last executing test programs: 4.785776717s ago: executing program 1 (id=7690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="180200000100e70000000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691081000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_attach_bpf(r6, 0x10e, 0xb, &(0x7f00000001c0), 0x4) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 4.710481569s ago: executing program 4 (id=7691): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001"], 0x50) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 4.468121587s ago: executing program 1 (id=7694): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = gettid() r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x50, 0x3, 0x5, 0x0, 0x6, 0x12040, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x100}, 0x10400a, 0x9, 0x4, 0x2, 0xff, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x6db}, r0, 0x3, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, 0x0}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x25, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.317249612s ago: executing program 0 (id=7695): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0x10c2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x1, 0x3, 0x3, 0xc}], 0x10, 0xc6}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x357}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) r5 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x3, 0xdf, 0x10, 0xa5, 0x0, 0x4, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfffffffffffff84a}, 0x12009, 0x4c3, 0x3, 0x2, 0x5, 0x800, 0xffc0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x6, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r8 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) 3.950543194s ago: executing program 4 (id=7697): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) recvmsg$kcm(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) close(r0) 3.823916398s ago: executing program 3 (id=7698): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x100820, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3.547033497s ago: executing program 3 (id=7699): socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) 3.274142665s ago: executing program 4 (id=7700): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d40100002000000018000000000000000000000000000000950000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000003800b84a07102000000019", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000640)={0x0, 0x4b, 0x0, 0x49, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x42) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="3423a193ef323af6dd32d4042805ca3018cbafbc879a79b6bd7a7e7a2ac75d4c647391de360ff554b67056598a066c0128", @ANYRESDEC=r7, @ANYRESHEX, @ANYRES16=r7, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', r8, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r10, r9, 0x4, r9}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x2000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 3.245906456s ago: executing program 2 (id=7701): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 3.210883367s ago: executing program 0 (id=7703): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001"], 0x50) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 3.161893739s ago: executing program 3 (id=7704): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='a *:4\tw'], 0xa) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 3.158934429s ago: executing program 1 (id=7705): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700", 0x15}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) 3.117622161s ago: executing program 4 (id=7706): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x4}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e", 0x23}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r3}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f00000002c0)="487bfcb06b3db1160d", 0x9}, {&(0x7f0000000300)="502994", 0x3}, {&(0x7f0000000380)="b1f6e7687d185eea206ba9fa0be3545c", 0x10}, {&(0x7f0000000400)}, {&(0x7f0000000440)="fd4ead9fec89ee541a2c7f533b83570f90468cc4167d60d55c01f540ffacb9230a0c8cdfd1a2066b1a643665c018035c15a348e8cd52b253f7c8ff186713391c80ab6c4bee2dcfc0219c0893797d4360ff3d5428aa84e0922231f8cdd3d49ba8c88d9082f4377cbd80462e693d064901911509dbd5ae1a75b1c23a2929d6b66bd89e6da052af46d26678e67203534075f9bf34c4bd66add4d9a2f4c7b511e174324c9bec964ce73611e35d7cea9884a1faffdbd10482f0126e378a16c82b6fb75280f945f67bac8fdec3e8e11802b12331d65631db7aa5751660dd27", 0xdc}], 0x5, 0x0, 0xc0}, 0x880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) sendmsg$kcm(r2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003380)={0x0, 0x0, 0x0}, 0x4000) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='#+(\x00') sendmsg(r4, 0x0, 0x44010) 2.19796342s ago: executing program 1 (id=7707): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2.18416195s ago: executing program 0 (id=7708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="180200000100e70000000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691081000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_attach_bpf(r6, 0x10e, 0xb, &(0x7f00000001c0), 0x4) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 2.18322881s ago: executing program 3 (id=7709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1, r0}, 0xc) 2.17537108s ago: executing program 2 (id=7710): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x100820, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.994529136s ago: executing program 3 (id=7711): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001"], 0x50) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.994166896s ago: executing program 4 (id=7712): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socket$kcm(0x29, 0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80086601, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 1.993501786s ago: executing program 1 (id=7713): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0x10c2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x1, 0x3, 0x3, 0xc}], 0x10, 0xc6}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x357}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) r5 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x3, 0xdf, 0x10, 0xa5, 0x0, 0x4, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfffffffffffff84a}, 0x12009, 0x4c3, 0x3, 0x2, 0x5, 0x800, 0xffc0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x6, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r8 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) 1.993144466s ago: executing program 2 (id=7714): socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) 1.781794693s ago: executing program 0 (id=7715): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = gettid() r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x50, 0x3, 0x5, 0x0, 0x6, 0x12040, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x100}, 0x10400a, 0x9, 0x4, 0x2, 0xff, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x6db}, r0, 0x3, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, 0x0}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x25, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 904.251361ms ago: executing program 2 (id=7716): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d40100002000000018000000000000000000000000000000950000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000003800b84a07102000000019", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x4b, 0x0, 0x49, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x42) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="3423a193ef323af6dd32d4042805ca3018cbafbc879a79b6bd7a7e7a2ac75d4c647391de360ff554b67056598a066c0128", @ANYRESDEC=r6, @ANYRESHEX, @ANYRES16=r6, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', r7, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r9, r8, 0x4, r8}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x2000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 315.13572ms ago: executing program 0 (id=7717): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000080)={'syzkaller1\x00', @remote}) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ac141411e0000001000000002000aa420000000000000000000007000000440d09ff9708ea6e19000000000000"], 0x40}, 0x20002880) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x7, 0xd10b, 0x5, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8000000003, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000037000b63d25a80649ceb96d50124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r9}, 0x8) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 300.802641ms ago: executing program 2 (id=7718): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) unlink(&(0x7f0000000200)='./cgroup\x00') (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 32) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) (async) socketpair(0x5, 0xa, 0x7f, &(0x7f0000000040)) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') (async, rerun: 64) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r1) (rerun: 64) 280.021971ms ago: executing program 3 (id=7719): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001"], 0x50) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 244.930353ms ago: executing program 1 (id=7720): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='a *:4\tw'], 0xa) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 74.111658ms ago: executing program 2 (id=7721): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1, r0}, 0xc) 73.664718ms ago: executing program 4 (id=7722): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) recvmsg(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001180)=""/252, 0xfc}, {&(0x7f0000001280)=""/246, 0xf6}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f00000014c0)=""/180, 0xb4}, {&(0x7f00000025c0)=""/206, 0xce}, {&(0x7f0000002740)=""/218, 0xda}, {&(0x7f0000002840)=""/132, 0x84}], 0x7}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) r6 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x9, &(0x7f0000000c40)=r6, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x40002000) 0s ago: executing program 0 (id=7723): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) kernel console output (not intermixed with test programs): link: 199836 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1211.799049][T23642] can: request_module (can-proto-0) failed. [ 1212.209557][T23635] netlink: 'syz.4.6355': attribute type 29 has an invalid length. [ 1213.725713][T23644] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1213.763043][T23641] netlink: 'syz.4.6355': attribute type 29 has an invalid length. [ 1214.100644][ T4328] device hsr_slave_0 left promiscuous mode [ 1214.134006][ T4328] device hsr_slave_1 left promiscuous mode [ 1214.170110][ T4328] device bridge_slave_1 left promiscuous mode [ 1214.176460][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.323535][ T4328] device bridge_slave_0 left promiscuous mode [ 1214.351838][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.482809][ T4328] device veth1_macvtap left promiscuous mode [ 1214.498645][ T4328] device veth1_vlan left promiscuous mode [ 1214.520319][T23696] FAULT_INJECTION: forcing a failure. [ 1214.520319][T23696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.554616][ T4328] device veth0_vlan left promiscuous mode [ 1214.617549][T23696] CPU: 1 PID: 23696 Comm: syz.0.6364 Not tainted syzkaller #0 [ 1214.625104][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1214.635300][T23696] Call Trace: [ 1214.638630][T23696] [ 1214.641615][T23696] dump_stack_lvl+0x188/0x24e [ 1214.646371][T23696] ? show_regs_print_info+0x12/0x12 [ 1214.651660][T23696] ? load_image+0x410/0x410 [ 1214.656262][T23696] ? __lock_acquire+0x7bd0/0x7bd0 [ 1214.661357][T23696] ? snprintf+0xe5/0x140 [ 1214.665677][T23696] should_fail_ex+0x390/0x4c0 [ 1214.670411][T23696] _copy_to_user+0x2c/0x130 [ 1214.674986][T23696] simple_read_from_buffer+0xe3/0x150 [ 1214.680432][T23696] proc_fail_nth_read+0x1a6/0x220 [ 1214.685513][T23696] ? proc_fault_inject_write+0x310/0x310 [ 1214.691202][T23696] ? fsnotify_perm+0x248/0x550 [ 1214.696024][T23696] ? proc_fault_inject_write+0x310/0x310 [ 1214.701710][T23696] vfs_read+0x2db/0x960 [ 1214.705935][T23696] ? kernel_read+0x1e0/0x1e0 [ 1214.710599][T23696] ? __fget_files+0x28/0x460 [ 1214.715242][T23696] ? __fget_files+0x3fc/0x460 [ 1214.719979][T23696] ? __fdget_pos+0x2ae/0x360 [ 1214.724615][T23696] ? ksys_read+0x70/0x260 [ 1214.728989][T23696] ksys_read+0x14d/0x260 [ 1214.733290][T23696] ? vfs_write+0x9a0/0x9a0 [ 1214.737764][T23696] ? lockdep_hardirqs_on+0x94/0x140 [ 1214.743039][T23696] do_syscall_64+0x4c/0xa0 [ 1214.747511][T23696] ? clear_bhb_loop+0x60/0xb0 [ 1214.752214][T23696] ? clear_bhb_loop+0x60/0xb0 [ 1214.756924][T23696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1214.762853][T23696] RIP: 0033:0x7fc77b55d68e [ 1214.767295][T23696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1214.786946][T23696] RSP: 002b:00007fc77c480fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1214.795401][T23696] RAX: ffffffffffffffda RBX: 00007fc77c4816c0 RCX: 00007fc77b55d68e [ 1214.803402][T23696] RDX: 000000000000000f RSI: 00007fc77c4810a0 RDI: 0000000000000006 [ 1214.811398][T23696] RBP: 00007fc77c481090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.819399][T23696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.827396][T23696] R13: 00007fc77b816038 R14: 00007fc77b815fa0 R15: 00007ffe0390b038 [ 1214.835416][T23696] [ 1218.353373][T23699] netlink: 'syz.0.6364': attribute type 21 has an invalid length. [ 1218.399177][T23699] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1218.433468][T23706] netlink: 'syz.3.6366': attribute type 21 has an invalid length. [ 1218.463842][T23706] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.6366'. [ 1218.710875][T23476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1218.795911][T23476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1218.846689][T23716] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1218.862375][T23476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1218.974306][T23476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1219.096010][T23724] netlink: 'syz.3.6369': attribute type 3 has an invalid length. [ 1219.221958][T23724] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1219.292409][T23476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.368846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1219.388993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1219.425876][T23476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.474391][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1219.504600][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1219.581721][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.589084][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.651358][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1219.744144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1219.782157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1219.854456][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.861818][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.988183][T23720] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1220.018067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1220.181733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1220.284613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1220.314884][T23739] netlink: 'syz.4.6372': attribute type 29 has an invalid length. [ 1220.347648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1220.469901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1220.560142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1220.945504][T23739] netlink: 'syz.4.6372': attribute type 29 has an invalid length. [ 1221.171664][T23741] netlink: 'syz.4.6372': attribute type 29 has an invalid length. [ 1221.635097][T23748] netlink: 'syz.4.6372': attribute type 29 has an invalid length. [ 1221.663793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1221.708541][T23742] can: request_module (can-proto-0) failed. [ 1221.710358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1221.759536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1221.935437][T23753] netlink: 'syz.4.6372': attribute type 29 has an invalid length. [ 1221.952457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1221.989369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1222.051881][T23476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1223.079179][T18039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1223.098207][T18039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1223.133178][T23476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.242936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1223.305438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.373078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1223.424682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.472669][T23785] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1223.491581][T23476] device veth0_vlan entered promiscuous mode [ 1223.514233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.529633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.563200][T23476] device veth1_vlan entered promiscuous mode [ 1223.596660][T23792] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1223.645125][T23785] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1223.743247][T23785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1223.796286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1223.815078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1223.841500][T23785] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1223.852977][T23797] netlink: 'syz.4.6383': attribute type 6 has an invalid length. [ 1223.894725][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1223.939570][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1224.002285][T23476] device veth0_macvtap entered promiscuous mode [ 1224.049834][T23476] device veth1_macvtap entered promiscuous mode [ 1224.289013][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.344073][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.398248][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.465447][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.546788][T23476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.605079][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1224.629638][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1224.668625][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1224.709080][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1224.744475][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.796325][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.817756][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.849649][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.888476][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.931491][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.972734][T23476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.025555][T23817] netlink: 'syz.3.6385': attribute type 29 has an invalid length. [ 1225.085260][T23818] netlink: 'syz.0.6386': attribute type 3 has an invalid length. [ 1225.153128][T23818] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1225.318539][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 1225.385413][T23822] can: request_module (can-proto-0) failed. [ 1226.886213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1226.909430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1226.937523][T23476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.963838][T23476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.988521][T23476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.015246][T23476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.052340][T23817] netlink: 'syz.3.6385': attribute type 29 has an invalid length. [ 1227.088617][T23815] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1227.210686][T23820] netlink: 'syz.3.6385': attribute type 29 has an invalid length. [ 1227.378159][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.414112][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.513710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1227.558753][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.566668][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.646406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1227.905707][T23863] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1229.409125][T23897] netlink: 'syz.1.6401': attribute type 29 has an invalid length. [ 1229.420615][T23900] netlink: 'syz.4.6400': attribute type 3 has an invalid length. [ 1229.506817][T23900] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6400'. [ 1229.856972][T23902] can: request_module (can-proto-0) failed. [ 1230.337412][T23897] netlink: 'syz.1.6401': attribute type 29 has an invalid length. [ 1230.359639][T23901] netlink: 'syz.1.6401': attribute type 29 has an invalid length. [ 1230.389916][T23893] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6400'. [ 1230.453236][T23907] netlink: 'syz.1.6401': attribute type 29 has an invalid length. [ 1230.485031][T23909] netlink: 'syz.1.6401': attribute type 29 has an invalid length. [ 1230.789457][T23921] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1232.748144][T23963] netlink: 'syz.0.6415': attribute type 10 has an invalid length. [ 1232.818628][T23963] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1232.991446][T23972] netlink: 'syz.4.6417': attribute type 3 has an invalid length. [ 1233.077850][T23972] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6417'. [ 1233.822970][T23977] netlink: 'syz.3.6418': attribute type 29 has an invalid length. [ 1234.141409][T23983] can: request_module (can-proto-0) failed. [ 1234.407830][T23970] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6417'. [ 1234.436548][T23990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1234.471550][T23977] netlink: 'syz.3.6418': attribute type 29 has an invalid length. [ 1234.505192][T23981] netlink: 'syz.3.6418': attribute type 29 has an invalid length. [ 1234.534775][T23988] netlink: 'syz.3.6418': attribute type 29 has an invalid length. [ 1234.566379][T23983] netlink: 'syz.3.6418': attribute type 29 has an invalid length. [ 1237.319519][T24021] FAULT_INJECTION: forcing a failure. [ 1237.319519][T24021] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.353471][T24021] CPU: 1 PID: 24021 Comm: syz.1.6428 Not tainted syzkaller #0 [ 1237.361028][T24021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1237.371137][T24021] Call Trace: [ 1237.374468][T24021] [ 1237.377445][T24021] dump_stack_lvl+0x188/0x24e [ 1237.382187][T24021] ? show_regs_print_info+0x12/0x12 [ 1237.387441][T24021] ? load_image+0x410/0x410 [ 1237.392009][T24021] ? unwind_next_frame+0x1719/0x1fd0 [ 1237.397372][T24021] ? mark_lock+0x94/0x320 [ 1237.401779][T24021] should_fail_ex+0x390/0x4c0 [ 1237.406528][T24021] should_failslab+0x5/0x20 [ 1237.411088][T24021] slab_pre_alloc_hook+0x59/0x300 [ 1237.416176][T24021] ? __kernel_text_address+0x9/0x30 [ 1237.421446][T24021] kmem_cache_alloc+0x56/0x2f0 [ 1237.426266][T24021] ? skb_clone+0x1e7/0x370 [ 1237.430755][T24021] skb_clone+0x1e7/0x370 [ 1237.435050][T24021] bpf_clone_redirect+0x169/0x4a0 [ 1237.440148][T24021] bpf_prog_b36a1f39e2fdd4f4+0x56/0x5b [ 1237.445668][T24021] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1237.451750][T24021] ? __lock_acquire+0x7bd0/0x7bd0 [ 1237.456844][T24021] ? lock_chain_count+0x20/0x20 [ 1237.461765][T24021] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1237.468068][T24021] ? lockdep_hardirqs_on+0x94/0x140 [ 1237.473322][T24021] ? ktime_get+0x7b/0x270 [ 1237.477700][T24021] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1237.484013][T24021] ? ktime_get_real_ts64+0x440/0x440 [ 1237.489375][T24021] ? read_lock_is_recursive+0x10/0x10 [ 1237.494816][T24021] ? __cant_sleep+0x220/0x220 [ 1237.499551][T24021] ? ktime_get+0x247/0x270 [ 1237.504042][T24021] bpf_test_run+0x2b6/0x830 [ 1237.508622][T24021] ? dst_hold+0xb0/0xb0 [ 1237.512888][T24021] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1237.518355][T24021] ? cpu_online+0xa0/0xa0 [ 1237.522760][T24021] bpf_prog_test_run+0x31c/0x390 [ 1237.527769][T24021] __sys_bpf+0x62b/0x780 [ 1237.532089][T24021] ? bpf_link_show_fdinfo+0x380/0x380 [ 1237.537547][T24021] ? lock_chain_count+0x20/0x20 [ 1237.542468][T24021] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1237.548534][T24021] __x64_sys_bpf+0x78/0x90 [ 1237.553016][T24021] do_syscall_64+0x4c/0xa0 [ 1237.557483][T24021] ? clear_bhb_loop+0x60/0xb0 [ 1237.562220][T24021] ? clear_bhb_loop+0x60/0xb0 [ 1237.566961][T24021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1237.572925][T24021] RIP: 0033:0x7f16b999ce59 [ 1237.577394][T24021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.597057][T24021] RSP: 002b:00007f16ba8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1237.605543][T24021] RAX: ffffffffffffffda RBX: 00007f16b9c15fa0 RCX: 00007f16b999ce59 [ 1237.613595][T24021] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 1237.621625][T24021] RBP: 00007f16ba8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.629644][T24021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.637671][T24021] R13: 00007f16b9c16038 R14: 00007f16b9c15fa0 R15: 00007fff19708f28 [ 1237.645725][T24021] [ 1237.778315][T24034] FAULT_INJECTION: forcing a failure. [ 1237.778315][T24034] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.872754][T24034] CPU: 1 PID: 24034 Comm: syz.3.6429 Not tainted syzkaller #0 [ 1237.880351][T24034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1237.890463][T24034] Call Trace: [ 1237.893781][T24034] [ 1237.896757][T24034] dump_stack_lvl+0x188/0x24e [ 1237.901497][T24034] ? show_regs_print_info+0x12/0x12 [ 1237.906755][T24034] ? load_image+0x410/0x410 [ 1237.911328][T24034] ? kasan_set_track+0x60/0x70 [ 1237.916153][T24034] ? __kasan_slab_alloc+0x6b/0x80 [ 1237.921240][T24034] ? slab_post_alloc_hook+0x4b/0x490 [ 1237.926581][T24034] ? kmem_cache_alloc+0x18b/0x2f0 [ 1237.931678][T24034] ? dst_alloc+0x101/0x160 [ 1237.936173][T24034] ? ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1237.942474][T24034] ? ip_route_output_key_hash+0x1ef/0x330 [ 1237.948263][T24034] should_fail_ex+0x390/0x4c0 [ 1237.953001][T24034] should_failslab+0x5/0x20 [ 1237.957565][T24034] slab_pre_alloc_hook+0x59/0x300 [ 1237.962657][T24034] ? ref_tracker_alloc+0x14f/0x490 [ 1237.967840][T24034] __kmem_cache_alloc_node+0x4f/0x270 [ 1237.973271][T24034] ? ref_tracker_alloc+0x14f/0x490 [ 1237.978452][T24034] kmalloc_trace+0x26/0xe0 [ 1237.982935][T24034] ref_tracker_alloc+0x14f/0x490 [ 1237.987935][T24034] ? ref_tracker_dir_print+0x150/0x150 [ 1237.993468][T24034] ? __kasan_slab_alloc+0x6b/0x80 [ 1237.998561][T24034] ? slab_post_alloc_hook+0x67/0x490 [ 1238.004062][T24034] ? slab_pre_alloc_hook+0x59/0x300 [ 1238.009326][T24034] ? rcu_is_watching+0x11/0xa0 [ 1238.014154][T24034] dst_init+0xb1/0x400 [ 1238.018322][T24034] dst_alloc+0x12a/0x160 [ 1238.022621][T24034] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1238.028760][T24034] ? ip_route_output_key_hash+0x139/0x330 [ 1238.034541][T24034] ip_route_output_key_hash+0x1ef/0x330 [ 1238.040140][T24034] ? kfree+0x30/0x1a0 [ 1238.044204][T24034] ? ip_route_input_rcu+0x30a0/0x30a0 [ 1238.049638][T24034] ? ip_cmsg_send+0x9a5/0xa50 [ 1238.054389][T24034] ip_route_output_flow+0x26/0x150 [ 1238.059581][T24034] ? security_sk_classify_flow+0x77/0x90 [ 1238.065291][T24034] raw_sendmsg+0xf7c/0x1940 [ 1238.069868][T24034] ? compat_raw_ioctl+0x60/0x60 [ 1238.074787][T24034] ? __might_fault+0xa6/0x120 [ 1238.079523][T24034] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1238.086007][T24034] ? sock_rps_record_flow+0x19/0x3f0 [ 1238.091355][T24034] ? inet_sendmsg+0x7a/0x2a0 [ 1238.095996][T24034] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1238.101330][T24034] ? inet_send_prepare+0x250/0x250 [ 1238.106497][T24034] ____sys_sendmsg+0x5ed/0x9a0 [ 1238.111318][T24034] ? __lock_acquire+0x7bd0/0x7bd0 [ 1238.116405][T24034] ? __sys_sendmsg_sock+0x30/0x30 [ 1238.121475][T24034] ? __import_iovec+0x306/0x510 [ 1238.126406][T24034] ? import_iovec+0x6f/0xa0 [ 1238.130969][T24034] ___sys_sendmsg+0x2a2/0x360 [ 1238.135724][T24034] ? __sys_sendmsg+0x2a0/0x2a0 [ 1238.140602][T24034] ? ktime_get+0x7b/0x270 [ 1238.145020][T24034] __se_sys_sendmsg+0x1c3/0x2b0 [ 1238.149948][T24034] ? __x64_sys_sendmsg+0x80/0x80 [ 1238.154960][T24034] ? lockdep_hardirqs_on+0x94/0x140 [ 1238.160225][T24034] do_syscall_64+0x4c/0xa0 [ 1238.164704][T24034] ? clear_bhb_loop+0x60/0xb0 [ 1238.169438][T24034] ? clear_bhb_loop+0x60/0xb0 [ 1238.174166][T24034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1238.180122][T24034] RIP: 0033:0x7ff31359ce59 [ 1238.184601][T24034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.204267][T24034] RSP: 002b:00007ff31447e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.212780][T24034] RAX: ffffffffffffffda RBX: 00007ff313816180 RCX: 00007ff31359ce59 [ 1238.220818][T24034] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006 [ 1238.228846][T24034] RBP: 00007ff31447e090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.236883][T24034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.244934][T24034] R13: 00007ff313816218 R14: 00007ff313816180 R15: 00007ffe53938a48 [ 1238.252974][T24034] [ 1238.417429][T24040] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1238.499300][T24027] device wg2 entered promiscuous mode [ 1238.603449][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.609897][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.703597][T24043] netlink: 'syz.3.6434': attribute type 29 has an invalid length. [ 1238.724864][T24049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1238.746445][T24043] netlink: 'syz.3.6434': attribute type 29 has an invalid length. [ 1238.758971][T24052] netlink: 'syz.3.6434': attribute type 29 has an invalid length. [ 1238.961161][T24056] netlink: 'syz.3.6434': attribute type 29 has an invalid length. [ 1239.045777][T24057] netlink: 'syz.3.6434': attribute type 29 has an invalid length. [ 1239.165564][T24043] can: request_module (can-proto-0) failed. [ 1240.039983][T24077] device wlan1 entered promiscuous mode [ 1240.924181][T24092] netlink: 'syz.3.6446': attribute type 16 has an invalid length. [ 1240.966749][T24092] netlink: 'syz.3.6446': attribute type 3 has an invalid length. [ 1240.992351][T24092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6446'. [ 1241.086359][T24095] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1241.223543][T24100] FAULT_INJECTION: forcing a failure. [ 1241.223543][T24100] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.274834][T24100] CPU: 1 PID: 24100 Comm: syz.3.6449 Not tainted syzkaller #0 [ 1241.282410][T24100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1241.292504][T24100] Call Trace: [ 1241.295819][T24100] [ 1241.298799][T24100] dump_stack_lvl+0x188/0x24e [ 1241.303544][T24100] ? show_regs_print_info+0x12/0x12 [ 1241.308788][T24100] ? load_image+0x410/0x410 [ 1241.313365][T24100] ? __might_sleep+0xd0/0xd0 [ 1241.318015][T24100] ? __lock_acquire+0x7bd0/0x7bd0 [ 1241.323109][T24100] should_fail_ex+0x390/0x4c0 [ 1241.327842][T24100] should_failslab+0x5/0x20 [ 1241.332406][T24100] slab_pre_alloc_hook+0x59/0x300 [ 1241.337485][T24100] ? apparmor_sk_alloc_security+0x74/0x100 [ 1241.343338][T24100] __kmem_cache_alloc_node+0x4f/0x270 [ 1241.348751][T24100] ? apparmor_sk_alloc_security+0x74/0x100 [ 1241.354585][T24100] kmalloc_trace+0x26/0xe0 [ 1241.359047][T24100] apparmor_sk_alloc_security+0x74/0x100 [ 1241.364708][T24100] security_sk_alloc+0x6a/0xa0 [ 1241.369502][T24100] sk_prot_alloc+0x101/0x210 [ 1241.374125][T24100] ? sk_alloc+0x20/0x330 [ 1241.378409][T24100] sk_alloc+0x36/0x330 [ 1241.382512][T24100] ? bpf_ctx_init+0x154/0x190 [ 1241.387225][T24100] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1241.392696][T24100] ? __fget_files+0x28/0x460 [ 1241.397327][T24100] ? __fget_files+0x3fc/0x460 [ 1241.402076][T24100] ? cpu_online+0xa0/0xa0 [ 1241.406446][T24100] bpf_prog_test_run+0x31c/0x390 [ 1241.411428][T24100] __sys_bpf+0x62b/0x780 [ 1241.415706][T24100] ? bpf_link_show_fdinfo+0x380/0x380 [ 1241.421126][T24100] ? lock_chain_count+0x20/0x20 [ 1241.426015][T24100] __x64_sys_bpf+0x78/0x90 [ 1241.430494][T24100] do_syscall_64+0x4c/0xa0 [ 1241.434967][T24100] ? clear_bhb_loop+0x60/0xb0 [ 1241.439683][T24100] ? clear_bhb_loop+0x60/0xb0 [ 1241.444384][T24100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1241.450314][T24100] RIP: 0033:0x7ff31359ce59 [ 1241.454756][T24100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.474390][T24100] RSP: 002b:00007ff3144c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1241.482833][T24100] RAX: ffffffffffffffda RBX: 00007ff313815fa0 RCX: 00007ff31359ce59 [ 1241.490847][T24100] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1241.498859][T24100] RBP: 00007ff3144c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.506858][T24100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.514865][T24100] R13: 00007ff313816038 R14: 00007ff313815fa0 R15: 00007ffe53938a48 [ 1241.523229][T24100] [ 1242.268577][T24112] can: request_module (can-proto-0) failed. [ 1242.586001][T24121] netlink: 'syz.3.6454': attribute type 13 has an invalid length. [ 1242.634648][T24121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6454'. [ 1242.705460][T24121] syz_tun: refused to change device tx_queue_len [ 1242.715162][T24121] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1242.744301][T24124] netlink: 'syz.3.6454': attribute type 13 has an invalid length. [ 1242.770957][T24124] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6454'. [ 1242.800705][T24124] syz_tun: refused to change device tx_queue_len [ 1242.814222][T24124] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1242.865192][T24121] netlink: 'syz.3.6454': attribute type 10 has an invalid length. [ 1243.682849][T24121] device netdevsim0 entered promiscuous mode [ 1243.724387][T24121] team0: Port device netdevsim0 added [ 1244.284341][T24142] netlink: 'syz.0.6460': attribute type 3 has an invalid length. [ 1244.361005][T24142] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1245.031343][T24154] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1245.934799][T24176] netlink: 'syz.1.6469': attribute type 3 has an invalid length. [ 1245.975377][T24176] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1249.928816][T24187] can: request_module (can-proto-0) failed. [ 1250.049674][T24186] netlink: 'syz.4.6472': attribute type 13 has an invalid length. [ 1250.059690][T24186] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6472'. [ 1250.156020][T24186] syz_tun: refused to change device tx_queue_len [ 1250.211085][T24186] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1250.294914][T24193] netlink: 'syz.4.6472': attribute type 13 has an invalid length. [ 1250.360438][T24193] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6472'. [ 1250.447014][T24193] syz_tun: refused to change device tx_queue_len [ 1250.469227][T24193] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1250.546789][T24194] netlink: 'syz.4.6472': attribute type 10 has an invalid length. [ 1250.703686][T24194] team0: Port device netdevsim0 added [ 1250.775833][T24198] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1251.070403][T24209] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1251.255509][T24214] netlink: 'syz.4.6479': attribute type 3 has an invalid length. [ 1251.310475][T24214] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1251.748929][T24222] netlink: 'syz.1.6480': attribute type 3 has an invalid length. [ 1251.869398][T24222] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1254.685851][T24295] wlan1: Trigger new scan to find an IBSS to join [ 1256.467122][T24321] can: request_module (can-proto-0) failed. [ 1257.728567][T24271] wlan1: Trigger new scan to find an IBSS to join [ 1257.812691][T24331] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1258.184183][T24340] netlink: 'syz.2.6491': attribute type 13 has an invalid length. [ 1258.315182][T24340] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6491'. [ 1258.412067][T24340] syz_tun: refused to change device tx_queue_len [ 1258.473998][T24340] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1258.632706][T24335] netlink: 'syz.2.6491': attribute type 13 has an invalid length. [ 1258.680786][T24335] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6491'. [ 1258.716690][T24297] wlan1: Creating new IBSS network, BSSID 1e:46:41:54:f0:a8 [ 1258.860174][T24335] syz_tun: refused to change device tx_queue_len [ 1258.916997][T24335] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1259.015160][T24347] netlink: 'syz.2.6491': attribute type 10 has an invalid length. [ 1259.238639][T24347] team0: Port device netdevsim0 added [ 1259.437514][T24353] netlink: 'syz.4.6498': attribute type 3 has an invalid length. [ 1259.513604][T24353] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6498'. [ 1261.934004][T24374] netlink: 'syz.4.6502': attribute type 29 has an invalid length. [ 1262.336184][T24378] can: request_module (can-proto-0) failed. [ 1263.082695][T24374] netlink: 'syz.4.6502': attribute type 29 has an invalid length. [ 1263.525981][T24394] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1263.696494][T24400] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1266.445894][T24418] netlink: 'syz.3.6513': attribute type 3 has an invalid length. [ 1266.475340][T24418] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1266.711531][T24405] netlink: 'syz.1.6510': attribute type 13 has an invalid length. [ 1266.728434][T24405] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6510'. [ 1266.748862][T24405] syz_tun: refused to change device tx_queue_len [ 1266.755277][T24405] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1266.788460][T24407] netlink: 'syz.1.6510': attribute type 13 has an invalid length. [ 1266.805091][T24407] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6510'. [ 1266.839900][T24407] syz_tun: refused to change device tx_queue_len [ 1266.846329][T24407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1266.898710][T24408] netlink: 'syz.1.6510': attribute type 10 has an invalid length. [ 1267.004218][T24408] team0: Port device netdevsim0 added [ 1267.391191][T24431] netlink: 'syz.1.6517': attribute type 29 has an invalid length. [ 1267.475338][T24431] netlink: 'syz.1.6517': attribute type 29 has an invalid length. [ 1267.563719][T24433] netlink: 'syz.1.6517': attribute type 29 has an invalid length. [ 1268.053091][T24436] can: request_module (can-proto-0) failed. [ 1268.654517][T24442] netlink: 'syz.1.6517': attribute type 29 has an invalid length. [ 1268.970725][T24454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1269.320713][T24466] netlink: 'syz.2.6525': attribute type 21 has an invalid length. [ 1269.358948][T24466] netlink: 'syz.2.6525': attribute type 6 has an invalid length. [ 1269.382145][T24468] netlink: 'syz.3.6524': attribute type 11 has an invalid length. [ 1269.391385][T24466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1269.399297][T24468] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6524'. [ 1269.441346][T24472] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1270.794890][T24490] can: request_module (can-proto-0) failed. [ 1272.466137][T24508] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1272.737073][T24510] bridge0: port 3(team0) entered disabled state [ 1273.020089][T24510] device bridge_slave_1 left promiscuous mode [ 1273.199380][T24510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.326508][T24528] validate_nla: 5 callbacks suppressed [ 1273.326532][T24528] netlink: 'syz.4.6543': attribute type 29 has an invalid length. [ 1273.449390][T24510] device bridge_slave_0 left promiscuous mode [ 1273.455759][T24510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.844018][T24533] can: request_module (can-proto-0) failed. [ 1275.311429][T24520] netlink: 'syz.1.6540': attribute type 21 has an invalid length. [ 1275.329911][T24528] netlink: 'syz.4.6543': attribute type 29 has an invalid length. [ 1275.566984][T24541] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1275.669032][T24541] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1275.699270][T24542] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1275.808665][T24542] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1275.907382][T24548] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1276.104315][T24543] can: request_module (can-proto-0) failed. [ 1276.518477][T21537] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.585234][T24561] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1277.382102][T24574] netlink: 'syz.4.6555': attribute type 21 has an invalid length. [ 1277.448467][T24574] netlink: 'syz.4.6555': attribute type 11 has an invalid length. [ 1278.815225][T24596] can: request_module (can-proto-0) failed. [ 1278.888990][T24593] validate_nla: 1 callbacks suppressed [ 1278.889014][T24593] netlink: 'syz.4.6561': attribute type 29 has an invalid length. [ 1279.113463][T24608] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1279.305777][T24595] netlink: 'syz.4.6561': attribute type 29 has an invalid length. [ 1279.602739][T24615] netlink: 'syz.2.6567': attribute type 10 has an invalid length. [ 1279.680590][T24615] team0: Port device macvlan0 added [ 1280.846217][T24647] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1280.897035][T24638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1281.337324][T24654] netlink: 'syz.2.6579': attribute type 29 has an invalid length. [ 1281.382606][T24651] netlink: 'syz.3.6578': attribute type 29 has an invalid length. [ 1281.406348][T24654] netlink: 'syz.2.6579': attribute type 29 has an invalid length. [ 1281.484471][T24656] netlink: 'syz.2.6579': attribute type 29 has an invalid length. [ 1281.628909][T24651] netlink: 'syz.3.6578': attribute type 29 has an invalid length. [ 1281.864358][T24657] can: request_module (can-proto-0) failed. [ 1282.072032][T24655] netlink: 'syz.3.6578': attribute type 29 has an invalid length. [ 1282.129722][T24661] netlink: 'syz.3.6578': attribute type 29 has an invalid length. [ 1282.181573][T24664] can: request_module (can-proto-0) failed. [ 1283.967517][T24651] validate_nla: 1 callbacks suppressed [ 1283.967538][T24651] netlink: 'syz.3.6578': attribute type 29 has an invalid length. [ 1284.890492][T24686] bridge0: port 3(team0) entered disabled state [ 1284.941665][T24687] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1285.016095][T24686] device bridge_slave_1 left promiscuous mode [ 1285.040499][T24686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.107032][T24686] device bridge_slave_0 left promiscuous mode [ 1285.119953][T24686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.378301][T24695] netlink: 'syz.1.6591': attribute type 29 has an invalid length. [ 1285.916848][T24699] can: request_module (can-proto-0) failed. [ 1285.937200][T24695] netlink: 'syz.1.6591': attribute type 29 has an invalid length. [ 1286.039686][T24698] netlink: 'syz.1.6591': attribute type 29 has an invalid length. [ 1286.160642][T24705] netlink: 'syz.1.6591': attribute type 29 has an invalid length. [ 1286.193079][T24706] netlink: 'syz.1.6591': attribute type 29 has an invalid length. [ 1287.526775][T24730] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1288.273269][T24740] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1288.574230][T24745] device bridge_slave_1 left promiscuous mode [ 1288.600884][T24745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.705981][T24750] netlink: 'syz.3.6608': attribute type 29 has an invalid length. [ 1288.833873][T24745] device bridge_slave_0 left promiscuous mode [ 1288.905401][T24745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.201874][T24753] can: request_module (can-proto-0) failed. [ 1290.150798][T24750] netlink: 'syz.3.6608': attribute type 29 has an invalid length. [ 1290.844406][T24768] FAULT_INJECTION: forcing a failure. [ 1290.844406][T24768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1290.969092][T24768] CPU: 1 PID: 24768 Comm: syz.2.6611 Not tainted syzkaller #0 [ 1290.976650][T24768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1290.986783][T24768] Call Trace: [ 1290.990136][T24768] [ 1290.993108][T24768] dump_stack_lvl+0x188/0x24e [ 1290.997857][T24768] ? show_regs_print_info+0x12/0x12 [ 1291.003122][T24768] ? load_image+0x410/0x410 [ 1291.007691][T24768] ? __lock_acquire+0x7bd0/0x7bd0 [ 1291.012777][T24768] ? ct_irq_exit_irqson+0x113/0x170 [ 1291.018119][T24768] should_fail_ex+0x390/0x4c0 [ 1291.022861][T24768] prepare_alloc_pages+0x1e1/0x5b0 [ 1291.028039][T24768] __alloc_pages+0x130/0x4f0 [ 1291.032693][T24768] ? asm_exc_page_fault+0x22/0x30 [ 1291.037781][T24768] ? zone_statistics+0x170/0x170 [ 1291.042785][T24768] ? refcount_dec_and_lock_irqsave+0xe1/0xf0 [ 1291.048847][T24768] bpf_prog_test_run_xdp+0xb24/0xf80 [ 1291.054203][T24768] ? __lock_acquire+0x7bd0/0x7bd0 [ 1291.059322][T24768] ? dev_put+0x80/0x80 [ 1291.063476][T24768] ? dev_put+0x80/0x80 [ 1291.067614][T24768] bpf_prog_test_run+0x31c/0x390 [ 1291.072623][T24768] __sys_bpf+0x62b/0x780 [ 1291.076936][T24768] ? bpf_link_show_fdinfo+0x380/0x380 [ 1291.082390][T24768] ? lock_chain_count+0x20/0x20 [ 1291.087308][T24768] __x64_sys_bpf+0x78/0x90 [ 1291.091792][T24768] do_syscall_64+0x4c/0xa0 [ 1291.096271][T24768] ? clear_bhb_loop+0x60/0xb0 [ 1291.101013][T24768] ? clear_bhb_loop+0x60/0xb0 [ 1291.105745][T24768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.111706][T24768] RIP: 0033:0x7f86f9b9ce59 [ 1291.116162][T24768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.135941][T24768] RSP: 002b:00007f86faab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1291.144672][T24768] RAX: ffffffffffffffda RBX: 00007f86f9e15fa0 RCX: 00007f86f9b9ce59 [ 1291.152715][T24768] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1291.160749][T24768] RBP: 00007f86faab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.168780][T24768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.176818][T24768] R13: 00007f86f9e16038 R14: 00007f86f9e15fa0 R15: 00007fff77536d58 [ 1291.184884][T24768] [ 1292.933226][T24787] netlink: 'syz.4.6619': attribute type 10 has an invalid length. [ 1292.969062][T24789] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1293.121473][T24787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.135403][T24787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.446673][T24787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.455292][T24787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.466047][T24787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.474354][T24787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.672112][T24787] team0: Port device bridge0 added [ 1293.735290][T24803] netlink: 'syz.1.6622': attribute type 29 has an invalid length. [ 1294.027645][T24803] netlink: 'syz.1.6622': attribute type 29 has an invalid length. [ 1294.154916][T24806] netlink: 'syz.1.6622': attribute type 29 has an invalid length. [ 1294.311118][T24806] netlink: 'syz.1.6622': attribute type 29 has an invalid length. [ 1294.398442][T24807] can: request_module (can-proto-0) failed. [ 1294.575408][T24813] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.6626'. [ 1294.643350][T24813] netlink: zone id is out of range [ 1294.648919][T24810] netlink: 'syz.1.6622': attribute type 29 has an invalid length. [ 1294.797743][T24813] netlink: zone id is out of range [ 1294.944757][T24813] netlink: zone id is out of range [ 1294.990290][T24813] netlink: zone id is out of range [ 1295.070341][T24813] netlink: get zone limit has 8 unknown bytes [ 1297.189609][T24840] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1299.887210][T24856] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1300.049169][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.055551][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.774264][T24869] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1301.369587][T24869] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1301.443717][T24877] can: request_module (can-proto-0) failed. [ 1301.505347][T24872] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1302.118438][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 1303.556497][T24881] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1303.946497][T24897] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1304.754211][T24912] -1: renamed from syzkaller0 [ 1307.568126][T24929] netlink: 'syz.4.6658': attribute type 29 has an invalid length. [ 1307.592066][T24929] netlink: 'syz.4.6658': attribute type 29 has an invalid length. [ 1307.642972][T24932] netlink: 'syz.4.6658': attribute type 29 has an invalid length. [ 1307.824546][T24939] netlink: 'syz.4.6658': attribute type 29 has an invalid length. [ 1307.868370][T24939] netlink: 'syz.4.6658': attribute type 29 has an invalid length. [ 1308.059137][T24929] can: request_module (can-proto-0) failed. [ 1308.824830][T24948] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6662'. [ 1309.217990][T24951] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1310.500264][T24948] device hsr_slave_0 left promiscuous mode [ 1310.525881][T24948] device hsr_slave_1 left promiscuous mode [ 1312.733373][T24985] netlink: 'syz.4.6675': attribute type 29 has an invalid length. [ 1312.956610][T24990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1313.308572][T24988] can: request_module (can-proto-0) failed. [ 1314.596974][T25008] FAULT_INJECTION: forcing a failure. [ 1314.596974][T25008] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.700834][T25008] CPU: 1 PID: 25008 Comm: syz.2.6680 Not tainted syzkaller #0 [ 1314.708467][T25008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1314.718564][T25008] Call Trace: [ 1314.721873][T25008] [ 1314.724842][T25008] dump_stack_lvl+0x188/0x24e [ 1314.729573][T25008] ? show_regs_print_info+0x12/0x12 [ 1314.734816][T25008] ? load_image+0x410/0x410 [ 1314.739370][T25008] ? __might_sleep+0xd0/0xd0 [ 1314.744002][T25008] ? __lock_acquire+0x7bd0/0x7bd0 [ 1314.749082][T25008] should_fail_ex+0x390/0x4c0 [ 1314.753810][T25008] should_failslab+0x5/0x20 [ 1314.758357][T25008] slab_pre_alloc_hook+0x59/0x300 [ 1314.763430][T25008] ? sock_kmalloc+0x92/0xf0 [ 1314.767979][T25008] __kmem_cache_alloc_node+0x4f/0x270 [ 1314.773403][T25008] ? sock_kmalloc+0x92/0xf0 [ 1314.777964][T25008] __kmalloc+0xa3/0x240 [ 1314.782181][T25008] sock_kmalloc+0x92/0xf0 [ 1314.786564][T25008] ____sys_sendmsg+0x1bf/0x9a0 [ 1314.791387][T25008] ? __sys_sendmsg_sock+0x30/0x30 [ 1314.796450][T25008] ? __import_iovec+0x306/0x510 [ 1314.801360][T25008] ? import_iovec+0x6f/0xa0 [ 1314.805909][T25008] ___sys_sendmsg+0x2a2/0x360 [ 1314.810684][T25008] ? __sys_sendmsg+0x2a0/0x2a0 [ 1314.815511][T25008] ? __lock_acquire+0x7bd0/0x7bd0 [ 1314.820617][T25008] __se_sys_sendmsg+0x1c3/0x2b0 [ 1314.825539][T25008] ? __x64_sys_sendmsg+0x80/0x80 [ 1314.830556][T25008] ? lockdep_hardirqs_on+0x94/0x140 [ 1314.835812][T25008] do_syscall_64+0x4c/0xa0 [ 1314.840268][T25008] ? clear_bhb_loop+0x60/0xb0 [ 1314.844982][T25008] ? clear_bhb_loop+0x60/0xb0 [ 1314.849697][T25008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1314.855673][T25008] RIP: 0033:0x7f86f9b9ce59 [ 1314.860132][T25008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.879786][T25008] RSP: 002b:00007f86faab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1314.888243][T25008] RAX: ffffffffffffffda RBX: 00007f86f9e15fa0 RCX: 00007f86f9b9ce59 [ 1314.896250][T25008] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1314.904255][T25008] RBP: 00007f86faab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1314.912290][T25008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1314.920312][T25008] R13: 00007f86f9e16038 R14: 00007f86f9e15fa0 R15: 00007fff77536d58 [ 1314.928338][T25008] [ 1314.971510][T24985] netlink: 'syz.4.6675': attribute type 29 has an invalid length. [ 1316.514610][T25013] netlink: 'syz.4.6683': attribute type 8 has an invalid length. [ 1316.578583][T25013] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6683'. [ 1317.044492][T25030] netlink: 'syz.0.6689': attribute type 29 has an invalid length. [ 1317.056217][T25033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6687'. [ 1317.087174][T25032] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1317.096432][T25030] netlink: 'syz.0.6689': attribute type 29 has an invalid length. [ 1317.159712][T25034] netlink: 'syz.0.6689': attribute type 29 has an invalid length. [ 1317.207408][T25030] netlink: 'syz.0.6689': attribute type 29 has an invalid length. [ 1317.263338][T25030] netlink: 'syz.0.6689': attribute type 29 has an invalid length. [ 1317.605662][T25040] netlink: 'syz.0.6691': attribute type 29 has an invalid length. [ 1317.634457][T25040] netlink: 'syz.0.6691': attribute type 29 has an invalid length. [ 1317.847668][T25043] validate_nla: 1 callbacks suppressed [ 1317.847687][T25043] netlink: 'syz.0.6691': attribute type 29 has an invalid length. [ 1317.952146][T25048] netlink: 'syz.0.6691': attribute type 29 has an invalid length. [ 1318.036601][T25040] can: request_module (can-proto-0) failed. [ 1319.829607][T25071] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1322.599828][T21537] Bluetooth: hci2: command 0x0406 tx timeout [ 1325.261958][T25093] netlink: 'syz.4.6703': attribute type 19 has an invalid length. [ 1325.276110][T25093] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1325.338655][T25103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1325.578489][T25115] netlink: 'syz.0.6708': attribute type 1 has an invalid length. [ 1325.611819][T25115] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6708'. [ 1325.630790][T25114] netlink: 'syz.4.6707': attribute type 10 has an invalid length. [ 1325.642512][T25116] netlink: 'syz.1.6706': attribute type 29 has an invalid length. [ 1325.663657][T25114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1325.691644][T25114] batman_adv: batadv0: Adding interface: vlan1 [ 1325.706916][T25114] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.795392][T25114] batman_adv: batadv0: Interface activated: vlan1 [ 1325.839001][T25116] netlink: 'syz.1.6706': attribute type 29 has an invalid length. [ 1325.857461][T25118] netlink: 'syz.1.6706': attribute type 29 has an invalid length. [ 1326.272108][T25116] can: request_module (can-proto-0) failed. [ 1326.392023][T25119] netlink: 'syz.1.6706': attribute type 29 has an invalid length. [ 1326.597285][T25134] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1327.974755][T25155] netlink: 'syz.4.6721': attribute type 10 has an invalid length. [ 1328.022955][T25157] netlink: 'syz.3.6722': attribute type 2 has an invalid length. [ 1328.048001][T25155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6721'. [ 1328.114786][T25157] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6722'. [ 1328.858063][T25171] netlink: 'syz.1.6724': attribute type 21 has an invalid length. [ 1328.977085][T25171] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1329.768589][T25179] can: request_module (can-proto-0) failed. [ 1329.829903][T25184] can: request_module (can-proto-0) failed. [ 1330.089515][T25193] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1332.788877][T25216] validate_nla: 10 callbacks suppressed [ 1332.788902][T25216] netlink: 'syz.2.6736': attribute type 19 has an invalid length. [ 1332.875740][T25216] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1333.688236][T25236] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1334.294352][T25245] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6754'. [ 1334.391756][T25246] netlink: 'syz.4.6744': attribute type 29 has an invalid length. [ 1335.180917][T25253] can: request_module (can-proto-0) failed. [ 1336.560582][T25246] netlink: 'syz.4.6744': attribute type 29 has an invalid length. [ 1337.363119][T25266] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6748'. [ 1337.715243][T25267] netlink: 'syz.1.6745': attribute type 29 has an invalid length. [ 1338.108432][T25267] netlink: 'syz.1.6745': attribute type 29 has an invalid length. [ 1338.164435][T25270] netlink: 'syz.1.6745': attribute type 29 has an invalid length. [ 1338.479879][T25267] netlink: 'syz.1.6745': attribute type 29 has an invalid length. [ 1338.618651][T25271] can: request_module (can-proto-0) failed. [ 1338.838035][T25276] netlink: 'syz.1.6745': attribute type 29 has an invalid length. [ 1339.906900][T25290] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1340.148996][T25285] netlink: 'syz.3.6753': attribute type 19 has an invalid length. [ 1340.156949][T25285] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.6753'. [ 1340.802769][T25302] netlink: 'syz.4.6760': attribute type 29 has an invalid length. [ 1340.919481][T25302] netlink: 'syz.4.6760': attribute type 29 has an invalid length. [ 1340.948206][T25303] netlink: 'syz.4.6760': attribute type 29 has an invalid length. [ 1341.073372][T25305] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.6761'. [ 1341.327896][T25306] netlink: 'syz.4.6760': attribute type 29 has an invalid length. [ 1341.440770][T25301] can: request_module (can-proto-0) failed. [ 1341.489314][T25318] netlink: 'syz.4.6760': attribute type 29 has an invalid length. [ 1341.562400][T25315] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1342.725515][T25323] can: request_module (can-proto-0) failed. [ 1344.469285][T25315] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 1344.809537][T25351] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1345.529180][T25363] FAULT_INJECTION: forcing a failure. [ 1345.529180][T25363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.645296][T25363] CPU: 0 PID: 25363 Comm: syz.4.6773 Not tainted syzkaller #0 [ 1345.652843][T25363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1345.662944][T25363] Call Trace: [ 1345.666263][T25363] [ 1345.669242][T25363] dump_stack_lvl+0x188/0x24e [ 1345.673968][T25363] ? show_regs_print_info+0x12/0x12 [ 1345.679214][T25363] ? load_image+0x410/0x410 [ 1345.683778][T25363] ? __lock_acquire+0x7bd0/0x7bd0 [ 1345.688869][T25363] should_fail_ex+0x390/0x4c0 [ 1345.693601][T25363] _copy_from_user+0x2c/0x170 [ 1345.698329][T25363] sctp_setsockopt+0x19a/0xf90 [ 1345.703159][T25363] ? sock_common_recvmsg+0x190/0x190 [ 1345.708495][T25363] __sys_setsockopt+0x2bf/0x3d0 [ 1345.713376][T25363] __x64_sys_setsockopt+0xb1/0xc0 [ 1345.718425][T25363] do_syscall_64+0x4c/0xa0 [ 1345.722877][T25363] ? clear_bhb_loop+0x60/0xb0 [ 1345.727594][T25363] ? clear_bhb_loop+0x60/0xb0 [ 1345.732336][T25363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1345.738268][T25363] RIP: 0033:0x7fc414d9ce59 [ 1345.742713][T25363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.762345][T25363] RSP: 002b:00007fc415d21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1345.770785][T25363] RAX: ffffffffffffffda RBX: 00007fc415015fa0 RCX: 00007fc414d9ce59 [ 1345.778790][T25363] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 1345.786792][T25363] RBP: 00007fc415d21090 R08: 000000000000001c R09: 0000000000000000 [ 1345.794800][T25363] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.802794][T25363] R13: 00007fc415016038 R14: 00007fc415015fa0 R15: 00007fff2de84ce8 [ 1345.810829][T25363] [ 1346.222546][T25366] validate_nla: 6 callbacks suppressed [ 1346.222570][T25366] netlink: 'syz.2.6774': attribute type 29 has an invalid length. [ 1346.684703][T25368] can: request_module (can-proto-0) failed. [ 1347.242984][T25373] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1347.365443][T25366] netlink: 'syz.2.6774': attribute type 29 has an invalid length. [ 1347.432923][T25379] netlink: 'syz.3.6777': attribute type 29 has an invalid length. [ 1347.448644][T25367] netlink: 'syz.2.6774': attribute type 29 has an invalid length. [ 1347.457470][T25373] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1347.497995][T25374] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1347.594314][T25368] netlink: 'syz.2.6774': attribute type 29 has an invalid length. [ 1347.715421][T25379] netlink: 'syz.3.6777': attribute type 29 has an invalid length. [ 1347.768867][T25382] netlink: 'syz.3.6777': attribute type 29 has an invalid length. [ 1347.958471][T25378] can: request_module (can-proto-0) failed. [ 1348.068763][T25379] netlink: 'syz.3.6777': attribute type 29 has an invalid length. [ 1348.140462][T25379] netlink: 'syz.3.6777': attribute type 29 has an invalid length. [ 1352.185495][T25406] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1352.626804][T25417] netlink: 'syz.2.6789': attribute type 29 has an invalid length. [ 1352.888638][T25417] netlink: 'syz.2.6789': attribute type 29 has an invalid length. [ 1352.979921][T25417] netlink: 'syz.2.6789': attribute type 10 has an invalid length. [ 1353.080289][T25426] netlink: 'syz.1.6790': attribute type 29 has an invalid length. [ 1353.174905][T25417] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1353.316476][T25426] netlink: 'syz.1.6790': attribute type 29 has an invalid length. [ 1353.399402][T25427] netlink: 'syz.1.6790': attribute type 29 has an invalid length. [ 1353.561613][T25418] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1353.567558][T25427] netlink: 'syz.1.6790': attribute type 29 has an invalid length. [ 1353.586858][T25428] can: request_module (can-proto-0) failed. [ 1353.656159][T25418] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1353.665170][T25426] netlink: 'syz.1.6790': attribute type 29 has an invalid length. [ 1355.140800][T25447] netlink: 'syz.2.6796': attribute type 29 has an invalid length. [ 1355.180946][T25447] netlink: 'syz.2.6796': attribute type 29 has an invalid length. [ 1355.631274][T25447] can: request_module (can-proto-0) failed. [ 1355.997688][T25460] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1359.756590][T25483] validate_nla: 3 callbacks suppressed [ 1359.756617][T25483] netlink: 'syz.0.6804': attribute type 10 has an invalid length. [ 1360.307739][T25483] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1361.204962][T25508] netlink: 'syz.2.6812': attribute type 29 has an invalid length. [ 1361.529235][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.535645][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.835795][T25508] netlink: 'syz.2.6812': attribute type 29 has an invalid length. [ 1361.878587][T25512] can: request_module (can-proto-0) failed. [ 1361.917599][T25511] netlink: 'syz.2.6812': attribute type 29 has an invalid length. [ 1361.956156][T25516] netlink: 'syz.2.6812': attribute type 29 has an invalid length. [ 1362.018380][T25514] netlink: 'syz.2.6812': attribute type 29 has an invalid length. [ 1362.343322][T25523] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1365.519082][T25549] netlink: 'syz.2.6823': attribute type 10 has an invalid length. [ 1365.527945][T25549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6823'. [ 1365.568999][T25549] device dummy0 entered promiscuous mode [ 1365.615798][T25549] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1365.626328][T25557] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1365.673111][T25555] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1366.171543][T25562] netlink: 'syz.4.6826': attribute type 29 has an invalid length. [ 1366.328982][T25562] netlink: 'syz.4.6826': attribute type 29 has an invalid length. [ 1366.390318][T25560] netlink: 'syz.4.6826': attribute type 29 has an invalid length. [ 1366.591061][T25561] can: request_module (can-proto-0) failed. [ 1366.741574][T25561] netlink: 'syz.4.6826': attribute type 29 has an invalid length. [ 1366.769398][T25562] netlink: 'syz.4.6826': attribute type 29 has an invalid length. [ 1367.525047][T25585] netlink: 'syz.1.6833': attribute type 29 has an invalid length. [ 1367.569275][T25585] netlink: 'syz.1.6833': attribute type 29 has an invalid length. [ 1368.481277][T25585] netlink: 'syz.1.6833': attribute type 10 has an invalid length. [ 1369.209026][T25585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.305384][T25585] device bridge_slave_1 left promiscuous mode [ 1369.340653][T25585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.391269][T25585] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1369.967920][T25603] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1370.272997][T25606] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1373.686048][T25614] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1374.105174][T25634] netlink: 'syz.0.6848': attribute type 29 has an invalid length. [ 1374.147697][T25634] netlink: 'syz.0.6848': attribute type 29 has an invalid length. [ 1374.172371][T25637] netlink: 'syz.0.6848': attribute type 29 has an invalid length. [ 1374.360330][T25640] netlink: 'syz.0.6848': attribute type 29 has an invalid length. [ 1374.509303][T25645] netlink: 'syz.0.6848': attribute type 29 has an invalid length. [ 1374.668852][T25634] can: request_module (can-proto-0) failed. [ 1375.232076][T25652] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1375.570356][T25657] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1375.740939][T25659] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.6856'. [ 1376.998135][T25684] netlink: 'syz.3.6864': attribute type 29 has an invalid length. [ 1377.078884][T25684] netlink: 'syz.3.6864': attribute type 29 has an invalid length. [ 1377.112600][T25684] netlink: 'syz.3.6864': attribute type 29 has an invalid length. [ 1377.559833][T25690] netlink: 'syz.3.6864': attribute type 29 has an invalid length. [ 1377.671475][T25691] netlink: 'syz.3.6864': attribute type 29 has an invalid length. [ 1377.685743][T25686] can: request_module (can-proto-0) failed. [ 1379.715659][T25705] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1381.714116][T25730] device bridge_slave_0 left promiscuous mode [ 1381.771958][T25730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.395457][T25740] netlink: 'syz.2.6881': attribute type 29 has an invalid length. [ 1384.527303][T25736] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.6879'. [ 1384.545768][T25740] netlink: 'syz.2.6881': attribute type 29 has an invalid length. [ 1384.630120][T25741] netlink: 'syz.2.6881': attribute type 29 has an invalid length. [ 1384.722162][T25741] netlink: 'syz.2.6881': attribute type 29 has an invalid length. [ 1384.774412][T25744] can: request_module (can-proto-0) failed. [ 1384.798605][T25741] netlink: 'syz.2.6881': attribute type 29 has an invalid length. [ 1385.391740][T25756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1387.593623][T25779] netlink: 'syz.0.6890': attribute type 3 has an invalid length. [ 1387.620762][T25779] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6890'. [ 1388.024596][T25779] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6890'. [ 1390.564433][T25799] netlink: 'syz.2.6897': attribute type 29 has an invalid length. [ 1390.578856][T25799] netlink: 'syz.2.6897': attribute type 29 has an invalid length. [ 1390.609466][T25799] netlink: 'syz.2.6897': attribute type 29 has an invalid length. [ 1390.802048][T25807] netlink: 'syz.2.6897': attribute type 29 has an invalid length. [ 1390.888477][T25799] can: request_module (can-proto-0) failed. [ 1390.919195][T25804] netlink: 'syz.4.6898': attribute type 21 has an invalid length. [ 1390.945241][T25804] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1390.990758][T25804] netlink: 'syz.4.6898': attribute type 4 has an invalid length. [ 1391.033846][T25804] netlink: 'syz.4.6898': attribute type 5 has an invalid length. [ 1391.071798][T25804] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1391.164839][T25811] netlink: 'syz.2.6897': attribute type 29 has an invalid length. [ 1391.698657][T25816] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1393.775385][T25849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1393.807407][T25847] device bridge_slave_1 left promiscuous mode [ 1393.827979][T25847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.863454][T25847] device bridge_slave_0 left promiscuous mode [ 1393.876176][T25852] netlink: 'syz.1.6912': attribute type 2 has an invalid length. [ 1393.887313][T25847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.928782][T25854] netlink: 'syz.0.6914': attribute type 29 has an invalid length. [ 1393.958560][T25852] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1393.973978][T25855] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1394.423653][T25861] can: request_module (can-proto-0) failed. [ 1394.916497][T25847] team0: Port device bridge0 removed [ 1394.971738][T25849] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1394.991181][T25849] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1395.093946][T25868] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1397.789245][T25900] validate_nla: 4 callbacks suppressed [ 1397.789262][T25900] netlink: 'syz.1.6930': attribute type 29 has an invalid length. [ 1397.831966][T25904] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1397.848077][T25900] netlink: 'syz.1.6930': attribute type 29 has an invalid length. [ 1397.889527][T25907] netlink: 'syz.1.6930': attribute type 29 has an invalid length. [ 1397.923149][T25910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1397.966480][T25910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1397.999912][T25910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1398.069070][T25911] netlink: 'syz.1.6930': attribute type 29 has an invalid length. [ 1398.136145][T25916] netlink: 'syz.1.6930': attribute type 29 has an invalid length. [ 1398.168649][T25900] can: request_module (can-proto-0) failed. [ 1398.236662][T25917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6935'. [ 1398.255841][T25917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6935'. [ 1398.450452][T25920] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6935'. [ 1400.762381][T25949] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1401.983514][T25959] netlink: 'syz.4.6949': attribute type 29 has an invalid length. [ 1402.122069][T25959] netlink: 'syz.4.6949': attribute type 29 has an invalid length. [ 1402.218695][T25969] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1402.276451][T25966] netlink: 'syz.4.6949': attribute type 29 has an invalid length. [ 1402.518110][T25966] netlink: 'syz.4.6949': attribute type 29 has an invalid length. [ 1402.600647][T25971] netlink: 'syz.4.6949': attribute type 29 has an invalid length. [ 1402.696404][T25959] can: request_module (can-proto-0) failed. [ 1402.743671][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6954'. [ 1403.375422][T25991] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1404.982690][T26012] netlink: 'syz.0.6963': attribute type 3 has an invalid length. [ 1405.091539][T26012] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6963'. [ 1405.429250][T26012] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6963'. [ 1406.863956][T26038] netlink: 'syz.1.6971': attribute type 29 has an invalid length. [ 1406.922083][T26041] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1406.936320][T26038] netlink: 'syz.1.6971': attribute type 29 has an invalid length. [ 1406.979058][T26039] netlink: 'syz.1.6971': attribute type 29 has an invalid length. [ 1407.348958][T26045] netlink: 'syz.1.6971': attribute type 29 has an invalid length. [ 1407.458764][T26045] netlink: 'syz.1.6971': attribute type 29 has an invalid length. [ 1407.532302][T26038] can: request_module (can-proto-0) failed. [ 1410.946949][T26066] FAULT_INJECTION: forcing a failure. [ 1410.946949][T26066] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.985552][T26066] CPU: 1 PID: 26066 Comm: syz.0.6979 Not tainted syzkaller #0 [ 1410.993089][T26066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1411.003191][T26066] Call Trace: [ 1411.006504][T26066] [ 1411.009481][T26066] dump_stack_lvl+0x188/0x24e [ 1411.014217][T26066] ? show_regs_print_info+0x12/0x12 [ 1411.019472][T26066] ? load_image+0x410/0x410 [ 1411.024028][T26066] ? trace_call_bpf+0xbf/0x6b0 [ 1411.028855][T26066] ? trace_call_bpf+0x5d6/0x6b0 [ 1411.033760][T26066] ? trace_call_bpf+0xbf/0x6b0 [ 1411.038582][T26066] should_fail_ex+0x390/0x4c0 [ 1411.043312][T26066] should_failslab+0x5/0x20 [ 1411.047886][T26066] slab_pre_alloc_hook+0x59/0x300 [ 1411.052969][T26066] kmem_cache_alloc+0x56/0x2f0 [ 1411.057771][T26066] ? skb_clone+0x1e7/0x370 [ 1411.062238][T26066] skb_clone+0x1e7/0x370 [ 1411.066536][T26066] bpf_clone_redirect+0x169/0x4a0 [ 1411.071621][T26066] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1411.077670][T26066] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1411.083191][T26066] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1411.089406][T26066] ? lockdep_hardirqs_on+0x94/0x140 [ 1411.094665][T26066] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1411.100898][T26066] ? __cant_migrate+0xb1/0x2f0 [ 1411.105800][T26066] ? __cant_sleep+0x220/0x220 [ 1411.110525][T26066] ? ktime_get+0x247/0x270 [ 1411.114993][T26066] bpf_test_run+0x2b6/0x830 [ 1411.119561][T26066] ? dst_hold+0xb0/0xb0 [ 1411.123773][T26066] ? eth_get_headlen+0x200/0x200 [ 1411.128845][T26066] ? __build_skb+0x24b/0x3b0 [ 1411.133562][T26066] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1411.138988][T26066] ? cpu_online+0xa0/0xa0 [ 1411.143358][T26066] bpf_prog_test_run+0x31c/0x390 [ 1411.148342][T26066] __sys_bpf+0x62b/0x780 [ 1411.152619][T26066] ? bpf_link_show_fdinfo+0x380/0x380 [ 1411.158042][T26066] ? lock_chain_count+0x20/0x20 [ 1411.162923][T26066] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1411.168939][T26066] __x64_sys_bpf+0x78/0x90 [ 1411.173392][T26066] do_syscall_64+0x4c/0xa0 [ 1411.177837][T26066] ? clear_bhb_loop+0x60/0xb0 [ 1411.182565][T26066] ? clear_bhb_loop+0x60/0xb0 [ 1411.187271][T26066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.193200][T26066] RIP: 0033:0x7fc77b59ce59 [ 1411.197643][T26066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.217309][T26066] RSP: 002b:00007fc77c481028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1411.225760][T26066] RAX: ffffffffffffffda RBX: 00007fc77b815fa0 RCX: 00007fc77b59ce59 [ 1411.233756][T26066] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1411.241760][T26066] RBP: 00007fc77c481090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.249778][T26066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.257775][T26066] R13: 00007fc77b816038 R14: 00007fc77b815fa0 R15: 00007ffe0390b038 [ 1411.265786][T26066] [ 1412.273918][T26085] FAULT_INJECTION: forcing a failure. [ 1412.273918][T26085] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.312967][T26089] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1412.387338][T26090] netlink: 'syz.1.6987': attribute type 29 has an invalid length. [ 1412.407505][T26085] CPU: 1 PID: 26085 Comm: syz.2.6983 Not tainted syzkaller #0 [ 1412.415055][T26085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1412.425165][T26085] Call Trace: [ 1412.428497][T26085] [ 1412.431469][T26085] dump_stack_lvl+0x188/0x24e [ 1412.436298][T26085] ? show_regs_print_info+0x12/0x12 [ 1412.441556][T26085] ? load_image+0x410/0x410 [ 1412.446221][T26085] ? unwind_next_frame+0x1719/0x1fd0 [ 1412.451556][T26085] ? mark_lock+0x94/0x320 [ 1412.455944][T26085] should_fail_ex+0x390/0x4c0 [ 1412.460674][T26085] should_failslab+0x5/0x20 [ 1412.465229][T26085] slab_pre_alloc_hook+0x59/0x300 [ 1412.470303][T26085] ? __kernel_text_address+0x9/0x30 [ 1412.475559][T26085] kmem_cache_alloc+0x56/0x2f0 [ 1412.480389][T26085] ? skb_clone+0x1e7/0x370 [ 1412.484870][T26085] skb_clone+0x1e7/0x370 [ 1412.489203][T26085] bpf_clone_redirect+0x169/0x4a0 [ 1412.494293][T26085] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1412.499822][T26085] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1412.505856][T26085] ? __lock_acquire+0x7bd0/0x7bd0 [ 1412.510935][T26085] ? lock_chain_count+0x20/0x20 [ 1412.515850][T26085] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1412.522147][T26085] ? lockdep_hardirqs_on+0x94/0x140 [ 1412.527406][T26085] ? ktime_get+0x7b/0x270 [ 1412.531793][T26085] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1412.538087][T26085] ? ktime_get_real_ts64+0x440/0x440 [ 1412.543427][T26085] ? read_lock_is_recursive+0x10/0x10 [ 1412.548873][T26085] ? __cant_sleep+0x220/0x220 [ 1412.553604][T26085] ? ktime_get+0x247/0x270 [ 1412.558097][T26085] bpf_test_run+0x2b6/0x830 [ 1412.562672][T26085] ? dst_hold+0xb0/0xb0 [ 1412.566877][T26085] ? eth_get_headlen+0x200/0x200 [ 1412.571860][T26085] ? __build_skb+0x24b/0x3b0 [ 1412.576515][T26085] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1412.581958][T26085] ? cpu_online+0xa0/0xa0 [ 1412.586336][T26085] bpf_prog_test_run+0x31c/0x390 [ 1412.591423][T26085] __sys_bpf+0x62b/0x780 [ 1412.595737][T26085] ? bpf_link_show_fdinfo+0x380/0x380 [ 1412.601193][T26085] ? lock_chain_count+0x20/0x20 [ 1412.606104][T26085] __x64_sys_bpf+0x78/0x90 [ 1412.610572][T26085] do_syscall_64+0x4c/0xa0 [ 1412.615025][T26085] ? clear_bhb_loop+0x60/0xb0 [ 1412.619740][T26085] ? clear_bhb_loop+0x60/0xb0 [ 1412.624455][T26085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.630397][T26085] RIP: 0033:0x7f86f9b9ce59 [ 1412.634856][T26085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.654517][T26085] RSP: 002b:00007f86faa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.662996][T26085] RAX: ffffffffffffffda RBX: 00007f86f9e16090 RCX: 00007f86f9b9ce59 [ 1412.671029][T26085] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1412.679050][T26085] RBP: 00007f86faa96090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.687074][T26085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.695096][T26085] R13: 00007f86f9e16128 R14: 00007f86f9e16090 R15: 00007fff77536d58 [ 1412.703145][T26085] [ 1412.737996][T26090] netlink: 'syz.1.6987': attribute type 29 has an invalid length. [ 1412.762176][T26094] netlink: 'syz.1.6987': attribute type 29 has an invalid length. [ 1412.978574][T26096] netlink: 'syz.1.6987': attribute type 29 has an invalid length. [ 1413.043162][T26096] netlink: 'syz.1.6987': attribute type 29 has an invalid length. [ 1413.252814][T26090] can: request_module (can-proto-0) failed. [ 1414.715674][T26116] netlink: 'syz.3.6994': attribute type 29 has an invalid length. [ 1414.752900][T26116] netlink: 'syz.3.6994': attribute type 29 has an invalid length. [ 1414.810318][T26121] netlink: 'syz.3.6994': attribute type 29 has an invalid length. [ 1414.963408][T26123] netlink: 'syz.3.6994': attribute type 29 has an invalid length. [ 1415.176719][T26124] netlink: 'syz.3.6994': attribute type 29 has an invalid length. [ 1415.243425][T26116] can: request_module (can-proto-0) failed. [ 1415.279720][T26129] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1415.876522][T26139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1416.336599][T26137] can: request_module (can-proto-0) failed. [ 1416.494380][T26148] FAULT_INJECTION: forcing a failure. [ 1416.494380][T26148] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.531633][T26148] CPU: 1 PID: 26148 Comm: syz.3.7004 Not tainted syzkaller #0 [ 1416.539173][T26148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1416.549272][T26148] Call Trace: [ 1416.552589][T26148] [ 1416.555551][T26148] dump_stack_lvl+0x188/0x24e [ 1416.560280][T26148] ? show_regs_print_info+0x12/0x12 [ 1416.565539][T26148] ? load_image+0x410/0x410 [ 1416.570087][T26148] ? __lock_acquire+0x7bd0/0x7bd0 [ 1416.575168][T26148] should_fail_ex+0x390/0x4c0 [ 1416.579894][T26148] should_failslab+0x5/0x20 [ 1416.584452][T26148] slab_pre_alloc_hook+0x59/0x300 [ 1416.589584][T26148] ? free_vm_area+0x50/0x50 [ 1416.594144][T26148] ? bpf_prog_alloc_no_stats+0xae/0x3a0 [ 1416.599763][T26148] __kmem_cache_alloc_node+0x4f/0x270 [ 1416.605201][T26148] ? bpf_prog_alloc_no_stats+0xae/0x3a0 [ 1416.610817][T26148] kmalloc_trace+0x26/0xe0 [ 1416.615306][T26148] bpf_prog_alloc_no_stats+0xae/0x3a0 [ 1416.620757][T26148] bpf_prog_alloc+0x1c/0x1b0 [ 1416.625414][T26148] bpf_prog_load+0x7d4/0x1530 [ 1416.630165][T26148] ? map_freeze+0x390/0x390 [ 1416.634724][T26148] ? __might_fault+0xa6/0x120 [ 1416.639459][T26148] ? trace_call_bpf+0xbf/0x6b0 [ 1416.644282][T26148] ? __might_fault+0xa6/0x120 [ 1416.649018][T26148] ? __might_fault+0xc2/0x120 [ 1416.653763][T26148] ? __might_fault+0xa6/0x120 [ 1416.658486][T26148] ? bpf_lsm_bpf+0x5/0x10 [ 1416.662865][T26148] ? security_bpf+0x7a/0xa0 [ 1416.667417][T26148] __sys_bpf+0x5b8/0x780 [ 1416.671721][T26148] ? bpf_link_show_fdinfo+0x380/0x380 [ 1416.677170][T26148] ? lock_chain_count+0x20/0x20 [ 1416.682091][T26148] __x64_sys_bpf+0x78/0x90 [ 1416.686555][T26148] do_syscall_64+0x4c/0xa0 [ 1416.691022][T26148] ? clear_bhb_loop+0x60/0xb0 [ 1416.695768][T26148] ? clear_bhb_loop+0x60/0xb0 [ 1416.700509][T26148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1416.706461][T26148] RIP: 0033:0x7ff31359ce59 [ 1416.710920][T26148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.730675][T26148] RSP: 002b:00007ff3144c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1416.739153][T26148] RAX: ffffffffffffffda RBX: 00007ff313815fa0 RCX: 00007ff31359ce59 [ 1416.747180][T26148] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 1416.755209][T26148] RBP: 00007ff3144c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.763231][T26148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.771258][T26148] R13: 00007ff313816038 R14: 00007ff313815fa0 R15: 00007ffe53938a48 [ 1416.779296][T26148] [ 1418.566889][T26167] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1422.043596][T26177] validate_nla: 5 callbacks suppressed [ 1422.043621][T26177] netlink: 'syz.0.7016': attribute type 29 has an invalid length. [ 1422.110901][T26177] netlink: 'syz.0.7016': attribute type 29 has an invalid length. [ 1422.149390][T26183] netlink: 'syz.0.7016': attribute type 29 has an invalid length. [ 1422.298543][T26191] netlink: 'syz.0.7016': attribute type 29 has an invalid length. [ 1422.389398][T26191] netlink: 'syz.0.7016': attribute type 29 has an invalid length. [ 1422.526096][T26177] can: request_module (can-proto-0) failed. [ 1422.934285][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.940855][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.596234][T26208] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1428.859474][T26249] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1429.753940][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7038'. [ 1429.800769][T26257] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7038'. [ 1432.156165][T26264] netlink: 'syz.4.7040': attribute type 29 has an invalid length. [ 1432.246060][T26264] netlink: 'syz.4.7040': attribute type 29 has an invalid length. [ 1432.305149][T26269] netlink: 'syz.4.7040': attribute type 29 has an invalid length. [ 1432.780429][T26271] can: request_module (can-proto-0) failed. [ 1432.819615][T26269] netlink: 'syz.4.7040': attribute type 29 has an invalid length. [ 1432.939834][T26277] netlink: 'syz.4.7040': attribute type 29 has an invalid length. [ 1435.247062][T26296] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1437.777317][T26311] netlink: 'syz.1.7051': attribute type 21 has an invalid length. [ 1438.347802][T26326] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1438.467485][T26331] netlink: 'syz.0.7056': attribute type 3 has an invalid length. [ 1438.818448][T26331] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1438.995033][T26330] can: request_module (can-proto-0) failed. [ 1439.722435][T26348] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1441.075042][T26326] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1441.089437][T26325] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1441.217384][T26329] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1441.238571][T26339] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1441.719101][T26352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1441.750836][T26352] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1441.785788][T26354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7065'. [ 1445.632302][T26387] netlink: 'syz.2.7076': attribute type 29 has an invalid length. [ 1445.835886][T26387] netlink: 'syz.2.7076': attribute type 29 has an invalid length. [ 1445.902969][T26396] netlink: 'syz.2.7076': attribute type 29 has an invalid length. [ 1446.148602][T26396] netlink: 'syz.2.7076': attribute type 29 has an invalid length. [ 1446.191073][T26396] netlink: 'syz.2.7076': attribute type 29 has an invalid length. [ 1446.324633][T26398] can: request_module (can-proto-0) failed. [ 1446.670273][T26405] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1446.891970][T26411] netlink: 'syz.2.7081': attribute type 29 has an invalid length. [ 1446.926238][T26409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7080'. [ 1446.963160][T26409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7080'. [ 1447.011392][T26411] netlink: 'syz.2.7081': attribute type 29 has an invalid length. [ 1447.036378][T26413] netlink: 'syz.2.7081': attribute type 29 has an invalid length. [ 1447.113998][T26418] netlink: 'syz.4.7079': attribute type 3 has an invalid length. [ 1447.184208][T26414] can: request_module (can-proto-0) failed. [ 1447.216148][T26418] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1447.218833][T26413] netlink: 'syz.2.7081': attribute type 29 has an invalid length. [ 1447.235907][T26424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1447.587526][T26424] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1447.636757][T26418] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1448.651365][T26440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1449.383432][T26459] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1449.450980][T26451] can: request_module (can-proto-0) failed. [ 1449.911999][T26465] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7095'. [ 1450.396490][T26475] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7099'. [ 1451.930087][T26475] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7099'. [ 1452.261835][T26492] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1452.274692][T26490] validate_nla: 10 callbacks suppressed [ 1452.274714][T26490] netlink: 'syz.0.7104': attribute type 29 has an invalid length. [ 1452.389203][T26490] netlink: 'syz.0.7104': attribute type 29 has an invalid length. [ 1452.428722][T26494] netlink: 'syz.0.7104': attribute type 29 has an invalid length. [ 1452.680553][T26495] netlink: 'syz.0.7104': attribute type 29 has an invalid length. [ 1452.731696][T26495] netlink: 'syz.0.7104': attribute type 29 has an invalid length. [ 1452.776998][T26501] netlink: 'syz.1.7108': attribute type 3 has an invalid length. [ 1452.867448][T26501] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7108'. [ 1452.935635][T26490] can: request_module (can-proto-0) failed. [ 1455.625909][T26531] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1455.967918][T26539] netlink: 'syz.4.7122': attribute type 3 has an invalid length. [ 1455.998613][T26539] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7122'. [ 1458.266584][T26568] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1458.344064][T26572] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1459.839843][T26613] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1461.935165][T26640] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1465.399646][T26674] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1465.903823][T26691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1467.364692][T26708] netlink: 'syz.0.7192': attribute type 3 has an invalid length. [ 1467.378865][T26708] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7192'. [ 1467.552299][T26711] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7192'. [ 1468.466814][T26724] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1468.658112][T26730] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1470.304040][T26754] netlink: 'syz.3.7198': attribute type 3 has an invalid length. [ 1470.368945][T26754] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7198'. [ 1470.462473][T26757] netlink: 'syz.1.7200': attribute type 2 has an invalid length. [ 1470.482168][T26757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7200'. [ 1470.541521][T26761] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7198'. [ 1471.841779][T26765] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1474.525251][T26783] netlink: 'syz.4.7209': attribute type 29 has an invalid length. [ 1474.546492][T26783] netlink: 'syz.4.7209': attribute type 29 has an invalid length. [ 1474.587359][T26783] netlink: 'syz.4.7209': attribute type 29 has an invalid length. [ 1475.325614][T26802] netlink: 'syz.0.7215': attribute type 3 has an invalid length. [ 1475.389720][T26802] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1475.461660][T26807] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1475.637420][T26802] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1475.662277][T26811] netlink: 'syz.3.7219': attribute type 2 has an invalid length. [ 1475.692605][T26811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7219'. [ 1475.929252][T26822] netlink: 'syz.4.7223': attribute type 2 has an invalid length. [ 1475.966162][T26822] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1476.176097][T26824] netlink: 'syz.3.7224': attribute type 29 has an invalid length. [ 1476.215551][T26824] netlink: 'syz.3.7224': attribute type 29 has an invalid length. [ 1476.405362][T26826] netlink: 'syz.4.7226': attribute type 2 has an invalid length. [ 1476.454226][T26826] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7226'. [ 1476.531256][T26826] FAULT_INJECTION: forcing a failure. [ 1476.531256][T26826] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.611491][T26826] CPU: 1 PID: 26826 Comm: syz.4.7226 Not tainted syzkaller #0 [ 1476.619090][T26826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1476.629212][T26826] Call Trace: [ 1476.632543][T26826] [ 1476.635520][T26826] dump_stack_lvl+0x188/0x24e [ 1476.640255][T26826] ? show_regs_print_info+0x12/0x12 [ 1476.645594][T26826] ? load_image+0x410/0x410 [ 1476.650155][T26826] ? __might_sleep+0xd0/0xd0 [ 1476.654802][T26826] ? __lock_acquire+0x7bd0/0x7bd0 [ 1476.659883][T26826] should_fail_ex+0x390/0x4c0 [ 1476.664605][T26826] should_failslab+0x5/0x20 [ 1476.669146][T26826] slab_pre_alloc_hook+0x59/0x300 [ 1476.674223][T26826] kmem_cache_alloc_node+0x5a/0x310 [ 1476.679473][T26826] ? __alloc_skb+0xf9/0x7d0 [ 1476.684025][T26826] __alloc_skb+0xf9/0x7d0 [ 1476.688405][T26826] netlink_ack+0x373/0x1160 [ 1476.692962][T26826] ? ref_tracker_free+0x682/0x830 [ 1476.698044][T26826] ? refcount_inc+0x70/0x70 [ 1476.702602][T26826] ? netlink_dump+0xcd0/0xcd0 [ 1476.707330][T26826] ? __copy_skb_header+0x3ba/0x4f0 [ 1476.712499][T26826] ? __skb_clone+0x446/0x6c0 [ 1476.717140][T26826] netlink_rcv_skb+0x26d/0x440 [ 1476.721947][T26826] ? rtnetlink_bind+0x80/0x80 [ 1476.726667][T26826] ? netlink_ack+0x1160/0x1160 [ 1476.731517][T26826] ? netlink_deliver_tap+0x2e/0x1b0 [ 1476.736767][T26826] netlink_unicast+0x7ad/0x920 [ 1476.741596][T26826] netlink_sendmsg+0x8ad/0xbd0 [ 1476.746435][T26826] ? netlink_getsockopt+0x550/0x550 [ 1476.751685][T26826] ? aa_sock_msg_perm+0x94/0x150 [ 1476.756681][T26826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1476.762020][T26826] ? security_socket_sendmsg+0x7c/0xa0 [ 1476.767517][T26826] ? netlink_getsockopt+0x550/0x550 [ 1476.772851][T26826] ____sys_sendmsg+0x5ed/0x9a0 [ 1476.777673][T26826] ? __sys_sendmsg_sock+0x30/0x30 [ 1476.782764][T26826] ? __import_iovec+0x306/0x510 [ 1476.787693][T26826] ? import_iovec+0x6f/0xa0 [ 1476.792256][T26826] ___sys_sendmsg+0x2a2/0x360 [ 1476.797014][T26826] ? __sys_sendmsg+0x2a0/0x2a0 [ 1476.801838][T26826] ? trace_call_bpf+0xbf/0x6b0 [ 1476.806667][T26826] __se_sys_sendmsg+0x1c3/0x2b0 [ 1476.811554][T26826] ? perf_trace_preemptirq_template+0x268/0x320 [ 1476.817871][T26826] ? __x64_sys_sendmsg+0x80/0x80 [ 1476.822884][T26826] ? lockdep_hardirqs_on+0x94/0x140 [ 1476.828142][T26826] do_syscall_64+0x4c/0xa0 [ 1476.832598][T26826] ? clear_bhb_loop+0x60/0xb0 [ 1476.837315][T26826] ? clear_bhb_loop+0x60/0xb0 [ 1476.842038][T26826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1476.848006][T26826] RIP: 0033:0x7fc414d9ce59 [ 1476.852463][T26826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.872117][T26826] RSP: 002b:00007fc415d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.880586][T26826] RAX: ffffffffffffffda RBX: 00007fc415015fa0 RCX: 00007fc414d9ce59 [ 1476.888604][T26826] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1476.896616][T26826] RBP: 00007fc415d21090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.904623][T26826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.912640][T26826] R13: 00007fc415016038 R14: 00007fc415015fa0 R15: 00007fff2de84ce8 [ 1476.920675][T26826] [ 1478.140251][T26843] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1479.438594][T26870] netlink: 37323 bytes leftover after parsing attributes in process `syz.0.7242'. [ 1479.567689][T26873] netlink: 'syz.3.7243': attribute type 3 has an invalid length. [ 1479.640712][T26873] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7243'. [ 1479.831790][T26875] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7243'. [ 1482.230574][T26889] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1482.577291][T26892] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1482.612959][T26892] device hsr_slave_0 left promiscuous mode [ 1482.637346][T26892] device hsr_slave_1 left promiscuous mode [ 1482.913239][T26913] netlink: 'syz.1.7255': attribute type 3 has an invalid length. [ 1482.941062][T26913] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1483.175343][T26899] netlink: 'syz.2.7251': attribute type 2 has an invalid length. [ 1483.193861][T26899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7251'. [ 1483.229892][T26908] IPv6: Can't replace route, no match found [ 1483.241088][T26914] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1483.394321][T26921] netlink: 'syz.3.7256': attribute type 3 has an invalid length. [ 1483.410690][T26921] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7256'. [ 1483.579353][T26926] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7256'. [ 1484.363129][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.369541][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.193797][T26943] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1486.590538][T26952] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 1486.635414][T26952] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 1486.687434][T26956] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 1486.819323][T26961] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1486.932642][T26956] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 1486.974093][T26964] netlink: 'syz.3.7270': attribute type 29 has an invalid length. [ 1486.982777][T26956] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 1487.016870][T26957] can: request_module (can-proto-0) failed. [ 1487.049054][T26964] netlink: 'syz.3.7270': attribute type 29 has an invalid length. [ 1487.085768][T26966] netlink: 'syz.3.7270': attribute type 29 has an invalid length. [ 1487.320436][T26973] netlink: 'syz.3.7270': attribute type 29 has an invalid length. [ 1487.408883][T26964] can: request_module (can-proto-0) failed. [ 1487.523347][T26976] netlink: 'syz.3.7270': attribute type 29 has an invalid length. [ 1488.284878][T26983] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1488.689405][T26981] can: request_module (can-proto-0) failed. [ 1488.919253][T26996] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7276'. [ 1489.012311][T27000] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7276'. [ 1489.587816][T27012] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1491.746283][T27020] validate_nla: 6 callbacks suppressed [ 1491.746304][T27020] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 1491.899585][T27020] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 1491.947137][T27024] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 1492.267726][T27026] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 1492.412104][T27027] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 1492.585129][T27020] can: request_module (can-proto-0) failed. [ 1492.942916][T27035] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1493.152142][T27038] netlink: 'syz.0.7291': attribute type 29 has an invalid length. [ 1493.181681][T27038] netlink: 'syz.0.7291': attribute type 29 has an invalid length. [ 1493.219460][T27041] netlink: 'syz.0.7291': attribute type 29 has an invalid length. [ 1493.400634][T27044] netlink: 'syz.0.7291': attribute type 29 has an invalid length. [ 1493.510248][T27046] netlink: 'syz.0.7291': attribute type 29 has an invalid length. [ 1493.580355][T27048] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1493.627817][T27038] can: request_module (can-proto-0) failed. [ 1493.709953][T27050] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1495.455896][T27065] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1495.730668][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7301'. [ 1495.749283][T27070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7301'. [ 1497.148477][T27088] validate_nla: 4 callbacks suppressed [ 1497.148499][T27088] netlink: 'syz.1.7305': attribute type 29 has an invalid length. [ 1497.316009][T27090] can: request_module (can-proto-0) failed. [ 1497.348579][T27088] netlink: 'syz.1.7305': attribute type 29 has an invalid length. [ 1497.443989][T27103] netlink: 'syz.3.7310': attribute type 29 has an invalid length. [ 1497.487900][T27103] netlink: 'syz.3.7310': attribute type 29 has an invalid length. [ 1497.530724][T27105] netlink: 'syz.3.7310': attribute type 29 has an invalid length. [ 1497.752984][T27103] netlink: 'syz.3.7310': attribute type 29 has an invalid length. [ 1497.793944][T27103] netlink: 'syz.3.7310': attribute type 29 has an invalid length. [ 1498.061847][T27108] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1498.102924][T27100] can: request_module (can-proto-0) failed. [ 1498.460309][T27113] netlink: 'syz.0.7313': attribute type 3 has an invalid length. [ 1498.468133][T27113] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7313'. [ 1498.707876][T27115] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7313'. [ 1499.687600][T27134] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7322'. [ 1499.751722][T27134] device hsr_slave_0 left promiscuous mode [ 1499.918503][T27134] device hsr_slave_1 left promiscuous mode [ 1500.310895][T27148] netlink: 'syz.2.7325': attribute type 29 has an invalid length. [ 1500.554811][T27148] netlink: 'syz.2.7325': attribute type 29 has an invalid length. [ 1500.962353][T27156] can: request_module (can-proto-0) failed. [ 1501.630673][T27168] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1502.564484][T27189] device xfrm0 entered promiscuous mode [ 1502.612040][T27191] validate_nla: 3 callbacks suppressed [ 1502.612060][T27191] netlink: 'syz.2.7336': attribute type 3 has an invalid length. [ 1502.690868][T27191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7336'. [ 1502.994114][T27191] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7336'. [ 1504.152839][T27208] netlink: 'syz.4.7339': attribute type 29 has an invalid length. [ 1504.247768][T27208] netlink: 'syz.4.7339': attribute type 29 has an invalid length. [ 1504.340909][T27209] netlink: 'syz.4.7339': attribute type 29 has an invalid length. [ 1504.489646][T27214] netlink: 'syz.4.7339': attribute type 29 has an invalid length. [ 1504.572186][T27209] netlink: 'syz.4.7339': attribute type 29 has an invalid length. [ 1504.668399][T27210] can: request_module (can-proto-0) failed. [ 1505.250588][T27224] device syzkaller0 entered promiscuous mode [ 1506.006632][T27241] netlink: 'syz.1.7352': attribute type 3 has an invalid length. [ 1506.064969][T27241] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1506.435890][T27254] netlink: 'syz.0.7356': attribute type 29 has an invalid length. [ 1506.901895][T27258] can: request_module (can-proto-0) failed. [ 1510.620560][T27246] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1510.630087][T27254] netlink: 'syz.0.7356': attribute type 29 has an invalid length. [ 1510.876670][T27278] netlink: 'syz.1.7362': attribute type 1 has an invalid length. [ 1510.898318][T27278] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7362'. [ 1511.625498][T27302] netlink: 'syz.4.7372': attribute type 3 has an invalid length. [ 1511.687342][T27302] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7372'. [ 1511.761526][T27304] netlink: 'syz.2.7373': attribute type 29 has an invalid length. [ 1511.813872][T27304] netlink: 'syz.2.7373': attribute type 29 has an invalid length. [ 1511.870603][T27302] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7372'. [ 1511.940742][T27307] netlink: 'syz.2.7373': attribute type 29 has an invalid length. [ 1512.039442][T27313] tipc: Started in network mode [ 1512.044394][T27313] tipc: Node identity 9215a268, cluster identity 4711 [ 1512.128533][T27313] tipc: Node number set to 2450891368 [ 1512.184195][T27304] can: request_module (can-proto-0) failed. [ 1512.439636][T27309] netlink: 'syz.2.7373': attribute type 29 has an invalid length. [ 1512.459090][T27307] netlink: 'syz.2.7373': attribute type 29 has an invalid length. [ 1513.426075][T27339] netlink: 'syz.2.7385': attribute type 10 has an invalid length. [ 1513.444647][T27339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7385'. [ 1513.470645][T27339] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1513.495416][T27339] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.626963][T27339] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1514.115199][T27351] netlink: 'syz.4.7388': attribute type 29 has an invalid length. [ 1514.564552][T27355] can: request_module (can-proto-0) failed. [ 1514.836717][T27364] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1515.073897][T27367] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1517.170972][T27381] validate_nla: 6 callbacks suppressed [ 1517.170996][T27381] netlink: 'syz.1.7398': attribute type 10 has an invalid length. [ 1517.720399][T27381] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1518.423883][T27411] netlink: 'syz.2.7406': attribute type 29 has an invalid length. [ 1518.512152][T27411] netlink: 'syz.2.7406': attribute type 29 has an invalid length. [ 1518.580867][T27413] tipc: Started in network mode [ 1518.585819][T27413] tipc: Node identity 9215a268, cluster identity 4711 [ 1518.720580][T27413] tipc: Node number set to 2450891368 [ 1518.898493][T27417] can: request_module (can-proto-0) failed. [ 1518.903550][T27416] netlink: 'syz.2.7406': attribute type 29 has an invalid length. [ 1519.116753][T27421] netlink: 'syz.2.7406': attribute type 29 has an invalid length. [ 1519.240748][T27428] netlink: 'syz.2.7406': attribute type 29 has an invalid length. [ 1519.408512][T27427] netlink: 'syz.4.7411': attribute type 10 has an invalid length. [ 1519.625100][T27427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.748456][T27427] bond0: (slave team0): Enslaving as an active interface with an up link [ 1520.130387][T27436] netlink: 'syz.2.7415': attribute type 2 has an invalid length. [ 1520.292610][T27436] netlink: 'syz.2.7415': attribute type 10 has an invalid length. [ 1520.309682][T27439] netlink: 'syz.1.7414': attribute type 3 has an invalid length. [ 1520.381491][T27436] device dummy0 left promiscuous mode [ 1520.388520][T27439] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1520.618846][T27436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1520.696662][T27441] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1523.843191][T27463] netlink: 'syz.3.7425': attribute type 29 has an invalid length. [ 1523.892255][T27463] netlink: 'syz.3.7425': attribute type 29 has an invalid length. [ 1523.983685][T27468] netlink: 'syz.3.7425': attribute type 29 has an invalid length. [ 1524.179640][T27469] netlink: 'syz.3.7425': attribute type 29 has an invalid length. [ 1524.279149][T27479] netlink: 'syz.3.7425': attribute type 29 has an invalid length. [ 1524.419680][T27463] can: request_module (can-proto-0) failed. [ 1524.858272][T27489] netlink: 'syz.4.7432': attribute type 2 has an invalid length. [ 1524.969524][T27489] netlink: 'syz.4.7432': attribute type 10 has an invalid length. [ 1524.980171][T27491] netlink: 'syz.0.7433': attribute type 3 has an invalid length. [ 1524.987967][T27491] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1525.322900][T27489] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1525.424173][T27493] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1527.973813][T27524] netlink: 'syz.4.7446': attribute type 29 has an invalid length. [ 1528.008901][T27524] netlink: 'syz.4.7446': attribute type 29 has an invalid length. [ 1528.350628][T27524] can: request_module (can-proto-0) failed. [ 1528.645577][T27539] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7450'. [ 1528.787246][T27540] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7450'. [ 1530.617158][T27572] FAULT_INJECTION: forcing a failure. [ 1530.617158][T27572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1530.678431][T27572] CPU: 1 PID: 27572 Comm: syz.4.7463 Not tainted syzkaller #0 [ 1530.685976][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1530.696079][T27572] Call Trace: [ 1530.699402][T27572] [ 1530.702378][T27572] dump_stack_lvl+0x188/0x24e [ 1530.707114][T27572] ? show_regs_print_info+0x12/0x12 [ 1530.712363][T27572] ? load_image+0x410/0x410 [ 1530.716925][T27572] ? __lock_acquire+0x7bd0/0x7bd0 [ 1530.722021][T27572] should_fail_ex+0x390/0x4c0 [ 1530.726765][T27572] _copy_from_user+0x2c/0x170 [ 1530.731498][T27572] iovec_from_user+0x143/0x360 [ 1530.736330][T27572] __import_iovec+0x6c/0x510 [ 1530.740975][T27572] import_iovec+0x6f/0xa0 [ 1530.745355][T27572] ___sys_sendmsg+0x252/0x360 [ 1530.750091][T27572] ? __sys_sendmsg+0x2a0/0x2a0 [ 1530.754925][T27572] ? __lock_acquire+0x7bd0/0x7bd0 [ 1530.760032][T27572] __se_sys_sendmsg+0x1c3/0x2b0 [ 1530.764939][T27572] ? __x64_sys_sendmsg+0x80/0x80 [ 1530.769936][T27572] ? lockdep_hardirqs_on+0x94/0x140 [ 1530.775198][T27572] do_syscall_64+0x4c/0xa0 [ 1530.779662][T27572] ? clear_bhb_loop+0x60/0xb0 [ 1530.784388][T27572] ? clear_bhb_loop+0x60/0xb0 [ 1530.789116][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1530.795087][T27572] RIP: 0033:0x7fc414d9ce59 [ 1530.799549][T27572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.819201][T27572] RSP: 002b:00007fc415d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1530.827665][T27572] RAX: ffffffffffffffda RBX: 00007fc415015fa0 RCX: 00007fc414d9ce59 [ 1530.835680][T27572] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1530.843698][T27572] RBP: 00007fc415d21090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.851709][T27572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.859745][T27572] R13: 00007fc415016038 R14: 00007fc415015fa0 R15: 00007fff2de84ce8 [ 1530.867775][T27572] [ 1531.090486][T27577] validate_nla: 4 callbacks suppressed [ 1531.090505][T27577] netlink: 'syz.0.7464': attribute type 29 has an invalid length. [ 1531.134216][T27577] netlink: 'syz.0.7464': attribute type 29 has an invalid length. [ 1531.155803][T27582] netlink: 'syz.0.7464': attribute type 29 has an invalid length. [ 1531.173768][T27580] netlink: 'syz.2.7465': attribute type 3 has an invalid length. [ 1531.247460][T27584] netlink: 'syz.1.7467': attribute type 2 has an invalid length. [ 1531.260099][T27580] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7465'. [ 1531.395959][T27584] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7467'. [ 1531.469386][T27587] netlink: 'syz.0.7464': attribute type 29 has an invalid length. [ 1531.489715][T27580] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7465'. [ 1531.490494][T27577] can: request_module (can-proto-0) failed. [ 1531.546462][T27594] netlink: 'syz.0.7464': attribute type 29 has an invalid length. [ 1532.185805][T27596] netlink: 'syz.3.7470': attribute type 3 has an invalid length. [ 1532.253802][T27596] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7470'. [ 1532.793076][T27600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7470'. [ 1535.506274][T27644] netlink: 'syz.1.7485': attribute type 3 has an invalid length. [ 1535.578434][T27644] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1535.702322][T27647] netlink: 'syz.3.7486': attribute type 29 has an invalid length. [ 1535.749423][T27644] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1536.103645][T27647] can: request_module (can-proto-0) failed. [ 1536.943770][T27650] validate_nla: 1 callbacks suppressed [ 1536.943790][T27650] netlink: 'syz.3.7486': attribute type 29 has an invalid length. [ 1536.968604][T27660] netlink: 'syz.3.7486': attribute type 29 has an invalid length. [ 1536.977242][T27661] netlink: 'syz.3.7486': attribute type 29 has an invalid length. [ 1538.566042][T27702] netlink: 'syz.2.7503': attribute type 29 has an invalid length. [ 1538.623919][T27702] netlink: 'syz.2.7503': attribute type 29 has an invalid length. [ 1538.685176][T27703] netlink: 'syz.2.7503': attribute type 29 has an invalid length. [ 1538.886506][T27703] netlink: 'syz.2.7503': attribute type 29 has an invalid length. [ 1538.955831][T27705] can: request_module (can-proto-0) failed. [ 1539.051471][T27712] netlink: 'syz.2.7503': attribute type 29 has an invalid length. [ 1539.123901][T27713] netlink: 'syz.0.7505': attribute type 3 has an invalid length. [ 1539.206577][T27713] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1539.241319][T27711] netlink: 'syz.1.7504': attribute type 10 has an invalid length. [ 1540.619706][T27711] team0 (unregistering): Port device team_slave_0 removed [ 1540.706615][T27711] team0 (unregistering): Port device team_slave_1 removed [ 1540.783254][T27711] team0 (unregistering): Port device netdevsim0 removed [ 1540.977656][T27714] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1541.053798][T27733] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7511'. [ 1541.315712][T27733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.409231][T27733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.548893][T27733] bond0 (unregistering): (slave team0): Releasing backup interface [ 1541.860563][T27733] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1541.944830][T27733] bond0 (unregistering): Released all slaves [ 1542.162744][T27756] validate_nla: 1 callbacks suppressed [ 1542.162765][T27756] netlink: 'syz.3.7520': attribute type 29 has an invalid length. [ 1542.275785][T27761] can: request_module (can-proto-0) failed. [ 1542.324286][T27759] netlink: 'syz.3.7520': attribute type 29 has an invalid length. [ 1542.350021][T27765] netlink: 'syz.3.7520': attribute type 29 has an invalid length. [ 1542.425004][T27756] netlink: 'syz.3.7520': attribute type 29 has an invalid length. [ 1543.142279][T27783] netlink: 'syz.0.7525': attribute type 3 has an invalid length. [ 1543.261295][T27783] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1543.423935][T27785] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1544.232078][T27795] netlink: 'syz.3.7530': attribute type 13 has an invalid length. [ 1544.268542][T27795] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7530'. [ 1544.300142][T27795] erspan0: refused to change device tx_queue_len [ 1545.801839][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.808311][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.298174][T27812] netlink: 'syz.4.7536': attribute type 29 has an invalid length. [ 1546.320974][T27812] netlink: 'syz.4.7536': attribute type 29 has an invalid length. [ 1546.339451][T27812] netlink: 'syz.4.7536': attribute type 29 has an invalid length. [ 1546.509955][T27824] netlink: 'syz.4.7536': attribute type 29 has an invalid length. [ 1546.632268][T27812] can: request_module (can-proto-0) failed. [ 1547.047696][T27830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7541'. [ 1548.319372][T27830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.433553][T27830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.508779][T27830] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1548.631260][T27830] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1548.756706][T27830] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1548.805718][T27830] bond0 (unregistering): Released all slaves [ 1548.890863][T24304] tipc: Subscription rejected, illegal request [ 1549.339508][T27859] validate_nla: 1 callbacks suppressed [ 1549.339527][T27859] netlink: 'syz.0.7550': attribute type 3 has an invalid length. [ 1549.395888][T27864] netlink: 'syz.4.7552': attribute type 29 has an invalid length. [ 1549.431696][T27864] netlink: 'syz.4.7552': attribute type 29 has an invalid length. [ 1549.447514][T27859] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1549.468833][T27866] netlink: 'syz.4.7552': attribute type 29 has an invalid length. [ 1549.630560][T27869] netlink: 'syz.4.7552': attribute type 29 has an invalid length. [ 1549.756753][T27870] netlink: 'syz.4.7552': attribute type 29 has an invalid length. [ 1549.880662][T27859] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1549.918619][T27864] can: request_module (can-proto-0) failed. [ 1551.811702][T27890] FAULT_INJECTION: forcing a failure. [ 1551.811702][T27890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.845317][T27885] netlink: 'syz.2.7566': attribute type 29 has an invalid length. [ 1551.865183][T27890] CPU: 0 PID: 27890 Comm: syz.0.7559 Not tainted syzkaller #0 [ 1551.872748][T27890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1551.882860][T27890] Call Trace: [ 1551.886185][T27890] [ 1551.889176][T27890] dump_stack_lvl+0x188/0x24e [ 1551.893927][T27890] ? show_regs_print_info+0x12/0x12 [ 1551.899189][T27890] ? load_image+0x410/0x410 [ 1551.903785][T27890] ? __lock_acquire+0x7bd0/0x7bd0 [ 1551.908891][T27890] should_fail_ex+0x390/0x4c0 [ 1551.913652][T27890] _copy_from_user+0x2c/0x170 [ 1551.918494][T27890] __copy_msghdr+0x384/0x560 [ 1551.923163][T27890] ___sys_sendmsg+0x210/0x360 [ 1551.927931][T27890] ? __sys_sendmsg+0x2a0/0x2a0 [ 1551.932807][T27890] ? __lock_acquire+0x7bd0/0x7bd0 [ 1551.937955][T27890] __se_sys_sendmsg+0x1c3/0x2b0 [ 1551.942896][T27890] ? __x64_sys_sendmsg+0x80/0x80 [ 1551.947924][T27890] ? lockdep_hardirqs_on+0x94/0x140 [ 1551.953199][T27890] do_syscall_64+0x4c/0xa0 [ 1551.957661][T27890] ? clear_bhb_loop+0x60/0xb0 [ 1551.962379][T27890] ? clear_bhb_loop+0x60/0xb0 [ 1551.967093][T27890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1551.973041][T27890] RIP: 0033:0x7fc77b59ce59 [ 1551.977498][T27890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.997154][T27890] RSP: 002b:00007fc77c481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1552.005617][T27890] RAX: ffffffffffffffda RBX: 00007fc77b815fa0 RCX: 00007fc77b59ce59 [ 1552.013633][T27890] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1552.021655][T27890] RBP: 00007fc77c481090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.029667][T27890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.037774][T27890] R13: 00007fc77b816038 R14: 00007fc77b815fa0 R15: 00007ffe0390b038 [ 1552.045819][T27890] [ 1552.058990][T27885] netlink: 'syz.2.7566': attribute type 29 has an invalid length. [ 1552.242399][T27893] netlink: 'syz.2.7566': attribute type 29 has an invalid length. [ 1552.353721][T27899] can: request_module (can-proto-0) failed. [ 1552.381320][T27893] netlink: 'syz.2.7566': attribute type 29 has an invalid length. [ 1553.144968][T27919] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.7565'. [ 1553.454515][T27926] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7570'. [ 1553.594536][T27929] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7570'. [ 1555.654916][T27943] validate_nla: 3 callbacks suppressed [ 1555.654937][T27943] netlink: 'syz.1.7576': attribute type 29 has an invalid length. [ 1555.700744][T27943] netlink: 'syz.1.7576': attribute type 29 has an invalid length. [ 1555.719015][T27947] netlink: 'syz.1.7576': attribute type 29 has an invalid length. [ 1555.891266][T27955] netlink: 'syz.1.7576': attribute type 29 has an invalid length. [ 1556.053362][T27957] netlink: 'syz.1.7576': attribute type 29 has an invalid length. [ 1556.227396][T27943] can: request_module (can-proto-0) failed. [ 1557.105353][T27967] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1557.299726][T27973] FAULT_INJECTION: forcing a failure. [ 1557.299726][T27973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.333982][T27973] CPU: 1 PID: 27973 Comm: syz.4.7584 Not tainted syzkaller #0 [ 1557.341541][T27973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1557.351660][T27973] Call Trace: [ 1557.354996][T27973] [ 1557.357975][T27973] dump_stack_lvl+0x188/0x24e [ 1557.362727][T27973] ? show_regs_print_info+0x12/0x12 [ 1557.367989][T27973] ? load_image+0x410/0x410 [ 1557.372555][T27973] ? __lock_acquire+0x7bd0/0x7bd0 [ 1557.377628][T27973] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1557.383654][T27973] should_fail_ex+0x390/0x4c0 [ 1557.388373][T27973] _copy_from_user+0x2c/0x170 [ 1557.393112][T27973] iovec_from_user+0x143/0x360 [ 1557.397925][T27973] __import_iovec+0x6c/0x510 [ 1557.402573][T27973] import_iovec+0x6f/0xa0 [ 1557.406960][T27973] ___sys_sendmsg+0x252/0x360 [ 1557.411686][T27973] ? __sys_sendmsg+0x2a0/0x2a0 [ 1557.416510][T27973] ? lockdep_hardirqs_on+0x94/0x140 [ 1557.421771][T27973] __se_sys_sendmsg+0x1c3/0x2b0 [ 1557.426655][T27973] ? ct_nmi_exit+0x145/0x1c0 [ 1557.431288][T27973] ? __x64_sys_sendmsg+0x80/0x80 [ 1557.436276][T27973] ? lockdep_hardirqs_on+0x94/0x140 [ 1557.441522][T27973] do_syscall_64+0x4c/0xa0 [ 1557.445977][T27973] ? clear_bhb_loop+0x60/0xb0 [ 1557.450688][T27973] ? clear_bhb_loop+0x60/0xb0 [ 1557.455418][T27973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.461356][T27973] RIP: 0033:0x7fc414d9ce59 [ 1557.465803][T27973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.485444][T27973] RSP: 002b:00007fc415d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.493892][T27973] RAX: ffffffffffffffda RBX: 00007fc415015fa0 RCX: 00007fc414d9ce59 [ 1557.501909][T27973] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 1557.509920][T27973] RBP: 00007fc415d21090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.517922][T27973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.525931][T27973] R13: 00007fc415016038 R14: 00007fc415015fa0 R15: 00007fff2de84ce8 [ 1557.534042][T27973] [ 1558.655699][T27988] netlink: 'syz.3.7588': attribute type 3 has an invalid length. [ 1558.683560][T27988] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7588'. [ 1558.862925][T27995] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7588'. [ 1560.447004][T28026] netlink: 'syz.1.7599': attribute type 29 has an invalid length. [ 1560.556581][T28016] netlink: 'syz.3.7595': attribute type 10 has an invalid length. [ 1560.600126][T28016] device team0 left promiscuous mode [ 1560.608580][T28016] device team_slave_0 left promiscuous mode [ 1560.616930][T28016] device team_slave_1 left promiscuous mode [ 1560.677281][T28016] device netdevsim0 left promiscuous mode [ 1560.867148][T28016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.920754][T28016] bond0: (slave team0): Enslaving as an active interface with an up link [ 1560.953960][T28030] can: request_module (can-proto-0) failed. [ 1560.970863][T28026] netlink: 'syz.1.7599': attribute type 29 has an invalid length. [ 1561.052564][T28029] netlink: 'syz.1.7599': attribute type 29 has an invalid length. [ 1561.220495][T28036] netlink: 'syz.1.7599': attribute type 29 has an invalid length. [ 1561.294306][T28039] netlink: 'syz.4.7605': attribute type 3 has an invalid length. [ 1561.306614][T28026] netlink: 'syz.1.7599': attribute type 29 has an invalid length. [ 1561.357436][T28039] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7605'. [ 1561.477189][T28039] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7605'. [ 1562.982088][T28069] netlink: 'syz.2.7616': attribute type 10 has an invalid length. [ 1564.886336][T28084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7618'. [ 1565.065243][T28091] netlink: 'syz.3.7621': attribute type 3 has an invalid length. [ 1565.180223][T28091] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7621'. [ 1565.434320][T28091] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7621'. [ 1565.535318][T28101] netlink: 'syz.0.7624': attribute type 29 has an invalid length. [ 1565.646215][T28101] netlink: 'syz.0.7624': attribute type 29 has an invalid length. [ 1565.688955][T28103] netlink: 'syz.0.7624': attribute type 29 has an invalid length. [ 1566.148396][T28101] can: request_module (can-proto-0) failed. [ 1566.191177][T28102] validate_nla: 2 callbacks suppressed [ 1566.191198][T28102] netlink: 'syz.1.7623': attribute type 3 has an invalid length. [ 1566.308835][T28102] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7623'. [ 1569.577836][T28152] netlink: 'syz.4.7640': attribute type 29 has an invalid length. [ 1569.599000][T28152] netlink: 'syz.4.7640': attribute type 29 has an invalid length. [ 1569.658879][T28154] netlink: 'syz.4.7640': attribute type 29 has an invalid length. [ 1569.821135][T28160] netlink: 'syz.4.7640': attribute type 29 has an invalid length. [ 1569.991011][T28163] netlink: 'syz.4.7640': attribute type 29 has an invalid length. [ 1570.006322][T28161] netlink: 'syz.0.7642': attribute type 16 has an invalid length. [ 1570.070117][T28161] netlink: 'syz.0.7642': attribute type 3 has an invalid length. [ 1570.077951][T28161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7642'. [ 1570.120413][T28152] can: request_module (can-proto-0) failed. [ 1570.333270][T28168] netlink: 'syz.3.7643': attribute type 3 has an invalid length. [ 1570.504309][T28168] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1570.662281][T28170] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1573.103552][T28186] FAULT_INJECTION: forcing a failure. [ 1573.103552][T28186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.184914][T28186] CPU: 1 PID: 28186 Comm: syz.0.7648 Not tainted syzkaller #0 [ 1573.192495][T28186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1573.202613][T28186] Call Trace: [ 1573.205939][T28186] [ 1573.208920][T28186] dump_stack_lvl+0x188/0x24e [ 1573.213662][T28186] ? show_regs_print_info+0x12/0x12 [ 1573.218916][T28186] ? load_image+0x410/0x410 [ 1573.223341][T28192] device wg2 entered promiscuous mode [ 1573.228873][T28186] ? __lock_acquire+0x7bd0/0x7bd0 [ 1573.233975][T28186] should_fail_ex+0x390/0x4c0 [ 1573.238718][T28186] _copy_from_user+0x2c/0x170 [ 1573.243461][T28186] __copy_msghdr+0x384/0x560 [ 1573.248117][T28186] ___sys_sendmsg+0x210/0x360 [ 1573.252870][T28186] ? __sys_sendmsg+0x2a0/0x2a0 [ 1573.257711][T28186] ? __lock_acquire+0x7bd0/0x7bd0 [ 1573.262820][T28186] __se_sys_sendmsg+0x1c3/0x2b0 [ 1573.267728][T28186] ? __x64_sys_sendmsg+0x80/0x80 [ 1573.272734][T28186] ? lockdep_hardirqs_on+0x94/0x140 [ 1573.278018][T28186] do_syscall_64+0x4c/0xa0 [ 1573.282492][T28186] ? clear_bhb_loop+0x60/0xb0 [ 1573.287216][T28186] ? clear_bhb_loop+0x60/0xb0 [ 1573.291940][T28186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1573.297907][T28186] RIP: 0033:0x7fc77b59ce59 [ 1573.302368][T28186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.322032][T28186] RSP: 002b:00007fc77c481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.330506][T28186] RAX: ffffffffffffffda RBX: 00007fc77b815fa0 RCX: 00007fc77b59ce59 [ 1573.338542][T28186] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1573.346570][T28186] RBP: 00007fc77c481090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.354593][T28186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.362610][T28186] R13: 00007fc77b816038 R14: 00007fc77b815fa0 R15: 00007ffe0390b038 [ 1573.370658][T28186] [ 1574.450113][T28212] netlink: 'syz.1.7657': attribute type 29 has an invalid length. [ 1574.521737][T28212] netlink: 'syz.1.7657': attribute type 29 has an invalid length. [ 1574.584122][T28215] netlink: 'syz.1.7657': attribute type 29 has an invalid length. [ 1574.969071][T28223] netlink: 'syz.1.7657': attribute type 29 has an invalid length. [ 1575.041858][T28223] netlink: 'syz.1.7657': attribute type 29 has an invalid length. [ 1575.055208][T28212] can: request_module (can-proto-0) failed. [ 1575.501929][T28228] netlink: 'syz.2.7660': attribute type 3 has an invalid length. [ 1575.533584][T28228] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7660'. [ 1575.674142][T28232] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7660'. [ 1576.957874][T28271] netlink: 'syz.1.7676': attribute type 29 has an invalid length. [ 1576.971444][T28271] netlink: 'syz.1.7676': attribute type 29 has an invalid length. [ 1576.984000][T28271] netlink: 'syz.1.7676': attribute type 29 has an invalid length. [ 1577.240502][T28277] can: request_module (can-proto-0) failed. [ 1577.276326][T28277] netlink: 'syz.1.7676': attribute type 29 has an invalid length. [ 1577.652827][T28283] device .*! entered promiscuous mode [ 1577.788329][T28292] Ÿë: port 1(gretap0) entered blocking state [ 1577.801543][T28292] Ÿë: port 1(gretap0) entered disabled state [ 1577.822729][T28292] device gretap0 entered promiscuous mode [ 1578.263039][T28310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7690'. [ 1579.054390][T28326] can: request_module (can-proto-0) failed. [ 1579.855916][T28352] validate_nla: 9 callbacks suppressed [ 1579.855932][T28352] netlink: 'syz.1.7705': attribute type 21 has an invalid length. [ 1579.869593][T28352] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7705'. [ 1580.852368][T28360] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7708'. [ 1581.057911][T28365] netlink: 'syz.1.7713': attribute type 29 has an invalid length. [ 1581.789857][T28365] netlink: 'syz.1.7713': attribute type 29 has an invalid length. [ 1581.820002][T28375] can: request_module (can-proto-0) failed. [ 1581.826218][T28371] netlink: 'syz.1.7713': attribute type 29 has an invalid length. [ 1581.882391][T28380] netlink: 'syz.1.7713': attribute type 29 has an invalid length. [ 1581.924996][T28383] netlink: 'syz.1.7713': attribute type 29 has an invalid length. [ 1582.709014][T28394] netlink: 'syz.0.7717': attribute type 10 has an invalid length. [ 1582.875605][T28401] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1582.883480][T28401] #PF: supervisor instruction fetch in kernel mode [ 1582.890019][T28401] #PF: error_code(0x0010) - not-present page [ 1582.896062][T28401] PGD 675a9067 P4D 675a9067 PUD 0 [ 1582.901234][T28401] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1582.906476][T28401] CPU: 1 PID: 28401 Comm: syz.3.7719 Not tainted syzkaller #0 [ 1582.913971][T28401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1582.924063][T28401] RIP: 0010:0x0 [ 1582.927559][T28401] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1582.934940][T28401] RSP: 0018:ffffc900044a7498 EFLAGS: 00010246 [ 1582.941029][T28401] RAX: 1ffffffff162b417 RBX: 1ffff92000894ea4 RCX: 0000000000000001 [ 1582.949025][T28401] RDX: ffffc900044a7540 RSI: 0000000000000001 RDI: ffff88805787c000 [ 1582.957023][T28401] RBP: ffffc900044a75b0 R08: ffff88805787c03f R09: 1ffff1100af0f807 [ 1582.965033][T28401] R10: dffffc0000000000 R11: ffffed100af0f808 R12: ffffe8ffffd59878 [ 1582.973028][T28401] R13: ffffffff8b15a0b8 R14: 0000000000000000 R15: ffff88805787c000 [ 1582.981019][T28401] FS: 00007ff31449f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1582.989968][T28401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1582.996566][T28401] CR2: ffffffffffffffd6 CR3: 0000000027bec000 CR4: 00000000003506e0 [ 1583.004562][T28401] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1583.012548][T28401] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1583.020536][T28401] Call Trace: [ 1583.023833][T28401] [ 1583.026786][T28401] bond_xdp_xmit+0x31e/0x550 [ 1583.031506][T28401] ? bond_xdp_xmit+0x94/0x550 [ 1583.036219][T28401] ? bond_xdp+0x8c0/0x8c0 [ 1583.040590][T28401] bq_xmit_all+0xca9/0x1120 [ 1583.045130][T28401] ? verify_lock_unused+0x140/0x140 [ 1583.050374][T28401] ? zone_statistics+0x170/0x170 [ 1583.055349][T28401] ? __dev_flush+0x1b0/0x1b0 [ 1583.059966][T28401] ? __alloc_pages_bulk+0x491/0x910 [ 1583.065198][T28401] ? xdp_test_run_init_page+0x330/0x430 [ 1583.070773][T28401] ? memcpy+0x3c/0x60 [ 1583.074778][T28401] ? rcu_is_watching+0x11/0xa0 [ 1583.079570][T28401] ? bq_enqueue+0x2ef/0x3d0 [ 1583.084110][T28401] ? rcu_is_watching+0x11/0xa0 [ 1583.088905][T28401] ? trace_xdp_redirect+0xb3/0x2b0 [ 1583.094048][T28401] __dev_flush+0xbf/0x1b0 [ 1583.098416][T28401] xdp_do_flush+0xa/0x20 [ 1583.102687][T28401] bpf_test_run_xdp_live+0x1549/0x1a90 [ 1583.108178][T28401] ? 0xffffffffa0004440 [ 1583.112377][T28401] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 1583.117958][T28401] ? xdp_convert_md_to_buff+0x330/0x330 [ 1583.123578][T28401] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1583.129853][T28401] ? bpf_test_init+0x119/0x140 [ 1583.134634][T28401] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1583.140198][T28401] bpf_prog_test_run_xdp+0x757/0xf80 [ 1583.145510][T28401] ? __lock_acquire+0x7bd0/0x7bd0 [ 1583.150570][T28401] ? dev_put+0x80/0x80 [ 1583.154662][T28401] ? dev_put+0x80/0x80 [ 1583.158754][T28401] bpf_prog_test_run+0x31c/0x390 [ 1583.163719][T28401] __sys_bpf+0x62b/0x780 [ 1583.167983][T28401] ? bpf_link_show_fdinfo+0x380/0x380 [ 1583.173411][T28401] ? lock_chain_count+0x20/0x20 [ 1583.178287][T28401] __x64_sys_bpf+0x78/0x90 [ 1583.182747][T28401] do_syscall_64+0x4c/0xa0 [ 1583.187183][T28401] ? clear_bhb_loop+0x60/0xb0 [ 1583.191888][T28401] ? clear_bhb_loop+0x60/0xb0 [ 1583.196578][T28401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.202496][T28401] RIP: 0033:0x7ff31359ce59 [ 1583.206951][T28401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.226579][T28401] RSP: 002b:00007ff31449f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1583.235017][T28401] RAX: ffffffffffffffda RBX: 00007ff313816090 RCX: 00007ff31359ce59 [ 1583.243011][T28401] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1583.250995][T28401] RBP: 00007ff313632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1583.258986][T28401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.266977][T28401] R13: 00007ff313816128 R14: 00007ff313816090 R15: 00007ffe53938a48 [ 1583.274978][T28401] [ 1583.278052][T28401] Modules linked in: [ 1583.281989][T28401] CR2: 0000000000000000 [ 1583.286160][T28401] ---[ end trace 0000000000000000 ]--- [ 1583.291621][T28401] RIP: 0010:0x0 [ 1583.295096][T28401] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1583.302511][T28401] RSP: 0018:ffffc900044a7498 EFLAGS: 00010246 [ 1583.308683][T28401] RAX: 1ffffffff162b417 RBX: 1ffff92000894ea4 RCX: 0000000000000001 [ 1583.316690][T28401] RDX: ffffc900044a7540 RSI: 0000000000000001 RDI: ffff88805787c000 [ 1583.324718][T28401] RBP: ffffc900044a75b0 R08: ffff88805787c03f R09: 1ffff1100af0f807 [ 1583.332717][T28401] R10: dffffc0000000000 R11: ffffed100af0f808 R12: ffffe8ffffd59878 [ 1583.340729][T28401] R13: ffffffff8b15a0b8 R14: 0000000000000000 R15: ffff88805787c000 [ 1583.348728][T28401] FS: 00007ff31449f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1583.357681][T28401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1583.364286][T28401] CR2: ffffffffffffffd6 CR3: 0000000027bec000 CR4: 00000000003506e0 [ 1583.372278][T28401] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1583.380271][T28401] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1583.388264][T28401] Kernel panic - not syncing: Fatal exception in interrupt [ 1583.396044][T28401] Kernel Offset: disabled [ 1583.400380][T28401] Rebooting in 86400 seconds..