last executing test programs: 7.611358802s ago: executing program 4 (id=2451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) gettid() r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) recvmsg(r1, &(0x7f0000000500)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/38, 0x26}], 0x4, &(0x7f00000004c0)=""/27, 0x1b}, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206c", 0xb3}], 0x1}, 0x8045) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112f"], 0xee8a) 6.215204566s ago: executing program 2 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080180002d01010000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x1, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 5.779846027s ago: executing program 2 (id=2459): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x51, &(0x7f0000000880)=[{&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f00000015c0)=""/310, 0x136}, {&(0x7f0000002d80)=""/4162, 0x1042}, {&(0x7f0000000780)=""/112, 0x70}], 0x6}, 0x2000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x180000}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x101239, 0xc8, 0x6, 0x0, 0x0, 0x3, 0xffc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e488a86317ce81"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xe, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000008484000000070000007f00000000000000b8", @ANYBLOB="428417c12cc6b5298807181a90365916610235872e111bc7d7a9a04cba0151796efcf02e59a27a51373169712f1fe0a6a412ae5494bde37ce213824fbddeffe290e12695b250b4f91eab9a19797e955de35eaea4c2340a251791290acdbf747503fba8e744b2c666feafada7d5ff2c9ac715465d97c3fd399b97bd8174bcc3fafbc5e2e0934fc43cc21db4865fa7d7dfb7dd8a713be217ebbc281018522f0b40a6d91ffd1933160eb5b9ea3f37153cc5a6d0d7bccb81d0ebbdffdef2fef61f23ab09257a94b661c73a93c5458372ab600f8e63581f9d68b2006c35c4e3cea7ee579fd640c0fdcfde6f04728284716784b14c603e413eeb3fef", @ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="327c026991a4add2ebb4f7bd334ca24da16e0d325da8bc447c62843ae2ab516538c30f00009ac8ca936f3197c3642bd025d6ddcedfcb6db93af7e3852d2dde086727403e8250917aad52ad40e5fc3b29c709692ec42af9a7cb4b804f1b6c2eae4a1f40f09448c85b1624b84451dd6776aa98733726127fe4842622365c7a7736ccfdc8560d107fe7756ab738d263540f58a3eefa7d9aa9d2cc09c4c5151a9ea8d99e61d6a30ba93e9d7d4a308d3295eafa2661276f5deb1e004f841345632994ae4d7d7f67f544b22f045af6564b646cbc044c523f64549f965b1d9b"], 0xd0}, 0x480c4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.457221929s ago: executing program 4 (id=2460): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xd}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, 0xffffffffffffffff, &(0x7f0000000240)=""/120}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 2.909185398s ago: executing program 4 (id=2461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.889568428s ago: executing program 2 (id=2462): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open$cgroup(&(0x7f0000003140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.329253202s ago: executing program 2 (id=2467): close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061040000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB, @ANYBLOB="f2483d61089ae151d018", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142) bpf$PROG_LOAD(0x2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) 2.329001572s ago: executing program 0 (id=2468): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18, 0x3}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000002) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 2.240281215s ago: executing program 1 (id=2469): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000003df0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 2.187881976s ago: executing program 4 (id=2470): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x20}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0xaf, 0xe4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20113, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffe, 0xd}, 0x201, 0x6, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x70c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc783, 0x2}, 0x1000, 0x0, 0x0, 0x3, 0x201, 0x0, 0x5, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0xffff}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f00)='$&[*:[^\x00'}, 0x30) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002e00)=@bpf_tracing={0x1a, 0x9, &(0x7f0000002a80)=ANY=[@ANYBLOB="18000000010100000000000001000000186000000a000000000000000300008f94478500", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000002b00)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000002b40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002b80)={0x1, 0xb, 0x7ff, 0x73bfd23e}, 0x10, 0xeeeb, r7, 0xa, &(0x7f0000002bc0)=[r3], &(0x7f0000002d40)=[{0x0, 0x3, 0x7, 0x4}, {0x1, 0x4, 0x7, 0x4}, {0x2, 0x3, 0x5, 0xb}, {0x5, 0x4, 0x2, 0x4}, {0x5, 0x3, 0xc, 0x8}, {0x1, 0x4, 0xe, 0x6}, {0x4, 0x2, 0x0, 0x19674fca8e54520b}, {0x1, 0x3, 0x9, 0x3}, {0x4, 0x3, 0xe, 0x1}, {0x4, 0x3, 0x6, 0x4}], 0x10, 0x200}, 0x94) r9 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000005c0)=r9, 0x12) sendmsg$unix(r1, &(0x7f0000002f80)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000000500)="3c0cd7c66f346721ea702f2ce4818a4e089aa57387cd95a5338b162adf3ea2c7411c7e3d06685310c9d1636622f2002d66168be38777ea690bd32d954a0cbf291dc64b12f0e948aa87b65e832dbb0ba862e90b40b99779b6c69dba1d43c48b137b9118443990f01ef79fb479057fa45346a6b30fe50275ecc6cd01b9cc78e98a0b91d1cc0110cfcda9cf60db69ec3150d59d90f4350ad61bd488ed2fb8ead9ccc3c7734f393127c93d638fc0fca99224833ba0b3a6caff95181089d187cd93ffaa84bf2dd13ead33af8b08b8f35aaa0999df500edf2edfc3db76bdf31ea911d5478864e878", 0xe5}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="4713088d846fd93b4051d2d54cee65d6c7f9b2059ca2701b3ed7c24753e704c2a0dc6d567d4f97e023a5c69cd96548622887ff04d1311deb12388af9b9a450e04409ca1b59793ea914572a27dc00f6ccc476e03112890ddc343b4d6644ed29a17f754a4c93367260f694f84df8044ace77913b094faeef0d2ae76142d734b184d9545c8fd39205691e40dff64ea4215217c02f62f59cddb77929aeb1dbf0bceb0c7bc7fe75325d44d475b0fa524272134289a79ca01199b4a67ce0f838aa65d6f8a4c7d78b16ae091bf7e7456e099e581e5d05a6d598a47cef84010583d8a7a3a0aa48d61f08cd4fde7e8fd27f73996f9c46", 0xf2}, {&(0x7f0000002900)="39f8beb24ffb1292cb5dcda4c478c0386a7441c987b637af3c669aa7b0b8b80a9f1eb00225e7c16b1dde854bb64f7cd2ef52073a1b052d23c7ca0318d833dd1a5899bdc4ef7da3d7363e5d43", 0x4c}, {&(0x7f0000002980)="deee06123b9e5328e298b894170631a89a83b9b470966f1ff24f94e97cc83aa0f1aa296c153833f8c2790c1a599ad2de3c", 0x31}], 0x5, &(0x7f0000002ec0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='\x00\x00', @ANYRES32=r9, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8946, &(0x7f0000000080)) 2.138072577s ago: executing program 3 (id=2471): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair(0x22, 0xa, 0x22, &(0x7f00000006c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.096361618s ago: executing program 1 (id=2472): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000018000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.041544839s ago: executing program 2 (id=2473): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000}, 0x48) 2.03513076s ago: executing program 0 (id=2474): socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000700), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0xff, 0x3, 0x7fff, 0x800, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socketpair(0x1e, 0x800, 0x3, &(0x7f0000000b40)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x28) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0xfffffffd, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) (async) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x8, 0x15}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x119, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)}, 0x4000001) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000b80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000005d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x200}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400060404009b", 0x59}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 1.941152792s ago: executing program 3 (id=2475): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0xb0ff}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.917545422s ago: executing program 1 (id=2476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26, 0x70000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.819446635s ago: executing program 0 (id=2477): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x40440, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) recvmsg$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.5858976s ago: executing program 4 (id=2478): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x84e6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0xa}, 0x19183, 0x1, 0x5, 0x7, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 1.482987943s ago: executing program 1 (id=2479): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x40440, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 940.448256ms ago: executing program 3 (id=2480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 881.822948ms ago: executing program 2 (id=2481): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x51, &(0x7f0000000880)=[{&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f00000015c0)=""/310, 0x136}, {&(0x7f0000002d80)=""/4162, 0x1042}, {&(0x7f0000000780)=""/112, 0x70}], 0x6}, 0x2000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x180000}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x101239, 0xc8, 0x6, 0x0, 0x0, 0x3, 0xffc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e488a86317ce81"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xe, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000008484000000070000007f00000000000000b8", @ANYBLOB="428417c12cc6b5298807181a90365916610235872e111bc7d7a9a04cba0151796efcf02e59a27a51373169712f1fe0a6a412ae5494bde37ce213824fbddeffe290e12695b250b4f91eab9a19797e955de35eaea4c2340a251791290acdbf747503fba8e744b2c666feafada7d5ff2c9ac715465d97c3fd399b97bd8174bcc3fafbc5e2e0934fc43cc21db4865fa7d7dfb7dd8a713be217ebbc281018522f0b40a6d91ffd1933160eb5b9ea3f37153cc5a6d0d7bccb81d0ebbdffdef2fef61f23ab09257a94b661c73a93c5458372ab600f8e63581f9d68b2006c35c4e3cea7ee579fd640c0fdcfde6f04728284716784b14c603e413eeb3fef", @ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="327c026991a4add2ebb4f7bd334ca24da16e0d325da8bc447c62843ae2ab516538c30f00009ac8ca936f3197c3642bd025d6ddcedfcb6db93af7e3852d2dde086727403e8250917aad52ad40e5fc3b29c709692ec42af9a7cb4b804f1b6c2eae4a1f40f09448c85b1624b84451dd6776aa98733726127fe4842622365c7a7736ccfdc8560d107fe7756ab738d263540f58a3eefa7d9aa9d2cc09c4c5151a9ea8d99e61d6a30ba93e9d7d4a308d3295eafa2661276f5deb1e004f841345632994ae4d7d7f67f544b22f045af6564b646cbc044c523f64549f965b1d9b"], 0xd0}, 0x480c4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 848.312869ms ago: executing program 0 (id=2482): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c034002000000", 0x1c}], 0x1}, 0x0) 805.67905ms ago: executing program 4 (id=2483): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000000500000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 730.480901ms ago: executing program 1 (id=2484): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18, 0x3}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000002) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 693.638773ms ago: executing program 3 (id=2485): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x6}, 0x0, 0x5, 0x0, 0x8, 0x6547, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="620454ff5902000000a0002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 438.501639ms ago: executing program 3 (id=2486): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000780)=[{0x0}], 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4) socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851064000600000018300000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) 410.02397ms ago: executing program 1 (id=2487): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830e}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) (async) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10, 0x0}, 0xc000) (async) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000ff070000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @loopback, 0x2}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000540)="63545bb27a849fb211553bdb1c9f851c88d5249a461ade504b4b1f966f3d48ec21da104e234f6b71a83b3347bbfa90fec62f436f38d29c0c6bca8d57a6f1edee932262db85d7241f9a6839bad2ba417c2d1bfa3a872cb2e0f2edd77e3943c8a6a5f64438412da92d1ebf", 0x6a}, {&(0x7f0000000600)="93fea3082e9c5f4314b9c443684a1ec5b92a81a2f9fef8321ae7bbcf58872acdf93e9e7bab7b366d5892f0b6f6a392c3664c9c980b196f06bdf7943c9eb253267ab337bc563dd5bbdca8c37f250dd6174a757d28cfe9284a09c5c161c84a", 0x5e}, {0x0}, {&(0x7f0000000880)="69a90200cb8c337026eaccff6e59c42795227f9b39be5716090679e4fc507b4cf695abc01e2b73a29aed2813efb68291df5f268608d168f85586530ef5280440977913019d051628a1fd48f04cfc4dad8a7ec0cb838b78921af874dce0396e4fad5a2943df1e61a2190caa57d95d41deb72fd0fbe17d996d55a963fa10bce81906cd48557cb0cf523bc3e17807c93b2d", 0x90}, {&(0x7f0000000a00)="1395a182a412a1b95954b5c10a49a85a506eb10741920ac863f99a15be02333e7503be3b4fa8003542c2ab12ee27e6e74cfe015c21631b1cc58bfd7c", 0x3c}, {&(0x7f0000000a80)}], 0x6}, 0x80) (async) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x480, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) (async) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) 326.558182ms ago: executing program 0 (id=2488): socketpair(0x10, 0x2, 0x791e, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001d00)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000009c0)="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", 0x547}], 0x4, 0x0, 0x0, 0x8041}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x9, 0x80, 0xc, 0x99, 0x0, 0x4, 0xfc918, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x5}, 0x3005, 0x5, 0x5, 0x5, 0x0, 0x4, 0x187c, 0x0, 0x8001, 0x0, 0x5414}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x80ffff}, 0x80) 133.170846ms ago: executing program 0 (id=2489): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000e8ffffffffffffff00000000000047b13eea69c254f28c2363b03bb71009b9bc2f74cea253d0c0cf36490333991b1210e41e738dd5e4930771ad2250e78b2969406c7f7a435e17715821bada2c111de9033611905fa866eb495b8036454f6b53b36dd66a87791e5d8886213019a3d5819437191f50389b0b2d400a510c19c02f2ffaa19331ad84bf5b95aa0ebedff960ac85e10d0922dbf72c0a9f90d770a4ca3c4af4ca7b557949ddee643633002227d9880d70766cf299ed1774a03871dfe1bb7970e79dd3d0d74116850de610cd8a8d5058a384224a3967fa3adff85f2f553d3f0a803e07fb258da62bd0f1"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10003) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f00000000c0), 0xb9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="83000000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000816f98a8a3652b5118140000100001000000000000000000"], 0x50) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=2490): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000006030000000000000041000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0x4a, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext, 0x6280, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffeffffffd}, 0x0, 0xfffffdffffffffff, r3, 0x8) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x65, &(0x7f0000000000)=r6, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x20, &(0x7f00000009c0)={&(0x7f0000000880)=""/35, 0x23, 0x0, &(0x7f00000008c0)=""/201, 0xc9}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa3a200007"], 0xfdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000dab4228fee326b6678261b8107490f8461be3bd528f4ac2fdc55995ac26f5c48d4a2c4bfe2715810b8d99e4596b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): tes in process `syz.1.168'. [ 126.796487][ T4929] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 126.827482][ T4929] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.179'. [ 132.814118][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821100][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.886692][ T5062] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 135.153425][ T5062] team0: Port device wlan1 added [ 135.186076][ T5066] netlink: 'syz.4.223': attribute type 6 has an invalid length. [ 135.208850][ T5066] netlink: 164 bytes leftover after parsing attributes in process `syz.4.223'. [ 135.881174][ T5078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.225'. [ 136.111048][ T5083] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 139.206324][ T5100] netlink: 144 bytes leftover after parsing attributes in process `syz.0.233'. [ 139.955744][ T5113] netlink: 168 bytes leftover after parsing attributes in process `syz.2.238'. [ 140.696586][ T5131] netlink: 'syz.2.246': attribute type 7 has an invalid length. [ 142.451265][ T5162] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 142.491914][ T5162] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.256'. [ 142.630293][ T5162] : port 1(ip6gretap0) entered blocking state [ 142.636930][ T5162] : port 1(ip6gretap0) entered disabled state [ 142.650625][ T5162] device ip6gretap0 entered promiscuous mode [ 142.684507][ T5164] device ip6gretap0 left promiscuous mode [ 142.719885][ T5164] : port 1(ip6gretap0) entered disabled state [ 142.746970][ T5168] netlink: 'syz.3.259': attribute type 39 has an invalid length. [ 143.634080][ T5185] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.264'. [ 144.054366][ T5196] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 144.097581][ T5197] netlink: 'syz.2.270': attribute type 39 has an invalid length. [ 144.736427][ T5201] netlink: 60 bytes leftover after parsing attributes in process `syz.0.271'. [ 147.046221][ T5203] netlink: 148 bytes leftover after parsing attributes in process `syz.0.271'. [ 147.113118][ T5201] netlink: 60 bytes leftover after parsing attributes in process `syz.0.271'. [ 148.226480][ T5220] FAULT_INJECTION: forcing a failure. [ 148.226480][ T5220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.323738][ T5220] CPU: 0 PID: 5220 Comm: syz.2.277 Not tainted syzkaller #0 [ 148.331115][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.341309][ T5220] Call Trace: [ 148.344625][ T5220] [ 148.347768][ T5220] dump_stack_lvl+0x188/0x24e [ 148.352522][ T5220] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.358733][ T5220] ? show_regs_print_info+0x12/0x12 [ 148.363990][ T5220] ? load_image+0x410/0x410 [ 148.368593][ T5220] should_fail_ex+0x390/0x4c0 [ 148.373334][ T5220] _copy_from_user+0x2c/0x170 [ 148.378062][ T5220] __sys_bpf+0x2ea/0x780 [ 148.382366][ T5220] ? bpf_link_show_fdinfo+0x380/0x380 [ 148.387824][ T5220] ? __sys_bpf+0xd/0x780 [ 148.392133][ T5220] __x64_sys_bpf+0x78/0x90 [ 148.396646][ T5220] do_syscall_64+0x4c/0xa0 [ 148.401115][ T5220] ? clear_bhb_loop+0x60/0xb0 [ 148.405838][ T5220] ? clear_bhb_loop+0x60/0xb0 [ 148.410567][ T5220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.416510][ T5220] RIP: 0033:0x7f12d3b9de99 [ 148.420977][ T5220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.440626][ T5220] RSP: 002b:00007f12d4983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.449100][ T5220] RAX: ffffffffffffffda RBX: 00007f12d3e25fa0 RCX: 00007f12d3b9de99 [ 148.457125][ T5220] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 148.465173][ T5220] RBP: 00007f12d4983090 R08: 0000000000000000 R09: 0000000000000000 [ 148.473472][ T5220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.481490][ T5220] R13: 00007f12d3e26038 R14: 00007f12d3e25fa0 R15: 00007fff1118aeb8 [ 148.489532][ T5220] [ 149.373678][ T5235] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 149.648937][ T5237] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 149.720256][ T5237] team0: Device ipvlan1 failed to register rx_handler [ 150.905734][ T5256] syz.0.288 (5256) used greatest stack depth: 20752 bytes left [ 153.291577][ T5323] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 153.322146][ T5323] netlink: 55 bytes leftover after parsing attributes in process `syz.2.309'. [ 156.055569][ T5332] FAULT_INJECTION: forcing a failure. [ 156.055569][ T5332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.099248][ T5332] CPU: 1 PID: 5332 Comm: syz.2.312 Not tainted syzkaller #0 [ 156.106694][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.116817][ T5332] Call Trace: [ 156.120136][ T5332] [ 156.123097][ T5332] dump_stack_lvl+0x188/0x24e [ 156.127828][ T5332] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 156.134213][ T5332] ? show_regs_print_info+0x12/0x12 [ 156.139470][ T5332] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 156.145695][ T5332] ? dump_stack+0x5/0x12 [ 156.149994][ T5332] should_fail_ex+0x390/0x4c0 [ 156.154729][ T5332] _copy_from_user+0x2c/0x170 [ 156.159453][ T5332] __sys_bpf+0x2ea/0x780 [ 156.163758][ T5332] ? bpf_link_show_fdinfo+0x380/0x380 [ 156.169228][ T5332] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 156.175460][ T5332] __x64_sys_bpf+0x78/0x90 [ 156.179937][ T5332] do_syscall_64+0x4c/0xa0 [ 156.184430][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 156.189170][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 156.193885][ T5332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.199815][ T5332] RIP: 0033:0x7f12d3b9de99 [ 156.204277][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.223913][ T5332] RSP: 002b:00007f12d4983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.232356][ T5332] RAX: ffffffffffffffda RBX: 00007f12d3e25fa0 RCX: 00007f12d3b9de99 [ 156.240359][ T5332] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 156.248395][ T5332] RBP: 00007f12d4983090 R08: 0000000000000000 R09: 0000000000000000 [ 156.256399][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.264397][ T5332] R13: 00007f12d3e26038 R14: 00007f12d3e25fa0 R15: 00007fff1118aeb8 [ 156.272409][ T5332] [ 156.356433][ T5337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.313'. [ 156.612500][ T5340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.314'. [ 160.499226][ T5406] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.339'. [ 160.742956][ T5411] FAULT_INJECTION: forcing a failure. [ 160.742956][ T5411] name failslab, interval 1, probability 0, space 0, times 1 [ 160.800576][ T5411] CPU: 1 PID: 5411 Comm: syz.3.340 Not tainted syzkaller #0 [ 160.808049][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.818180][ T5411] Call Trace: [ 160.821503][ T5411] [ 160.824471][ T5411] dump_stack_lvl+0x188/0x24e [ 160.829293][ T5411] ? show_regs_print_info+0x12/0x12 [ 160.834715][ T5411] ? load_image+0x410/0x410 [ 160.839274][ T5411] ? __might_sleep+0xd0/0xd0 [ 160.843906][ T5411] ? __lock_acquire+0x7c40/0x7c40 [ 160.848983][ T5411] should_fail_ex+0x390/0x4c0 [ 160.853728][ T5411] should_failslab+0x5/0x20 [ 160.858286][ T5411] slab_pre_alloc_hook+0x59/0x300 [ 160.863381][ T5411] ? sk_prot_alloc+0xe7/0x210 [ 160.868123][ T5411] __kmem_cache_alloc_node+0x4f/0x270 [ 160.873569][ T5411] ? sk_prot_alloc+0xe7/0x210 [ 160.878315][ T5411] __kmalloc+0xa3/0x240 [ 160.882546][ T5411] sk_prot_alloc+0xe7/0x210 [ 160.887108][ T5411] ? sk_alloc+0x20/0x330 [ 160.891418][ T5411] sk_alloc+0x36/0x330 [ 160.895545][ T5411] ? bpf_ctx_init+0x154/0x190 [ 160.900290][ T5411] bpf_prog_test_run_skb+0x36d/0x18e0 [ 160.905770][ T5411] ? __fget_files+0x28/0x460 [ 160.910470][ T5411] ? __fget_files+0x3fc/0x460 [ 160.915221][ T5411] ? cpu_online+0xa0/0xa0 [ 160.919607][ T5411] bpf_prog_test_run+0x31c/0x390 [ 160.924618][ T5411] __sys_bpf+0x62b/0x780 [ 160.928929][ T5411] ? bpf_link_show_fdinfo+0x380/0x380 [ 160.934386][ T5411] ? lock_chain_count+0x20/0x20 [ 160.939316][ T5411] __x64_sys_bpf+0x78/0x90 [ 160.943809][ T5411] do_syscall_64+0x4c/0xa0 [ 160.948295][ T5411] ? clear_bhb_loop+0x60/0xb0 [ 160.953056][ T5411] ? clear_bhb_loop+0x60/0xb0 [ 160.957805][ T5411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.963764][ T5411] RIP: 0033:0x7f6d4399de99 [ 160.968233][ T5411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.987909][ T5411] RSP: 002b:00007f6d448d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.996398][ T5411] RAX: ffffffffffffffda RBX: 00007f6d43c25fa0 RCX: 00007f6d4399de99 [ 161.004450][ T5411] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 161.012490][ T5411] RBP: 00007f6d448d4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.020613][ T5411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.028642][ T5411] R13: 00007f6d43c26038 R14: 00007f6d43c25fa0 R15: 00007fffc262ce88 [ 161.036689][ T5411] [ 161.472068][ T5421] netlink: 'syz.1.343': attribute type 39 has an invalid length. [ 162.115753][ T5421] device hsr_slave_1 left promiscuous mode [ 163.527788][ T5458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.354'. [ 163.906445][ T5464] netlink: 125520 bytes leftover after parsing attributes in process `syz.3.359'. [ 164.086910][ T5471] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 164.636147][ T5480] FAULT_INJECTION: forcing a failure. [ 164.636147][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 164.668497][ T5480] CPU: 0 PID: 5480 Comm: syz.0.366 Not tainted syzkaller #0 [ 164.675912][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.686018][ T5480] Call Trace: [ 164.689339][ T5480] [ 164.692313][ T5480] dump_stack_lvl+0x188/0x24e [ 164.697046][ T5480] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.703266][ T5480] ? show_regs_print_info+0x12/0x12 [ 164.708527][ T5480] ? load_image+0x410/0x410 [ 164.713094][ T5480] ? should_fail_ex+0x315/0x4c0 [ 164.717998][ T5480] should_fail_ex+0x390/0x4c0 [ 164.722733][ T5480] should_failslab+0x5/0x20 [ 164.727273][ T5480] slab_pre_alloc_hook+0x59/0x300 [ 164.732346][ T5480] ? page_pool_create+0x6d/0x5c0 [ 164.737326][ T5480] __kmem_cache_alloc_node+0x4f/0x270 [ 164.742743][ T5480] ? page_pool_create+0x6d/0x5c0 [ 164.747723][ T5480] kmalloc_node_trace+0x22/0xe0 [ 164.752716][ T5480] page_pool_create+0x6d/0x5c0 [ 164.757563][ T5480] bpf_test_run_xdp_live+0x220/0x1a90 [ 164.763006][ T5480] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 164.768972][ T5480] ? xdp_convert_md_to_buff+0x330/0x330 [ 164.774618][ T5480] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 164.780921][ T5480] ? xdp_convert_md_to_buff+0x5b/0x330 [ 164.786430][ T5480] bpf_prog_test_run_xdp+0x757/0xf80 [ 164.791766][ T5480] ? __lock_acquire+0x7c40/0x7c40 [ 164.796857][ T5480] ? dev_put+0x80/0x80 [ 164.800986][ T5480] ? dev_put+0x80/0x80 [ 164.805108][ T5480] bpf_prog_test_run+0x31c/0x390 [ 164.810121][ T5480] __sys_bpf+0x62b/0x780 [ 164.814425][ T5480] ? bpf_link_show_fdinfo+0x380/0x380 [ 164.819870][ T5480] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.826141][ T5480] __x64_sys_bpf+0x78/0x90 [ 164.830879][ T5480] do_syscall_64+0x4c/0xa0 [ 164.835363][ T5480] ? clear_bhb_loop+0x60/0xb0 [ 164.840103][ T5480] ? clear_bhb_loop+0x60/0xb0 [ 164.844857][ T5480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.850803][ T5480] RIP: 0033:0x7fb40eb9de99 [ 164.855292][ T5480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.875222][ T5480] RSP: 002b:00007fb40fa22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.883704][ T5480] RAX: ffffffffffffffda RBX: 00007fb40ee25fa0 RCX: 00007fb40eb9de99 [ 164.891738][ T5480] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 164.899767][ T5480] RBP: 00007fb40fa22090 R08: 0000000000000000 R09: 0000000000000000 [ 164.907796][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.915818][ T5480] R13: 00007fb40ee26038 R14: 00007fb40ee25fa0 R15: 00007ffd2930f0f8 [ 164.923899][ T5480] [ 165.353073][ T5490] netlink: 'syz.1.369': attribute type 21 has an invalid length. [ 165.412139][ T5493] netlink: 979 bytes leftover after parsing attributes in process `syz.0.371'. [ 167.230108][ T5521] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 167.660898][ T5521] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 167.816876][ T5521] syz.4.381 (5521) used greatest stack depth: 20688 bytes left [ 168.042315][ T5538] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 168.053230][ T5538] netlink: 55 bytes leftover after parsing attributes in process `syz.3.388'. [ 170.889171][ T5535] netlink: 144 bytes leftover after parsing attributes in process `syz.4.387'. [ 170.979427][ T5554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.392'. [ 172.146299][ T5566] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 172.174853][ T5566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.399'. [ 172.205983][ T5566] device team0 entered promiscuous mode [ 172.215617][ T5566] device team_slave_0 entered promiscuous mode [ 172.225021][ T5566] device team_slave_1 entered promiscuous mode [ 172.253743][ T5566] device wlan1 entered promiscuous mode [ 172.266469][ T5566] bridge0: port 3(team0) entered blocking state [ 172.325910][ T5566] bridge0: port 3(team0) entered disabled state [ 172.354774][ T5566] bridge0: port 3(team0) entered blocking state [ 172.361746][ T5566] bridge0: port 3(team0) entered forwarding state [ 172.414076][ T5572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.401'. [ 172.806354][ T5580] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.328768][ T5587] netlink: 'syz.3.406': attribute type 39 has an invalid length. [ 173.414773][ T5593] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.408'. [ 173.627166][ T5594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.409'. [ 173.854452][ T5602] netlink: 188 bytes leftover after parsing attributes in process `syz.0.412'. [ 174.214422][ T5607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.413'. [ 174.336723][ T5610] netlink: 'syz.3.414': attribute type 10 has an invalid length. [ 174.383304][ T5610] team0: Device ipvlan1 failed to register rx_handler [ 175.739950][ T5643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.426'. [ 177.070384][ T5669] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 177.415860][ T5675] FAULT_INJECTION: forcing a failure. [ 177.415860][ T5675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.463967][ T5675] CPU: 1 PID: 5675 Comm: syz.3.436 Not tainted syzkaller #0 [ 177.471349][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 177.481471][ T5675] Call Trace: [ 177.484798][ T5675] [ 177.487764][ T5675] dump_stack_lvl+0x188/0x24e [ 177.492510][ T5675] ? show_regs_print_info+0x12/0x12 [ 177.497769][ T5675] ? load_image+0x410/0x410 [ 177.502348][ T5675] ? __lock_acquire+0x7c40/0x7c40 [ 177.507428][ T5675] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 177.513648][ T5675] should_fail_ex+0x390/0x4c0 [ 177.518372][ T5675] strncpy_from_user+0x32/0x340 [ 177.523260][ T5675] bpf_prog_load+0x200/0x1530 [ 177.527991][ T5675] ? map_freeze+0x390/0x390 [ 177.532528][ T5675] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 177.538722][ T5675] ? lockdep_hardirqs_on+0x94/0x140 [ 177.543957][ T5675] ? copy_user_enhanced_fast_string+0xc/0x40 [ 177.549966][ T5675] ? bpf_lsm_bpf+0x5/0x10 [ 177.554325][ T5675] ? security_bpf+0x7a/0xa0 [ 177.558864][ T5675] __sys_bpf+0x5b8/0x780 [ 177.563139][ T5675] ? bpf_link_show_fdinfo+0x380/0x380 [ 177.568555][ T5675] ? lock_chain_count+0x20/0x20 [ 177.573438][ T5675] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.579542][ T5675] __x64_sys_bpf+0x78/0x90 [ 177.584009][ T5675] do_syscall_64+0x4c/0xa0 [ 177.588458][ T5675] ? clear_bhb_loop+0x60/0xb0 [ 177.593163][ T5675] ? clear_bhb_loop+0x60/0xb0 [ 177.597875][ T5675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.603794][ T5675] RIP: 0033:0x7f6d4399de99 [ 177.608235][ T5675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.627953][ T5675] RSP: 002b:00007f6d448d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.636393][ T5675] RAX: ffffffffffffffda RBX: 00007f6d43c25fa0 RCX: 00007f6d4399de99 [ 177.644386][ T5675] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 177.652378][ T5675] RBP: 00007f6d448d4090 R08: 0000000000000000 R09: 0000000000000000 [ 177.660369][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.668386][ T5675] R13: 00007f6d43c26038 R14: 00007f6d43c25fa0 R15: 00007fffc262ce88 [ 177.676415][ T5675] [ 177.702102][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.796334][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.858529][ T5669] bond0 (unregistering): Released all slaves [ 177.973680][ T5680] netlink: 'syz.0.438': attribute type 21 has an invalid length. [ 178.659350][ T5695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.440'. [ 179.906632][ T5713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.447'. [ 181.366940][ T5747] netlink: 'syz.3.455': attribute type 21 has an invalid length. [ 181.679512][ T5754] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.457'. [ 182.342335][ T5773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.459'. [ 182.913328][ T5775] : port 1(ip6gretap0) entered blocking state [ 182.973237][ T5775] : port 1(ip6gretap0) entered disabled state [ 183.099465][ T5775] device ip6gretap0 entered promiscuous mode [ 183.249251][ T5811] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.467'. [ 183.296215][ T5786] device ip6gretap0 left promiscuous mode [ 183.316109][ T5786] : port 1(ip6gretap0) entered disabled state [ 183.461946][ T5818] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 184.613293][ T5846] tap0: tun_chr_ioctl cmd 1074025675 [ 184.665209][ T5846] tap0: persist enabled [ 184.675150][ T5847] tap0: tun_chr_ioctl cmd 1074025675 [ 184.685467][ T5847] tap0: persist disabled [ 185.841307][ T5861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.480'. [ 189.560258][ T5916] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 189.639542][ T5920] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 189.676242][ T5914] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.495'. [ 189.765707][ T5921] netlink: 14 bytes leftover after parsing attributes in process `syz.0.497'. [ 190.058033][ T5921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.391405][ T5921] bond0 (unregistering): Released all slaves [ 190.676379][ T5914] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 190.801468][ T5940] netlink: 'syz.2.505': attribute type 7 has an invalid length. [ 190.828187][ T5940] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.505'. [ 193.075395][ T5984] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.517'. [ 193.163970][ T5985] netlink: 'syz.0.519': attribute type 13 has an invalid length. [ 193.205616][ T5985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.519'. [ 193.460622][ T5985] erspan0: refused to change device tx_queue_len [ 193.494203][ T5985] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 193.584579][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.520'. [ 194.274003][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281328][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.718179][ T6033] netlink: 'syz.0.534': attribute type 3 has an invalid length. [ 195.898700][ T6033] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.534'. [ 197.500589][ T6051] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.589658][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.540'. [ 198.066253][ T6063] FAULT_INJECTION: forcing a failure. [ 198.066253][ T6063] name failslab, interval 1, probability 0, space 0, times 0 [ 198.116776][ T6063] CPU: 0 PID: 6063 Comm: syz.4.545 Not tainted syzkaller #0 [ 198.124154][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.134259][ T6063] Call Trace: [ 198.137582][ T6063] [ 198.140548][ T6063] dump_stack_lvl+0x188/0x24e [ 198.145376][ T6063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 198.151593][ T6063] ? show_regs_print_info+0x12/0x12 [ 198.156854][ T6063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 198.163068][ T6063] ? dump_stack+0x5/0x12 [ 198.167369][ T6063] should_fail_ex+0x390/0x4c0 [ 198.172098][ T6063] should_failslab+0x5/0x20 [ 198.176629][ T6063] slab_pre_alloc_hook+0x59/0x300 [ 198.181682][ T6063] ? __get_vm_area_node+0x122/0x330 [ 198.186910][ T6063] __kmem_cache_alloc_node+0x4f/0x270 [ 198.192304][ T6063] ? mark_lock+0x94/0x320 [ 198.196718][ T6063] ? __get_vm_area_node+0x122/0x330 [ 198.201966][ T6063] kmalloc_node_trace+0x22/0xe0 [ 198.206869][ T6063] __get_vm_area_node+0x122/0x330 [ 198.211944][ T6063] __vmalloc_node_range+0x357/0x1380 [ 198.217298][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 198.222915][ T6063] ? lock_chain_count+0x20/0x20 [ 198.227822][ T6063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 198.234111][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 198.239709][ T6063] ? free_vm_area+0x50/0x50 [ 198.244273][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 198.249862][ T6063] __vmalloc+0x76/0x80 [ 198.253970][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 198.259557][ T6063] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 198.264963][ T6063] ? bpf_prog_alloc+0x13/0x1b0 [ 198.269768][ T6063] bpf_prog_alloc+0x1c/0x1b0 [ 198.274509][ T6063] bpf_prog_load+0x7d4/0x1530 [ 198.279260][ T6063] ? map_freeze+0x390/0x390 [ 198.283804][ T6063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 198.289998][ T6063] ? lockdep_hardirqs_on+0x94/0x140 [ 198.295237][ T6063] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 198.300737][ T6063] ? bpf_lsm_bpf+0x5/0x10 [ 198.305101][ T6063] ? security_bpf+0x7a/0xa0 [ 198.309645][ T6063] __sys_bpf+0x5b8/0x780 [ 198.314053][ T6063] ? bpf_link_show_fdinfo+0x380/0x380 [ 198.319490][ T6063] ? lock_chain_count+0x20/0x20 [ 198.324408][ T6063] __x64_sys_bpf+0x78/0x90 [ 198.329403][ T6063] do_syscall_64+0x4c/0xa0 [ 198.333863][ T6063] ? clear_bhb_loop+0x60/0xb0 [ 198.338586][ T6063] ? clear_bhb_loop+0x60/0xb0 [ 198.343325][ T6063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.349265][ T6063] RIP: 0033:0x7f8d8f79de99 [ 198.353716][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.373361][ T6063] RSP: 002b:00007f8d8d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.381899][ T6063] RAX: ffffffffffffffda RBX: 00007f8d8fa25fa0 RCX: 00007f8d8f79de99 [ 198.389904][ T6063] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 198.397991][ T6063] RBP: 00007f8d8d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.406002][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.414017][ T6063] R13: 00007f8d8fa26038 R14: 00007f8d8fa25fa0 R15: 00007ffc87034168 [ 198.422041][ T6063] [ 198.483181][ T6063] syz.4.545: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 198.957077][ T6063] CPU: 1 PID: 6063 Comm: syz.4.545 Not tainted syzkaller #0 [ 198.964459][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.974581][ T6063] Call Trace: [ 198.977902][ T6063] [ 198.980895][ T6063] dump_stack_lvl+0x188/0x24e [ 198.985642][ T6063] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 198.992106][ T6063] ? show_regs_print_info+0x12/0x12 [ 198.997353][ T6063] ? load_image+0x410/0x410 [ 199.001912][ T6063] ? __rcu_read_unlock+0x78/0xd0 [ 199.006897][ T6063] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 199.013360][ T6063] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 199.019917][ T6063] warn_alloc+0x242/0x330 [ 199.024305][ T6063] ? __get_vm_area_node+0x122/0x330 [ 199.029556][ T6063] ? zone_watermark_ok_safe+0x270/0x270 [ 199.035178][ T6063] ? rcu_is_watching+0x11/0xa0 [ 199.040000][ T6063] ? __get_vm_area_node+0x318/0x330 [ 199.045263][ T6063] __vmalloc_node_range+0x37c/0x1380 [ 199.050606][ T6063] ? lock_chain_count+0x20/0x20 [ 199.055535][ T6063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 199.061754][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 199.067353][ T6063] ? free_vm_area+0x50/0x50 [ 199.071918][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 199.077523][ T6063] __vmalloc+0x76/0x80 [ 199.081648][ T6063] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 199.087264][ T6063] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 199.092694][ T6063] ? bpf_prog_alloc+0x13/0x1b0 [ 199.097519][ T6063] bpf_prog_alloc+0x1c/0x1b0 [ 199.102174][ T6063] bpf_prog_load+0x7d4/0x1530 [ 199.106915][ T6063] ? map_freeze+0x390/0x390 [ 199.111471][ T6063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 199.117854][ T6063] ? lockdep_hardirqs_on+0x94/0x140 [ 199.123116][ T6063] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 199.128636][ T6063] ? bpf_lsm_bpf+0x5/0x10 [ 199.133014][ T6063] ? security_bpf+0x7a/0xa0 [ 199.137574][ T6063] __sys_bpf+0x5b8/0x780 [ 199.141881][ T6063] ? bpf_link_show_fdinfo+0x380/0x380 [ 199.147315][ T6063] ? lock_chain_count+0x20/0x20 [ 199.152229][ T6063] __x64_sys_bpf+0x78/0x90 [ 199.156696][ T6063] do_syscall_64+0x4c/0xa0 [ 199.161167][ T6063] ? clear_bhb_loop+0x60/0xb0 [ 199.165894][ T6063] ? clear_bhb_loop+0x60/0xb0 [ 199.170624][ T6063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.176565][ T6063] RIP: 0033:0x7f8d8f79de99 [ 199.181027][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.200680][ T6063] RSP: 002b:00007f8d8d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.209141][ T6063] RAX: ffffffffffffffda RBX: 00007f8d8fa25fa0 RCX: 00007f8d8f79de99 [ 199.217159][ T6063] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 199.225174][ T6063] RBP: 00007f8d8d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.233183][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.241196][ T6063] R13: 00007f8d8fa26038 R14: 00007f8d8fa25fa0 R15: 00007ffc87034168 [ 199.249314][ T6063] [ 199.265001][ T6072] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 199.779630][ T6063] Mem-Info: [ 199.782975][ T6063] active_anon:46960 inactive_anon:0 isolated_anon:0 [ 199.782975][ T6063] active_file:20373 inactive_file:39996 isolated_file:0 [ 199.782975][ T6063] unevictable:768 dirty:180 writeback:0 [ 199.782975][ T6063] slab_reclaimable:21156 slab_unreclaimable:97299 [ 199.782975][ T6063] mapped:45893 shmem:40925 pagetables:721 [ 199.782975][ T6063] sec_pagetables:0 bounce:0 [ 199.782975][ T6063] kernel_misc_reclaimable:0 [ 199.782975][ T6063] free:1273797 free_pcp:14535 free_cma:0 [ 199.958767][ T6073] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 199.977349][ T6073] netlink: 55 bytes leftover after parsing attributes in process `syz.3.548'. [ 200.089361][ T6063] Node 0 active_anon:181968kB inactive_anon:0kB active_file:82492kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:184604kB dirty:716kB writeback:0kB shmem:155844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11032kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no [ 200.269359][ T6063] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 200.477585][ T6063] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.641835][ T6063] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 200.671923][ T6063] Node 0 DMA32 free:1228752kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:171668kB inactive_anon:0kB active_file:83192kB inactive_file:159784kB unevictable:1536kB writepending:716kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:7120kB local_pcp:3788kB free_cma:0kB [ 200.901179][ T6063] lowmem_reserve[]: 0 0 1 1 1 [ 200.968441][ T6063] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.059717][ T6063] lowmem_reserve[]: 0 0 0 0 0 [ 201.064551][ T6063] Node 1 Normal free:3900736kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18080kB local_pcp:10432kB free_cma:0kB [ 201.131079][ T6080] netlink: 'syz.0.550': attribute type 21 has an invalid length. [ 201.153383][ T6080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.550'. [ 201.180933][ T6080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.550'. [ 201.211058][ T6084] netlink: 'syz.2.551': attribute type 10 has an invalid length. [ 201.238515][ T6063] lowmem_reserve[]: 0 0 0 0 0 [ 201.246462][ T6084] team0: Device ipvlan1 failed to register rx_handler [ 201.263681][ T6063] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.327039][ T6063] Node 0 DMA32: 1336*4kB (UM) 2373*8kB (UME) 1781*16kB (UME) 974*32kB (UME) 410*64kB (UME) 189*128kB (UME) 75*256kB (UM) 31*512kB (UM) 6*1024kB (UME) 2*2048kB (U) 255*4096kB (UM) = 1224216kB [ 201.428540][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 201.503836][ T6063] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.514291][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 201.521833][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 201.527895][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 201.528709][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 201.548382][ T6063] Node 1 Normal: 226*4kB (UME) 47*8kB (UE) 44*16kB (UME) 36*32kB (UME) 28*64kB (UME) 12*128kB (UME) 6*256kB (UME) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 949*4096kB (M) = 3900736kB [ 201.566632][ T6063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.962418][ T6063] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.028459][ T6063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.048460][ T6063] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.057836][ T6063] 96019 total pagecache pages [ 202.081229][ T6063] 0 pages in swap cache [ 202.085480][ T6063] Free swap = 124996kB [ 202.158896][ T6063] Total swap = 124996kB [ 202.163232][ T6063] 2097051 pages RAM [ 202.167079][ T6063] 0 pages HighMem/MovableOnly [ 202.254269][ T6063] 415222 pages reserved [ 202.281553][ T6063] 0 pages cma reserved [ 203.049014][ T6126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'. [ 204.750920][ T6149] FAULT_INJECTION: forcing a failure. [ 204.750920][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 204.878641][ T6149] CPU: 1 PID: 6149 Comm: syz.4.569 Not tainted syzkaller #0 [ 204.886025][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.896121][ T6149] Call Trace: [ 204.899448][ T6149] [ 204.902444][ T6149] dump_stack_lvl+0x188/0x24e [ 204.907194][ T6149] ? show_regs_print_info+0x12/0x12 [ 204.912446][ T6149] ? lockdep_hardirqs_on+0x94/0x140 [ 204.917693][ T6149] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 204.923935][ T6149] should_fail_ex+0x390/0x4c0 [ 204.928678][ T6149] should_failslab+0x5/0x20 [ 204.933234][ T6149] slab_pre_alloc_hook+0x59/0x300 [ 204.938309][ T6149] ? __get_vm_area_node+0x122/0x330 [ 204.943553][ T6149] __kmem_cache_alloc_node+0x4f/0x270 [ 204.948966][ T6149] ? __get_vm_area_node+0x122/0x330 [ 204.954219][ T6149] kmalloc_node_trace+0x22/0xe0 [ 204.959107][ T6149] __get_vm_area_node+0x122/0x330 [ 204.964162][ T6149] ? perf_event_output_forward+0x282/0x2f0 [ 204.970033][ T6149] __vmalloc_node_range+0x357/0x1380 [ 204.975352][ T6149] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 204.980947][ T6149] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 204.987063][ T6149] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 204.993079][ T6149] ? free_vm_area+0x50/0x50 [ 204.997635][ T6149] ? rcu_is_watching+0x11/0xa0 [ 205.002436][ T6149] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 205.008623][ T6149] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 205.014205][ T6149] __vmalloc+0x76/0x80 [ 205.018304][ T6149] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 205.023903][ T6149] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 205.029308][ T6149] ? bpf_prog_alloc+0x13/0x1b0 [ 205.034106][ T6149] bpf_prog_alloc+0x1c/0x1b0 [ 205.038738][ T6149] bpf_prog_load+0x7d4/0x1530 [ 205.043477][ T6149] ? map_freeze+0x390/0x390 [ 205.048029][ T6149] ? __sys_bpf+0x360/0x780 [ 205.052487][ T6149] __sys_bpf+0x5b8/0x780 [ 205.056761][ T6149] ? bpf_link_show_fdinfo+0x380/0x380 [ 205.062186][ T6149] ? lock_chain_count+0x20/0x20 [ 205.067066][ T6149] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 205.073094][ T6149] __x64_sys_bpf+0x78/0x90 [ 205.077550][ T6149] do_syscall_64+0x4c/0xa0 [ 205.081998][ T6149] ? clear_bhb_loop+0x60/0xb0 [ 205.086703][ T6149] ? clear_bhb_loop+0x60/0xb0 [ 205.091414][ T6149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.097337][ T6149] RIP: 0033:0x7f8d8f79de99 [ 205.101806][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.121452][ T6149] RSP: 002b:00007f8d8d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.132454][ T6149] RAX: ffffffffffffffda RBX: 00007f8d8fa25fa0 RCX: 00007f8d8f79de99 [ 205.140455][ T6149] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 205.148461][ T6149] RBP: 00007f8d8d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.156478][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.164476][ T6149] R13: 00007f8d8fa26038 R14: 00007f8d8fa25fa0 R15: 00007ffc87034168 [ 205.172494][ T6149] [ 205.671990][ T6165] cgroup: fork rejected by pids controller in /syz0 [ 207.379753][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 207.809090][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.873381][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.038538][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.052196][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.189582][ T6307] netlink: 'syz.2.590': attribute type 7 has an invalid length. [ 208.210629][ T6308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.590'. [ 208.771523][ T6320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.595'. [ 209.215177][ T6331] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 209.233004][ T6331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.597'. [ 209.246874][ T6331] netlink: 3 bytes leftover after parsing attributes in process `syz.3.597'. [ 209.457616][ T6335] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.600'. [ 209.471883][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.481815][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.492543][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.501292][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.527210][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.535715][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.642326][ T5787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.032322][ T5787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.147153][ T6350] FAULT_INJECTION: forcing a failure. [ 210.147153][ T6350] name failslab, interval 1, probability 0, space 0, times 0 [ 210.216044][ T6350] CPU: 0 PID: 6350 Comm: syz.2.603 Not tainted syzkaller #0 [ 210.223435][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 210.233532][ T6350] Call Trace: [ 210.236848][ T6350] [ 210.239825][ T6350] dump_stack_lvl+0x188/0x24e [ 210.244571][ T6350] ? show_regs_print_info+0x12/0x12 [ 210.249822][ T6350] ? load_image+0x410/0x410 [ 210.254380][ T6350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 210.260425][ T6350] ? __lock_acquire+0x7c40/0x7c40 [ 210.265613][ T6350] should_fail_ex+0x390/0x4c0 [ 210.270378][ T6350] should_failslab+0x5/0x20 [ 210.274927][ T6350] slab_pre_alloc_hook+0x59/0x300 [ 210.280012][ T6350] kmem_cache_alloc+0x56/0x2f0 [ 210.284830][ T6350] ? __build_skb+0x27/0x3b0 [ 210.289405][ T6350] __build_skb+0x27/0x3b0 [ 210.293805][ T6350] ? build_skb+0x14/0x230 [ 210.298190][ T6350] build_skb+0x1e/0x230 [ 210.302403][ T6350] bpf_prog_test_run_skb+0x38d/0x18e0 [ 210.307828][ T6350] ? __fget_files+0x28/0x460 [ 210.312476][ T6350] ? __fget_files+0x3fc/0x460 [ 210.317245][ T6350] ? cpu_online+0xa0/0xa0 [ 210.321628][ T6350] bpf_prog_test_run+0x31c/0x390 [ 210.326636][ T6350] __sys_bpf+0x62b/0x780 [ 210.330975][ T6350] ? bpf_link_show_fdinfo+0x380/0x380 [ 210.336421][ T6350] ? lock_chain_count+0x20/0x20 [ 210.341334][ T6350] __x64_sys_bpf+0x78/0x90 [ 210.345806][ T6350] do_syscall_64+0x4c/0xa0 [ 210.350278][ T6350] ? clear_bhb_loop+0x60/0xb0 [ 210.355180][ T6350] ? clear_bhb_loop+0x60/0xb0 [ 210.359911][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.365856][ T6350] RIP: 0033:0x7f12d3b9de99 [ 210.370344][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.390030][ T6350] RSP: 002b:00007f12d4983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.398496][ T6350] RAX: ffffffffffffffda RBX: 00007f12d3e25fa0 RCX: 00007f12d3b9de99 [ 210.406515][ T6350] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 210.414520][ T6350] RBP: 00007f12d4983090 R08: 0000000000000000 R09: 0000000000000000 [ 210.422519][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.430524][ T6350] R13: 00007f12d3e26038 R14: 00007f12d3e25fa0 R15: 00007fff1118aeb8 [ 210.438540][ T6350] [ 210.507248][ T5787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.568452][ T6352] netlink: 'syz.3.602': attribute type 7 has an invalid length. [ 210.742688][ T5787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.830003][ T6352] netlink: 72 bytes leftover after parsing attributes in process `syz.3.602'. [ 210.915155][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.069720][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.386839][ T6364] netlink: 'syz.1.606': attribute type 15 has an invalid length. [ 211.399372][ T6364] netlink: 'syz.1.606': attribute type 7 has an invalid length. [ 211.422510][ T6368] netlink: 'syz.1.606': attribute type 39 has an invalid length. [ 211.588464][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 212.198167][ T6373] syz.4.610 (6373) used greatest stack depth: 20504 bytes left [ 212.977488][ T6337] chnl_net:caif_netlink_parms(): no params data found [ 213.398690][ T6412] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.623'. [ 213.578277][ T6404] netlink: 'syz.2.621': attribute type 9 has an invalid length. [ 213.612877][ T6404] netlink: 399 bytes leftover after parsing attributes in process `syz.2.621'. [ 213.700888][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 214.013323][ T6408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.619'. [ 214.037839][ T6404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.621'. [ 214.201692][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.218536][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.226945][ T6337] device bridge_slave_0 entered promiscuous mode [ 214.321036][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.328298][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.380355][ T6337] device bridge_slave_1 entered promiscuous mode [ 214.464030][ T6412] syz.1.623 (6412) used greatest stack depth: 17072 bytes left [ 214.539828][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.642643][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.734933][ T6432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.634'. [ 214.814866][ T6435] netlink: 'syz.1.626': attribute type 6 has an invalid length. [ 214.848665][ T6435] netlink: 164 bytes leftover after parsing attributes in process `syz.1.626'. [ 215.326845][ T6438] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 215.750093][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 215.756625][ T6438] team0: Port device geneve1 added [ 215.837242][ T6337] team0: Port device team_slave_0 added [ 215.880921][ T6337] team0: Port device team_slave_1 added [ 216.194352][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.203781][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.329203][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.376478][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.383870][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.492148][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.443145][ T6476] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.638'. [ 217.831106][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 218.305419][ T6337] device hsr_slave_0 entered promiscuous mode [ 218.363522][ T6337] device hsr_slave_1 entered promiscuous mode [ 218.384347][ T6337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.398412][ T6337] Cannot create hsr debugfs directory [ 218.423699][ T6476] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 218.484626][ T6476] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 218.528558][ T6476] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.785178][ T5787] device hsr_slave_0 left promiscuous mode [ 218.828859][ T5787] device hsr_slave_1 left promiscuous mode [ 218.854280][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.876901][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.932206][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.966643][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.989918][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.031322][ T5787] device bridge_slave_0 left promiscuous mode [ 219.042904][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.223897][ T5787] device veth1_macvtap left promiscuous mode [ 219.241936][ T5787] device veth1_vlan left promiscuous mode [ 219.252596][ T5787] device veth0_vlan left promiscuous mode [ 220.610068][ T5787] team0 (unregistering): Port device team_slave_1 removed [ 220.651293][ T5787] team0 (unregistering): Port device team_slave_0 removed [ 221.108524][ T6497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.643'. [ 221.118161][ T6502] netlink: 144 bytes leftover after parsing attributes in process `syz.4.646'. [ 221.163593][ T6511] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 221.364600][ T6521] netlink: 'syz.2.650': attribute type 39 has an invalid length. [ 221.381802][ T6522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.649'. [ 221.947104][ T6537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.653'. [ 222.018891][ T6536] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 222.038643][ T6536] device veth0_macvtap left promiscuous mode [ 222.344606][ T6540] netlink: 'syz.4.655': attribute type 21 has an invalid length. [ 222.482904][ T6540] netlink: 128 bytes leftover after parsing attributes in process `syz.4.655'. [ 222.512462][ T6540] netlink: 'syz.4.655': attribute type 5 has an invalid length. [ 222.657558][ T6540] netlink: 'syz.4.655': attribute type 6 has an invalid length. [ 222.768249][ T6540] netlink: 3 bytes leftover after parsing attributes in process `syz.4.655'. [ 223.367626][ T6337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.416613][ T6337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.459778][ T6337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.529207][ T6337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.829884][ T6572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.661'. [ 223.855273][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.992056][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.036767][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.182203][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.239796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.260973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.315283][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.322562][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.423347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.463553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.525670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.597719][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.605202][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.660284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.764755][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.790557][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.821597][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.859481][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.888756][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.045339][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.146030][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.165393][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.196217][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.222188][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.275347][ T6337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.863206][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.878764][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.943455][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.032793][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.054500][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.115143][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.136299][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.208081][ T6337] device veth0_vlan entered promiscuous mode [ 227.224126][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.266932][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.296477][ T6337] device veth1_vlan entered promiscuous mode [ 227.315815][ T6638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.677'. [ 227.341961][ T6641] netlink: 164 bytes leftover after parsing attributes in process `syz.4.680'. [ 227.419171][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.452543][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.501293][ T6337] device veth0_macvtap entered promiscuous mode [ 227.551117][ T6337] device veth1_macvtap entered promiscuous mode [ 227.629612][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.668999][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.688108][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.709995][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.725392][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.746599][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.767572][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.792483][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.818389][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.862057][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.883361][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.900414][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.934737][ T6337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.954714][ T6337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.969635][ T6337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.995959][ T6337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.248975][ T5799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.279329][ T6665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.685'. [ 228.298457][ T5799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.363294][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.481847][ T5800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.505938][ T6671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.687'. [ 228.539885][ T5800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.619584][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.251887][ T6697] FAULT_INJECTION: forcing a failure. [ 229.251887][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 229.292375][ T6697] CPU: 0 PID: 6697 Comm: syz.0.694 Not tainted syzkaller #0 [ 229.299755][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.309855][ T6697] Call Trace: [ 229.313205][ T6697] [ 229.316177][ T6697] dump_stack_lvl+0x188/0x24e [ 229.320928][ T6697] ? show_regs_print_info+0x12/0x12 [ 229.326187][ T6697] ? load_image+0x410/0x410 [ 229.330756][ T6697] should_fail_ex+0x390/0x4c0 [ 229.335501][ T6697] should_failslab+0x5/0x20 [ 229.340063][ T6697] slab_pre_alloc_hook+0x59/0x300 [ 229.345138][ T6697] ? __kernel_text_address+0x9/0x30 [ 229.350387][ T6697] ? unwind_get_return_address+0x49/0x80 [ 229.356075][ T6697] kmem_cache_alloc+0x56/0x2f0 [ 229.360890][ T6697] ? skb_clone+0x1e7/0x370 [ 229.365381][ T6697] skb_clone+0x1e7/0x370 [ 229.369685][ T6697] bpf_clone_redirect+0x169/0x4a0 [ 229.374773][ T6697] bpf_prog_208b094576c80b22+0x56/0x5b [ 229.380285][ T6697] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 229.386349][ T6697] ? __lock_acquire+0x7c40/0x7c40 [ 229.391425][ T6697] ? lock_chain_count+0x20/0x20 [ 229.396337][ T6697] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 229.402628][ T6697] ? lockdep_hardirqs_on+0x94/0x140 [ 229.407886][ T6697] ? ktime_get+0x7b/0x270 [ 229.412275][ T6697] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 229.418571][ T6697] ? ktime_get_real_ts64+0x440/0x440 [ 229.423906][ T6697] ? read_lock_is_recursive+0x10/0x10 [ 229.429340][ T6697] ? __cant_sleep+0x220/0x220 [ 229.434071][ T6697] ? ktime_get+0x247/0x270 [ 229.438544][ T6697] bpf_test_run+0x2b6/0x830 [ 229.443112][ T6697] ? dst_hold+0xb0/0xb0 [ 229.447321][ T6697] ? eth_get_headlen+0x200/0x200 [ 229.452312][ T6697] ? __build_skb+0x24b/0x3b0 [ 229.456966][ T6697] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 229.462421][ T6697] ? cpu_online+0xa0/0xa0 [ 229.466804][ T6697] bpf_prog_test_run+0x31c/0x390 [ 229.471813][ T6697] __sys_bpf+0x62b/0x780 [ 229.476123][ T6697] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.481570][ T6697] ? lock_chain_count+0x20/0x20 [ 229.486488][ T6697] __x64_sys_bpf+0x78/0x90 [ 229.490962][ T6697] do_syscall_64+0x4c/0xa0 [ 229.495432][ T6697] ? clear_bhb_loop+0x60/0xb0 [ 229.500165][ T6697] ? clear_bhb_loop+0x60/0xb0 [ 229.504900][ T6697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.510844][ T6697] RIP: 0033:0x7fc44bb9de99 [ 229.515298][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.534953][ T6697] RSP: 002b:00007fc44cae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.543430][ T6697] RAX: ffffffffffffffda RBX: 00007fc44be25fa0 RCX: 00007fc44bb9de99 [ 229.551464][ T6697] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 229.559479][ T6697] RBP: 00007fc44cae7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.567491][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.575514][ T6697] R13: 00007fc44be26038 R14: 00007fc44be25fa0 R15: 00007ffd2ed15eb8 [ 229.583535][ T6697] [ 229.921953][ T6707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.697'. [ 230.559162][ T6725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.700'. [ 232.601604][ T6778] netlink: 144 bytes leftover after parsing attributes in process `syz.0.718'. [ 232.657560][ T6783] netlink: 795 bytes leftover after parsing attributes in process `syz.3.719'. [ 233.965133][ T6804] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 235.086852][ T6828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.732'. [ 235.608529][ T6843] netlink: 'syz.2.737': attribute type 14 has an invalid length. [ 235.638502][ T6843] netlink: 156 bytes leftover after parsing attributes in process `syz.2.737'. [ 235.680986][ T6843] netlink: 'syz.2.737': attribute type 30 has an invalid length. [ 235.689156][ T6839] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.733'. [ 237.776998][ T6895] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.753'. [ 239.535454][ T6885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.749'. [ 239.557620][ T6895] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 239.854391][ T6904] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.757'. [ 240.498207][ T6923] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.763'. [ 241.140656][ T6934] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.766'. [ 241.474399][ T6940] netlink: 'syz.1.768': attribute type 3 has an invalid length. [ 241.484240][ T6940] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.768'. [ 241.759272][ T6946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.767'. [ 242.356207][ T6947] netlink: 'syz.2.769': attribute type 7 has an invalid length. [ 244.509967][ T6988] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.782'. [ 244.769771][ T7005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.784'. [ 248.179968][ T7029] netlink: 188 bytes leftover after parsing attributes in process `syz.0.794'. [ 248.423081][ T7027] netlink: 172 bytes leftover after parsing attributes in process `syz.2.791'. [ 249.636849][ T7043] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.796'. [ 250.397153][ T7060] netlink: 'syz.3.803': attribute type 39 has an invalid length. [ 250.845615][ T7060] device hsr_slave_1 left promiscuous mode [ 251.175985][ T7071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.804'. [ 251.455829][ T7088] netlink: 791 bytes leftover after parsing attributes in process `syz.4.810'. [ 251.734625][ T7094] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.813'. [ 251.751753][ T7096] netlink: 22 bytes leftover after parsing attributes in process `syz.4.815'. [ 252.452619][ T7113] netlink: 'syz.3.820': attribute type 6 has an invalid length. [ 252.483793][ T7113] netlink: 164 bytes leftover after parsing attributes in process `syz.3.820'. [ 252.719810][ T7121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.821'. [ 253.145311][ T7131] netlink: 164 bytes leftover after parsing attributes in process `syz.4.827'. [ 253.286475][ T7126] netlink: 'syz.0.823': attribute type 39 has an invalid length. [ 253.577829][ T7139] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.828'. [ 253.896198][ T7126] device hsr_slave_1 left promiscuous mode [ 254.409868][ T7135] netlink: 164 bytes leftover after parsing attributes in process `syz.4.827'. [ 254.440441][ T7143] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 254.929322][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.947943][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.013786][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.032646][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.503459][ T4291] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 255.672418][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.686194][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.430847][ T7172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.839'. [ 256.720561][ T7179] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.842'. [ 256.765180][ T7179] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 256.872359][ T7180] netlink: 132 bytes leftover after parsing attributes in process `syz.1.840'. [ 257.273112][ T7193] netlink: 'syz.4.845': attribute type 39 has an invalid length. [ 257.534229][ T7193] device hsr_slave_1 left promiscuous mode [ 258.833192][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.855'. [ 259.028475][ T7226] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 259.280928][ T7241] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.860'. [ 259.484479][ T7245] netlink: 'syz.0.862': attribute type 39 has an invalid length. [ 259.662445][ T7241] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 259.679608][ T7241] CPU: 0 PID: 7241 Comm: syz.2.860 Not tainted syzkaller #0 [ 259.687010][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 259.697111][ T7241] Call Trace: [ 259.700441][ T7241] [ 259.703420][ T7241] dump_stack_lvl+0x188/0x24e [ 259.708185][ T7241] ? show_regs_print_info+0x12/0x12 [ 259.713451][ T7241] ? load_image+0x410/0x410 [ 259.718033][ T7241] sysfs_warn_dup+0x8a/0xa0 [ 259.722599][ T7241] sysfs_do_create_link_sd+0xc0/0x110 [ 259.728035][ T7241] device_add+0x83b/0x1050 [ 259.732538][ T7241] wiphy_register+0x1d8b/0x2aa0 [ 259.737480][ T7241] ? cfg80211_event_work+0x40/0x40 [ 259.742680][ T7241] ? minstrel_ht_alloc+0x894/0xa20 [ 259.747967][ T7241] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 259.754132][ T7241] ieee80211_register_hw+0x2d48/0x39f0 [ 259.759674][ T7241] ? ieee80211_register_hw+0xf41/0x39f0 [ 259.765277][ T7241] ? ieee80211_register_hw+0xf41/0x39f0 [ 259.770927][ T7241] ? ieee80211_tasklet_handler+0x20/0x20 [ 259.776622][ T7241] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 259.782583][ T7241] ? __debug_object_init+0xed/0x440 [ 259.787850][ T7241] ? memset+0x1e/0x40 [ 259.791878][ T7241] ? __hrtimer_init+0x189/0x270 [ 259.796790][ T7241] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 259.802608][ T7241] ? memcpy+0x3c/0x60 [ 259.806650][ T7241] hwsim_new_radio_nl+0xab7/0xc90 [ 259.811843][ T7241] genl_family_rcv_msg_doit+0x22f/0x350 [ 259.817446][ T7241] ? end_current_label_crit_section+0x170/0x170 [ 259.823747][ T7241] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 259.829705][ T7241] ? bpf_lsm_capable+0x5/0x10 [ 259.834437][ T7241] ? security_capable+0x85/0xb0 [ 259.839377][ T7241] genl_rcv_msg+0x601/0x790 [ 259.843941][ T7241] ? genl_bind+0x360/0x360 [ 259.848408][ T7241] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 259.854815][ T7241] netlink_rcv_skb+0x1ef/0x440 [ 259.859644][ T7241] ? genl_bind+0x360/0x360 [ 259.864118][ T7241] ? netlink_ack+0x1160/0x1160 [ 259.868972][ T7241] ? down_read+0x1a8/0x2d0 [ 259.873450][ T7241] genl_rcv+0x24/0x40 [ 259.877494][ T7241] netlink_unicast+0x7ad/0x920 [ 259.882514][ T7241] netlink_sendmsg+0x8ad/0xbd0 [ 259.887368][ T7241] ? netlink_getsockopt+0x550/0x550 [ 259.892669][ T7241] ? apparmor_socket_sendmsg+0x8a/0x330 [ 259.898316][ T7241] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 259.903670][ T7241] ? security_socket_sendmsg+0x7c/0xa0 [ 259.909204][ T7241] ? netlink_getsockopt+0x550/0x550 [ 259.914478][ T7241] ____sys_sendmsg+0x5ed/0x9a0 [ 259.919324][ T7241] ? __sys_sendmsg_sock+0x30/0x30 [ 259.924434][ T7241] ? __import_iovec+0x306/0x510 [ 259.929367][ T7241] ? import_iovec+0x6f/0xa0 [ 259.933951][ T7241] ___sys_sendmsg+0x2a2/0x360 [ 259.938727][ T7241] ? __sys_sendmsg+0x2a0/0x2a0 [ 259.943588][ T7241] ? ct_irq_enter_irqson+0x170/0x170 [ 259.948967][ T7241] __se_sys_sendmsg+0x1c3/0x2b0 [ 259.953895][ T7241] ? __x64_sys_sendmsg+0x80/0x80 [ 259.958973][ T7241] ? lockdep_hardirqs_on+0x94/0x140 [ 259.964234][ T7241] do_syscall_64+0x4c/0xa0 [ 259.968740][ T7241] ? clear_bhb_loop+0x60/0xb0 [ 259.973478][ T7241] ? clear_bhb_loop+0x60/0xb0 [ 259.978225][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.984215][ T7241] RIP: 0033:0x7f12d3b9de99 [ 259.988684][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.008349][ T7241] RSP: 002b:00007f12d4983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.016823][ T7241] RAX: ffffffffffffffda RBX: 00007f12d3e25fa0 RCX: 00007f12d3b9de99 [ 260.024944][ T7241] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.032972][ T7241] RBP: 00007f12d3c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 260.040997][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.049025][ T7241] R13: 00007f12d3e26038 R14: 00007f12d3e25fa0 R15: 00007fff1118aeb8 [ 260.057065][ T7241] [ 260.422504][ T7252] netlink: 'syz.4.865': attribute type 10 has an invalid length. [ 260.454078][ T7252] netlink: 168 bytes leftover after parsing attributes in process `syz.4.865'. [ 260.518155][ T7252] netlink: 'syz.4.865': attribute type 10 has an invalid length. [ 260.535081][ T7257] Dead loop on virtual device ip6_vti0, fix it urgently! [ 260.806123][ T7252] team0: Port device wlan1 added [ 262.707852][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.870'. [ 263.145568][ T7290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.180907][ T7290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.225911][ T7290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.279445][ T7290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.880137][ T7305] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.881'. [ 264.461550][ T7312] FAULT_INJECTION: forcing a failure. [ 264.461550][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 264.532643][ T7312] CPU: 1 PID: 7312 Comm: syz.0.883 Not tainted syzkaller #0 [ 264.540023][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 264.550164][ T7312] Call Trace: [ 264.553491][ T7312] [ 264.556475][ T7312] dump_stack_lvl+0x188/0x24e [ 264.561218][ T7312] ? show_regs_print_info+0x12/0x12 [ 264.566474][ T7312] ? load_image+0x410/0x410 [ 264.571082][ T7312] ? __might_sleep+0xd0/0xd0 [ 264.575725][ T7312] ? __lock_acquire+0x7c40/0x7c40 [ 264.580814][ T7312] should_fail_ex+0x390/0x4c0 [ 264.585666][ T7312] should_failslab+0x5/0x20 [ 264.590213][ T7312] slab_pre_alloc_hook+0x59/0x300 [ 264.595292][ T7312] ? tomoyo_encode+0x28a/0x550 [ 264.600111][ T7312] __kmem_cache_alloc_node+0x4f/0x270 [ 264.605802][ T7312] ? tomoyo_encode+0x28a/0x550 [ 264.610625][ T7312] __kmalloc+0xa3/0x240 [ 264.614839][ T7312] tomoyo_encode+0x28a/0x550 [ 264.619485][ T7312] tomoyo_realpath_from_path+0x578/0x5c0 [ 264.625157][ T7312] ? tomoyo_domain+0xd2/0x120 [ 264.630134][ T7312] ? tomoyo_path_number_perm+0x205/0x650 [ 264.635799][ T7312] tomoyo_path_number_perm+0x22f/0x650 [ 264.641294][ T7312] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 264.646911][ T7312] ? __fget_files+0x28/0x460 [ 264.651551][ T7312] security_file_ioctl+0x6c/0xa0 [ 264.656529][ T7312] __se_sys_ioctl+0x48/0x170 [ 264.661168][ T7312] do_syscall_64+0x4c/0xa0 [ 264.665628][ T7312] ? clear_bhb_loop+0x60/0xb0 [ 264.670338][ T7312] ? clear_bhb_loop+0x60/0xb0 [ 264.675050][ T7312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.680986][ T7312] RIP: 0033:0x7fc44bb9de99 [ 264.685435][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.705156][ T7312] RSP: 002b:00007fc44cae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.713610][ T7312] RAX: ffffffffffffffda RBX: 00007fc44be25fa0 RCX: 00007fc44bb9de99 [ 264.721615][ T7312] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 264.729618][ T7312] RBP: 00007fc44cae7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.737635][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.745634][ T7312] R13: 00007fc44be26038 R14: 00007fc44be25fa0 R15: 00007ffd2ed15eb8 [ 264.753656][ T7312] [ 264.815118][ T7312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.106852][ T7331] netlink: 132 bytes leftover after parsing attributes in process `syz.3.888'. [ 265.809001][ T7332] netlink: 'syz.0.891': attribute type 2 has an invalid length. [ 265.964163][ T7332] netlink: 'syz.0.891': attribute type 8 has an invalid length. [ 266.039631][ T7332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.891'. [ 267.542243][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'. [ 268.111861][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.912'. [ 268.333272][ T7396] netlink: 'syz.1.913': attribute type 2 has an invalid length. [ 268.426842][ T7396] netlink: 'syz.1.913': attribute type 2 has an invalid length. [ 268.492623][ T7396] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.913'. [ 269.989865][ T7406] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.916'. [ 270.560366][ T7424] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.923'. [ 271.676118][ T7433] netlink: 'syz.1.927': attribute type 10 has an invalid length. [ 272.649507][ T7433] team0 (unregistering): Port device team_slave_0 removed [ 272.782825][ T7433] team0 (unregistering): Port device team_slave_1 removed [ 273.021463][ T7462] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.932'. [ 273.104796][ T7433] team0 (unregistering): Port device geneve0 removed [ 273.409974][ T7454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.930'. [ 273.614890][ T7469] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.935'. [ 273.708646][ T7470] netlink: 'syz.1.934': attribute type 4 has an invalid length. [ 273.736917][ T7470] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.934'. [ 274.270622][ T7482] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.942'. [ 274.351746][ T7490] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 274.397998][ T7484] netlink: 14 bytes leftover after parsing attributes in process `syz.0.940'. [ 274.461096][ T7482] netlink: 'syz.4.942': attribute type 3 has an invalid length. [ 274.517741][ T7482] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.942'. [ 274.892085][ T7484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.032491][ T7484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.153961][ T7484] bond0 (unregistering): Released all slaves [ 275.227467][ T7490] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 275.301907][ T7496] netlink: 14 bytes leftover after parsing attributes in process `syz.0.940'. [ 275.360355][ T7508] netlink: 'syz.3.945': attribute type 10 has an invalid length. [ 275.425506][ T7508] bridge0: port 3(team0) entered disabled state [ 275.558197][ T7508] bridge0: port 3(team0) entered disabled state [ 275.576720][ T7508] device team_slave_0 left promiscuous mode [ 275.619185][ T7508] team0 (unregistering): Port device team_slave_0 removed [ 275.630040][ T7508] device team_slave_1 left promiscuous mode [ 275.664918][ T7508] team0 (unregistering): Port device team_slave_1 removed [ 275.689426][ T7508] device wlan1 left promiscuous mode [ 275.779086][ T7508] team0 (unregistering): Port device wlan1 removed [ 276.601950][ T7523] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 276.682369][ T7523] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.950'. [ 278.454699][ T7568] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.963'. [ 278.533778][ T7571] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 278.555012][ T7568] netlink: 'syz.1.963': attribute type 3 has an invalid length. [ 278.619447][ T7568] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.963'. [ 279.770763][ T7571] team0 (unregistering): Port device team_slave_0 removed [ 279.806469][ T7571] team0 (unregistering): Port device team_slave_1 removed [ 279.833733][ T7571] team0 (unregistering): Port device geneve1 removed [ 279.873915][ T7571] team0 (unregistering): Port device wlan1 removed [ 280.221626][ T7595] netlink: 'syz.0.970': attribute type 29 has an invalid length. [ 280.259163][ T7595] netlink: 'syz.0.970': attribute type 29 has an invalid length. [ 280.383713][ T7595] netlink: 'syz.0.970': attribute type 29 has an invalid length. [ 280.427884][ T7601] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.972'. [ 281.094044][ T7618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.979'. [ 281.215171][ T7626] netlink: 144 bytes leftover after parsing attributes in process `syz.0.980'. [ 282.114145][ T7643] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.983'. [ 282.885289][ T7653] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.987'. [ 283.366005][ T7658] netlink: 156 bytes leftover after parsing attributes in process `syz.1.990'. [ 283.479575][ T7665] netlink: 'syz.4.991': attribute type 39 has an invalid length. [ 283.879480][ T7672] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.858632][ T7687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.999'. [ 286.399563][ T7707] FAULT_INJECTION: forcing a failure. [ 286.399563][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.530171][ T7707] CPU: 0 PID: 7707 Comm: syz.4.1007 Not tainted syzkaller #0 [ 286.537688][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.547810][ T7707] Call Trace: [ 286.551159][ T7707] [ 286.554148][ T7707] dump_stack_lvl+0x188/0x24e [ 286.558916][ T7707] ? show_regs_print_info+0x12/0x12 [ 286.564280][ T7707] ? load_image+0x410/0x410 [ 286.568872][ T7707] ? __lock_acquire+0x7c40/0x7c40 [ 286.574069][ T7707] ? unix_ioctl+0x255/0x6a0 [ 286.578654][ T7707] should_fail_ex+0x390/0x4c0 [ 286.583448][ T7707] _copy_from_user+0x2c/0x170 [ 286.588212][ T7707] sock_do_ioctl+0x18c/0x320 [ 286.592875][ T7707] ? sock_show_fdinfo+0xb0/0xb0 [ 286.597841][ T7707] sock_ioctl+0x48a/0x700 [ 286.602242][ T7707] ? sock_poll+0x420/0x420 [ 286.606754][ T7707] ? bpf_lsm_file_ioctl+0x5/0x10 [ 286.611763][ T7707] ? security_file_ioctl+0x7c/0xa0 [ 286.616957][ T7707] ? sock_poll+0x420/0x420 [ 286.621439][ T7707] __se_sys_ioctl+0xfa/0x170 [ 286.626126][ T7707] do_syscall_64+0x4c/0xa0 [ 286.630614][ T7707] ? clear_bhb_loop+0x60/0xb0 [ 286.635361][ T7707] ? clear_bhb_loop+0x60/0xb0 [ 286.640117][ T7707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.646075][ T7707] RIP: 0033:0x7f8d8f79de99 [ 286.650559][ T7707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.670234][ T7707] RSP: 002b:00007f8d8d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.678754][ T7707] RAX: ffffffffffffffda RBX: 00007f8d8fa25fa0 RCX: 00007f8d8f79de99 [ 286.686970][ T7707] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 286.695010][ T7707] RBP: 00007f8d8d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.703045][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.711077][ T7707] R13: 00007f8d8fa26038 R14: 00007f8d8fa25fa0 R15: 00007ffc87034168 [ 286.719162][ T7707] [ 286.749646][ T7713] netlink: 'syz.3.1006': attribute type 3 has an invalid length. [ 286.778670][ T7713] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1006'. [ 286.862583][ T7717] netlink: 'syz.2.1008': attribute type 29 has an invalid length. [ 286.889054][ T7717] netlink: 'syz.2.1008': attribute type 29 has an invalid length. [ 286.908744][ T7716] netlink: 'syz.2.1008': attribute type 29 has an invalid length. [ 288.465303][ T7746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1016'. [ 288.623773][ T7754] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1018'. [ 288.781626][ T7754] netlink: 'syz.2.1018': attribute type 3 has an invalid length. [ 288.905987][ T7754] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1018'. [ 290.344686][ T7798] netlink: 'syz.2.1032': attribute type 21 has an invalid length. [ 290.562557][ T7802] netlink: 'syz.1.1034': attribute type 39 has an invalid length. [ 290.969857][ T7814] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1039'. [ 291.075370][ T7816] netlink: 791 bytes leftover after parsing attributes in process `syz.3.1040'. [ 291.125466][ T7817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1038'. [ 291.483021][ T7826] netlink: 'syz.0.1037': attribute type 10 has an invalid length. [ 292.192795][ T7831] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1043'. [ 296.141798][ T4291] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 297.024471][ T7903] device syzkaller0 entered promiscuous mode [ 300.384577][ T4291] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 301.514353][ T7931] device bridge0 entered promiscuous mode [ 302.292721][ T7985] device syzkaller0 entered promiscuous mode [ 302.969595][ T7998] device bridge0 entered promiscuous mode [ 309.189039][ T8044] device bridge0 entered promiscuous mode [ 315.328717][ T4291] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 317.125794][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139436][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.419114][ T4291] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 319.764606][ T4291] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5 [ 320.631509][ T8276] device syzkaller0 entered promiscuous mode [ 320.949593][ T8290] bridge_slave_0: mtu greater than device maximum [ 322.647392][ T8321] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.548434][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 334.621192][ T4292] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 339.850054][ T8554] bridge0: port 3(ip6gretap0) entered blocking state [ 339.897444][ T8554] bridge0: port 3(ip6gretap0) entered disabled state [ 339.997987][ T8554] device ip6gretap0 entered promiscuous mode [ 340.046280][ T8554] bridge0: port 3(ip6gretap0) entered blocking state [ 340.054637][ T8554] bridge0: port 3(ip6gretap0) entered forwarding state [ 342.751465][ T4292] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7 [ 343.099793][ T4292] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 344.737585][ T4292] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 344.914696][ T4292] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 347.297872][ T8656] device wlan1 entered promiscuous mode [ 350.271226][ T8721] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 350.418188][ T8735] device syzkaller0 entered promiscuous mode [ 352.322766][ T8763] device syzkaller0 entered promiscuous mode [ 354.572163][ T4292] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 358.284074][ T4292] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 359.506012][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 359.563095][ T4292] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 359.846900][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1453'. [ 360.619557][ T8900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1457'. [ 360.965158][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 362.857148][ T4292] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 365.092950][ T4292] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 366.379006][ T8960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1481'. [ 366.664690][ T8970] device syzkaller0 entered promiscuous mode [ 367.773931][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 369.675214][ T4292] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 370.477293][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 371.751632][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 372.320419][ T4292] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 372.782722][ T9045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1512'. [ 373.028856][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 373.299774][ T9077] netlink: 'syz.3.1525': attribute type 6 has an invalid length. [ 373.408158][ T9077] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1525'. [ 373.828883][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 373.949438][ T4292] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 374.310690][ T4291] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 374.332588][ T9094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1530'. [ 374.584492][ T9098] device syzkaller0 entered promiscuous mode [ 374.688738][ T4291] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 374.729189][ T9110] syzkaller0: create flow: hash 519436623 index 2 [ 374.729654][ T4326] syzkaller0: tun_net_xmit 48 [ 375.655495][ T9096] syzkaller0: delete flow: hash 519436623 index 2 [ 375.990104][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 377.141589][ T4291] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 377.319755][ T4291] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 378.069495][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 378.195644][ T9145] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1547'. [ 378.455946][ T9161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1551'. [ 378.550624][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557031][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.044478][ T4292] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 381.385062][ T9197] device syzkaller0 entered promiscuous mode [ 381.457516][ T129] syzkaller0: tun_net_xmit 48 [ 381.474692][ T9197] syzkaller0: tun_net_xmit 1280 [ 381.482861][ T9197] syzkaller0: create flow: hash 519436623 index 2 [ 381.543861][ T9196] syzkaller0: delete flow: hash 519436623 index 2 [ 383.101690][ T9215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1583'. [ 385.138006][ T9240] netlink: 'syz.4.1585': attribute type 39 has an invalid length. [ 386.531892][ T9285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1599'. [ 387.983494][ T9319] netlink: 'syz.0.1614': attribute type 2 has an invalid length. [ 388.295540][ T9332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1617'. [ 389.901196][ T9366] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1629'. [ 390.484363][ T9375] netlink: 'syz.4.1631': attribute type 15 has an invalid length. [ 392.646735][ T9415] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 393.205921][ T9421] netlink: 'syz.3.1648': attribute type 21 has an invalid length. [ 394.698569][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1656'. [ 396.914143][ T9508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1674'. [ 397.180046][ T9513] netlink: 'syz.0.1676': attribute type 6 has an invalid length. [ 397.188205][ T9513] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1676'. [ 399.364930][ T9556] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1693'. [ 399.385329][ T9556] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 401.304904][ T9588] netlink: 'syz.0.1705': attribute type 46 has an invalid length. [ 401.336842][ T9595] netlink: 'syz.3.1707': attribute type 10 has an invalid length. [ 401.349329][ T9595] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1707'. [ 401.543126][ T9609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1709'. [ 401.870904][ T9619] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1713'. [ 402.305314][ T9625] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 402.703539][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 402.716634][ T9631] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1717'. [ 402.768129][ T9631] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 402.802914][ T9631] CPU: 0 PID: 9631 Comm: syz.1.1717 Not tainted syzkaller #0 [ 402.810379][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 402.820484][ T9631] Call Trace: [ 402.823894][ T9631] [ 402.826974][ T9631] dump_stack_lvl+0x188/0x24e [ 402.831941][ T9631] ? show_regs_print_info+0x12/0x12 [ 402.837237][ T9631] ? load_image+0x410/0x410 [ 402.841836][ T9631] sysfs_warn_dup+0x8a/0xa0 [ 402.846415][ T9631] sysfs_do_create_link_sd+0xc0/0x110 [ 402.851854][ T9631] device_add+0x83b/0x1050 [ 402.856430][ T9631] wiphy_register+0x1d8b/0x2aa0 [ 402.861494][ T9631] ? cfg80211_event_work+0x40/0x40 [ 402.866670][ T9631] ? minstrel_ht_alloc+0x894/0xa20 [ 402.871943][ T9631] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 402.878110][ T9631] ieee80211_register_hw+0x2d48/0x39f0 [ 402.883719][ T9631] ? ieee80211_register_hw+0xf41/0x39f0 [ 402.889337][ T9631] ? ieee80211_register_hw+0xf41/0x39f0 [ 402.894958][ T9631] ? ieee80211_tasklet_handler+0x20/0x20 [ 402.900658][ T9631] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 402.906756][ T9631] ? __debug_object_init+0xed/0x440 [ 402.912113][ T9631] ? memset+0x1e/0x40 [ 402.916196][ T9631] ? __hrtimer_init+0x189/0x270 [ 402.921158][ T9631] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 402.927076][ T9631] ? memcpy+0x3c/0x60 [ 402.931125][ T9631] hwsim_new_radio_nl+0xab7/0xc90 [ 402.936238][ T9631] genl_family_rcv_msg_doit+0x22f/0x350 [ 402.941892][ T9631] ? end_current_label_crit_section+0x170/0x170 [ 402.948480][ T9631] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 402.954443][ T9631] ? bpf_lsm_capable+0x5/0x10 [ 402.959252][ T9631] ? security_capable+0x85/0xb0 [ 402.964236][ T9631] genl_rcv_msg+0x601/0x790 [ 402.968813][ T9631] ? genl_bind+0x360/0x360 [ 402.973288][ T9631] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 402.979705][ T9631] netlink_rcv_skb+0x1ef/0x440 [ 402.984591][ T9631] ? genl_bind+0x360/0x360 [ 402.989054][ T9631] ? netlink_ack+0x1160/0x1160 [ 402.993895][ T9631] ? down_read+0x1a8/0x2d0 [ 402.998364][ T9631] genl_rcv+0x24/0x40 [ 403.002415][ T9631] netlink_unicast+0x7ad/0x920 [ 403.007256][ T9631] netlink_sendmsg+0x8ad/0xbd0 [ 403.012125][ T9631] ? netlink_getsockopt+0x550/0x550 [ 403.017400][ T9631] ? apparmor_socket_sendmsg+0x8a/0x330 [ 403.023014][ T9631] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 403.028355][ T9631] ? security_socket_sendmsg+0x7c/0xa0 [ 403.034129][ T9631] ? netlink_getsockopt+0x550/0x550 [ 403.039398][ T9631] ____sys_sendmsg+0x5ed/0x9a0 [ 403.044343][ T9631] ? __sys_sendmsg_sock+0x30/0x30 [ 403.049430][ T9631] ? __import_iovec+0x306/0x510 [ 403.054425][ T9631] ? import_iovec+0x6f/0xa0 [ 403.058998][ T9631] ___sys_sendmsg+0x2a2/0x360 [ 403.063742][ T9631] ? __sys_sendmsg+0x2a0/0x2a0 [ 403.068643][ T9631] __se_sys_sendmsg+0x1c3/0x2b0 [ 403.073565][ T9631] ? __x64_sys_sendmsg+0x80/0x80 [ 403.078620][ T9631] ? lockdep_hardirqs_on+0x94/0x140 [ 403.083905][ T9631] do_syscall_64+0x4c/0xa0 [ 403.088387][ T9631] ? clear_bhb_loop+0x60/0xb0 [ 403.093194][ T9631] ? clear_bhb_loop+0x60/0xb0 [ 403.097974][ T9631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.103942][ T9631] RIP: 0033:0x7fbec4d9de99 [ 403.108462][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.128173][ T9631] RSP: 002b:00007fbec5beb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.136701][ T9631] RAX: ffffffffffffffda RBX: 00007fbec5025fa0 RCX: 00007fbec4d9de99 [ 403.144723][ T9631] RDX: 0000000005000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 403.152741][ T9631] RBP: 00007fbec4e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 403.160747][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.168757][ T9631] R13: 00007fbec5026038 R14: 00007fbec5025fa0 R15: 00007ffd33ad8758 [ 403.176807][ T9631] [ 403.284503][ T9628] netlink: 'syz.2.1716': attribute type 3 has an invalid length. [ 403.298842][ T9628] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1716'. [ 403.324949][ T9638] netlink: 'syz.3.1719': attribute type 10 has an invalid length. [ 403.341637][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.349959][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.362077][ T9638] device bridge0 left promiscuous mode [ 403.415476][ T9641] netlink: 'syz.0.1720': attribute type 10 has an invalid length. [ 403.658185][ T9645] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 404.017591][ T9647] netlink: 'syz.2.1723': attribute type 13 has an invalid length. [ 404.047177][ T9647] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1723'. [ 404.477254][ T9647] erspan0: refused to change device tx_queue_len [ 405.032335][ T9672] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1730'. [ 407.893545][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1748'. [ 408.391224][ T9724] netlink: 'syz.4.1749': attribute type 3 has an invalid length. [ 408.421644][ T9724] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1749'. [ 409.001845][ T9734] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.1752'. [ 409.414775][ T9751] netlink: 'syz.0.1757': attribute type 16 has an invalid length. [ 409.453026][ T9751] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1757'. [ 409.751683][ T9756] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1761'. [ 410.053446][ T9763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1763'. [ 414.483081][ T9819] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.1783'. [ 414.492976][ T9819] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1783'. [ 415.511168][ T9840] netlink: 'syz.0.1791': attribute type 2 has an invalid length. [ 415.553670][ T9843] netlink: 'syz.0.1791': attribute type 2 has an invalid length. [ 415.600818][ T9840] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1791'. [ 415.702290][ T9843] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1791'. [ 418.707942][ T9894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1809'. [ 419.513253][ T9905] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.539939][ T9907] Dead loop on virtual device ip6_vti0, fix it urgently! [ 419.823493][ T9915] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 419.870341][ T9915] team0: Device ipvlan1 failed to register rx_handler [ 420.266519][ T9930] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 420.351196][ T9933] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1819'. [ 420.956990][ T9946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1827'. [ 423.687177][T10003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1845'. [ 425.706885][T10045] netlink: 'syz.0.1861': attribute type 21 has an invalid length. [ 426.545580][T10055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1865'. [ 426.961921][T10064] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1869'. [ 426.997677][T10064] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 427.721892][T10081] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1874'. [ 428.246862][T10093] netlink: 175 bytes leftover after parsing attributes in process `syz.4.1878'. [ 430.764944][T10162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1903'. [ 431.397917][T10171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1908'. [ 431.591794][T10172] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1908'. [ 435.172615][T10213] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 435.178184][T10213] dvmrp1: ignored: set checksum disabled [ 435.380798][T10222] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1925'. [ 435.411216][T10222] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 435.438451][T10222] CPU: 0 PID: 10222 Comm: syz.3.1925 Not tainted syzkaller #0 [ 435.446186][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 435.456291][T10222] Call Trace: [ 435.459616][T10222] [ 435.462684][T10222] dump_stack_lvl+0x188/0x24e [ 435.467428][T10222] ? show_regs_print_info+0x12/0x12 [ 435.472689][T10222] ? load_image+0x410/0x410 [ 435.477284][T10222] sysfs_warn_dup+0x8a/0xa0 [ 435.481844][T10222] sysfs_do_create_link_sd+0xc0/0x110 [ 435.487260][T10222] device_add+0x83b/0x1050 [ 435.491753][T10222] wiphy_register+0x1d8b/0x2aa0 [ 435.496693][T10222] ? cfg80211_event_work+0x40/0x40 [ 435.501876][T10222] ? minstrel_ht_alloc+0x894/0xa20 [ 435.507148][T10222] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 435.513302][T10222] ieee80211_register_hw+0x2d48/0x39f0 [ 435.518865][T10222] ? ieee80211_register_hw+0xf41/0x39f0 [ 435.524472][T10222] ? ieee80211_register_hw+0xf41/0x39f0 [ 435.530092][T10222] ? ieee80211_tasklet_handler+0x20/0x20 [ 435.535791][T10222] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 435.541847][T10222] ? __debug_object_init+0xed/0x440 [ 435.547124][T10222] ? memset+0x1e/0x40 [ 435.551163][T10222] ? __hrtimer_init+0x189/0x270 [ 435.556087][T10222] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 435.561904][T10222] ? memcpy+0x3c/0x60 [ 435.565950][T10222] hwsim_new_radio_nl+0xab7/0xc90 [ 435.571065][T10222] genl_family_rcv_msg_doit+0x22f/0x350 [ 435.576672][T10222] ? end_current_label_crit_section+0x170/0x170 [ 435.582999][T10222] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 435.588982][T10222] ? bpf_lsm_capable+0x5/0x10 [ 435.593727][T10222] ? security_capable+0x85/0xb0 [ 435.598660][T10222] genl_rcv_msg+0x601/0x790 [ 435.603232][T10222] ? genl_bind+0x360/0x360 [ 435.607699][T10222] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 435.614144][T10222] netlink_rcv_skb+0x1ef/0x440 [ 435.619153][T10222] ? genl_bind+0x360/0x360 [ 435.623624][T10222] ? netlink_ack+0x1160/0x1160 [ 435.628466][T10222] ? down_read+0x1a8/0x2d0 [ 435.632935][T10222] genl_rcv+0x24/0x40 [ 435.636966][T10222] netlink_unicast+0x7ad/0x920 [ 435.641909][T10222] netlink_sendmsg+0x8ad/0xbd0 [ 435.646776][T10222] ? netlink_getsockopt+0x550/0x550 [ 435.652042][T10222] ? apparmor_socket_sendmsg+0x8a/0x330 [ 435.657669][T10222] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 435.663019][T10222] ? security_socket_sendmsg+0x7c/0xa0 [ 435.668538][T10222] ? netlink_getsockopt+0x550/0x550 [ 435.673895][T10222] ____sys_sendmsg+0x5ed/0x9a0 [ 435.678733][T10222] ? __sys_sendmsg_sock+0x30/0x30 [ 435.683845][T10222] ? __import_iovec+0x306/0x510 [ 435.688773][T10222] ? import_iovec+0x6f/0xa0 [ 435.693341][T10222] ___sys_sendmsg+0x2a2/0x360 [ 435.698105][T10222] ? __sys_sendmsg+0x2a0/0x2a0 [ 435.702992][T10222] __se_sys_sendmsg+0x1c3/0x2b0 [ 435.707909][T10222] ? __x64_sys_sendmsg+0x80/0x80 [ 435.712939][T10222] ? lockdep_hardirqs_on+0x94/0x140 [ 435.718196][T10222] do_syscall_64+0x4c/0xa0 [ 435.722677][T10222] ? clear_bhb_loop+0x60/0xb0 [ 435.727418][T10222] ? clear_bhb_loop+0x60/0xb0 [ 435.732164][T10222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.738121][T10222] RIP: 0033:0x7f6d4399de99 [ 435.742588][T10222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.762251][T10222] RSP: 002b:00007f6d448d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.770725][T10222] RAX: ffffffffffffffda RBX: 00007f6d43c25fa0 RCX: 00007f6d4399de99 [ 435.778754][T10222] RDX: 0000000007000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 435.786899][T10222] RBP: 00007f6d43a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 435.794933][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.802957][T10222] R13: 00007f6d43c26038 R14: 00007f6d43c25fa0 R15: 00007fffc262ce88 [ 435.811013][T10222] [ 436.075140][T10237] netlink: 'syz.4.1929': attribute type 9 has an invalid length. [ 436.524825][T10249] netlink: 'syz.3.1936': attribute type 10 has an invalid length. [ 436.564113][T10249] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1936'. [ 437.060656][T10262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1938'. [ 437.082522][T10263] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 437.141378][T10263] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1939'. [ 438.414367][T10275] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1942'. [ 438.448102][T10275] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 438.470391][T10275] CPU: 1 PID: 10275 Comm: syz.2.1942 Not tainted syzkaller #0 [ 438.477963][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 438.488091][T10275] Call Trace: [ 438.491479][T10275] [ 438.494464][T10275] dump_stack_lvl+0x188/0x24e [ 438.499216][T10275] ? show_regs_print_info+0x12/0x12 [ 438.504486][T10275] ? load_image+0x410/0x410 [ 438.509049][T10275] sysfs_warn_dup+0x8a/0xa0 [ 438.513604][T10275] sysfs_do_create_link_sd+0xc0/0x110 [ 438.519037][T10275] device_add+0x83b/0x1050 [ 438.523517][T10275] wiphy_register+0x1d8b/0x2aa0 [ 438.528442][T10275] ? cfg80211_event_work+0x40/0x40 [ 438.533623][T10275] ? minstrel_ht_alloc+0x894/0xa20 [ 438.538796][T10275] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 438.544915][T10275] ieee80211_register_hw+0x2d48/0x39f0 [ 438.550439][T10275] ? ieee80211_register_hw+0xf41/0x39f0 [ 438.556034][T10275] ? ieee80211_register_hw+0xf41/0x39f0 [ 438.561642][T10275] ? ieee80211_tasklet_handler+0x20/0x20 [ 438.567325][T10275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 438.573272][T10275] ? __debug_object_init+0xed/0x440 [ 438.578533][T10275] ? memset+0x1e/0x40 [ 438.582675][T10275] ? __hrtimer_init+0x189/0x270 [ 438.587579][T10275] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 438.593363][T10275] ? memcpy+0x3c/0x60 [ 438.597396][T10275] hwsim_new_radio_nl+0xab7/0xc90 [ 438.602526][T10275] genl_family_rcv_msg_doit+0x22f/0x350 [ 438.608136][T10275] ? end_current_label_crit_section+0x170/0x170 [ 438.614429][T10275] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 438.620378][T10275] ? bpf_lsm_capable+0x5/0x10 [ 438.625099][T10275] ? security_capable+0x85/0xb0 [ 438.630011][T10275] genl_rcv_msg+0x601/0x790 [ 438.634562][T10275] ? genl_bind+0x360/0x360 [ 438.639022][T10275] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 438.645440][T10275] netlink_rcv_skb+0x1ef/0x440 [ 438.650264][T10275] ? genl_bind+0x360/0x360 [ 438.654727][T10275] ? netlink_ack+0x1160/0x1160 [ 438.659558][T10275] ? down_read+0x1a8/0x2d0 [ 438.664028][T10275] genl_rcv+0x24/0x40 [ 438.668052][T10275] netlink_unicast+0x7ad/0x920 [ 438.672886][T10275] netlink_sendmsg+0x8ad/0xbd0 [ 438.677721][T10275] ? netlink_getsockopt+0x550/0x550 [ 438.683095][T10275] ? apparmor_socket_sendmsg+0x8a/0x330 [ 438.688793][T10275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 438.694121][T10275] ? security_socket_sendmsg+0x7c/0xa0 [ 438.699624][T10275] ? netlink_getsockopt+0x550/0x550 [ 438.704905][T10275] ____sys_sendmsg+0x5ed/0x9a0 [ 438.709719][T10275] ? __sys_sendmsg_sock+0x30/0x30 [ 438.714780][T10275] ? __import_iovec+0x306/0x510 [ 438.719690][T10275] ? import_iovec+0x6f/0xa0 [ 438.724241][T10275] ___sys_sendmsg+0x2a2/0x360 [ 438.728995][T10275] ? __sys_sendmsg+0x2a0/0x2a0 [ 438.733862][T10275] __se_sys_sendmsg+0x1c3/0x2b0 [ 438.738769][T10275] ? __x64_sys_sendmsg+0x80/0x80 [ 438.743765][T10275] ? lockdep_hardirqs_on+0x94/0x140 [ 438.749015][T10275] do_syscall_64+0x4c/0xa0 [ 438.753473][T10275] ? clear_bhb_loop+0x60/0xb0 [ 438.758188][T10275] ? clear_bhb_loop+0x60/0xb0 [ 438.762908][T10275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.768927][T10275] RIP: 0033:0x7f12d3b9de99 [ 438.773376][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.793055][T10275] RSP: 002b:00007f12d4983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.801505][T10275] RAX: ffffffffffffffda RBX: 00007f12d3e25fa0 RCX: 00007f12d3b9de99 [ 438.809615][T10275] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 438.817634][T10275] RBP: 00007f12d3c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 438.825654][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.833652][T10275] R13: 00007f12d3e26038 R14: 00007f12d3e25fa0 R15: 00007fff1118aeb8 [ 438.841695][T10275] [ 438.851138][T10277] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1943'. [ 439.147346][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 439.343600][T10298] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 439.424558][T10299] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 439.438416][T10299] dvmrp1: ignored: set checksum disabled [ 439.541518][T10305] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1954'. [ 439.967741][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 440.005389][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.019878][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.493447][T10352] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 441.527702][T10352] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 441.578498][T10355] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 441.688189][T10355] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 441.736729][ T4292] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 443.251778][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 443.291412][T10405] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1992'. [ 444.790909][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 444.991644][T10448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2006'. [ 445.074253][T10450] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2009'. [ 445.390385][T10455] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2011'. [ 445.985099][T10462] FAULT_INJECTION: forcing a failure. [ 445.985099][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.091589][T10462] CPU: 0 PID: 10462 Comm: syz.2.2014 Not tainted syzkaller #0 [ 446.099178][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 446.109366][T10462] Call Trace: [ 446.112688][T10462] [ 446.115660][T10462] dump_stack_lvl+0x188/0x24e [ 446.120416][T10462] ? show_regs_print_info+0x12/0x12 [ 446.125668][T10462] ? load_image+0x410/0x410 [ 446.130228][T10462] ? __lock_acquire+0x7c40/0x7c40 [ 446.135356][T10462] should_fail_ex+0x390/0x4c0 [ 446.140186][T10462] _copy_from_user+0x2c/0x170 [ 446.144943][T10462] __sys_bpf+0x2ea/0x780 [ 446.149306][T10462] ? bpf_link_show_fdinfo+0x380/0x380 [ 446.154777][T10462] ? lock_chain_count+0x20/0x20 [ 446.159693][T10462] __x64_sys_bpf+0x78/0x90 [ 446.164165][T10462] do_syscall_64+0x4c/0xa0 [ 446.168645][T10462] ? clear_bhb_loop+0x60/0xb0 [ 446.173379][T10462] ? clear_bhb_loop+0x60/0xb0 [ 446.178106][T10462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.184075][T10462] RIP: 0033:0x7f12d3b9de99 [ 446.188559][T10462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.208208][T10462] RSP: 002b:00007f12d4983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.216691][T10462] RAX: ffffffffffffffda RBX: 00007f12d3e25fa0 RCX: 00007f12d3b9de99 [ 446.224697][T10462] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 446.232709][T10462] RBP: 00007f12d4983090 R08: 0000000000000000 R09: 0000000000000000 [ 446.240709][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.248720][T10462] R13: 00007f12d3e26038 R14: 00007f12d3e25fa0 R15: 00007fff1118aeb8 [ 446.256744][T10462] [ 446.622406][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 446.987967][T10485] netlink: 'syz.1.2023': attribute type 3 has an invalid length. [ 447.014200][T10485] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2023'. [ 447.247701][T10494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2025'. [ 448.333261][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 449.551287][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2043'. [ 450.481472][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 450.621952][T10562] netlink: 'syz.2.2049': attribute type 6 has an invalid length. [ 450.667473][T10562] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2049'. [ 450.913960][T10570] netlink: 'syz.4.2048': attribute type 10 has an invalid length. [ 451.386612][ T4292] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 452.696623][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2059'. [ 453.805428][ T4292] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 453.834966][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 454.152304][T10615] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 454.197897][T10615] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2065'. [ 454.249939][T10614] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 454.268777][T10614] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2065'. [ 454.545120][T10634] netlink: 'syz.1.2070': attribute type 6 has an invalid length. [ 454.570880][T10634] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2070'. [ 454.982648][ T4292] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 455.353605][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 455.509300][ T4292] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 457.095478][ T4292] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 457.159080][T10685] Dead loop on virtual device ip6_vti0, fix it urgently! [ 457.194459][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 457.257536][ T4292] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 457.401951][T10693] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.711746][T10713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2100'. [ 461.797030][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 461.802974][ T4292] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 461.866863][T10740] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2109'. [ 461.885206][T10740] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 461.894726][T10740] CPU: 1 PID: 10740 Comm: syz.1.2109 Not tainted syzkaller #0 [ 461.902247][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 461.912333][T10740] Call Trace: [ 461.915646][T10740] [ 461.918608][T10740] dump_stack_lvl+0x188/0x24e [ 461.923333][T10740] ? show_regs_print_info+0x12/0x12 [ 461.928569][T10740] ? load_image+0x410/0x410 [ 461.933118][T10740] sysfs_warn_dup+0x8a/0xa0 [ 461.937661][T10740] sysfs_do_create_link_sd+0xc0/0x110 [ 461.943092][T10740] device_add+0x83b/0x1050 [ 461.947735][T10740] wiphy_register+0x1d8b/0x2aa0 [ 461.952651][T10740] ? cfg80211_event_work+0x40/0x40 [ 461.957834][T10740] ? minstrel_ht_alloc+0x894/0xa20 [ 461.962996][T10740] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 461.969193][T10740] ieee80211_register_hw+0x2d48/0x39f0 [ 461.974709][T10740] ? ieee80211_register_hw+0xf41/0x39f0 [ 461.980296][T10740] ? ieee80211_register_hw+0xf41/0x39f0 [ 461.986094][T10740] ? ieee80211_tasklet_handler+0x20/0x20 [ 461.992049][T10740] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 461.997977][T10740] ? __debug_object_init+0xed/0x440 [ 462.003218][T10740] ? memset+0x1e/0x40 [ 462.007229][T10740] ? __hrtimer_init+0x189/0x270 [ 462.012111][T10740] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 462.017881][T10740] ? memcpy+0x3c/0x60 [ 462.021904][T10740] hwsim_new_radio_nl+0xab7/0xc90 [ 462.026977][T10740] genl_family_rcv_msg_doit+0x22f/0x350 [ 462.032550][T10740] ? end_current_label_crit_section+0x170/0x170 [ 462.038830][T10740] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 462.044772][T10740] ? bpf_lsm_capable+0x5/0x10 [ 462.049476][T10740] ? security_capable+0x85/0xb0 [ 462.054371][T10740] genl_rcv_msg+0x601/0x790 [ 462.058917][T10740] ? genl_bind+0x360/0x360 [ 462.063362][T10740] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 462.069771][T10740] netlink_rcv_skb+0x1ef/0x440 [ 462.074572][T10740] ? genl_bind+0x360/0x360 [ 462.079031][T10740] ? netlink_ack+0x1160/0x1160 [ 462.083847][T10740] ? down_read+0x1a8/0x2d0 [ 462.088313][T10740] genl_rcv+0x24/0x40 [ 462.092336][T10740] netlink_unicast+0x7ad/0x920 [ 462.097167][T10740] netlink_sendmsg+0x8ad/0xbd0 [ 462.102013][T10740] ? netlink_getsockopt+0x550/0x550 [ 462.107269][T10740] ? apparmor_socket_sendmsg+0x8a/0x330 [ 462.112892][T10740] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 462.118245][T10740] ? security_socket_sendmsg+0x7c/0xa0 [ 462.123760][T10740] ? netlink_getsockopt+0x550/0x550 [ 462.129044][T10740] ____sys_sendmsg+0x5ed/0x9a0 [ 462.133887][T10740] ? __sys_sendmsg_sock+0x30/0x30 [ 462.138970][T10740] ? __import_iovec+0x306/0x510 [ 462.143888][T10740] ? import_iovec+0x6f/0xa0 [ 462.148458][T10740] ___sys_sendmsg+0x2a2/0x360 [ 462.153194][T10740] ? __sys_sendmsg+0x2a0/0x2a0 [ 462.158034][T10740] __se_sys_sendmsg+0x1c3/0x2b0 [ 462.162931][T10740] ? __x64_sys_sendmsg+0x80/0x80 [ 462.167933][T10740] ? lockdep_hardirqs_on+0x94/0x140 [ 462.173167][T10740] do_syscall_64+0x4c/0xa0 [ 462.177627][T10740] ? clear_bhb_loop+0x60/0xb0 [ 462.182344][T10740] ? clear_bhb_loop+0x60/0xb0 [ 462.187065][T10740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.193087][T10740] RIP: 0033:0x7fbec4d9de99 [ 462.197536][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.217178][T10740] RSP: 002b:00007fbec5beb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.225624][T10740] RAX: ffffffffffffffda RBX: 00007fbec5025fa0 RCX: 00007fbec4d9de99 [ 462.233630][T10740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 462.241632][T10740] RBP: 00007fbec4e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 462.249638][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.257648][T10740] R13: 00007fbec5026038 R14: 00007fbec5025fa0 R15: 00007ffd33ad8758 [ 462.265662][T10740] [ 462.522086][T10748] netlink: 'syz.1.2112': attribute type 10 has an invalid length. [ 463.169758][T10771] netlink: 'syz.1.2119': attribute type 10 has an invalid length. [ 463.299687][T10768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2118'. [ 463.392200][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 463.753114][T10783] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2122'. [ 464.381623][T10794] netlink: 'syz.1.2127': attribute type 10 has an invalid length. [ 464.408499][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2127'. [ 464.425767][T10794] device dummy0 entered promiscuous mode [ 464.437858][T10794] bridge0: port 3(dummy0) entered blocking state [ 464.446657][T10794] bridge0: port 3(dummy0) entered disabled state [ 464.477178][T10794] bridge0: port 3(dummy0) entered blocking state [ 464.484359][T10794] bridge0: port 3(dummy0) entered forwarding state [ 464.716261][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 465.675363][T10821] device ip6gretap0 left promiscuous mode [ 465.719959][T10821] bridge0: port 3(ip6gretap0) entered disabled state [ 465.794533][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.866793][T10821] device bridge_slave_0 left promiscuous mode [ 465.883583][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.768692][T10827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2140'. [ 466.789057][T10835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2141'. [ 466.875405][T10848] netlink: 'syz.0.2145': attribute type 10 has an invalid length. [ 467.289120][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 467.837649][T10872] netlink: 'syz.1.2154': attribute type 6 has an invalid length. [ 467.958766][T10872] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.2154'. [ 468.107145][T10875] netlink: 126612 bytes leftover after parsing attributes in process `syz.1.2154'. [ 468.137352][T10875] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2154'. [ 468.701576][T10879] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2157'. [ 469.000370][T10884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2158'. [ 469.535921][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 469.557862][T10893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2161'. [ 471.208612][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.232471][T10915] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2169'. [ 471.302174][T10909] device bridge_slave_0 left promiscuous mode [ 471.331643][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.537131][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 472.512052][T10928] device syzkaller0 entered promiscuous mode [ 472.575641][T10932] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 472.785356][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 473.070632][T10938] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2175'. [ 476.047070][T10940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2177'. [ 476.060463][T10938] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 476.095597][T10938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 476.127706][T10938] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 476.225621][T10959] netlink: 'syz.0.2194': attribute type 6 has an invalid length. [ 476.251179][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 476.259302][T10959] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2194'. [ 476.633089][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.645631][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 476.765660][T10969] device bridge_slave_0 left promiscuous mode [ 476.825911][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.255172][T10990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2195'. [ 477.964948][T10999] netlink: 'syz.1.2198': attribute type 28 has an invalid length. [ 477.980861][T10998] netlink: 'syz.1.2198': attribute type 28 has an invalid length. [ 478.239549][ T4292] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 479.704504][T11025] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2207'. [ 481.546882][T11044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2213'. [ 481.663311][T11051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 481.677774][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 481.928363][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 482.433970][T11062] netlink: 'syz.3.2220': attribute type 3 has an invalid length. [ 482.496497][T11062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2220'. [ 483.534257][T11081] netlink: 'syz.1.2226': attribute type 3 has an invalid length. [ 483.564478][T11081] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2226'. [ 486.506835][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2235'. [ 489.145624][T11156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2254'. [ 489.717657][T11171] netlink: 'syz.1.2260': attribute type 21 has an invalid length. [ 490.101083][T11178] netlink: 'syz.1.2261': attribute type 21 has an invalid length. [ 490.159365][T11178] netlink: 'syz.1.2261': attribute type 7 has an invalid length. [ 490.280029][T11178] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 491.136770][T11202] netlink: 'syz.1.2268': attribute type 10 has an invalid length. [ 491.893554][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2272'. [ 493.041191][T11228] FAULT_INJECTION: forcing a failure. [ 493.041191][T11228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.081322][T11228] CPU: 1 PID: 11228 Comm: syz.4.2277 Not tainted syzkaller #0 [ 493.088876][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 493.099074][T11228] Call Trace: [ 493.102401][T11228] [ 493.105375][T11228] dump_stack_lvl+0x188/0x24e [ 493.110125][T11228] ? show_regs_print_info+0x12/0x12 [ 493.115382][T11228] ? load_image+0x410/0x410 [ 493.119937][T11228] ? __lock_acquire+0x7c40/0x7c40 [ 493.125020][T11228] should_fail_ex+0x390/0x4c0 [ 493.129766][T11228] _copy_from_user+0x2c/0x170 [ 493.134495][T11228] bpf_test_init+0xde/0x140 [ 493.139051][T11228] bpf_prog_test_run_xdp+0x488/0xf80 [ 493.144401][T11228] ? __lock_acquire+0x7c40/0x7c40 [ 493.149496][T11228] ? dev_put+0x80/0x80 [ 493.153664][T11228] ? dev_put+0x80/0x80 [ 493.157786][T11228] bpf_prog_test_run+0x31c/0x390 [ 493.162794][T11228] __sys_bpf+0x62b/0x780 [ 493.167100][T11228] ? bpf_link_show_fdinfo+0x380/0x380 [ 493.172548][T11228] ? lock_chain_count+0x20/0x20 [ 493.177464][T11228] __x64_sys_bpf+0x78/0x90 [ 493.181940][T11228] do_syscall_64+0x4c/0xa0 [ 493.186434][T11228] ? clear_bhb_loop+0x60/0xb0 [ 493.191188][T11228] ? clear_bhb_loop+0x60/0xb0 [ 493.195924][T11228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.201866][T11228] RIP: 0033:0x7f8d8f79de99 [ 493.206320][T11228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.225970][T11228] RSP: 002b:00007f8d8d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.234523][T11228] RAX: ffffffffffffffda RBX: 00007f8d8fa25fa0 RCX: 00007f8d8f79de99 [ 493.242538][T11228] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 493.250651][T11228] RBP: 00007f8d8d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.258665][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.266765][T11228] R13: 00007f8d8fa26038 R14: 00007f8d8fa25fa0 R15: 00007ffc87034168 [ 493.274799][T11228] [ 493.960895][T11249] netlink: 'syz.2.2286': attribute type 21 has an invalid length. [ 494.008790][T11249] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2286'. [ 494.316002][T11254] netlink: 'syz.4.2289': attribute type 27 has an invalid length. [ 496.229364][T11295] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2301'. [ 496.712162][T11297] netlink: 'syz.1.2302': attribute type 10 has an invalid length. [ 496.720398][T11297] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2302'. [ 497.837430][T11320] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2309'. [ 498.038890][T11323] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2310'. [ 498.599306][T11342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2315'. [ 499.058126][T11355] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2321'. [ 499.260418][T11355] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2321'. [ 499.342993][T11360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.397939][T11360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.432322][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.438861][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.395772][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 503.340726][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 504.711653][ T4292] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 505.005327][T11420] netlink: 'syz.1.2350': attribute type 10 has an invalid length. [ 505.935486][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 506.581048][T11439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2346'. [ 506.711365][T11438] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2348'. [ 508.046040][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 509.169778][T11485] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2366'. [ 509.645547][T11490] netlink: 'syz.1.2368': attribute type 21 has an invalid length. [ 509.668744][T11491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2367'. [ 510.088143][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 512.290724][T11516] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 512.382542][T11516] team0: Device ipvlan1 failed to register rx_handler [ 512.854388][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 514.136314][T11557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2389'. [ 514.959912][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 515.227792][T11579] netlink: 'syz.0.2397': attribute type 3 has an invalid length. [ 515.299600][T11582] netlink: 'syz.2.2399': attribute type 39 has an invalid length. [ 515.328953][T11579] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2397'. [ 515.675514][T11582] device hsr_slave_1 left promiscuous mode [ 516.430878][T11589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2401'. [ 516.441039][T11589] device caif0 entered promiscuous mode [ 516.446656][T11589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.715762][T11598] device syzkaller0 entered promiscuous mode [ 516.931118][T11609] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2408'. [ 517.217023][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 519.396898][T11609] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 519.417247][T11609] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 519.427483][T11609] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 520.136827][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 520.596657][T11662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2423'. [ 520.657720][T11669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2424'. [ 520.799761][T11668] device syzkaller0 entered promiscuous mode [ 521.034927][ T4292] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 522.077928][ T4292] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 524.355530][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2428'. [ 524.374165][T11687] netlink: 'syz.2.2431': attribute type 39 has an invalid length. [ 524.591682][T11725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2441'. [ 524.634538][T11726] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2440'. [ 525.170014][ T4292] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 525.792545][T11745] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 526.015199][T11749] device syzkaller0 entered promiscuous mode [ 526.699301][T11747] device syzkaller0 entered promiscuous mode [ 526.829905][T11757] wlan1: mtu less than device minimum [ 527.178581][ T4292] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 530.464664][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2459'. [ 530.820048][T11797] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 530.828837][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 531.292779][ T4292] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 532.765430][T11843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2481'. [ 532.840375][ T4292] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 533.596209][T11844] ------------[ cut here ]------------ [ 533.609494][T11844] WARNING: CPU: 0 PID: 11844 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 533.619465][T11844] Modules linked in: [ 533.623420][T11844] CPU: 0 PID: 11844 Comm: syz.4.2483 Not tainted syzkaller #0 [ 533.631048][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 533.641244][T11844] RIP: 0010:perf_pending_task+0x353/0x480 [ 533.647041][T11844] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 dc cf 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 533.666817][T11844] RSP: 0018:ffffc9000ca078e8 EFLAGS: 00010293 [ 533.673028][T11844] RAX: ffffffff81a7b3a3 RBX: ffff88801774d858 RCX: ffff88802d3a9e00 [ 533.681128][T11844] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 533.689241][T11844] RBP: ffff88801774d620 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 533.697278][T11844] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88802d3a9e00 [ 533.705389][T11844] R13: ffff888057f82160 R14: 0000000000000000 R15: 1ffff11002ee9ac4 [ 533.713491][T11844] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 533.722579][T11844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.729295][T11844] CR2: 0000200000366000 CR3: 000000002791a000 CR4: 00000000003506f0 [ 533.737764][T11844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 533.745909][T11844] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 533.754011][T11844] Call Trace: [ 533.757339][T11844] [ 533.760448][T11844] task_work_run+0x1d0/0x260 [ 533.765216][T11844] ? task_work_cancel+0x220/0x220 [ 533.770413][T11844] ? do_raw_spin_unlock+0x11d/0x230 [ 533.775685][T11844] do_exit+0x9d5/0x2570 [ 533.780094][T11844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 533.786156][T11844] ? put_task_struct+0x80/0x80 [ 533.791092][T11844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 533.797312][T11844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 533.803657][T11844] ? lockdep_hardirqs_on+0x94/0x140 [ 533.808995][T11844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 533.815244][T11844] do_group_exit+0x229/0x2e0 [ 533.820107][T11844] ? _raw_spin_unlock_irq+0x25/0x40 [ 533.825375][T11844] get_signal+0x1259/0x1340 [ 533.830085][T11844] arch_do_signal_or_restart+0xc4/0x1310 [ 533.836064][T11844] ? ct_nmi_exit+0x145/0x1c0 [ 533.840815][T11844] ? ct_irq_exit_irqson+0x113/0x170 [ 533.846265][T11844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 533.852427][T11844] ? get_sigframe_size+0x10/0x10 [ 533.857454][T11844] ? lock_chain_count+0x20/0x20 [ 533.862522][T11844] exit_to_user_mode_loop+0x70/0x110 [ 533.867979][T11844] exit_to_user_mode_prepare+0xee/0x180 [ 533.873695][T11844] syscall_exit_to_user_mode+0x16/0x40 [ 533.879301][T11844] do_syscall_64+0x58/0xa0 [ 533.883793][T11844] ? clear_bhb_loop+0x60/0xb0 [ 533.888763][T11844] ? clear_bhb_loop+0x60/0xb0 [ 533.893605][T11844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.899675][T11844] RIP: 0033:0x7f8d8f79de99 [ 533.904150][T11844] Code: Unable to access opcode bytes at 0x7f8d8f79de6f. [ 533.911410][T11844] RSP: 002b:00007f8d8d9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 533.919958][T11844] RAX: fffffffffffffe00 RBX: 00007f8d8fa25fa8 RCX: 00007f8d8f79de99 [ 533.927992][T11844] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d8fa25fa8 [ 533.936134][T11844] RBP: 00007f8d8fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 533.944231][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.952348][T11844] R13: 00007f8d8fa26038 R14: 00007ffc87034080 R15: 00007ffc87034168 [ 533.960469][T11844] [ 533.963550][T11844] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 533.970872][T11844] CPU: 0 PID: 11844 Comm: syz.4.2483 Not tainted syzkaller #0 [ 533.978376][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 533.988474][T11844] Call Trace: [ 533.991798][T11844] [ 533.994857][T11844] dump_stack_lvl+0x188/0x24e [ 533.999599][T11844] ? memcpy+0x3c/0x60 [ 534.003631][T11844] ? show_regs_print_info+0x12/0x12 [ 534.008885][T11844] ? load_image+0x410/0x410 [ 534.013459][T11844] panic+0x2d3/0x710 [ 534.017457][T11844] ? bpf_jit_dump+0xd0/0xd0 [ 534.022040][T11844] __warn+0x2f8/0x4f0 [ 534.026072][T11844] ? perf_pending_task+0x353/0x480 [ 534.031240][T11844] ? perf_pending_task+0x353/0x480 [ 534.036422][T11844] report_bug+0x2ba/0x4f0 [ 534.041021][T11844] ? perf_pending_task+0x353/0x480 [ 534.046198][T11844] handle_bug+0x3a/0x70 [ 534.050414][T11844] exc_invalid_op+0x16/0x40 [ 534.054973][T11844] asm_exc_invalid_op+0x16/0x20 [ 534.059885][T11844] RIP: 0010:perf_pending_task+0x353/0x480 [ 534.065672][T11844] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 dc cf 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 534.085323][T11844] RSP: 0018:ffffc9000ca078e8 EFLAGS: 00010293 [ 534.091428][T11844] RAX: ffffffff81a7b3a3 RBX: ffff88801774d858 RCX: ffff88802d3a9e00 [ 534.099701][T11844] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 534.107703][T11844] RBP: ffff88801774d620 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 534.115702][T11844] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88802d3a9e00 [ 534.123712][T11844] R13: ffff888057f82160 R14: 0000000000000000 R15: 1ffff11002ee9ac4 [ 534.131723][T11844] ? perf_pending_task+0x353/0x480 [ 534.136885][T11844] ? perf_pending_task+0x353/0x480 [ 534.142039][T11844] task_work_run+0x1d0/0x260 [ 534.146669][T11844] ? task_work_cancel+0x220/0x220 [ 534.151734][T11844] ? do_raw_spin_unlock+0x11d/0x230 [ 534.156968][T11844] do_exit+0x9d5/0x2570 [ 534.161177][T11844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 534.167286][T11844] ? put_task_struct+0x80/0x80 [ 534.172086][T11844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.178278][T11844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.184477][T11844] ? lockdep_hardirqs_on+0x94/0x140 [ 534.189712][T11844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.195926][T11844] do_group_exit+0x229/0x2e0 [ 534.200572][T11844] ? _raw_spin_unlock_irq+0x25/0x40 [ 534.205819][T11844] get_signal+0x1259/0x1340 [ 534.210423][T11844] arch_do_signal_or_restart+0xc4/0x1310 [ 534.216103][T11844] ? ct_nmi_exit+0x145/0x1c0 [ 534.220729][T11844] ? ct_irq_exit_irqson+0x113/0x170 [ 534.225965][T11844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 534.232015][T11844] ? get_sigframe_size+0x10/0x10 [ 534.237020][T11844] ? lock_chain_count+0x20/0x20 [ 534.241948][T11844] exit_to_user_mode_loop+0x70/0x110 [ 534.247275][T11844] exit_to_user_mode_prepare+0xee/0x180 [ 534.252867][T11844] syscall_exit_to_user_mode+0x16/0x40 [ 534.258355][T11844] do_syscall_64+0x58/0xa0 [ 534.262807][T11844] ? clear_bhb_loop+0x60/0xb0 [ 534.267515][T11844] ? clear_bhb_loop+0x60/0xb0 [ 534.272245][T11844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.278196][T11844] RIP: 0033:0x7f8d8f79de99 [ 534.282656][T11844] Code: Unable to access opcode bytes at 0x7f8d8f79de6f. [ 534.289697][T11844] RSP: 002b:00007f8d8d9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.298147][T11844] RAX: fffffffffffffe00 RBX: 00007f8d8fa25fa8 RCX: 00007f8d8f79de99 [ 534.306149][T11844] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d8fa25fa8 [ 534.314148][T11844] RBP: 00007f8d8fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 534.322145][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.330141][T11844] R13: 00007f8d8fa26038 R14: 00007ffc87034080 R15: 00007ffc87034168 [ 534.338157][T11844] [ 534.341799][T11844] Kernel Offset: disabled [ 534.346142][T11844] Rebooting in 86400 seconds..