2002': attribute type 10 has an invalid length. [ 331.330791][ T9443] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2002'. [ 331.700140][ T9446] netlink: 'syz.2.2003': attribute type 39 has an invalid length. [ 331.793591][ T9449] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 331.836537][ T9453] FAULT_INJECTION: forcing a failure. [ 331.836537][ T9453] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 331.852467][ T9453] CPU: 0 PID: 9453 Comm: syz.0.2006 Not tainted syzkaller #0 [ 331.860534][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.871084][ T9453] Call Trace: [ 331.874413][ T9453] [ 331.877515][ T9453] dump_stack_lvl+0x188/0x24e [ 331.882701][ T9453] ? show_regs_print_info+0x12/0x12 [ 331.888225][ T9453] ? load_image+0x400/0x400 [ 331.893114][ T9453] ? __lock_acquire+0x7d10/0x7d10 [ 331.898224][ T9453] ? verify_lock_unused+0x140/0x140 [ 331.904356][ T9453] should_fail_ex+0x399/0x4d0 [ 331.909114][ T9453] prepare_alloc_pages+0x1e2/0x5f0 [ 331.914385][ T9453] __alloc_pages+0x130/0x4f0 [ 331.919668][ T9453] ? lock_chain_count+0x20/0x20 [ 331.924724][ T9453] ? zone_statistics+0x170/0x170 [ 331.929820][ T9453] ? count_memcg_event_mm+0x8a/0x3c0 [ 331.935602][ T9453] ? count_memcg_event_mm+0x36b/0x3c0 [ 331.941206][ T9453] ? __lock_acquire+0x7d10/0x7d10 [ 331.946918][ T9453] ? count_memcg_event_mm+0x8a/0x3c0 [ 331.952572][ T9453] __folio_alloc+0xe/0x30 [ 331.957181][ T9453] vma_alloc_folio+0x4a3/0x900 [ 331.962122][ T9453] handle_mm_fault+0x22b1/0x3ee0 [ 331.968041][ T9453] ? mt_find+0x157/0x830 [ 331.972597][ T9453] ? numa_migrate_prep+0x250/0x250 [ 331.978236][ T9453] ? lock_chain_count+0x20/0x20 [ 331.983273][ T9453] ? lock_mm_and_find_vma+0xae/0x2f0 [ 331.989084][ T9453] do_user_addr_fault+0x51f/0xb10 [ 331.994300][ T9453] exc_page_fault+0x60/0x100 [ 331.999129][ T9453] asm_exc_page_fault+0x22/0x30 [ 332.004074][ T9453] RIP: 0010:copy_user_short_string+0xd/0x40 [ 332.010337][ T9453] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 332.031423][ T9453] RSP: 0018:ffffc9000d537a28 EFLAGS: 00050206 [ 332.037834][ T9453] RAX: ffffffff8410d901 RBX: 0000000000000029 RCX: 0000000000000005 [ 332.046837][ T9453] RDX: 0000000000000001 RSI: ffffffffa00009a8 RDI: 0000200000002e00 [ 332.055680][ T9453] RBP: 0000000000000000 R08: 5590660000441f0f R09: 1ffffffff400013a [ 332.063914][ T9453] R10: dffffc0000000000 R11: fffffbfff400013b R12: 00007fffffffefd7 [ 332.072093][ T9453] R13: 0000000000000036 R14: 0000200000002e00 R15: ffffffffa00009a8 [ 332.080237][ T9453] ? 0xffffffffa00009a8 [ 332.084719][ T9453] ? _copy_to_user+0xd1/0x130 [ 332.089486][ T9453] ? 0xffffffffa00009a8 [ 332.093959][ T9453] _copy_to_user+0xea/0x130 [ 332.098628][ T9453] ? 0xffffffffa00009a8 [ 332.102932][ T9453] bpf_obj_get_info_by_fd+0x198a/0x2f50 [ 332.108780][ T9453] ? __lock_acquire+0x7d10/0x7d10 [ 332.113894][ T9453] ? bpf_map_get_fd_by_id+0x310/0x310 [ 332.119525][ T9453] ? get_pid_task+0x1c/0x1e0 [ 332.124325][ T9453] ? __might_fault+0xa6/0x120 [ 332.129717][ T9453] ? __might_fault+0xc2/0x120 [ 332.134920][ T9453] ? __might_fault+0xa6/0x120 [ 332.139984][ T9453] ? bpf_lsm_bpf+0x5/0x10 [ 332.144649][ T9453] ? security_bpf+0x7a/0xa0 [ 332.149727][ T9453] __sys_bpf+0x505/0x780 [ 332.154336][ T9453] ? bpf_link_show_fdinfo+0x380/0x380 [ 332.159996][ T9453] ? lock_chain_count+0x20/0x20 [ 332.165219][ T9453] __x64_sys_bpf+0x78/0x90 [ 332.169979][ T9453] do_syscall_64+0x4c/0xa0 [ 332.174631][ T9453] ? clear_bhb_loop+0x60/0xb0 [ 332.179701][ T9453] ? clear_bhb_loop+0x60/0xb0 [ 332.184824][ T9453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.191331][ T9453] RIP: 0033:0x7f3ab919acb9 [ 332.196068][ T9453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.216457][ T9453] RSP: 002b:00007f3aba083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.225029][ T9453] RAX: ffffffffffffffda RBX: 00007f3ab9415fa0 RCX: 00007f3ab919acb9 [ 332.233347][ T9453] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 332.241840][ T9453] RBP: 00007f3aba083090 R08: 0000000000000000 R09: 0000000000000000 [ 332.250089][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.258211][ T9453] R13: 00007f3ab9416038 R14: 00007f3ab9415fa0 R15: 00007ffe38a1e328 [ 332.267395][ T9453] [ 332.380250][ T9459] netlink: 'syz.1.2008': attribute type 39 has an invalid length. [ 332.617335][ T9464] syz.3.2010[9464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.617478][ T9464] syz.3.2010[9464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.342171][ T9479] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2016'. [ 333.394823][ T9476] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2015'. [ 333.407436][ T9479] netlink: 'syz.0.2016': attribute type 10 has an invalid length. [ 333.420777][ T9479] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2016'. [ 333.677455][ T9484] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2017'. [ 333.838472][ T9488] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2019'. [ 333.889607][ T9486] netlink: 'syz.3.2018': attribute type 39 has an invalid length. [ 334.036161][ T9490] netlink: 'syz.0.2020': attribute type 10 has an invalid length. [ 334.212764][ T9494] FAULT_INJECTION: forcing a failure. [ 334.212764][ T9494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.265410][ T9494] CPU: 1 PID: 9494 Comm: syz.1.2021 Not tainted syzkaller #0 [ 334.273164][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.283997][ T9494] Call Trace: [ 334.287860][ T9494] [ 334.291318][ T9494] dump_stack_lvl+0x188/0x24e [ 334.296340][ T9494] ? show_regs_print_info+0x12/0x12 [ 334.301994][ T9494] ? load_image+0x400/0x400 [ 334.306689][ T9494] ? __lock_acquire+0x7d10/0x7d10 [ 334.312332][ T9494] should_fail_ex+0x399/0x4d0 [ 334.317433][ T9494] _copy_from_user+0x2c/0x170 [ 334.322585][ T9494] ___sys_recvmsg+0x172/0x590 [ 334.327702][ T9494] ? __sys_recvmsg+0x290/0x290 [ 334.332686][ T9494] ? __fget_files+0x43d/0x4b0 [ 334.337738][ T9494] __x64_sys_recvmsg+0x205/0x2e0 [ 334.343209][ T9494] ? ___sys_recvmsg+0x590/0x590 [ 334.349328][ T9494] ? syscall_enter_from_user_mode+0x2a/0x80 [ 334.355773][ T9494] do_syscall_64+0x4c/0xa0 [ 334.360449][ T9494] ? clear_bhb_loop+0x60/0xb0 [ 334.365298][ T9494] ? clear_bhb_loop+0x60/0xb0 [ 334.370409][ T9494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.376814][ T9494] RIP: 0033:0x7f8b1fd9acb9 [ 334.382705][ T9494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.403679][ T9494] RSP: 002b:00007f8b20c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 334.412700][ T9494] RAX: ffffffffffffffda RBX: 00007f8b20015fa0 RCX: 00007f8b1fd9acb9 [ 334.421187][ T9494] RDX: 0000000000002020 RSI: 0000200000000440 RDI: 0000000000000005 [ 334.430195][ T9494] RBP: 00007f8b20c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 334.439629][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.449964][ T9494] R13: 00007f8b20016038 R14: 00007f8b20015fa0 R15: 00007ffec4c085e8 [ 334.459789][ T9494] [ 334.634718][ T9501] netlink: 'syz.0.2023': attribute type 39 has an invalid length. [ 335.110571][ T9508] syz.0.2026[9508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.110699][ T9508] syz.0.2026[9508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.215035][ T9512] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2028'. [ 335.710886][ T9525] validate_nla: 1 callbacks suppressed [ 335.710907][ T9525] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 335.853892][ T9528] netlink: 'syz.0.2033': attribute type 10 has an invalid length. [ 335.922334][ T9530] netlink: 'syz.2.2034': attribute type 39 has an invalid length. [ 336.129996][ T9538] __nla_validate_parse: 3 callbacks suppressed [ 336.130016][ T9538] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2036'. [ 336.219742][ T9537] netlink: 'syz.1.2037': attribute type 39 has an invalid length. [ 336.652872][ T9551] syz.0.2043[9551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.653017][ T9551] syz.0.2043[9551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.706647][ T9556] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2042'. [ 336.802935][ T9560] netlink: 'syz.4.2044': attribute type 39 has an invalid length. [ 337.026040][ T9565] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 337.059440][ T9568] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2047'. [ 337.118519][ T9568] netlink: 'syz.3.2047': attribute type 10 has an invalid length. [ 337.144404][ T9568] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2047'. [ 337.350735][ T9575] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2050'. [ 337.379901][ T9570] netlink: 'syz.1.2049': attribute type 39 has an invalid length. [ 337.692462][ T9581] netlink: 'syz.3.2053': attribute type 39 has an invalid length. [ 337.770987][ T9585] syz.0.2055[9585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.771127][ T9585] syz.0.2055[9585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.963247][ T9590] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2056'. [ 338.191305][ T9595] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2057'. [ 338.204200][ T9598] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2058'. [ 338.230750][ T9597] netlink: 'syz.4.2059': attribute type 39 has an invalid length. [ 338.241930][ T9595] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2057'. [ 338.275367][ T9601] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2057'. [ 339.256229][ T9620] syz.2.2068[9620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.256364][ T9620] syz.2.2068[9620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.102861][ T9636] validate_nla: 4 callbacks suppressed [ 341.102897][ T9636] netlink: 'syz.0.2072': attribute type 39 has an invalid length. [ 341.175423][ T9644] netlink: 'syz.2.2075': attribute type 39 has an invalid length. [ 341.438683][ T9649] __nla_validate_parse: 4 callbacks suppressed [ 341.438704][ T9649] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2076'. [ 341.770177][ T9660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2080'. [ 342.399876][ T9663] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2079'. [ 342.423309][ T9664] netlink: 'syz.0.2080': attribute type 10 has an invalid length. [ 342.440076][ T9664] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2080'. [ 346.173525][ T9672] netlink: 'syz.3.2082': attribute type 39 has an invalid length. [ 346.234335][ T9674] netlink: 'syz.4.2083': attribute type 10 has an invalid length. [ 346.303442][ T9676] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2084'. [ 346.486378][ T9681] syz.0.2086[9681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.486556][ T9681] syz.0.2086[9681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.657726][ T9688] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2087'. [ 346.767186][ T9690] netlink: 'syz.4.2087': attribute type 6 has an invalid length. [ 346.835654][ T9690] netlink: 14577 bytes leftover after parsing attributes in process `syz.4.2087'. [ 346.850752][ T9686] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2087'. [ 346.872524][ T9695] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2090'. [ 346.895810][ T9689] netlink: 'syz.2.2088': attribute type 39 has an invalid length. [ 347.393618][ T9706] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2092'. [ 347.423675][ T9704] netlink: 'syz.1.2093': attribute type 39 has an invalid length. [ 348.011262][ T9721] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2097'. [ 348.089050][ T9721] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 348.175504][ T9721] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2097'. [ 348.310839][ T9723] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2098'. [ 348.488155][ T9726] netlink: 'syz.4.2099': attribute type 10 has an invalid length. [ 348.659493][ T9728] netlink: 'syz.2.2100': attribute type 39 has an invalid length. [ 348.779133][ T9733] syz.1.2102[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.779297][ T9733] syz.1.2102[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.912957][ T9737] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2104'. [ 349.301891][ T9745] netlink: 'syz.4.2105': attribute type 39 has an invalid length. [ 349.478602][ T9749] netlink: 'syz.2.2108': attribute type 39 has an invalid length. [ 349.550418][ T9753] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2109'. [ 350.578966][ T9777] FAULT_INJECTION: forcing a failure. [ 350.578966][ T9777] name failslab, interval 1, probability 0, space 0, times 0 [ 350.661612][ T9777] CPU: 0 PID: 9777 Comm: syz.0.2120 Not tainted syzkaller #0 [ 350.669608][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.680282][ T9777] Call Trace: [ 350.683622][ T9777] [ 350.686864][ T9777] dump_stack_lvl+0x188/0x24e [ 350.691784][ T9777] ? show_regs_print_info+0x12/0x12 [ 350.697222][ T9777] ? load_image+0x400/0x400 [ 350.701793][ T9777] ? __might_sleep+0xd0/0xd0 [ 350.706794][ T9777] ? __lock_acquire+0x7d10/0x7d10 [ 350.712025][ T9777] should_fail_ex+0x399/0x4d0 [ 350.716877][ T9777] should_failslab+0x5/0x20 [ 350.721450][ T9777] slab_pre_alloc_hook+0x59/0x310 [ 350.726665][ T9777] ? prepend_path+0xa68/0xc20 [ 350.731488][ T9777] ? tomoyo_encode+0x27e/0x540 [ 350.736419][ T9777] __kmem_cache_alloc_node+0x4f/0x260 [ 350.742328][ T9777] ? tomoyo_encode+0x27e/0x540 [ 350.747769][ T9777] __kmalloc+0xa0/0x240 [ 350.751989][ T9777] tomoyo_encode+0x27e/0x540 [ 350.756911][ T9777] tomoyo_realpath_from_path+0x58e/0x5d0 [ 350.762616][ T9777] ? tomoyo_path_number_perm+0x205/0x650 [ 350.768392][ T9777] tomoyo_path_number_perm+0x22f/0x650 [ 350.774336][ T9777] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 350.780024][ T9777] ? ksys_write+0x1c0/0x250 [ 350.784749][ T9777] ? common_file_perm+0x171/0x1c0 [ 350.789921][ T9777] ? __fget_files+0x28/0x4b0 [ 350.794833][ T9777] ? __fget_files+0x28/0x4b0 [ 350.799690][ T9777] security_file_ioctl+0x6c/0xa0 [ 350.804974][ T9777] __se_sys_ioctl+0x48/0x170 [ 350.810192][ T9777] do_syscall_64+0x4c/0xa0 [ 350.814859][ T9777] ? clear_bhb_loop+0x60/0xb0 [ 350.819735][ T9777] ? clear_bhb_loop+0x60/0xb0 [ 350.824459][ T9777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.830587][ T9777] RIP: 0033:0x7f3ab919acb9 [ 350.835242][ T9777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.856256][ T9777] RSP: 002b:00007f3aba062028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.865322][ T9777] RAX: ffffffffffffffda RBX: 00007f3ab9416090 RCX: 00007f3ab919acb9 [ 350.873600][ T9777] RDX: 0000200000000300 RSI: 00000000401054d5 RDI: 000000000000000c [ 350.882202][ T9777] RBP: 00007f3aba062090 R08: 0000000000000000 R09: 0000000000000000 [ 350.890574][ T9777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.898585][ T9777] R13: 00007f3ab9416128 R14: 00007f3ab9416090 R15: 00007ffe38a1e328 [ 350.907020][ T9777] [ 350.949168][ T9777] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.252366][ T9789] validate_nla: 5 callbacks suppressed [ 351.252577][ T9789] netlink: 'syz.1.2123': attribute type 39 has an invalid length. [ 351.386954][ T9793] netlink: 'syz.4.2126': attribute type 39 has an invalid length. [ 351.598024][ T9799] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 351.753994][ T9803] netlink: 'syz.2.2130': attribute type 10 has an invalid length. [ 351.769803][ T9806] __nla_validate_parse: 8 callbacks suppressed [ 351.769824][ T9806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2131'. [ 352.134785][ T9812] netlink: 'syz.3.2134': attribute type 39 has an invalid length. [ 352.584812][ T9826] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2138'. [ 352.687260][ T9828] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2139'. [ 352.919008][ T9837] netlink: 'syz.4.2143': attribute type 10 has an invalid length. [ 352.942064][ T9840] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2145'. [ 352.989585][ T9840] netlink: 'syz.3.2145': attribute type 10 has an invalid length. [ 352.998620][ T9840] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2145'. [ 353.026948][ T9842] netlink: 'syz.1.2144': attribute type 39 has an invalid length. [ 353.157246][ T9844] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2146'. [ 353.378493][ T9851] FAULT_INJECTION: forcing a failure. [ 353.378493][ T9851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.392663][ T9851] CPU: 0 PID: 9851 Comm: syz.0.2149 Not tainted syzkaller #0 [ 353.400750][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.411273][ T9851] Call Trace: [ 353.415148][ T9851] [ 353.418139][ T9851] dump_stack_lvl+0x188/0x24e [ 353.423084][ T9851] ? show_regs_print_info+0x12/0x12 [ 353.428892][ T9851] ? load_image+0x400/0x400 [ 353.433471][ T9851] ? __lock_acquire+0x7d10/0x7d10 [ 353.438759][ T9851] should_fail_ex+0x399/0x4d0 [ 353.443624][ T9851] _copy_from_user+0x2c/0x170 [ 353.448658][ T9851] iovec_from_user+0x143/0x360 [ 353.453740][ T9851] __import_iovec+0x6d/0x500 [ 353.458689][ T9851] import_iovec+0x6f/0xa0 [ 353.463249][ T9851] ___sys_sendmsg+0x252/0x360 [ 353.468056][ T9851] ? __sys_sendmsg+0x290/0x290 [ 353.472980][ T9851] ? __lock_acquire+0x7d10/0x7d10 [ 353.478251][ T9851] __se_sys_sendmsg+0x1bb/0x2a0 [ 353.483492][ T9851] ? __x64_sys_sendmsg+0x80/0x80 [ 353.488571][ T9851] ? lockdep_hardirqs_on+0x94/0x140 [ 353.493814][ T9851] do_syscall_64+0x4c/0xa0 [ 353.498352][ T9851] ? clear_bhb_loop+0x60/0xb0 [ 353.503066][ T9851] ? clear_bhb_loop+0x60/0xb0 [ 353.507880][ T9851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.514069][ T9851] RIP: 0033:0x7f3ab919acb9 [ 353.518509][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.538502][ T9851] RSP: 002b:00007f3aba083028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.547500][ T9851] RAX: ffffffffffffffda RBX: 00007f3ab9415fa0 RCX: 00007f3ab919acb9 [ 353.555682][ T9851] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 353.564304][ T9851] RBP: 00007f3aba083090 R08: 0000000000000000 R09: 0000000000000000 [ 353.572654][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.580653][ T9851] R13: 00007f3ab9416038 R14: 00007f3ab9415fa0 R15: 00007ffe38a1e328 [ 353.588776][ T9851] [ 353.847119][ T9854] netlink: 'syz.1.2150': attribute type 39 has an invalid length. [ 354.033143][ T9866] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2154'. [ 354.141701][ T9871] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2156'. [ 354.240268][ T9874] netlink: 'syz.1.2157': attribute type 10 has an invalid length. [ 354.332487][ T9878] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2159'. [ 354.433756][ T9878] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2159'. [ 356.358971][ T9925] validate_nla: 7 callbacks suppressed [ 356.359014][ T9925] netlink: 'syz.2.2176': attribute type 39 has an invalid length. [ 356.512816][ T9930] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 356.613350][ T9934] FAULT_INJECTION: forcing a failure. [ 356.613350][ T9934] name failslab, interval 1, probability 0, space 0, times 0 [ 356.635259][ T9934] CPU: 1 PID: 9934 Comm: syz.4.2180 Not tainted syzkaller #0 [ 356.642919][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.653376][ T9934] Call Trace: [ 356.656800][ T9934] [ 356.659877][ T9934] dump_stack_lvl+0x188/0x24e [ 356.664794][ T9934] ? show_regs_print_info+0x12/0x12 [ 356.670271][ T9934] ? load_image+0x400/0x400 [ 356.674871][ T9934] ? __might_sleep+0xd0/0xd0 [ 356.679691][ T9934] ? __lock_acquire+0x7d10/0x7d10 [ 356.684788][ T9934] should_fail_ex+0x399/0x4d0 [ 356.689542][ T9934] should_failslab+0x5/0x20 [ 356.694202][ T9934] slab_pre_alloc_hook+0x59/0x310 [ 356.699381][ T9934] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 356.705168][ T9934] __kmem_cache_alloc_node+0x4f/0x260 [ 356.710733][ T9934] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 356.716587][ T9934] __kmalloc+0xa0/0x240 [ 356.720997][ T9934] tomoyo_realpath_from_path+0xdf/0x5d0 [ 356.726858][ T9934] ? tomoyo_path_number_perm+0x205/0x650 [ 356.732613][ T9934] tomoyo_path_number_perm+0x22f/0x650 [ 356.738391][ T9934] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 356.743909][ T9934] ? ksys_write+0x1c0/0x250 [ 356.748551][ T9934] ? common_file_perm+0x171/0x1c0 [ 356.753828][ T9934] ? __fget_files+0x28/0x4b0 [ 356.758630][ T9934] ? __fget_files+0x28/0x4b0 [ 356.763558][ T9934] security_file_ioctl+0x6c/0xa0 [ 356.768557][ T9934] __se_sys_ioctl+0x48/0x170 [ 356.773217][ T9934] do_syscall_64+0x4c/0xa0 [ 356.777787][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 356.782632][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 356.787436][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.793937][ T9934] RIP: 0033:0x7fcda299acb9 [ 356.798647][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.818839][ T9934] RSP: 002b:00007fcda3947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.828229][ T9934] RAX: ffffffffffffffda RBX: 00007fcda2c15fa0 RCX: 00007fcda299acb9 [ 356.836324][ T9934] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000005 [ 356.844597][ T9934] RBP: 00007fcda3947090 R08: 0000000000000000 R09: 0000000000000000 [ 356.853149][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.861499][ T9934] R13: 00007fcda2c16038 R14: 00007fcda2c15fa0 R15: 00007ffd95286c78 [ 356.869735][ T9934] [ 356.924697][ T9934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.186838][ T9941] netlink: 'syz.3.2183': attribute type 39 has an invalid length. [ 357.210209][ T9940] device syzkaller0 entered promiscuous mode [ 357.316231][ T9949] __nla_validate_parse: 8 callbacks suppressed [ 357.316300][ T9949] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2185'. [ 357.501419][ T9948] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2186'. [ 357.736423][ T9955] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 357.751334][ T9953] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2187'. [ 358.054617][ T9968] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2194'. [ 358.155793][ T9968] netlink: 'syz.3.2194': attribute type 10 has an invalid length. [ 358.174571][ T9968] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2194'. [ 358.205724][ T9967] netlink: 'syz.2.2192': attribute type 39 has an invalid length. [ 358.476639][ T9977] netlink: 'syz.0.2197': attribute type 39 has an invalid length. [ 358.648200][ T9983] FAULT_INJECTION: forcing a failure. [ 358.648200][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.698217][ T9983] CPU: 0 PID: 9983 Comm: syz.3.2198 Not tainted syzkaller #0 [ 358.705689][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.715972][ T9983] Call Trace: [ 358.719383][ T9983] [ 358.722362][ T9983] dump_stack_lvl+0x188/0x24e [ 358.727126][ T9983] ? show_regs_print_info+0x12/0x12 [ 358.732570][ T9983] ? load_image+0x400/0x400 [ 358.737228][ T9983] ? __lock_acquire+0x7d10/0x7d10 [ 358.742316][ T9983] ? __rcu_read_unlock+0x78/0xd0 [ 358.747311][ T9983] should_fail_ex+0x399/0x4d0 [ 358.752152][ T9983] _copy_to_user+0x2c/0x130 [ 358.752871][ T9985] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2199'. [ 358.756706][ T9983] bpf_test_finish+0x266/0x600 [ 358.756741][ T9983] ? convert___skb_to_skb+0x580/0x580 [ 358.756768][ T9983] ? convert_skb_to___skb+0x420/0x420 [ 358.756792][ T9983] ? __build_skb+0x257/0x3c0 [ 358.756830][ T9983] bpf_prog_test_run_skb+0xc99/0x12a0 [ 358.756871][ T9983] ? cpu_online+0xa0/0xa0 [ 358.756894][ T9983] bpf_prog_test_run+0x31e/0x390 [ 358.756930][ T9983] __sys_bpf+0x62b/0x780 [ 358.756964][ T9983] ? bpf_link_show_fdinfo+0x380/0x380 [ 358.757013][ T9983] ? lock_chain_count+0x20/0x20 [ 358.757053][ T9983] __x64_sys_bpf+0x78/0x90 [ 358.757085][ T9983] do_syscall_64+0x4c/0xa0 [ 358.757113][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 358.757139][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 358.757167][ T9983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.757191][ T9983] RIP: 0033:0x7ff0cc99acb9 [ 358.757212][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.757233][ T9983] RSP: 002b:00007ff0cd928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.757259][ T9983] RAX: ffffffffffffffda RBX: 00007ff0ccc15fa0 RCX: 00007ff0cc99acb9 [ 358.757276][ T9983] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 358.893633][ T9983] RBP: 00007ff0cd928090 R08: 0000000000000000 R09: 0000000000000000 [ 358.901830][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.910122][ T9983] R13: 00007ff0ccc16038 R14: 00007ff0ccc15fa0 R15: 00007fffdde952c8 [ 358.918232][ T9983] [ 359.137509][ T9989] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2200'. [ 359.166572][ T9989] netlink: zone id is out of range [ 359.172066][ T9989] netlink: zone id is out of range [ 359.181684][ T9989] netlink: zone id is out of range [ 359.187070][ T9989] netlink: zone id is out of range [ 359.192494][ T9989] netlink: zone id is out of range [ 359.256826][ T9989] netlink: zone id is out of range [ 359.285344][ T9989] netlink: zone id is out of range [ 359.290783][ T9989] netlink: zone id is out of range [ 359.325632][ T9989] netlink: zone id is out of range [ 359.330916][ T9989] netlink: zone id is out of range [ 359.572433][T10000] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2205'. [ 359.713175][T10009] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2209'. [ 359.769474][T10009] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 359.778155][T10009] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2209'. [ 359.922077][T10013] netlink: 'syz.1.2210': attribute type 39 has an invalid length. [ 360.534248][T10029] netlink: 'syz.0.2218': attribute type 29 has an invalid length. [ 360.650472][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.659269][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.672150][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.694084][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.717734][T10033] batman_adv: batadv0: Interface deactivated: wlan0 [ 360.733882][T10033] batman_adv: batadv0: Removing interface: wlan0 [ 361.572684][T10058] validate_nla: 2 callbacks suppressed [ 361.572707][T10058] netlink: 'syz.2.2226': attribute type 39 has an invalid length. [ 362.359748][T10074] __nla_validate_parse: 7 callbacks suppressed [ 362.359789][T10074] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2233'. [ 362.889882][T10094] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2240'. [ 362.957434][T10096] FAULT_INJECTION: forcing a failure. [ 362.957434][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.957527][T10094] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 362.987419][T10094] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2240'. [ 363.001271][T10096] CPU: 1 PID: 10096 Comm: syz.1.2241 Not tainted syzkaller #0 [ 363.009918][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.020201][T10096] Call Trace: [ 363.023644][T10096] [ 363.026829][T10096] dump_stack_lvl+0x188/0x24e [ 363.031791][T10096] ? show_regs_print_info+0x12/0x12 [ 363.037834][T10096] ? load_image+0x400/0x400 [ 363.042792][T10096] ? __lock_acquire+0x7d10/0x7d10 [ 363.048075][T10096] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 363.053819][T10096] should_fail_ex+0x399/0x4d0 [ 363.058962][T10096] _copy_from_user+0x2c/0x170 [ 363.063933][T10096] inet6_ioctl+0x1ac/0x280 [ 363.068505][T10096] ? __kmem_cache_free+0xb6/0x1f0 [ 363.073719][T10096] ? inet6_getname+0x640/0x640 [ 363.078678][T10096] ? tomoyo_path_number_perm+0x205/0x650 [ 363.085576][T10096] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 363.091264][T10096] sock_do_ioctl+0xfb/0x320 [ 363.096307][T10096] ? sock_show_fdinfo+0xb0/0xb0 [ 363.102003][T10096] sock_ioctl+0x4d2/0x710 [ 363.107933][T10096] ? sock_poll+0x410/0x410 [ 363.112955][T10096] ? bpf_lsm_file_ioctl+0x5/0x10 [ 363.118674][T10096] ? security_file_ioctl+0x7c/0xa0 [ 363.124750][T10096] ? sock_poll+0x410/0x410 [ 363.130821][T10096] __se_sys_ioctl+0xfa/0x170 [ 363.135715][T10096] do_syscall_64+0x4c/0xa0 [ 363.140495][T10096] ? clear_bhb_loop+0x60/0xb0 [ 363.145324][T10096] ? clear_bhb_loop+0x60/0xb0 [ 363.150200][T10096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.156445][T10096] RIP: 0033:0x7f8b1fd9acb9 [ 363.161175][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.181303][T10096] RSP: 002b:00007f8b20c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.190080][T10096] RAX: ffffffffffffffda RBX: 00007f8b20015fa0 RCX: 00007f8b1fd9acb9 [ 363.198355][T10096] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 363.206915][T10096] RBP: 00007f8b20c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 363.215133][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.223282][T10096] R13: 00007f8b20016038 R14: 00007f8b20015fa0 R15: 00007ffec4c085e8 [ 363.231644][T10096] [ 363.417191][T10100] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2243'. [ 363.609282][T10105] netlink: 'syz.1.2245': attribute type 39 has an invalid length. [ 364.125815][T10115] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2250'. [ 365.521030][T10135] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2255'. [ 365.712195][T10135] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 365.735320][T10135] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2255'. [ 366.231323][T10152] netlink: 'syz.4.2262': attribute type 39 has an invalid length. [ 366.642101][T10163] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2267'. [ 366.707706][T10163] net_ratelimit: 64 callbacks suppressed [ 366.707733][T10163] netlink: zone id is out of range [ 366.739672][T10163] netlink: get zone limit has 8 unknown bytes [ 366.871273][T10171] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2268'. [ 367.144235][T10182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2273'. [ 367.334699][T10182] netlink: 'syz.2.2273': attribute type 10 has an invalid length. [ 367.373029][T10190] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2276'. [ 367.375649][T10182] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2273'. [ 367.396969][T10188] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2275'. [ 367.685037][T10198] netlink: 'syz.0.2278': attribute type 39 has an invalid length. [ 367.853495][T10202] FAULT_INJECTION: forcing a failure. [ 367.853495][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 368.015353][T10202] CPU: 1 PID: 10202 Comm: syz.1.2280 Not tainted syzkaller #0 [ 368.023105][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.033311][T10202] Call Trace: [ 368.036912][T10202] [ 368.040360][T10202] dump_stack_lvl+0x188/0x24e [ 368.045204][T10202] ? show_regs_print_info+0x12/0x12 [ 368.050803][T10202] ? load_image+0x400/0x400 [ 368.055551][T10202] ? __might_sleep+0xd0/0xd0 [ 368.060324][T10202] ? __lock_acquire+0x7d10/0x7d10 [ 368.065503][T10202] should_fail_ex+0x399/0x4d0 [ 368.070551][T10202] should_failslab+0x5/0x20 [ 368.075320][T10202] slab_pre_alloc_hook+0x59/0x310 [ 368.080390][T10202] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 368.085825][T10202] __kmem_cache_alloc_node+0x4f/0x260 [ 368.091242][T10202] ? lockdep_init_map_type+0x146/0x8d0 [ 368.096760][T10202] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 368.102474][T10202] kmalloc_trace+0x26/0xe0 [ 368.106959][T10202] __xdp_reg_mem_model+0x1e0/0x5c0 [ 368.112289][T10202] ? kvmalloc_node+0x6c/0x180 [ 368.117526][T10202] ? kvmalloc_node+0x6c/0x180 [ 368.122337][T10202] ? xdp_reg_mem_model+0x30/0x30 [ 368.127678][T10202] xdp_reg_mem_model+0x1e/0x30 [ 368.132571][T10202] bpf_test_run_xdp_live+0x299/0x1a90 [ 368.138171][T10202] ? 0xffffffffa0004440 [ 368.142533][T10202] ? text_poke_copy+0x79/0x90 [ 368.147339][T10202] ? 0xffffffffa0004440 [ 368.151620][T10202] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 368.157659][T10202] ? 0xffffffffa0004440 [ 368.161937][T10202] ? xdp_convert_md_to_buff+0x330/0x330 [ 368.167679][T10202] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 368.174081][T10202] ? copy_user_enhanced_fast_string+0xa/0x40 [ 368.180313][T10202] ? bpf_test_init+0x119/0x140 [ 368.185344][T10202] ? xdp_convert_md_to_buff+0x5b/0x330 [ 368.191104][T10202] bpf_prog_test_run_xdp+0x736/0xf10 [ 368.196798][T10202] ? dev_put+0x80/0x80 [ 368.201001][T10202] ? dev_put+0x80/0x80 [ 368.205403][T10202] bpf_prog_test_run+0x31e/0x390 [ 368.210662][T10202] __sys_bpf+0x62b/0x780 [ 368.215294][T10202] ? bpf_link_show_fdinfo+0x380/0x380 [ 368.220712][T10202] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 368.226999][T10202] __x64_sys_bpf+0x78/0x90 [ 368.231805][T10202] do_syscall_64+0x4c/0xa0 [ 368.236271][T10202] ? clear_bhb_loop+0x60/0xb0 [ 368.241174][T10202] ? clear_bhb_loop+0x60/0xb0 [ 368.246153][T10202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.252346][T10202] RIP: 0033:0x7f8b1fd9acb9 [ 368.256882][T10202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.276538][T10202] RSP: 002b:00007f8b20c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.284991][T10202] RAX: ffffffffffffffda RBX: 00007f8b20015fa0 RCX: 00007f8b1fd9acb9 [ 368.293088][T10202] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 368.301097][T10202] RBP: 00007f8b20c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 368.309222][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.317604][T10202] R13: 00007f8b20016038 R14: 00007f8b20015fa0 R15: 00007ffec4c085e8 [ 368.325930][T10202] [ 368.585290][T10210] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2282'. [ 370.801779][T10214] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 370.808297][T10217] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2286'. [ 370.819034][T10214] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 370.852089][T10214] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 371.134188][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2292'. [ 371.180756][T10230] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2291'. [ 371.313759][T10238] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 371.332522][T10238] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2292'. [ 371.427781][T10240] netlink: 'syz.3.2294': attribute type 3 has an invalid length. [ 371.461279][T10240] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2294'. [ 371.698420][T10245] netlink: 'syz.0.2295': attribute type 39 has an invalid length. [ 372.002030][T10251] syz.0.2298 uses obsolete (PF_INET,SOCK_PACKET) [ 372.025954][T10251] Driver unsupported XDP return value 0 on prog (id 1265) dev N/A, expect packet loss! [ 372.605704][T10266] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 372.629767][T10266] pim6reg0: linktype set to 0 [ 372.747019][T10275] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2307'. [ 372.916646][T10282] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2310'. [ 372.994769][T10282] netlink: 'syz.3.2310': attribute type 10 has an invalid length. [ 373.024330][T10282] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2310'. [ 373.061909][T10283] netlink: 'syz.1.2309': attribute type 39 has an invalid length. [ 374.398800][T10324] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2323'. [ 374.494110][T10325] sctp: [Deprecated]: syz.2.2324 (pid 10325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.494110][T10325] Use struct sctp_sack_info instead [ 374.604589][T10329] netlink: 'syz.3.2326': attribute type 39 has an invalid length. [ 374.841034][T10334] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2328'. [ 374.962722][T10334] netlink: 'syz.4.2328': attribute type 10 has an invalid length. [ 374.984976][T10334] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2328'. [ 375.647716][T10340] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.2330'. [ 376.223902][T10364] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2338'. [ 376.494209][T10371] netlink: 'syz.2.2341': attribute type 39 has an invalid length. [ 376.592285][T10374] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2342'. [ 376.712168][T10377] netlink: 'syz.1.2342': attribute type 10 has an invalid length. [ 376.734490][T10377] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2342'. [ 377.938148][T10397] netlink: 'syz.3.2347': attribute type 3 has an invalid length. [ 378.035796][T10397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2347'. [ 378.150243][T10405] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2352'. [ 378.501190][T10420] netlink: 'syz.4.2356': attribute type 6 has an invalid length. [ 378.566199][T10420] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2356'. [ 378.596549][T10420] netlink: zone id is out of range [ 378.614626][T10420] netlink: zone id is out of range [ 378.637095][T10420] netlink: zone id is out of range [ 378.656567][T10420] netlink: zone id is out of range [ 378.669188][T10424] netlink: 'syz.1.2358': attribute type 39 has an invalid length. [ 378.683417][T10420] netlink: zone id is out of range [ 378.705626][T10420] netlink: zone id is out of range [ 378.734122][T10420] netlink: zone id is out of range [ 378.755750][T10420] netlink: zone id is out of range [ 378.785500][T10420] netlink: zone id is out of range [ 378.791245][T10420] netlink: zone id is out of range [ 378.826932][T10432] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2361'. [ 378.921544][T10432] netlink: 'syz.0.2361': attribute type 10 has an invalid length. [ 378.943170][T10432] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2361'. [ 379.164932][T10439] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2364'. [ 379.248812][T10439] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2364'. [ 379.410843][T10443] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2366'. [ 379.837391][T10457] FAULT_INJECTION: forcing a failure. [ 379.837391][T10457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.952460][T10457] CPU: 0 PID: 10457 Comm: syz.1.2370 Not tainted syzkaller #0 [ 379.960249][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.970809][T10457] Call Trace: [ 379.974269][T10457] [ 379.977239][T10457] dump_stack_lvl+0x188/0x24e [ 379.982158][T10457] ? show_regs_print_info+0x12/0x12 [ 379.987521][T10457] ? load_image+0x400/0x400 [ 379.992180][T10457] ? __lock_acquire+0x7d10/0x7d10 [ 379.997292][T10457] should_fail_ex+0x399/0x4d0 [ 380.002170][T10457] _copy_from_user+0x2c/0x170 [ 380.007004][T10457] iovec_from_user+0x143/0x360 [ 380.011841][T10457] __import_iovec+0x6d/0x500 [ 380.016501][T10457] import_iovec+0x6f/0xa0 [ 380.020979][T10457] ___sys_sendmsg+0x252/0x360 [ 380.025916][T10457] ? __sys_sendmsg+0x290/0x290 [ 380.031042][T10457] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 380.037312][T10457] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.043968][T10457] ? lockdep_hardirqs_on+0x94/0x140 [ 380.049544][T10457] ? __se_sys_sendmsg+0xf4/0x2a0 [ 380.054644][T10457] ? kasan_check_range+0x84/0x290 [ 380.059788][T10457] __se_sys_sendmsg+0x1bb/0x2a0 [ 380.064767][T10457] ? ct_nmi_exit+0x145/0x1c0 [ 380.069690][T10457] ? __x64_sys_sendmsg+0x80/0x80 [ 380.075042][T10457] ? lockdep_hardirqs_on+0x94/0x140 [ 380.080628][T10457] do_syscall_64+0x4c/0xa0 [ 380.085597][T10457] ? clear_bhb_loop+0x60/0xb0 [ 380.091007][T10457] ? clear_bhb_loop+0x60/0xb0 [ 380.095796][T10457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.102550][T10457] RIP: 0033:0x7f8b1fd9acb9 [ 380.107129][T10457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.128111][T10457] RSP: 002b:00007f8b20c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.136701][T10457] RAX: ffffffffffffffda RBX: 00007f8b20015fa0 RCX: 00007f8b1fd9acb9 [ 380.145539][T10457] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000005 [ 380.154278][T10457] RBP: 00007f8b20c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 380.163117][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.171515][T10457] R13: 00007f8b20016038 R14: 00007f8b20015fa0 R15: 00007ffec4c085e8 [ 380.179759][T10457] [ 380.532309][T10469] netlink: 'syz.3.2374': attribute type 39 has an invalid length. [ 380.603685][T10473] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2376'. [ 380.700003][T10474] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2373'. [ 380.838371][T10473] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 382.302544][T10512] netlink: 'syz.0.2390': attribute type 39 has an invalid length. [ 382.639300][T10518] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 382.951740][T10527] device syzkaller0 entered promiscuous mode [ 383.129811][T10534] __nla_validate_parse: 5 callbacks suppressed [ 383.129854][T10534] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2397'. [ 383.437621][T10541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2401'. [ 384.017079][T10559] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2408'. [ 384.419236][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.425995][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.623349][T10548] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 385.633610][T10551] netlink: 'syz.4.2406': attribute type 39 has an invalid length. [ 385.633982][T10548] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 385.652475][T10564] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2410'. [ 385.685288][T10548] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 385.711596][T10566] netlink: 'syz.0.2410': attribute type 10 has an invalid length. [ 385.779263][T10566] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2410'. [ 386.624856][T10589] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2419'. [ 386.669294][T10591] FAULT_INJECTION: forcing a failure. [ 386.669294][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.695455][T10591] CPU: 0 PID: 10591 Comm: syz.3.2420 Not tainted syzkaller #0 [ 386.703531][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.714019][T10591] Call Trace: [ 386.717588][T10591] [ 386.720551][T10591] dump_stack_lvl+0x188/0x24e [ 386.725421][T10591] ? show_regs_print_info+0x12/0x12 [ 386.731050][T10591] ? load_image+0x400/0x400 [ 386.735883][T10591] ? __lock_acquire+0x7d10/0x7d10 [ 386.741242][T10591] should_fail_ex+0x399/0x4d0 [ 386.747061][T10591] _copy_from_user+0x2c/0x170 [ 386.751943][T10591] ___sys_sendmsg+0x1c3/0x360 [ 386.756858][T10591] ? __sys_sendmsg+0x290/0x290 [ 386.761911][T10591] ? __lock_acquire+0x7d10/0x7d10 [ 386.767631][T10591] __se_sys_sendmsg+0x1bb/0x2a0 [ 386.772894][T10591] ? ct_nmi_exit+0x145/0x1c0 [ 386.777629][T10591] ? __x64_sys_sendmsg+0x80/0x80 [ 386.782805][T10591] ? lockdep_hardirqs_on+0x94/0x140 [ 386.788131][T10591] do_syscall_64+0x4c/0xa0 [ 386.792714][T10591] ? clear_bhb_loop+0x60/0xb0 [ 386.797734][T10591] ? clear_bhb_loop+0x60/0xb0 [ 386.802708][T10591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.808818][T10591] RIP: 0033:0x7ff0cc99acb9 [ 386.813369][T10591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.833637][T10591] RSP: 002b:00007ff0cd928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.842529][T10591] RAX: ffffffffffffffda RBX: 00007ff0ccc15fa0 RCX: 00007ff0cc99acb9 [ 386.850622][T10591] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 386.858796][T10591] RBP: 00007ff0cd928090 R08: 0000000000000000 R09: 0000000000000000 [ 386.866899][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.875257][T10591] R13: 00007ff0ccc16038 R14: 00007ff0ccc15fa0 R15: 00007fffdde952c8 [ 386.884061][T10591] [ 389.502140][T10598] netlink: 'syz.4.2423': attribute type 39 has an invalid length. [ 389.551470][T10599] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 389.586438][T10599] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 389.610317][T10599] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 389.719208][T10601] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2424'. [ 389.756067][T10605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2426'. [ 389.898475][T10604] netlink: 'syz.0.2425': attribute type 39 has an invalid length. [ 389.923100][T10609] netlink: 'syz.3.2426': attribute type 10 has an invalid length. [ 389.960272][T10609] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2426'. [ 389.991445][T10608] netlink: 'syz.2.2437': attribute type 39 has an invalid length. [ 390.042418][T10612] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2427'. [ 390.428114][T10618] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2431'. [ 390.706373][T10627] netlink: 'syz.0.2434': attribute type 39 has an invalid length. [ 390.904117][T10635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2438'. [ 390.928347][T10635] netlink: 'syz.2.2438': attribute type 39 has an invalid length. [ 391.171478][T10638] netlink: 'syz.0.2439': attribute type 39 has an invalid length. [ 391.197315][T10640] netlink: 'syz.4.2440': attribute type 39 has an invalid length. [ 391.260856][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2441'. [ 391.313503][T10642] netlink: 'syz.3.2441': attribute type 39 has an invalid length. [ 391.501727][T10644] netlink: 'syz.2.2442': attribute type 10 has an invalid length. [ 391.603861][T10647] netlink: 'syz.4.2443': attribute type 39 has an invalid length. [ 391.760186][T10650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2444'. [ 391.837526][T10650] netlink: 'syz.1.2444': attribute type 39 has an invalid length. [ 391.894625][T10654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2446'. [ 391.949318][T10654] netlink: 'syz.2.2446': attribute type 39 has an invalid length. [ 392.155711][T10660] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2448'. [ 392.369184][T10666] netlink: 'syz.1.2449': attribute type 39 has an invalid length. [ 395.202501][T10732] __nla_validate_parse: 6 callbacks suppressed [ 395.202636][T10732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2476'. [ 395.450959][T10736] syz.0.2478[10736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.451086][T10736] syz.0.2478[10736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.864156][T10745] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2482'. [ 396.127307][T10751] validate_nla: 15 callbacks suppressed [ 396.127328][T10751] netlink: 'syz.0.2494': attribute type 39 has an invalid length. [ 396.479732][T10764] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2485'. [ 396.820179][T10775] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2490'. [ 396.941347][T10780] netlink: 'syz.4.2491': attribute type 39 has an invalid length. [ 396.969277][T10778] netlink: 'syz.0.2490': attribute type 10 has an invalid length. [ 396.997939][T10778] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2490'. [ 397.140461][T10784] netlink: 'syz.2.2493': attribute type 39 has an invalid length. [ 397.175678][T10782] netlink: 'syz.1.2492': attribute type 39 has an invalid length. [ 397.322750][T10788] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2495'. [ 397.360951][T10787] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2495'. [ 397.501855][T10787] netlink: 'syz.3.2495': attribute type 6 has an invalid length. [ 397.536779][T10787] netlink: 14577 bytes leftover after parsing attributes in process `syz.3.2495'. [ 397.607446][T10795] netlink: 'syz.1.2498': attribute type 21 has an invalid length. [ 397.644675][T10795] netlink: 'syz.1.2498': attribute type 1 has an invalid length. [ 398.017975][T10804] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2503'. [ 398.038001][T10801] netlink: 'syz.3.2502': attribute type 39 has an invalid length. [ 398.064955][T10803] netlink: 'syz.0.2501': attribute type 39 has an invalid length. [ 398.414904][T10810] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2504'. [ 400.412624][T10872] __nla_validate_parse: 3 callbacks suppressed [ 400.412666][T10872] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2525'. [ 400.570584][T10880] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2526'. [ 400.632298][T10876] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2526'. [ 400.730338][T10879] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2528'. [ 400.831283][T10883] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2529'. [ 400.853654][T10890] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2529'. [ 400.958272][T10892] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.2532'. [ 401.461908][T10904] validate_nla: 10 callbacks suppressed [ 401.461932][T10904] netlink: 'syz.2.2538': attribute type 10 has an invalid length. [ 401.495336][T10904] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2538'. [ 401.885687][T10920] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2545'. [ 401.970035][T10924] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2542'. [ 402.429662][T10936] netlink: 'syz.3.2549': attribute type 39 has an invalid length. [ 402.456314][T10939] netlink: 'syz.0.2550': attribute type 10 has an invalid length. [ 402.629421][T10943] netlink: 'syz.1.2552': attribute type 10 has an invalid length. [ 402.883448][T10952] netlink: 'syz.0.2555': attribute type 10 has an invalid length. [ 403.324630][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.333099][T10959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.356630][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.368042][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.601869][T10971] netlink: 'syz.1.2563': attribute type 39 has an invalid length. [ 404.633065][T11003] netlink: 'syz.0.2571': attribute type 10 has an invalid length. [ 404.908364][T11005] netlink: 'syz.2.2574': attribute type 10 has an invalid length. [ 405.048632][T11009] netlink: 'syz.3.2575': attribute type 39 has an invalid length. [ 405.701594][T11035] netlink: 'syz.0.2585': attribute type 21 has an invalid length. [ 405.961416][T11047] __nla_validate_parse: 13 callbacks suppressed [ 405.961437][T11047] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2590'. [ 406.482392][T11056] validate_nla: 1 callbacks suppressed [ 406.482412][T11056] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 406.539509][T11056] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2593'. [ 406.549629][T11054] netlink: 'syz.2.2592': attribute type 39 has an invalid length. [ 406.834115][T11072] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 406.853661][T11072] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 406.973563][T11075] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2601'. [ 407.028868][T11074] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2601'. [ 407.208018][T11079] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2603'. [ 407.332052][T11082] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2604'. [ 407.681510][T11095] netlink: 'syz.2.2610': attribute type 39 has an invalid length. [ 408.320230][T11114] netlink: 'syz.2.2615': attribute type 10 has an invalid length. [ 408.335400][T11114] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2615'. [ 408.346476][T11116] netlink: 'syz.1.2616': attribute type 10 has an invalid length. [ 408.355081][T11116] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2616'. [ 408.652198][T11121] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2618'. [ 409.172963][T11137] netlink: 'syz.0.2625': attribute type 39 has an invalid length. [ 409.398007][T11154] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2628'. [ 409.825591][T11169] netlink: 'syz.4.2633': attribute type 10 has an invalid length. [ 409.883981][T11171] netlink: 'syz.1.2636': attribute type 10 has an invalid length. [ 410.987262][T11214] __nla_validate_parse: 11 callbacks suppressed [ 410.987356][T11214] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2650'. [ 411.237663][T11227] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2653'. [ 411.259121][T11222] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2653'. [ 411.501966][T11236] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2659'. [ 411.579060][T11233] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2657'. [ 412.028480][T11251] validate_nla: 2 callbacks suppressed [ 412.028508][T11251] netlink: 'syz.3.2662': attribute type 21 has an invalid length. [ 412.081202][T11251] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 412.474635][T11260] netlink: 'syz.1.2667': attribute type 39 has an invalid length. [ 412.598180][T11268] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2669'. [ 412.656975][T11264] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2669'. [ 413.378745][T11295] netlink: 'syz.1.2678': attribute type 21 has an invalid length. [ 413.393407][T11295] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 413.581628][T11297] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2679'. [ 413.691574][T11302] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2681'. [ 413.769828][T11302] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2681'. [ 414.552120][T11337] netlink: 'syz.4.2691': attribute type 21 has an invalid length. [ 414.585294][T11337] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 414.662990][T11339] netlink: 'syz.3.2692': attribute type 39 has an invalid length. [ 414.709818][T11343] netlink: 'syz.1.2694': attribute type 10 has an invalid length. [ 415.561029][T11366] netlink: 'syz.4.2702': attribute type 6 has an invalid length. [ 416.325117][T11396] __nla_validate_parse: 10 callbacks suppressed [ 416.348074][T11396] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2712'. [ 416.533387][T11396] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2712'. [ 417.037171][T11422] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2719'. [ 417.052018][T11418] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2719'. [ 417.077890][T11421] validate_nla: 2 callbacks suppressed [ 417.077909][T11421] netlink: 'syz.1.2721': attribute type 21 has an invalid length. [ 417.103804][T11421] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 417.114793][T11419] netlink: 'syz.0.2720': attribute type 39 has an invalid length. [ 417.124555][T11418] netlink: 'syz.2.2719': attribute type 6 has an invalid length. [ 417.137123][T11418] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.2719'. [ 417.384730][T11436] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2727'. [ 417.440265][T11436] netlink: 'syz.2.2727': attribute type 10 has an invalid length. [ 417.496939][T11436] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2727'. [ 417.987711][T11454] netlink: 'syz.1.2734': attribute type 21 has an invalid length. [ 418.061873][T11454] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 418.111361][T11455] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2735'. [ 418.234217][T11463] netlink: 'syz.3.2736': attribute type 39 has an invalid length. [ 418.321622][T11462] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2738'. [ 418.338102][T11464] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2738'. [ 418.372353][T11462] netlink: 'syz.2.2738': attribute type 6 has an invalid length. [ 418.470487][T11466] netlink: 'syz.1.2739': attribute type 6 has an invalid length. [ 421.443842][T11566] __nla_validate_parse: 18 callbacks suppressed [ 421.443864][T11566] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2772'. [ 421.513817][T11568] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2773'. [ 421.527619][T11570] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2774'. [ 421.562335][T11566] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2772'. [ 421.801121][T11579] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2779'. [ 421.852808][T11580] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2776'. [ 421.889267][T11576] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2776'. [ 421.966869][T11578] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2779'. [ 422.009893][T11579] netlink: 14577 bytes leftover after parsing attributes in process `syz.3.2779'. [ 422.043944][T11582] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.2776'. [ 422.472869][T11589] validate_nla: 12 callbacks suppressed [ 422.472917][T11589] netlink: 'syz.2.2782': attribute type 39 has an invalid length. [ 422.650241][T11599] netlink: 'syz.0.2785': attribute type 21 has an invalid length. [ 422.674979][T11599] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 423.451575][T11614] netlink: 'syz.4.2793': attribute type 6 has an invalid length. [ 423.801028][T11628] netlink: 'syz.3.2796': attribute type 39 has an invalid length. [ 423.924802][T11634] netlink: 'syz.4.2798': attribute type 21 has an invalid length. [ 423.955607][T11634] netlink: 'syz.4.2798': attribute type 1 has an invalid length. [ 424.974933][T11673] netlink: 'syz.4.2813': attribute type 21 has an invalid length. [ 424.993878][T11673] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 425.410204][T11683] netlink: 'syz.1.2817': attribute type 6 has an invalid length. [ 426.592490][T11718] __nla_validate_parse: 18 callbacks suppressed [ 426.592601][T11718] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2830'. [ 426.643637][T11718] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2830'. [ 426.674382][T11728] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2832'. [ 426.686836][T11723] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2832'. [ 426.701643][T11728] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.2832'. [ 427.039787][T11735] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2836'. [ 427.478393][T11751] validate_nla: 6 callbacks suppressed [ 427.478418][T11751] netlink: 'syz.4.2842': attribute type 21 has an invalid length. [ 427.528679][T11751] netlink: 'syz.4.2842': attribute type 1 has an invalid length. [ 427.811340][T11765] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2847'. [ 427.860442][T11763] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2847'. [ 427.913145][T11765] netlink: 'syz.4.2847': attribute type 6 has an invalid length. [ 427.944112][T11765] netlink: 14577 bytes leftover after parsing attributes in process `syz.4.2847'. [ 428.362977][T11779] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2851'. [ 428.676837][T11794] netlink: 'syz.0.2857': attribute type 21 has an invalid length. [ 428.705823][T11794] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 428.721562][T11787] netlink: 'syz.2.2854': attribute type 6 has an invalid length. [ 429.289479][T11815] netlink: 'syz.4.2863': attribute type 39 has an invalid length. [ 429.485212][T11821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.523642][T11821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.543969][T11821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.553133][T11821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.732067][T11824] netlink: 'syz.2.2877': attribute type 39 has an invalid length. [ 430.037885][T11838] netlink: 'syz.3.2870': attribute type 21 has an invalid length. [ 430.049357][T11838] netlink: 'syz.3.2870': attribute type 1 has an invalid length. [ 431.742130][T11901] __nla_validate_parse: 27 callbacks suppressed [ 431.742151][T11901] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2894'. [ 432.761624][T11943] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2906'. [ 432.812980][T11939] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2906'. [ 432.862744][T11943] validate_nla: 8 callbacks suppressed [ 432.862774][T11943] netlink: 'syz.2.2906': attribute type 6 has an invalid length. [ 432.890846][T11943] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.2906'. [ 432.905953][T11947] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2908'. [ 432.941213][T11946] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2908'. [ 433.035717][T11949] netlink: 'syz.1.2909': attribute type 39 has an invalid length. [ 433.111081][T11951] netlink: 'syz.3.2921': attribute type 6 has an invalid length. [ 433.158826][T11951] netlink: 14577 bytes leftover after parsing attributes in process `syz.3.2921'. [ 433.186035][T11955] netlink: 'syz.2.2911': attribute type 21 has an invalid length. [ 433.194111][T11955] netlink: 'syz.2.2911': attribute type 1 has an invalid length. [ 433.486617][T11968] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2917'. [ 433.649988][T11978] netlink: 'syz.0.2917': attribute type 10 has an invalid length. [ 433.676219][T11978] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2917'. [ 433.695581][T11977] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2918'. [ 433.877110][T11984] netlink: 'syz.4.2918': attribute type 10 has an invalid length. [ 434.245294][T11987] netlink: 'syz.3.2923': attribute type 6 has an invalid length. [ 436.977512][T11998] netlink: 'syz.2.2925': attribute type 39 has an invalid length. [ 437.087810][T12000] __nla_validate_parse: 4 callbacks suppressed [ 437.087837][T12000] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2927'. [ 437.150347][T12000] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2927'. [ 437.283527][T12006] netlink: 'syz.0.2928': attribute type 21 has an invalid length. [ 437.334572][T12005] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2929'. [ 437.419678][T12005] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2929'. [ 437.569373][T12013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2932'. [ 437.810539][T12023] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2935'. [ 437.909052][T12024] validate_nla: 1 callbacks suppressed [ 437.909072][T12024] netlink: 'syz.2.2935': attribute type 6 has an invalid length. [ 438.021250][T12024] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.2935'. [ 438.113442][T12018] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2935'. [ 438.449896][T12030] netlink: 'syz.4.2938': attribute type 2 has an invalid length. [ 438.517232][T12035] netlink: 'syz.4.2938': attribute type 2 has an invalid length. [ 438.565412][T12032] netlink: 'syz.3.2939': attribute type 39 has an invalid length. [ 438.744627][T12039] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2942'. [ 438.893692][T12041] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2941'. [ 438.936166][T12042] netlink: 'syz.1.2942': attribute type 10 has an invalid length. [ 439.096748][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.108437][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.117131][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.127412][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.137929][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 439.155483][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.229912][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.484780][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.657032][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.830496][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.912413][T12077] netlink: 'syz.1.2950': attribute type 6 has an invalid length. [ 440.153550][T12083] netlink: 'syz.4.2952': attribute type 39 has an invalid length. [ 440.189958][T12054] chnl_net:caif_netlink_parms(): no params data found [ 440.838173][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.849939][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.894945][T12054] device bridge_slave_0 entered promiscuous mode [ 441.007440][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.018569][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.066937][T12054] device bridge_slave_1 entered promiscuous mode [ 441.109136][T12121] netlink: 'syz.1.2969': attribute type 6 has an invalid length. [ 441.215719][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 441.265260][T12123] netlink: 'syz.3.2960': attribute type 10 has an invalid length. [ 441.329797][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.344090][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.514273][T12139] netlink: 'syz.1.2964': attribute type 6 has an invalid length. [ 441.554033][T12054] team0: Port device team_slave_0 added [ 441.666087][T12054] team0: Port device team_slave_1 added [ 441.832042][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.839974][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.015308][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.117139][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.124824][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.220355][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.538029][T12162] __nla_validate_parse: 16 callbacks suppressed [ 442.538051][T12162] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2966'. [ 442.738912][ T9] device hsr_slave_0 left promiscuous mode [ 442.808282][ T9] device hsr_slave_1 left promiscuous mode [ 442.868060][ T9] device veth1_macvtap left promiscuous mode [ 442.876423][ T9] device veth1_vlan left promiscuous mode [ 442.883187][ T9] device veth0_vlan left promiscuous mode [ 443.296179][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 443.587396][ T9] team0 (unregistering): Port device team_slave_1 removed [ 443.634919][ T9] team0 (unregistering): Port device team_slave_0 removed [ 443.677468][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.721556][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.023774][ T9] bond0 (unregistering): Released all slaves [ 444.061172][T12054] device hsr_slave_0 entered promiscuous mode [ 444.068874][T12054] device hsr_slave_1 entered promiscuous mode [ 444.076985][T12054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.084961][T12054] Cannot create hsr debugfs directory [ 444.090790][T12170] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2972'. [ 444.123618][T12178] validate_nla: 2 callbacks suppressed [ 444.123636][T12178] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 444.145258][T12178] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2972'. [ 444.164737][T12185] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2975'. [ 444.522885][T12200] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2979'. [ 444.602455][T12196] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2979'. [ 444.734640][T12199] netlink: 'syz.1.2981': attribute type 39 has an invalid length. [ 444.761692][T12196] netlink: 'syz.3.2979': attribute type 6 has an invalid length. [ 444.786676][T12196] netlink: 14577 bytes leftover after parsing attributes in process `syz.3.2979'. [ 445.386001][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 445.500640][T12054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.532515][T12054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.577089][T12054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.618449][T12054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.666193][T12234] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2988'. [ 445.778733][T12234] netlink: 'syz.4.2988': attribute type 10 has an invalid length. [ 445.795251][T12234] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2988'. [ 445.807643][T12216] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2985'. [ 445.858120][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.870861][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.124482][T12054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.161603][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.180507][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.207866][T12054] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.267601][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.287246][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.316129][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.323524][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.394686][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.407644][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.443424][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.474207][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.481617][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.520508][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.542823][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.626726][T12261] netlink: 'syz.4.2995': attribute type 22 has an invalid length. [ 446.675015][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.702364][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.735870][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.780271][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.821908][T12054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.870912][T12054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.931084][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.954578][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.997456][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.037706][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.083437][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.144715][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.455446][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 447.968639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.995981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.015915][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.086616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.107179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.168950][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.186785][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.201845][T12054] device veth0_vlan entered promiscuous mode [ 448.236263][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.248176][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.276755][T12054] device veth1_vlan entered promiscuous mode [ 448.335828][T12294] netlink: 'syz.2.3001': attribute type 6 has an invalid length. [ 448.355049][T12294] __nla_validate_parse: 3 callbacks suppressed [ 448.386350][T12294] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.3001'. [ 448.424052][T12054] device veth0_macvtap entered promiscuous mode [ 448.446668][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.458374][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.486509][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.506157][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.552967][T12054] device veth1_macvtap entered promiscuous mode [ 448.568012][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 448.587498][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 448.637304][T12054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.645071][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.667749][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.693643][T12054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.713585][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.741148][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.765748][T12054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.786043][T12054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.816962][T12054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.840167][T12054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.876012][T12302] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3002'. [ 449.370779][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.420880][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.475771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.523626][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.558483][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.599451][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.662244][T12317] netlink: 'syz.2.3005': attribute type 21 has an invalid length. [ 449.677460][T12317] netlink: 'syz.2.3005': attribute type 1 has an invalid length. [ 449.772330][T12323] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3006'. [ 449.808829][T12321] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3006'. [ 449.962733][T12327] FAULT_INJECTION: forcing a failure. [ 449.962733][T12327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.005421][T12327] CPU: 1 PID: 12327 Comm: syz.0.2937 Not tainted syzkaller #0 [ 450.013148][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.023679][T12327] Call Trace: [ 450.027162][T12327] [ 450.030223][T12327] dump_stack_lvl+0x188/0x24e [ 450.035237][T12327] ? show_regs_print_info+0x12/0x12 [ 450.040786][T12327] ? load_image+0x400/0x400 [ 450.046305][T12327] ? __lock_acquire+0x7d10/0x7d10 [ 450.051390][T12327] should_fail_ex+0x399/0x4d0 [ 450.056337][T12327] _copy_from_user+0x2c/0x170 [ 450.061228][T12327] __sys_bpf+0x2ea/0x780 [ 450.065620][T12327] ? bpf_link_show_fdinfo+0x380/0x380 [ 450.071063][T12327] __x64_sys_bpf+0x78/0x90 [ 450.075613][T12327] do_syscall_64+0x4c/0xa0 [ 450.080527][T12327] ? clear_bhb_loop+0x60/0xb0 [ 450.085613][T12327] ? clear_bhb_loop+0x60/0xb0 [ 450.090453][T12327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.096581][T12327] RIP: 0033:0x7f542c19acb9 [ 450.101396][T12327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.124212][T12327] RSP: 002b:00007f542cf83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.133280][T12327] RAX: ffffffffffffffda RBX: 00007f542c415fa0 RCX: 00007f542c19acb9 [ 450.141465][T12327] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 450.150263][T12327] RBP: 00007f542cf83090 R08: 0000000000000000 R09: 0000000000000000 [ 450.158899][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.167723][T12327] R13: 00007f542c416038 R14: 00007f542c415fa0 R15: 00007ffcd5247958 [ 450.176715][T12327] [ 450.237911][T12335] sctp: [Deprecated]: syz.0.2937 (pid 12335) Use of int in max_burst socket option deprecated. [ 450.237911][T12335] Use struct sctp_assoc_value instead [ 450.289396][T12328] syz.1.3008[12328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.289531][T12328] syz.1.3008[12328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.462498][T12338] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3010'. [ 450.653554][T12345] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3011'. [ 450.687901][T12338] netlink: 'syz.4.3010': attribute type 10 has an invalid length. [ 450.699696][T12338] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3010'. [ 450.718772][T12342] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3011'. [ 450.948842][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.961520][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.971916][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.982553][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.992846][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 451.002314][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.182829][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.398506][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.580704][T12364] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.620198][T12363] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3014'. [ 451.636447][T12369] netlink: 'syz.2.3013': attribute type 10 has an invalid length. [ 453.055622][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 454.531280][T12369] team0: Port device geneve1 added [ 454.565486][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.589043][T12367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.611001][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.632995][T12367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.992987][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.147110][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 455.172996][T12403] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3020'. [ 455.215793][T12400] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3020'. [ 455.338707][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.462215][T12352] chnl_net:caif_netlink_parms(): no params data found [ 455.789623][T12426] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3024'. [ 455.891047][T12423] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3024'. [ 456.086074][T12432] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.3027'. [ 456.293133][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.339269][T12352] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.372145][T12439] netlink: 183964 bytes leftover after parsing attributes in process `syz.1.3028'. [ 456.411447][T12352] device bridge_slave_0 entered promiscuous mode [ 456.420078][T12439] net_ratelimit: 15 callbacks suppressed [ 456.420168][T12439] netlink: zone id is out of range [ 456.438802][T12447] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.3029'. [ 456.527488][T12439] netlink: zone id is out of range [ 456.534046][T12439] netlink: zone id is out of range [ 456.568848][T12439] netlink: zone id is out of range [ 456.618158][T12439] netlink: zone id is out of range [ 456.654803][T12439] netlink: zone id is out of range [ 456.680340][T12447] netlink: 'syz.4.3029': attribute type 20 has an invalid length. [ 456.699308][T12352] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.717741][T12352] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.718560][T12439] netlink: zone id is out of range [ 456.766689][T12352] device bridge_slave_1 entered promiscuous mode [ 456.816813][T12439] netlink: zone id is out of range [ 456.866186][T12439] netlink: zone id is out of range [ 456.872979][T12439] netlink: zone id is out of range [ 456.929166][T12456] syz.2.3031[12456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.929312][T12456] syz.2.3031[12456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.990060][T12352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.215592][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 457.318513][T12352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.373043][T12463] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3032'. [ 457.516140][T12465] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3033'. [ 457.744251][T12352] team0: Port device team_slave_0 added [ 457.837909][T12352] team0: Port device team_slave_1 added [ 457.987333][T12352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.998114][T12352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.089778][T12352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.203545][T12352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.220539][T12352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.390097][T12352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.672590][T12352] device hsr_slave_0 entered promiscuous mode [ 458.696077][T12352] device hsr_slave_1 entered promiscuous mode [ 458.720267][T12352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.750335][T12352] Cannot create hsr debugfs directory [ 459.019665][T12513] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3044'. [ 459.052443][T12514] syz.4.3045[12514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.052560][T12514] syz.4.3045[12514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.299415][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 459.369736][T12513] netlink: 'syz.1.3044': attribute type 10 has an invalid length. [ 459.460828][ T35] device hsr_slave_0 left promiscuous mode [ 459.471113][ T35] device hsr_slave_1 left promiscuous mode [ 459.507719][ T35] device bridge_slave_1 left promiscuous mode [ 459.536018][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.578424][ T35] device bridge_slave_0 left promiscuous mode [ 459.584939][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.643043][ T35] device veth1_macvtap left promiscuous mode [ 459.666171][ T35] device veth1_vlan left promiscuous mode [ 459.673139][ T35] device veth0_vlan left promiscuous mode [ 460.324901][ T35] team0 (unregistering): Port device team_slave_1 removed [ 460.368025][ T35] team0 (unregistering): Port device team_slave_0 removed [ 460.413638][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.461073][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.716812][ T35] team0 (unregistering): Port device dummy0 removed [ 460.768692][ T35] bond0 (unregistering): Released all slaves [ 460.875252][T12545] __nla_validate_parse: 2 callbacks suppressed [ 460.875272][T12545] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3053'. [ 461.303906][T12558] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3055'. [ 461.591760][T12552] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3055'. [ 461.603582][T12560] netlink: 'syz.2.3055': attribute type 6 has an invalid length. [ 461.613147][T12560] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.3055'. [ 461.924107][T12569] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3058'. [ 462.160337][T12573] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3060'. [ 462.231176][T12352] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.273771][T12352] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.302522][T12352] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.349896][T12585] syz.0.3063[12585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.350030][T12585] syz.0.3063[12585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.354915][T12352] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.556431][T12600] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3065'. [ 462.590116][T12603] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3066'. [ 462.696315][T12603] netlink: 'syz.4.3066': attribute type 10 has an invalid length. [ 462.715550][T12603] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3066'. [ 462.808662][T12608] netlink: 'syz.1.3068': attribute type 39 has an invalid length. [ 462.837476][T12610] netlink: 'syz.0.3067': attribute type 21 has an invalid length. [ 462.849475][T12610] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 462.901959][T12352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.955964][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.008196][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.039621][T12352] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.076628][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.090238][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.120313][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.127599][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.149436][T12618] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.3071'. [ 463.177999][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.188695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.199412][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.211936][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.219355][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.233991][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.257883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.269581][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.281592][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.294315][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.309211][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.329164][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.341261][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.352316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.393312][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.406229][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.418155][T12352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.908191][T12639] syz.4.3076[12639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.908332][T12639] syz.4.3076[12639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.150412][T12651] netlink: 'syz.2.3080': attribute type 10 has an invalid length. [ 464.288195][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.307764][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.344104][T12352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.407179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.436830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.530560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.568028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.616091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.624238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.664837][T12352] device veth0_vlan entered promiscuous mode [ 464.711269][T12352] device veth1_vlan entered promiscuous mode [ 464.771170][T12676] netlink: 'syz.1.3086': attribute type 21 has an invalid length. [ 464.791658][T12676] netlink: 'syz.1.3086': attribute type 1 has an invalid length. [ 464.830940][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.847592][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.876651][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.911849][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.947447][T12352] device veth0_macvtap entered promiscuous mode [ 464.971114][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 464.991529][T12352] device veth1_macvtap entered promiscuous mode [ 465.045002][T12352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.072545][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.084087][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.108260][T12352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.127873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.158588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.211221][T12352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.243254][T12352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.265309][T12352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.284986][T12352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.344130][T12693] syz.1.3091[12693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.344276][T12693] syz.1.3091[12693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.558276][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.593504][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.640529][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.651217][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.664638][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.716805][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.528300][T12722] netlink: 'syz.3.3098': attribute type 21 has an invalid length. [ 466.587364][T12722] netlink: 'syz.3.3098': attribute type 1 has an invalid length. [ 466.901408][T12731] __nla_validate_parse: 7 callbacks suppressed [ 466.901429][T12731] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3100'. [ 467.300871][T12739] syz.1.3103[12739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.300992][T12739] syz.1.3103[12739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.367204][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.389914][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.399080][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.408914][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.418919][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 467.427009][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.528439][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.603496][T12749] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3105'. [ 467.752421][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.864464][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.013520][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.440770][T12773] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.3111'. [ 468.548627][T12740] chnl_net:caif_netlink_parms(): no params data found [ 468.719951][T12779] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3112'. [ 468.964664][T12789] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3115'. [ 468.981716][T12785] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3115'. [ 469.119592][T12785] netlink: 'syz.4.3115': attribute type 6 has an invalid length. [ 469.141496][T12785] netlink: 14577 bytes leftover after parsing attributes in process `syz.4.3115'. [ 469.452987][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.460847][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 469.494799][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.560236][T12740] device bridge_slave_0 entered promiscuous mode [ 469.590800][T12798] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3118'. [ 469.660619][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.675045][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.694506][T12740] device bridge_slave_1 entered promiscuous mode [ 469.869029][T12740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.932742][T12821] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3125'. [ 469.956276][T12740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.972143][T12819] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3124'. [ 470.201300][T12740] team0: Port device team_slave_0 added [ 470.240383][T12740] team0: Port device team_slave_1 added [ 470.420614][T12740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.434118][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.528646][T12740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.709396][T12740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.719655][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.754196][T12740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.815981][T12845] syz.3.3129[12845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.816114][T12845] syz.3.3129[12845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.988328][T12740] device hsr_slave_0 entered promiscuous mode [ 471.015578][T12740] device hsr_slave_1 entered promiscuous mode [ 471.023270][T12740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.031389][T12740] Cannot create hsr debugfs directory [ 471.083726][ T11] device hsr_slave_0 left promiscuous mode [ 471.106657][ T11] device hsr_slave_1 left promiscuous mode [ 471.149960][ T11] device veth1_macvtap left promiscuous mode [ 471.156502][ T11] device veth1_vlan left promiscuous mode [ 471.162835][ T11] device veth0_vlan left promiscuous mode [ 471.495989][ T11] team0 (unregistering): Port device geneve1 removed [ 471.541805][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 471.939366][ T11] team0 (unregistering): Port device team_slave_1 removed [ 471.988175][ T11] team0 (unregistering): Port device team_slave_0 removed [ 472.030821][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.077992][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.444604][ T11] bond0 (unregistering): Released all slaves [ 472.511314][T12850] netlink: 'syz.0.3130': attribute type 6 has an invalid length. [ 472.519544][T12850] __nla_validate_parse: 2 callbacks suppressed [ 472.519556][T12850] netlink: 14577 bytes leftover after parsing attributes in process `syz.0.3130'. [ 472.540891][T12854] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3132'. [ 472.868635][T12867] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3135'. [ 473.615488][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 473.972934][T12904] syz.3.3143[12904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.981930][T12904] syz.3.3143[12904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.074104][T12740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.113154][T12904] syz.3.3143[12904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.113387][T12904] syz.3.3143[12904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.159509][T12740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.264510][T12740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.304027][T12740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.454108][T12915] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3145'. [ 474.486874][T12913] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3145'. [ 474.509631][T12916] netlink: 'syz.1.3145': attribute type 6 has an invalid length. [ 474.527681][T12916] netlink: 14577 bytes leftover after parsing attributes in process `syz.1.3145'. [ 474.593240][T12911] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3144'. [ 474.611821][T12922] syz.3.3146[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.611960][T12922] syz.3.3146[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.679936][T12922] syz.3.3146[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.927754][T12931] syz.1.3148[12931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.930331][T12740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.980363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.990153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.022892][T12740] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.050114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.073859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.087743][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.095603][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.123065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.136438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.150837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.161171][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.168859][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.227751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.254419][T12941] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.3150'. [ 475.339003][T12937] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3150'. [ 475.367981][T12939] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3151'. [ 475.380108][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.390298][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.404261][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.414167][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.442223][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.464107][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.494637][T12946] netlink: 'syz.0.3151': attribute type 10 has an invalid length. [ 475.695502][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 475.794056][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.807458][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.819112][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 475.828672][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.841232][T12740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.534772][T12975] bpf_get_probe_write_proto: 3 callbacks suppressed [ 476.534794][T12975] syz.4.3159[12975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.577189][T12975] syz.4.3159[12975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.679177][T12975] syz.4.3159[12975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.040610][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.169001][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.190080][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.327402][T12999] netlink: 'syz.1.3166': attribute type 21 has an invalid length. [ 477.343335][T12999] netlink: 'syz.1.3166': attribute type 1 has an invalid length. [ 477.368321][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.416253][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.507942][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.526294][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.606786][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.615819][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.661200][T12740] device veth0_vlan entered promiscuous mode [ 477.680329][T13011] FAULT_INJECTION: forcing a failure. [ 477.680329][T13011] name failslab, interval 1, probability 0, space 0, times 0 [ 477.741048][T12740] device veth1_vlan entered promiscuous mode [ 477.752211][T13011] CPU: 1 PID: 13011 Comm: syz.1.3169 Not tainted syzkaller #0 [ 477.760035][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.770348][T13011] Call Trace: [ 477.773764][T13011] [ 477.776878][T13011] dump_stack_lvl+0x188/0x24e [ 477.781725][T13011] ? show_regs_print_info+0x12/0x12 [ 477.787559][T13011] ? load_image+0x400/0x400 [ 477.792241][T13011] ? __might_sleep+0xd0/0xd0 [ 477.797162][T13011] ? __lock_acquire+0x7d10/0x7d10 [ 477.802397][T13011] should_fail_ex+0x399/0x4d0 [ 477.807468][T13011] should_failslab+0x5/0x20 [ 477.809599][T13012] __nla_validate_parse: 8 callbacks suppressed [ 477.809744][T13012] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3168'. [ 477.812198][T13011] slab_pre_alloc_hook+0x59/0x310 [ 477.812230][T13011] ? sk_prot_alloc+0xe7/0x210 [ 477.812256][T13011] __kmem_cache_alloc_node+0x4f/0x260 [ 477.812285][T13011] ? sk_prot_alloc+0xe7/0x210 [ 477.812309][T13011] __kmalloc+0xa0/0x240 [ 477.812352][T13011] sk_prot_alloc+0xe7/0x210 [ 477.812375][T13011] ? sk_alloc+0x20/0x340 [ 477.812401][T13011] sk_alloc+0x36/0x340 [ 477.812423][T13011] ? bpf_ctx_init+0x163/0x1a0 [ 477.812447][T13011] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 477.812474][T13011] bpf_prog_test_run_skb+0x35e/0x12a0 [ 477.883437][T13011] ? __fget_files+0x28/0x4b0 [ 477.888186][T13011] ? __fget_files+0x43d/0x4b0 [ 477.893207][T13011] ? cpu_online+0xa0/0xa0 [ 477.897688][T13011] bpf_prog_test_run+0x31e/0x390 [ 477.902790][T13011] __sys_bpf+0x62b/0x780 [ 477.907308][T13011] ? bpf_link_show_fdinfo+0x380/0x380 [ 477.912854][T13011] ? lock_chain_count+0x20/0x20 [ 477.917933][T13011] __x64_sys_bpf+0x78/0x90 [ 477.922476][T13011] do_syscall_64+0x4c/0xa0 [ 477.926953][T13011] ? clear_bhb_loop+0x60/0xb0 [ 477.931757][T13011] ? clear_bhb_loop+0x60/0xb0 [ 477.936644][T13011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.943033][T13011] RIP: 0033:0x7f8b1fd9acb9 [ 477.948113][T13011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.969143][T13011] RSP: 002b:00007f8b20c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.978392][T13011] RAX: ffffffffffffffda RBX: 00007f8b20015fa0 RCX: 00007f8b1fd9acb9 [ 477.986884][T13011] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 477.994983][T13011] RBP: 00007f8b20c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 478.003075][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.011551][T13011] R13: 00007f8b20016038 R14: 00007f8b20015fa0 R15: 00007ffec4c085e8 [ 478.019850][T13011] [ 478.050774][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 478.078241][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 478.134729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 478.156159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.172022][T12740] device veth0_macvtap entered promiscuous mode [ 478.199660][T12740] device veth1_macvtap entered promiscuous mode [ 478.243026][T12740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.260201][T12740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.278742][T12740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.298425][T12740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.325171][T12740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.348836][T12740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.379499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.388796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.406133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.425767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.459825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.503225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.537392][T12740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.556917][T12740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.584163][T12740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.599058][T12740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.620495][T13023] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3172'. [ 478.809620][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.876500][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.890396][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.928127][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.975598][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.010473][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.301930][T13047] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3176'. [ 479.381122][T13047] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3176'. [ 479.491877][T13059] netlink: 'syz.3.3178': attribute type 21 has an invalid length. [ 479.515484][T13059] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 480.892203][ T4359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.993664][ T4359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.107102][ T4359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.197186][ T4359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.371131][ T4359] device hsr_slave_0 left promiscuous mode [ 482.378079][ T4359] device hsr_slave_1 left promiscuous mode [ 482.397875][ T4359] device veth1_macvtap left promiscuous mode [ 482.404548][ T4359] device veth1_vlan left promiscuous mode [ 482.411344][ T4359] device veth0_vlan left promiscuous mode [ 483.042051][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 483.100027][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 483.158569][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.213523][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.561215][ T4359] bond0 (unregistering): Released all slaves [ 483.892184][ T4359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.980813][ T4359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.065007][ T4359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.171382][ T4359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.266613][ T4359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.333334][ T4359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.409126][ T4359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.483167][ T4359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.603802][ T4359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.668660][ T4359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.732394][ T4359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.796868][ T4359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.933171][ T4359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.019067][ T4359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.078190][ T4359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.123748][ T4359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.617068][ T4359] device hsr_slave_0 left promiscuous mode [ 487.623817][ T4359] device hsr_slave_1 left promiscuous mode [ 487.633291][ T4359] device hsr_slave_0 left promiscuous mode [ 487.641146][ T4359] device hsr_slave_1 left promiscuous mode [ 487.648293][ T4359] device bridge_slave_1 left promiscuous mode [ 487.654955][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.665775][ T4359] device bridge_slave_0 left promiscuous mode [ 487.673396][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.686524][ T4359] device hsr_slave_0 left promiscuous mode [ 487.693746][ T4359] device hsr_slave_1 left promiscuous mode [ 487.700821][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.710004][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.719162][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.727765][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.737600][ T4359] device bridge_slave_1 left promiscuous mode [ 487.745328][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.761602][ T4359] device bridge_slave_0 left promiscuous mode [ 487.768688][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.784996][ T4359] device hsr_slave_0 left promiscuous mode [ 487.792645][ T4359] device hsr_slave_1 left promiscuous mode [ 487.800304][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.807953][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.816707][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.824838][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.833130][ T4359] device bridge_slave_1 left promiscuous mode [ 487.839896][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.851138][ T4359] device bridge_slave_0 left promiscuous mode [ 487.858636][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.916991][ T4359] device veth1_macvtap left promiscuous mode [ 487.923450][ T4359] device veth1_vlan left promiscuous mode [ 487.929539][ T4359] device veth0_vlan left promiscuous mode [ 487.937108][ T4359] device veth1_macvtap left promiscuous mode [ 487.945477][ T4359] device veth0_macvtap left promiscuous mode [ 487.951783][ T4359] device veth1_vlan left promiscuous mode [ 487.958296][ T4359] device veth0_vlan left promiscuous mode [ 487.968725][ T4359] device veth1_macvtap left promiscuous mode [ 487.975041][ T4359] device veth0_macvtap left promiscuous mode [ 487.981742][ T4359] device veth1_vlan left promiscuous mode [ 487.988015][ T4359] device veth0_vlan left promiscuous mode [ 487.996109][ T4359] device veth1_macvtap left promiscuous mode [ 488.002474][ T4359] device veth0_macvtap left promiscuous mode [ 488.009550][ T4359] device veth1_vlan left promiscuous mode [ 488.016077][ T4359] device veth0_vlan left promiscuous mode [ 488.914389][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 488.973463][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 489.025683][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.079051][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.444248][ T4359] bond0 (unregistering): Released all slaves [ 489.911161][ T4359] team0 (unregistering): Port device team_slave_1 removed [