last executing test programs: 4.568211923s ago: executing program 3 (id=2088): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.793543663s ago: executing program 0 (id=2089): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r3 = syz_clone(0x2000000, &(0x7f00000002c0)="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", 0xff, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="e1fa2732fdb21525fef22537d115dc40d048") perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x7, 0x7, 0xf, 0x0, 0x0, 0xfc7a48f5fc8bc42e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3ff, 0x80000001}, 0x2601, 0x9, 0x5, 0x9, 0xfffffffffffffff9, 0x7fffffff, 0x10, 0x0, 0x380b, 0x0, 0x6}, r3, 0x5, r0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x58, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0x4, [{0xe, 0x4a, 0x3}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000001bc0)=""/212, 0x43, 0xd4, 0x1, 0x2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001d80)={0x6, 0x0}, 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002040)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @generic={0x0, 0x3, 0x0, 0x8, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='syzkaller\x00', 0xfd68, 0x3a, &(0x7f0000001ec0)=""/58, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001f40)={0x4, 0x1, 0x9, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001fc0)=[{0x1, 0x2, 0x9, 0x2}, {0x4, 0x4, 0x0, 0x4}, {0x3, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xd, 0x2}, {0x3, 0x2, 0x8, 0xc}, {0x3, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x5, 0xcd0fa74a41b1cb26}], 0x10, 0xffffffff}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002100)={0xffffffffffffffff, 0xd, 0x8}, 0xc) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000002140)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x5814eb254d4bd8b5, 0x2, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x40, 0x3, 0x6, 0x7, 0x7}], &(0x7f0000000240)='GPL\x00', 0x1, 0xcc, &(0x7f0000001980)=""/204, 0x41000, 0x4, '\x00', r4, @fallback=0x34, r5, 0x8, &(0x7f0000001d00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001d40)={0x4, 0x2, 0x8}, 0x10, r6, r7, 0xa, &(0x7f0000002240)=[r8, r9, r10, r1], &(0x7f0000002280)=[{0x3, 0x2, 0x10, 0xb}, {0x0, 0x2, 0x0, 0xc}, {0x4, 0x4, 0x2, 0x1}, {0xaf00, 0x3, 0x9, 0xa}, {0x4, 0x1, 0xb, 0x8}, {0x3, 0x1, 0x3}, {0x0, 0x1, 0x5, 0x3}, {0x0, 0x5, 0xc, 0x1}, {0x0, 0x1, 0x8, 0x8}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) sendmsg$inet(r11, &(0x7f0000001840)={&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000480)="7646e0e58de48cf64a5a84c61bab74c95fda376d1fae9e3d8a60b5d00402f47a61aaab44655ed778558de967b1768d93170dd8b9d4e951d2f54923a49b2240812a655f2d11213c93e880e79f7374c5333b3e82d879b2caa004a904e2d61de81e664a52fe8aee53172790df07b8c4360dd5d16487f37855c598bd449efc5afb797fce59b12f96b3f365fe6cd0be49d136bbc4cdaeda2aa6747d8778038b4a21128e2fe502890e0a01da439bc747dfcd7f8d55c7314b5eb8008ec5eb6f8d4435e3436641c1c54cda1eb6d1424556e6aca2", 0xd0}, {&(0x7f0000000580)="7bb475f3b8ab1d7cd675faebf0aed8ad59d4b4c09851dd36f725dab89d3e4206163d13de373dd90c3ec50ee06aa46c9893dc0002e925bf650971bb416ddaa415b8fd238d460f1bb4b6d9c6ab6197b616c3b749c09197a0b8483f82024df8b0e8903592c609520b19227ffcbbe19b2d7e70a9a366d4df23ac71", 0x79}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="bf7d95f6464bbefde95b29d6cbb75914c0b0c793", 0x14}, {&(0x7f0000001640)="a490956b19f280b6b42c5bdceae61dea7cd85116a3bce735464c4b5485dd4d774fb114dab7a54eb82b1a43187a0ca65beebf05590b7617fede13b0abe565347bab586af516e873b604b43c37928b8e186357051764c1b319c038e9dae220ea9e40f6e30d12a9b2dfdaf887a97cd3faa21a11dab2a9263e31e04c543d7eea78849b94a67466aef4", 0x87}, {&(0x7f0000001700)="6fa6521ef062ba2e67156e22dea56f6748a0a0a98cecf51bb2cf43271f27abdea9ea8886940e020f79b7214bc0c3dbfade5b437bb9dfe9cb6a076c77bfccd6743d7ca30bea36526d97962a94786e2dc0c4e3d89efc05843ef041024821b96cc968262a8e6f", 0x65}, {&(0x7f0000001780)="8b", 0x1}], 0x7}, 0x20004801) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f3, &(0x7f0000000080)) 3.575975979s ago: executing program 3 (id=2090): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x2d, 0x0, 0x88) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x12) 3.555418969s ago: executing program 2 (id=2091): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xf1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188f7b62aa73f72cc9f0ba1f8483500000000010000000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 3.414199132s ago: executing program 0 (id=2093): socket$kcm(0x29, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x1, [{0x4, 0xfff, 0x2}, {0x10, 0x10001, 0x2}, {0xc, 0x2, 0x4}, {0xf, 0x677, 0x7}]}, @const={0xa, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000580)=""/120, 0x64, 0x78, 0x1, 0x4}, 0x28) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0xfffffff5, 0x3f, &(0x7f00000007c0)=""/63, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x1, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x2, 0x4, 0x7}], 0x10, 0x9}, 0x94) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x10, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xb}, @exit, @alu={0x4, 0x0, 0x3, 0x4, 0x8, 0xfffffffffffffff8, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff80}}], &(0x7f0000000140)='GPL\x00', 0xf8, 0x43, &(0x7f0000000180)=""/67, 0x41000, 0x48, '\x00', r1, @fallback=0xf, r2, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x6, 0x81, 0x10000}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000a80)=[r4, 0x1, r5], &(0x7f0000000ac0)=[{0x4, 0x2, 0x3, 0x6}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0xc52}, 0x94) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000bc0), 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000c00)={r7}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x9, 0x9, 0x400, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x6}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000d00)='\x00') (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000000d80)=r1) unlink(&(0x7f0000000dc0)='./file0\x00') (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={r5, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x20, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x407}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x0, 0x3, 0x9, 0x7, 0xd00708fec1fa0dcd, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @alu={0x0, 0x0, 0x0, 0x7, 0x1, 0x30, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f40)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x22, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[r0, 0xffffffffffffffff], 0x0, 0x10, 0x100}, 0x94) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x7, 0x7, 0x6, 0x2, r4, 0x80000001, '\x00', r1, r2, 0x4, 0x2, 0x4, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x11, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x8}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000001180)='GPL\x00', 0x8, 0xb2, &(0x7f00000011c0)=""/178, 0x41000, 0x42, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000001280)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0x1, r14, r4], 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_ID(r14, 0x80082407, &(0x7f0000001440)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001480)={'ip6erspan0\x00', @local}) (async) r15 = getpid() (async) r16 = openat$cgroup_ro(r8, &(0x7f00000014c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$cgroup_pid(r16, &(0x7f0000001500)=r15, 0x12) (async) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000016c0)={@map=r17, 0xf, 0x1, 0x821, &(0x7f00000015c0)=[0x0], 0x1, 0x0, &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001700)={@cgroup=r9, r6, 0x6, 0x8, 0x0, @void, @value=r13, @void, @void, r18}, 0x20) (async) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) sendmsg$kcm(r16, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001740)="986250b85cc4df85a41a65bd1f3e96f46e6739ee2ce06fcf15ae356edaf919a22a817db017997b7f616235ba15dcaf6f4786d7b858de132c6535d551195288f03882e8e1f2682d6aaf0d9ab46b4fd1a6492078b86c22", 0x56}, {&(0x7f00000017c0)="54d9e64c6d784ad35c1531ea0e7beb41e2f0b00c1796e55e1c8918950b3c154dfb72bc213f50ff3ec260a5f3c206edf991b98f02d22f3edc7615a05ec31e2258564af696b9b83fc36f11f92249d50e3e42950cf5b7f3394599bdca52a7db8075d33a685b16fe189ad4272898ff6782", 0x6f}, {&(0x7f0000001840)="286d64b27f4a4c4d538a374edaed899a86bf0604076cb1728c2d4f94802e6cf2b3f6c7ddc8a1b0bcc14abdd956c4799c9cd35ea8beb5523d07067eaeb0d619bc7bfec017e16f9a68a3ba01e732c277a9fdf1a49de0fb7597537daee3f47a7ab333198b1eafdbf2a08958848b371447bb90ffe71df95abc488b0025f1eadf47e5709e98c8b313f6549bd873adfd9fb5887a9cfe0fa4bab2642a643ccfb2771eef6c3ccaf008edbb16d32321f92721817ba46af0dbd0492e138bf6d995706ac3cf9fd4db91ea4ab4b0f923e699625d71f9b8ca3c73224f63ce8a4bd0", 0xdb}, {&(0x7f0000001940)="24f363f172d7dd1263de6e0bb193a4288e99bede43d71479246e4244b0079cead0146720412115b562a3392b3465ff8ecc4d67b631ffa567e53275c9f100cdfb2e6ccddd8b9710b5ddf13291262e98c86324a8fd05eae7a3f752f06ae6607e7640141818725f3858639b0fbfb3b5be2aa4f067e7fe977ff0e98af8b5e5208fa84c2df7387ee492e2e5fe2eed5df7bba64c4ba7d6940b1fa7f343e5641e11c5f71f69237f3d9e3d639d4621cc97cd8b82b72dc15c5aee601663afb160b7f852180473a8b933f37e0bf3a0900ad40be560ad8c", 0xd2}], 0x4, &(0x7f0000001a80)=[{0x68, 0x115, 0x5, "3c91801960235621e66b6a0a06fba63f15e9f25dccc96c3395a26151514970f82564089ce3bd42c81b3bac421b5064ab0a3fd16abcab3a2894c87c879cd486193ea6d575283530023c034e80c555975d8d35a771415fd8"}, {0x50, 0x116, 0xd2, "e670dc1c7d869038e81459244525038695ca5a80c7d6147b67346ddb5e6f1a5ff03f308161c2a5984667d652b0a8702f178bf90d7f8c340e2635"}, {0x28, 0x111, 0x7, "2f04bf0e1843d3edfd3c85514455712b7d82dd2628"}, {0xb8, 0x102, 0x5, "3e75d53f94bc3d8227fb5390a1a44d9f7a47a3a53f322c82733c5dfb7e0669b247e9bac9c202644c5714eff4a2471e3feec9865f14e0a5558304480c2af3c4b3f8d6b4a345e73c799d12bbdf9eace7905bf4e5428bb0b481ba10dfc0c1cf6d150e4ff1fff973c26318409d6fa7f280777bf4936f5317460ac172a96750fcb8e976aebd5502bda996b1457264438e33dde3f12f1867fd6211385c8c14890f2c7c95957e"}, {0x100, 0x0, 0x5, "07d2611af7e67d18a916765e73ddbe5f35e1c50e0b5dfb741c4e5d3705b855f0a30655a0e252a66618c9b1502d415cb0b8b8687326c4f8e16d8390cc3fe6c7fdb3060730d1ba3d8510b078944d3b2e35870351ac1aa6894d41fd465a9c00a522551f7503bceb1653add5b0e26053b62cb063005539724796a71a2b19f22c478676bc4ed3d69207f7b93be330eaf6d4f2d0357b37aa6fd3aabcb73a60a3ac3c501058e3c4beced40d69667917db765826c0787f5de7779d704d0d0e6f1b26436f7230250e6068f572a12cf556964b911038fc5483605541fb1c7c9c77dcfc14d37f69588ad2381491943ec2"}, {0x10, 0x108, 0x5}, {0x1010, 0x108, 0x101, "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"}], 0x12b8}, 0x0) 3.251593997s ago: executing program 3 (id=2095): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xf) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xa4, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) 3.093284401s ago: executing program 3 (id=2097): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000300"/28], 0x50) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1}}}], 0x20}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10101}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x11009, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="01e755e0ea", 0x5}], 0x1}, 0x20044080) close(r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 3.093069951s ago: executing program 0 (id=2098): syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.264947872s ago: executing program 2 (id=2099): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="003ca6bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0xa0080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x1}, 0x8092, 0x20000003, 0x1ff, 0x4, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x44000000002008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x5, 0x84) write$cgroup_devices(r3, 0x0, 0xfffffeff) 1.717172176s ago: executing program 2 (id=2102): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000200000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_config_ext={0xff, 0x9}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a05fef8ffffff71a400fe0000000071109e00000000001d300200000000004704000001ed00ff0f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ae5d82ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8d8c12f5d7df14c8008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10}, 0xfffffffffffffff8) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879", 0xb}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) 1.475732472s ago: executing program 2 (id=2103): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x2d, 0x0, 0x88) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12) 1.469760342s ago: executing program 0 (id=2104): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff", 0x21}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18000000}, 0x48) 1.197477629s ago: executing program 0 (id=2106): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0xb}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r1}) 1.135272521s ago: executing program 2 (id=2108): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xf1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188f7b62aa73f72cc9f0ba1f8483500000000010000000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 879.699117ms ago: executing program 1 (id=2109): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80044944, 0x0) sendmsg$kcm(r0, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x9, 0xfd, 0x2, 0xa2, 0x0, 0x2, 0x81100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2800, 0x2, @perf_config_ext={0x6, 0x467}, 0x82, 0x1, 0x27, 0x9, 0x1, 0x4, 0x4, 0x0, 0x8, 0x0, 0x4}) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) mkdir(&(0x7f00000000c0)='./cgroup/file0\x00', 0x1c7) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000100)='./cgroup/file0\x00', 0x1}, 0x18) 799.994049ms ago: executing program 3 (id=2110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="003ca6bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0xa0080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x1}, 0x8092, 0x20000003, 0x1ff, 0x4, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x44000000002008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x5, 0x84) write$cgroup_devices(r3, 0x0, 0xfffffeff) 716.104621ms ago: executing program 1 (id=2111): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000200000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_config_ext={0xff, 0x9}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10}, 0xfffffffffffffff8) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879", 0xb}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) 578.070955ms ago: executing program 3 (id=2112): syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 485.598858ms ago: executing program 1 (id=2113): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b56d25a80648c2590f90324fc60", 0x14}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000010000000000000000000000850000007b000000b7080000000000007baaf8ff00000000b5080000098000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000080000008500d700b300000095000000000000005ce6b3f4167d496d7bc7b532ba1e299964be230000000000000000000d4a67dd7b351ddb4b9e05a770e187662fc8c3a36ca0ffe033a1a44b8557b48ab2ee1af350d4dc09ae4416ac884dd7b6fce18723cd916df6c0d5b27b91b1a02646c984308cf00ac04a8ad0f7fcbd7f46c23db16ca7ea73c859"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000e27f00000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x8f, 0x45, &(0x7f0000000380)="a297870ebb7c6b8850d1ba0c63f0e9f9771b0fe41b3c5babe859f3c2adf25a25e99d26875c0cf30b9aa9f199e2e4e435750c79d1b68c46dc055eac74858b95aae0fa49b90b147659f04e3aabbc1b5ef6873d41608b6ccd92b9882548b79822320bcfffa9a401695a8295538c1c0cbf8c6b72492002becbe315adda8afabfb7af1968694afb00"/143, &(0x7f0000000140)="c27730813c0df6d7881beb1ca46f72a15d00e18641e428398484262c76d71dd28548af96eb6d1f464df934c817bbba29de0c1b2bb062c6700a154122402d3050f366ce6c73"}, 0x50) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x77, &(0x7f0000000000), 0x62) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r8 = openat$cgroup_devices(r2, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a3409776d0a89"], 0xa) 247.976553ms ago: executing program 1 (id=2114): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xf) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xa4, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) 77.419568ms ago: executing program 1 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 71.657878ms ago: executing program 0 (id=2116): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x2d, 0x0, 0x88) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12) 17.893059ms ago: executing program 1 (id=2117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r1, 0xb, 0x0, 0xb6a4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00 \x00\x00', @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="73fcc3fcff8bc3f84d73b5efde3199c149dde3a9c3540b90fbe6f1784e71710c73927b88eac0648a4895836c6f306266bbda622dfa34c53913c04d74252a59ba6582effc12fc0401000000000000002a822265346d28ab471c91baf87bfb4dc4d706da698188f2c25c5ce96a9789788708b7fad3d056d452dff8f537ef5ffa943d42e9e1abcb5684e5e4c3", @ANYRES64=r4], 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180f42ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 0s ago: executing program 2 (id=2118): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000300"/28], 0x50) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1}}}], 0x20}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10101}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x11009, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="01e755e0ea", 0x5}], 0x1}, 0x20044080) close(r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _copy_from_user+0x2f/0xe0 [ 235.763923][ T8221] __sys_bpf+0x23e/0x890 [ 235.768240][ T8221] ? bpf_link_show_fdinfo+0x390/0x390 [ 235.773726][ T8221] ? lock_chain_count+0x20/0x20 [ 235.778665][ T8221] __x64_sys_bpf+0x7c/0x90 [ 235.783179][ T8221] do_syscall_64+0x55/0xb0 [ 235.787677][ T8221] ? clear_bhb_loop+0x40/0x90 [ 235.792421][ T8221] ? clear_bhb_loop+0x40/0x90 [ 235.797181][ T8221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.803250][ T8221] RIP: 0033:0x7f0e6239e019 [ 235.807720][ T8221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.827473][ T8221] RSP: 002b:00007f0e6328e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.835981][ T8221] RAX: ffffffffffffffda RBX: 00007f0e62625fa0 RCX: 00007f0e6239e019 [ 235.844022][ T8221] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 000000000000000f [ 235.852062][ T8221] RBP: 00007f0e6328e090 R08: 0000000000000000 R09: 0000000000000000 [ 235.860621][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.868915][ T8221] R13: 00007f0e62626038 R14: 00007f0e62625fa0 R15: 00007ffd08dbc2e8 [ 235.877399][ T8221] [ 236.303331][ T2948] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.314030][ T7750] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.710084][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 236.900479][ T52] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 236.982976][ T8243] netlink: 'syz.3.866': attribute type 29 has an invalid length. [ 237.026648][ T8243] netlink: 'syz.3.866': attribute type 29 has an invalid length. [ 237.455027][ T8247] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 237.525166][ T8247] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.867'. [ 237.774330][ T8243] syzkaller0: entered promiscuous mode [ 237.796000][ T8243] syzkaller0: entered allmulticast mode [ 238.949923][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 244.148736][ T8311] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.886'. [ 244.472317][ T8318] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 244.485913][ T8318] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.893'. [ 245.248180][ T8322] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.895'. [ 245.276524][ T8322] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.895'. [ 245.292598][ T8322] tipc: Started in network mode [ 245.302533][ T8322] tipc: Node identity b, cluster identity 57 [ 245.345884][ T8322] tipc: Node number set to 11 [ 245.642369][ T8340] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.900'. [ 246.249963][ T8352] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 246.417962][ T8351] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.904'. [ 246.911410][ T8370] netlink: 'syz.3.911': attribute type 39 has an invalid length. [ 251.710429][ T52] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 252.223510][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 253.127093][ T52] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 256.070184][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.084446][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.412883][ T8461] FAULT_INJECTION: forcing a failure. [ 256.412883][ T8461] name failslab, interval 1, probability 0, space 0, times 0 [ 256.425687][ T8461] CPU: 0 PID: 8461 Comm: syz.0.940 Not tainted syzkaller #0 [ 256.433040][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.443151][ T8461] Call Trace: [ 256.446471][ T8461] [ 256.449444][ T8461] dump_stack_lvl+0x18c/0x250 [ 256.454208][ T8461] ? lock_chain_count+0x20/0x20 [ 256.459108][ T8461] ? show_regs_print_info+0x20/0x20 [ 256.464355][ T8461] ? load_image+0x420/0x420 [ 256.468916][ T8461] ? finish_task_switch+0x262/0x8f0 [ 256.474266][ T8461] ? finish_task_switch+0x262/0x8f0 [ 256.479532][ T8461] should_fail_ex+0x394/0x4c0 [ 256.484284][ T8461] should_failslab+0x9/0x20 [ 256.488874][ T8461] slab_pre_alloc_hook+0x59/0x300 [ 256.493976][ T8461] kmem_cache_alloc+0x5a/0x2c0 [ 256.498843][ T8461] ? skb_clone+0x1eb/0x370 [ 256.503322][ T8461] skb_clone+0x1eb/0x370 [ 256.507620][ T8461] bpf_clone_redirect+0x16d/0x4a0 [ 256.512744][ T8461] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 256.518261][ T8461] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 256.524295][ T8461] ? preempt_schedule+0xc0/0xd0 [ 256.529205][ T8461] ? bpf_test_run+0x174/0x870 [ 256.533982][ T8461] ? preempt_schedule_common+0x82/0xc0 [ 256.539506][ T8461] ? schedule_preempt_disabled+0x20/0x20 [ 256.545200][ T8461] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 256.551242][ T8461] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 256.556624][ T8461] ? lock_chain_count+0x20/0x20 [ 256.561537][ T8461] ? preempt_schedule_thunk+0x1a/0x30 [ 256.566982][ T8461] ? __local_bh_disable_ip+0x108/0x1a0 [ 256.572500][ T8461] ? __cant_sleep+0x220/0x220 [ 256.577264][ T8461] ? __local_bh_enable_ip+0x14b/0x1c0 [ 256.582692][ T8461] ? _local_bh_enable+0xa0/0xa0 [ 256.587602][ T8461] ? bpf_test_timer_continue+0x135/0x380 [ 256.593292][ T8461] ? bpf_test_run+0x174/0x870 [ 256.598042][ T8461] bpf_test_run+0x2df/0x870 [ 256.602623][ T8461] ? bpf_test_run+0x174/0x870 [ 256.607367][ T8461] ? dst_hold+0x70/0x70 [ 256.611577][ T8461] ? __skb_checksum+0x800/0x800 [ 256.616492][ T8461] ? convert___skb_to_skb+0x1f9/0x590 [ 256.621921][ T8461] ? __asan_memcpy+0x40/0x70 [ 256.626572][ T8461] ? convert___skb_to_skb+0x2f6/0x590 [ 256.632008][ T8461] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 256.637467][ T8461] ? cpu_online+0x60/0x60 [ 256.641849][ T8461] bpf_prog_test_run+0x31f/0x390 [ 256.646849][ T8461] __sys_bpf+0x49d/0x890 [ 256.651146][ T8461] ? bpf_link_show_fdinfo+0x390/0x390 [ 256.656589][ T8461] ? lock_chain_count+0x20/0x20 [ 256.661500][ T8461] __x64_sys_bpf+0x7c/0x90 [ 256.665969][ T8461] do_syscall_64+0x55/0xb0 [ 256.670436][ T8461] ? clear_bhb_loop+0x40/0x90 [ 256.675169][ T8461] ? clear_bhb_loop+0x40/0x90 [ 256.679910][ T8461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.685860][ T8461] RIP: 0033:0x7fe542d9e019 [ 256.690331][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.710199][ T8461] RSP: 002b:00007fe543bfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.718684][ T8461] RAX: ffffffffffffffda RBX: 00007fe543025fa0 RCX: 00007fe542d9e019 [ 256.726715][ T8461] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 256.734747][ T8461] RBP: 00007fe543bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 256.742775][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.750803][ T8461] R13: 00007fe543026038 R14: 00007fe543025fa0 R15: 00007fff881241d8 [ 256.758882][ T8461] [ 257.270993][ T8475] netlink: 'syz.0.944': attribute type 10 has an invalid length. [ 257.842351][ T52] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 260.459593][ T8487] netlink: 'syz.1.956': attribute type 10 has an invalid length. [ 260.640937][ T8490] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.956'. [ 261.893586][ T8487] team0: Device veth1_vlan failed to register rx_handler [ 261.933667][ T8489] netlink: 160 bytes leftover after parsing attributes in process `syz.1.956'. [ 261.945794][ T8489] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 262.154456][ T8499] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 262.241121][ T8499] netlink: 160 bytes leftover after parsing attributes in process `syz.0.958'. [ 262.285054][ T8499] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 262.491619][ T8499] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.958'. [ 263.686724][ T8517] netlink: 'syz.0.955': attribute type 21 has an invalid length. [ 264.042192][ T8524] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 264.113013][ T8524] team0: Device veth1_vlan failed to register rx_handler [ 264.304358][ T8525] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 264.355319][ T8528] bridge0: port 3(team0) entered disabled state [ 264.400690][ T8524] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.959'. [ 264.423970][ T8528] bridge_slave_1: left allmulticast mode [ 264.434417][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.453143][ T8525] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.960'. [ 264.470500][ T8528] bridge_slave_0: left allmulticast mode [ 264.478619][ T8528] bridge_slave_0: left promiscuous mode [ 264.499690][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.695400][ T8526] netlink: 160 bytes leftover after parsing attributes in process `syz.2.959'. [ 264.705049][ T8526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.722567][ T8529] netlink: 160 bytes leftover after parsing attributes in process `syz.0.960'. [ 264.916364][ T8529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.934544][ T8533] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.962'. [ 265.224966][ T8540] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 265.267652][ T8540] team0: Device veth1_vlan failed to register rx_handler [ 265.406348][ T8540] netlink: 160 bytes leftover after parsing attributes in process `syz.3.966'. [ 265.417356][ T8540] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.577523][ T8552] FAULT_INJECTION: forcing a failure. [ 265.577523][ T8552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.632960][ T8552] CPU: 1 PID: 8552 Comm: syz.2.969 Not tainted syzkaller #0 [ 265.640357][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.650641][ T8552] Call Trace: [ 265.653970][ T8552] [ 265.656950][ T8552] dump_stack_lvl+0x18c/0x250 [ 265.661697][ T8552] ? show_regs_print_info+0x20/0x20 [ 265.666988][ T8552] ? load_image+0x420/0x420 [ 265.671555][ T8552] ? __might_fault+0xaa/0x120 [ 265.676288][ T8552] ? __lock_acquire+0x7d80/0x7d80 [ 265.681379][ T8552] should_fail_ex+0x394/0x4c0 [ 265.686203][ T8552] _copy_from_iter+0x1cd/0x1290 [ 265.691105][ T8552] ? __might_fault+0xaa/0x120 [ 265.695843][ T8552] ? copyout_mc+0x70/0x70 [ 265.700229][ T8552] ? copyout_mc+0x70/0x70 [ 265.704609][ T8552] ? __virt_addr_valid+0x10c/0x380 [ 265.709785][ T8552] ? page_copy_sane+0x16a/0x270 [ 265.714690][ T8552] copy_page_from_iter+0x7b/0x100 [ 265.719803][ T8552] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 265.725751][ T8552] tun_get_user+0xc84/0x3d70 [ 265.730478][ T8552] ? aa_file_perm+0x3e3/0xee0 [ 265.735221][ T8552] ? rcu_read_unlock+0xa0/0xa0 [ 265.740063][ T8552] ? tun_get+0x1c/0x2e0 [ 265.744281][ T8552] ? __lock_acquire+0x7d80/0x7d80 [ 265.749374][ T8552] ? tun_get+0x1c/0x2e0 [ 265.753600][ T8552] tun_chr_write_iter+0x119/0x200 [ 265.758685][ T8552] vfs_write+0x474/0x9a0 [ 265.763009][ T8552] ? file_end_write+0x250/0x250 [ 265.767933][ T8552] ? __fget_files+0x3fc/0x460 [ 265.772800][ T8552] ? __fdget_pos+0x1d8/0x330 [ 265.777456][ T8552] ? ksys_write+0x74/0x260 [ 265.782024][ T8552] ksys_write+0x151/0x260 [ 265.786422][ T8552] ? __ia32_sys_read+0x90/0x90 [ 265.791262][ T8552] ? lockdep_hardirqs_on+0x98/0x150 [ 265.796533][ T8552] do_syscall_64+0x55/0xb0 [ 265.801009][ T8552] ? clear_bhb_loop+0x40/0x90 [ 265.805781][ T8552] ? clear_bhb_loop+0x40/0x90 [ 265.810574][ T8552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.816621][ T8552] RIP: 0033:0x7f009a99e019 [ 265.821099][ T8552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.840788][ T8552] RSP: 002b:00007f009b8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.849291][ T8552] RAX: ffffffffffffffda RBX: 00007f009ac25fa0 RCX: 00007f009a99e019 [ 265.857427][ T8552] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 265.865531][ T8552] RBP: 00007f009b8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 265.873553][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.881581][ T8552] R13: 00007f009ac26038 R14: 00007f009ac25fa0 R15: 00007fff1a7eb0f8 [ 265.889620][ T8552] [ 266.427326][ T8561] netlink: 'syz.2.971': attribute type 21 has an invalid length. [ 266.437377][ T8561] __nla_validate_parse: 1 callbacks suppressed [ 266.437466][ T8561] netlink: 156 bytes leftover after parsing attributes in process `syz.2.971'. [ 266.652624][ T8565] sit0: entered allmulticast mode [ 266.822792][ T8565] sit0: entered promiscuous mode [ 266.988713][ T8577] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 267.011915][ T8577] team0: Device veth1_vlan failed to register rx_handler [ 267.065216][ T8578] netlink: 'syz.1.974': attribute type 10 has an invalid length. [ 267.089608][ T8578] team0: Device veth1_vlan failed to register rx_handler [ 267.134138][ T8579] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.974'. [ 267.181638][ T8577] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.973'. [ 267.197809][ T8572] netlink: 'syz.1.974': attribute type 10 has an invalid length. [ 267.307354][ T8572] team0: Device veth1_vlan failed to register rx_handler [ 267.381214][ T8571] netlink: 160 bytes leftover after parsing attributes in process `syz.3.973'. [ 267.404646][ T8571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.431172][ T12] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.431926][ T7750] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 270.349450][ T8606] netlink: 'syz.1.986': attribute type 21 has an invalid length. [ 270.366860][ T8606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.986'. [ 270.714183][ T8608] sit0: entered allmulticast mode [ 270.923782][ T8617] sit0: entered promiscuous mode [ 271.173206][ T8622] netlink: 830 bytes leftover after parsing attributes in process `syz.0.987'. [ 271.636983][ T8631] netlink: 'syz.3.992': attribute type 7 has an invalid length. [ 272.250060][ T8645] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.995'. [ 272.307925][ T8641] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 272.336454][ T8644] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 273.036767][ T8657] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 273.063009][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.073828][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.340759][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.348941][ T8657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.358921][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.367316][ T8657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.432350][ T8657] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.497437][ T8659] netlink: 'syz.0.1003': attribute type 21 has an invalid length. [ 273.515140][ T8659] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1003'. [ 273.604920][ T8664] sit0: entered allmulticast mode [ 273.710061][ T8666] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1005'. [ 273.716683][ T8667] sit0: entered promiscuous mode [ 273.860890][ T8670] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 273.897165][ T8670] team0: Device veth1_vlan failed to register rx_handler [ 273.957485][ T8673] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 274.080716][ T8673] team0: Device veth1_vlan failed to register rx_handler [ 275.374911][ T8700] netlink: 'syz.0.1017': attribute type 6 has an invalid length. [ 275.416011][ T8700] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1017'. [ 275.528579][ T8703] netlink: 'syz.1.1015': attribute type 10 has an invalid length. [ 275.625509][ T8703] team0: Device veth1_vlan failed to register rx_handler [ 275.777474][ T8704] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1015'. [ 277.039594][ T8729] netlink: 'syz.2.1025': attribute type 10 has an invalid length. [ 277.057098][ T8729] team0: Device veth1_vlan failed to register rx_handler [ 277.184824][ T8729] netlink: 'syz.2.1025': attribute type 10 has an invalid length. [ 277.286506][ T8729] team0: Device veth1_vlan failed to register rx_handler [ 277.573709][ T8734] netlink: 'syz.1.1028': attribute type 6 has an invalid length. [ 277.602379][ T8734] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1028'. [ 278.127123][ T8745] netlink: 'syz.0.1033': attribute type 21 has an invalid length. [ 278.135050][ T8745] netlink: 'syz.0.1033': attribute type 20 has an invalid length. [ 278.202810][ T8746] netlink: 'syz.3.1031': attribute type 10 has an invalid length. [ 278.204936][ T8745] netlink: 'syz.0.1033': attribute type 3 has an invalid length. [ 278.241563][ T8745] netlink: 'syz.0.1033': attribute type 6 has an invalid length. [ 278.261105][ T8745] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1033'. [ 278.272011][ T8746] team0: Device veth1_vlan failed to register rx_handler [ 278.336266][ T8748] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1031'. [ 279.598391][ T8768] team0: Device veth1_vlan failed to register rx_handler [ 279.872005][ T8770] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1040'. [ 280.031985][ T8769] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1048'. [ 280.112906][ T8768] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1048'. [ 280.136354][ T8768] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.707777][ T8803] validate_nla: 2 callbacks suppressed [ 281.707796][ T8803] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 281.753300][ T8803] team0: Device veth1_vlan failed to register rx_handler [ 282.041408][ T8806] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1055'. [ 282.237682][ T8805] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1055'. [ 282.262304][ T8805] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 282.633218][ T8812] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1058'. [ 282.710170][ T8812] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1058'. [ 282.731891][ T8812] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1058'. [ 282.789032][ T8812] bond0: (slave bond_slave_0): Releasing backup interface [ 282.874385][ T8812] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 282.998539][ T8818] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1059'. [ 283.544876][ T8838] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 283.565417][ T8838] team0: Device veth1_vlan failed to register rx_handler [ 283.663989][ T8838] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1068'. [ 283.684747][ T8838] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 283.736133][ T8841] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1068'. [ 284.030545][ T8846] netlink: 'syz.3.1072': attribute type 39 has an invalid length. [ 284.601700][ T8859] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 284.676480][ T8859] team0: Device veth1_vlan failed to register rx_handler [ 285.789096][ T8881] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1084'. [ 285.810192][ T8881] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 285.830536][ T8881] CPU: 1 PID: 8881 Comm: syz.3.1084 Not tainted syzkaller #0 [ 285.838007][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.848125][ T8881] Call Trace: [ 285.851457][ T8881] [ 285.854436][ T8881] dump_stack_lvl+0x18c/0x250 [ 285.859182][ T8881] ? show_regs_print_info+0x20/0x20 [ 285.864435][ T8881] ? load_image+0x420/0x420 [ 285.868998][ T8881] sysfs_warn_dup+0x8e/0xa0 [ 285.873547][ T8881] sysfs_do_create_link_sd+0xc0/0x110 [ 285.878965][ T8881] device_add_class_symlinks+0x1cf/0x240 [ 285.884642][ T8881] device_add+0x4f9/0xc40 [ 285.889018][ T8881] wiphy_register+0x1d99/0x2ac0 [ 285.893922][ T8881] ? cfg80211_event_work+0x40/0x40 [ 285.899075][ T8881] ? minstrel_ht_alloc+0x88a/0x990 [ 285.904238][ T8881] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 285.910396][ T8881] ieee80211_register_hw+0x2dd8/0x3b30 [ 285.915908][ T8881] ? ieee80211_register_hw+0xfb1/0x3b30 [ 285.921497][ T8881] ? ieee80211_tasklet_handler+0x20/0x20 [ 285.927163][ T8881] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 285.933103][ T8881] ? __debug_object_init+0xec/0x450 [ 285.938347][ T8881] ? __asan_memset+0x22/0x40 [ 285.942974][ T8881] ? __hrtimer_init+0x189/0x270 [ 285.947867][ T8881] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 285.953651][ T8881] ? mac80211_hwsim_free+0x220/0x220 [ 285.958963][ T8881] ? rcu_is_watching+0x15/0xb0 [ 285.963768][ T8881] ? kstrndup+0xbd/0x140 [ 285.968058][ T8881] hwsim_new_radio_nl+0xdad/0x1a70 [ 285.973205][ T8881] ? __nla_validate+0x50/0x50 [ 285.977931][ T8881] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 285.984300][ T8881] ? __nla_parse+0x40/0x50 [ 285.988762][ T8881] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 285.995147][ T8881] genl_family_rcv_msg_doit+0x21a/0x310 [ 286.000740][ T8881] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 286.006677][ T8881] ? bpf_lsm_capable+0x9/0x10 [ 286.011392][ T8881] ? security_capable+0x89/0xb0 [ 286.016282][ T8881] genl_rcv_msg+0x611/0x7a0 [ 286.020826][ T8881] ? genl_bind+0x360/0x360 [ 286.025272][ T8881] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 286.031635][ T8881] ? ref_tracker_free+0x686/0x830 [ 286.036693][ T8881] ? __kasan_kmalloc_large+0x8b/0xa0 [ 286.042024][ T8881] netlink_rcv_skb+0x235/0x4c0 [ 286.046827][ T8881] ? genl_bind+0x360/0x360 [ 286.051279][ T8881] ? netlink_ack+0x1160/0x1160 [ 286.056079][ T8881] ? __lock_acquire+0x7d80/0x7d80 [ 286.061177][ T8881] ? down_read+0x1ac/0x2e0 [ 286.065643][ T8881] genl_rcv+0x28/0x40 [ 286.069666][ T8881] netlink_unicast+0x7b1/0x930 [ 286.074480][ T8881] netlink_sendmsg+0x8d0/0xbf0 [ 286.079286][ T8881] ? netlink_getsockopt+0x590/0x590 [ 286.084515][ T8881] ? apparmor_socket_sendmsg+0x8e/0x330 [ 286.090097][ T8881] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.095428][ T8881] ? security_socket_sendmsg+0x80/0xa0 [ 286.100917][ T8881] ? netlink_getsockopt+0x590/0x590 [ 286.106155][ T8881] ____sys_sendmsg+0x61b/0x980 [ 286.110964][ T8881] ? __asan_memset+0x22/0x40 [ 286.115601][ T8881] ? __sys_sendmsg_sock+0x30/0x30 [ 286.120678][ T8881] ? __import_iovec+0x5f2/0x850 [ 286.125641][ T8881] ? import_iovec+0x73/0xa0 [ 286.130229][ T8881] ___sys_sendmsg+0x2a6/0x360 [ 286.134975][ T8881] ? __sys_sendmsg+0x2b0/0x2b0 [ 286.139833][ T8881] __se_sys_sendmsg+0x1d0/0x2c0 [ 286.144737][ T8881] ? __x64_sys_sendmsg+0x80/0x80 [ 286.149747][ T8881] ? lockdep_hardirqs_on+0x98/0x150 [ 286.155001][ T8881] do_syscall_64+0x55/0xb0 [ 286.159483][ T8881] ? clear_bhb_loop+0x40/0x90 [ 286.164230][ T8881] ? clear_bhb_loop+0x40/0x90 [ 286.168962][ T8881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.174899][ T8881] RIP: 0033:0x7f0e6239e019 [ 286.179348][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.198994][ T8881] RSP: 002b:00007f0e6328e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.207454][ T8881] RAX: ffffffffffffffda RBX: 00007f0e62625fa0 RCX: 00007f0e6239e019 [ 286.215460][ T8881] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 286.223467][ T8881] RBP: 00007f0e6243500c R08: 0000000000000000 R09: 0000000000000000 [ 286.231474][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.239479][ T8881] R13: 00007f0e62626038 R14: 00007f0e62625fa0 R15: 00007ffd08dbc2e8 [ 286.247601][ T8881] [ 287.153315][ T8903] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 287.689927][ T8908] netlink: 'syz.1.1095': attribute type 6 has an invalid length. [ 287.717333][ T8908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1095'. [ 288.993998][ T8934] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 289.025345][ T8934] team0: Device veth1_vlan failed to register rx_handler [ 291.134659][ T8973] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 291.219578][ T8973] team0: Device veth1_vlan failed to register rx_handler [ 291.673837][ T8975] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 291.742184][ T8975] team0: Device veth1_vlan failed to register rx_handler [ 292.642648][ T8996] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 292.683007][ T8996] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 292.794876][ T8997] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 292.863520][ T8999] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 293.249865][ T9013] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 293.277004][ T9013] team0: Device veth1_vlan failed to register rx_handler [ 293.481696][ T9013] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 293.547534][ T9013] team0: Device veth1_vlan failed to register rx_handler [ 294.393970][ T9025] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 294.417056][ T9025] team0: Device veth1_vlan failed to register rx_handler [ 294.482094][ T9025] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1138'. [ 294.507304][ T9025] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 294.588721][ T9025] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1138'. [ 295.194873][ T9049] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 295.218388][ T9049] team0: Device veth1_vlan failed to register rx_handler [ 295.360160][ T9049] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 295.388942][ T9049] team0: Device veth1_vlan failed to register rx_handler [ 296.948724][ T9080] netlink: 'syz.0.1158': attribute type 10 has an invalid length. [ 296.986121][ T9080] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1158'. [ 297.005984][ T9080] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 297.059229][ T9084] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1158'. [ 297.199379][ T9091] team0: Device veth1_vlan failed to register rx_handler [ 297.548277][ T9092] team0: Device veth1_vlan failed to register rx_handler [ 298.095901][ T9110] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1170'. [ 298.453940][ T2948] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.630517][ T9121] validate_nla: 2 callbacks suppressed [ 298.630536][ T9121] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 298.661423][ T9121] team0: Device veth1_vlan failed to register rx_handler [ 298.721941][ T9121] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 298.778303][ T9121] team0: Device veth1_vlan failed to register rx_handler [ 299.820185][ T9147] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 299.872752][ T9147] team0: Device veth1_vlan failed to register rx_handler [ 300.008566][ T9150] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1186'. [ 300.058135][ T9147] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1186'. [ 300.070354][ T9150] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 300.322600][ T9166] netlink: 'syz.0.1192': attribute type 3 has an invalid length. [ 300.331346][ T9166] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 300.611129][ T9172] netlink: 'syz.0.1192': attribute type 27 has an invalid length. [ 300.766367][ T9174] sctp: [Deprecated]: syz.2.1195 (pid 9174) Use of int in maxseg socket option. [ 300.766367][ T9174] Use struct sctp_assoc_value instead [ 301.481748][ T9195] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 301.512039][ T9195] team0: Device veth1_vlan failed to register rx_handler [ 301.621157][ T9195] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1204'. [ 301.640334][ T9195] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 301.661303][ T9197] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1204'. [ 302.043388][ T9211] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1211'. [ 302.083221][ T9211] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 302.250841][ T9215] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1214'. [ 302.360188][ T9213] syz.2.1213: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 302.453256][ T9213] CPU: 1 PID: 9213 Comm: syz.2.1213 Not tainted syzkaller #0 [ 302.460732][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.470868][ T9213] Call Trace: [ 302.474210][ T9213] [ 302.477204][ T9213] dump_stack_lvl+0x18c/0x250 [ 302.481950][ T9213] ? show_regs_print_info+0x20/0x20 [ 302.487229][ T9213] ? load_image+0x420/0x420 [ 302.491835][ T9213] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.498337][ T9213] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 302.504919][ T9213] warn_alloc+0x246/0x340 [ 302.509318][ T9213] ? stack_trace_save+0xaa/0x100 [ 302.514331][ T9213] ? zone_watermark_ok_safe+0x230/0x230 [ 302.519959][ T9213] ? kasan_set_track+0x5f/0x70 [ 302.524800][ T9213] ? kasan_set_track+0x4e/0x70 [ 302.529639][ T9213] ? __kasan_kmalloc+0x8f/0xa0 [ 302.534485][ T9213] ? xsk_init_queue+0xad/0x100 [ 302.539326][ T9213] ? xsk_setsockopt+0x4c9/0x750 [ 302.544249][ T9213] ? do_sock_setsockopt+0x175/0x1a0 [ 302.549770][ T9213] ? __x64_sys_setsockopt+0x182/0x200 [ 302.555222][ T9213] __vmalloc_node_range+0x129/0x1320 [ 302.560621][ T9213] ? free_vm_area+0x50/0x50 [ 302.565205][ T9213] vmalloc_user+0x74/0x80 [ 302.569595][ T9213] ? xskq_create+0xbf/0x170 [ 302.574151][ T9213] xskq_create+0xbf/0x170 [ 302.578537][ T9213] xsk_init_queue+0xad/0x100 [ 302.583182][ T9213] xsk_setsockopt+0x4c9/0x750 [ 302.587915][ T9213] ? xsk_poll+0x670/0x670 [ 302.592295][ T9213] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.598495][ T9213] ? xsk_poll+0x670/0x670 [ 302.602874][ T9213] ? do_sock_setsockopt+0x15e/0x1a0 [ 302.608127][ T9213] ? xsk_poll+0x670/0x670 [ 302.612519][ T9213] do_sock_setsockopt+0x175/0x1a0 [ 302.617587][ T9213] ? __fdget+0x180/0x210 [ 302.621879][ T9213] __x64_sys_setsockopt+0x182/0x200 [ 302.627169][ T9213] do_syscall_64+0x55/0xb0 [ 302.631627][ T9213] ? clear_bhb_loop+0x40/0x90 [ 302.636352][ T9213] ? clear_bhb_loop+0x40/0x90 [ 302.641077][ T9213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.647011][ T9213] RIP: 0033:0x7f009a99e019 [ 302.651480][ T9213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.671136][ T9213] RSP: 002b:00007f009b8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.679599][ T9213] RAX: ffffffffffffffda RBX: 00007f009ac25fa0 RCX: 00007f009a99e019 [ 302.687617][ T9213] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 302.695632][ T9213] RBP: 00007f009aa3500c R08: 0000000000000004 R09: 0000000000000000 [ 302.703661][ T9213] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 302.711664][ T9213] R13: 00007f009ac26038 R14: 00007f009ac25fa0 R15: 00007fff1a7eb0f8 [ 302.719696][ T9213] [ 302.747140][ T9217] netlink: 'syz.0.1215': attribute type 9 has an invalid length. [ 302.863983][ T9217] netlink: 'syz.0.1215': attribute type 23 has an invalid length. [ 302.940964][ T9213] Mem-Info: [ 303.021805][ T9213] active_anon:8481 inactive_anon:0 isolated_anon:0 [ 303.021805][ T9213] active_file:19243 inactive_file:40033 isolated_file:0 [ 303.021805][ T9213] unevictable:768 dirty:201 writeback:0 [ 303.021805][ T9213] slab_reclaimable:10437 slab_unreclaimable:91621 [ 303.021805][ T9213] mapped:26325 shmem:1361 pagetables:542 [ 303.021805][ T9213] sec_pagetables:0 bounce:0 [ 303.021805][ T9213] kernel_misc_reclaimable:0 [ 303.021805][ T9213] free:1346508 free_pcp:7687 free_cma:0 [ 303.027210][ T9217] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1215'. [ 303.113309][ T9213] Node 0 active_anon:33924kB inactive_anon:0kB active_file:76972kB inactive_file:159928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105800kB dirty:800kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10928kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no [ 303.264860][ T9213] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 303.312107][ T9213] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.486013][ T9213] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 303.493058][ T9213] Node 0 DMA32 free:1471296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34232kB inactive_anon:0kB active_file:76972kB inactive_file:159108kB unevictable:1536kB writepending:800kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:11264kB free_cma:0kB [ 303.704966][ T9213] lowmem_reserve[]: 0 0 0 0 0 [ 303.747985][ T9213] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.826151][ T9213] lowmem_reserve[]: 0 0 0 0 0 [ 303.844487][ T9213] Node 1 Normal free:3898740kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14880kB local_pcp:7488kB free_cma:0kB [ 304.051496][ T9213] lowmem_reserve[]: 0 0 0 0 0 [ 304.184283][ T9213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.337199][ T9213] Node 0 DMA32: 1067*4kB (M) 1179*8kB (UM) 1319*16kB (UM) 1029*32kB (UME) 523*64kB (UM) 201*128kB (UM) 107*256kB (UME) 56*512kB (UM) 31*1024kB (M) 5*2048kB (ME) 304*4096kB (M) = 1470164kB [ 304.422010][ T9213] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 304.493578][ T9213] Node 1 Normal: 249*4kB (UME) 44*8kB (UME) 35*16kB (UME) 118*32kB (UME) 33*64kB (UME) 4*128kB (UE) 3*256kB (UE) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3898740kB [ 304.575929][ T9213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.635953][ T9213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.683019][ T9213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.732088][ T9213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.785918][ T9213] 60639 total pagecache pages [ 304.815739][ T9213] 0 pages in swap cache [ 304.819988][ T9213] Free swap = 124996kB [ 304.851861][ T9213] Total swap = 124996kB [ 304.866834][ T9213] 2097051 pages RAM [ 304.870736][ T9213] 0 pages HighMem/MovableOnly [ 304.902561][ T9213] 416955 pages reserved [ 304.918218][ T9213] 0 pages cma reserved [ 305.611426][ T9253] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1223'. [ 305.855335][ T9263] netlink: 'syz.3.1224': attribute type 10 has an invalid length. [ 305.875104][ T9263] team0: Device veth1_vlan failed to register rx_handler [ 305.966736][ T9263] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1224'. [ 305.988316][ T9267] FAULT_INJECTION: forcing a failure. [ 305.988316][ T9267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.007415][ T9263] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 306.029357][ T9267] CPU: 1 PID: 9267 Comm: syz.1.1228 Not tainted syzkaller #0 [ 306.036815][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.046933][ T9267] Call Trace: [ 306.050259][ T9267] [ 306.053237][ T9267] dump_stack_lvl+0x18c/0x250 [ 306.057974][ T9267] ? show_regs_print_info+0x20/0x20 [ 306.063227][ T9267] ? load_image+0x420/0x420 [ 306.067783][ T9267] ? __might_fault+0xaa/0x120 [ 306.072491][ T9267] ? __lock_acquire+0x7d80/0x7d80 [ 306.077632][ T9267] should_fail_ex+0x394/0x4c0 [ 306.082351][ T9267] _copy_from_user+0x2f/0xe0 [ 306.086968][ T9267] __sys_bpf+0x23e/0x890 [ 306.091240][ T9267] ? bpf_link_show_fdinfo+0x390/0x390 [ 306.096656][ T9267] ? lock_chain_count+0x20/0x20 [ 306.101583][ T9267] __x64_sys_bpf+0x7c/0x90 [ 306.106027][ T9267] do_syscall_64+0x55/0xb0 [ 306.110476][ T9267] ? clear_bhb_loop+0x40/0x90 [ 306.115180][ T9267] ? clear_bhb_loop+0x40/0x90 [ 306.119882][ T9267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.125800][ T9267] RIP: 0033:0x7f3484d9e019 [ 306.130239][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.149881][ T9267] RSP: 002b:00007f3485b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.158375][ T9267] RAX: ffffffffffffffda RBX: 00007f3485025fa0 RCX: 00007f3484d9e019 [ 306.166384][ T9267] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 306.174381][ T9267] RBP: 00007f3485b97090 R08: 0000000000000000 R09: 0000000000000000 [ 306.182376][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.190375][ T9267] R13: 00007f3485026038 R14: 00007f3485025fa0 R15: 00007ffe59ac86b8 [ 306.198391][ T9267] [ 306.229410][ T9263] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1224'. [ 306.791019][ T9286] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1237'. [ 306.809679][ T9286] netlink: 209032 bytes leftover after parsing attributes in process `syz.2.1237'. [ 306.839314][ T9286] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1237'. [ 307.770503][ T9313] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 307.783235][ T9313] team0: Device veth1_vlan failed to register rx_handler [ 307.880671][ T9313] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1245'. [ 307.900966][ T9313] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.968979][ T9318] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1245'. [ 308.476739][ T9335] netlink: 'syz.1.1255': attribute type 21 has an invalid length. [ 308.508660][ T9335] netlink: 'syz.1.1255': attribute type 7 has an invalid length. [ 309.733850][ T9358] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 309.743374][ T9358] team0: Device veth1_vlan failed to register rx_handler [ 309.799382][ T9358] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1266'. [ 309.809262][ T9358] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.854779][ T9358] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1266'. [ 310.041907][ T9365] netlink: 'syz.2.1268': attribute type 10 has an invalid length. [ 310.071144][ T9365] team0: Device veth1_vlan failed to register rx_handler [ 310.203490][ T9365] netlink: 'syz.2.1268': attribute type 10 has an invalid length. [ 310.294617][ T9365] team0: Device veth1_vlan failed to register rx_handler [ 311.139100][ T9390] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1279'. [ 311.727178][ T9399] netlink: 'syz.2.1282': attribute type 10 has an invalid length. [ 311.743026][ T9399] team0: Device veth1_vlan failed to register rx_handler [ 311.933119][ T9399] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1282'. [ 311.960114][ T9399] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 312.038864][ T9400] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1282'. [ 312.340703][ T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 313.133472][ T9422] FAULT_INJECTION: forcing a failure. [ 313.133472][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 313.258812][ T9422] CPU: 1 PID: 9422 Comm: syz.0.1289 Not tainted syzkaller #0 [ 313.266286][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.276400][ T9422] Call Trace: [ 313.279731][ T9422] [ 313.282769][ T9422] dump_stack_lvl+0x18c/0x250 [ 313.287510][ T9422] ? show_regs_print_info+0x20/0x20 [ 313.292766][ T9422] ? load_image+0x420/0x420 [ 313.297322][ T9422] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 313.303365][ T9422] ? __asan_memset+0x22/0x40 [ 313.308014][ T9422] should_fail_ex+0x394/0x4c0 [ 313.312769][ T9422] should_failslab+0x9/0x20 [ 313.317331][ T9422] slab_pre_alloc_hook+0x59/0x300 [ 313.322415][ T9422] ? __debug_object_init+0xec/0x450 [ 313.327677][ T9422] kmem_cache_alloc+0x5a/0x2c0 [ 313.332570][ T9422] ? slab_build_skb+0x28/0x3e0 [ 313.337394][ T9422] slab_build_skb+0x28/0x3e0 [ 313.342042][ T9422] bpf_prog_test_run_skb+0x38f/0x18f0 [ 313.347479][ T9422] ? __fget_files+0x28/0x460 [ 313.352122][ T9422] ? __fget_files+0x3fc/0x460 [ 313.356872][ T9422] ? cpu_online+0x60/0x60 [ 313.361302][ T9422] bpf_prog_test_run+0x31f/0x390 [ 313.366291][ T9422] __sys_bpf+0x49d/0x890 [ 313.370570][ T9422] ? bpf_link_show_fdinfo+0x390/0x390 [ 313.375986][ T9422] ? lock_chain_count+0x20/0x20 [ 313.380887][ T9422] __x64_sys_bpf+0x7c/0x90 [ 313.385337][ T9422] do_syscall_64+0x55/0xb0 [ 313.389790][ T9422] ? clear_bhb_loop+0x40/0x90 [ 313.394499][ T9422] ? clear_bhb_loop+0x40/0x90 [ 313.399210][ T9422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.405137][ T9422] RIP: 0033:0x7fe542d9e019 [ 313.409636][ T9422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.429279][ T9422] RSP: 002b:00007fe543bfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.437722][ T9422] RAX: ffffffffffffffda RBX: 00007fe543025fa0 RCX: 00007fe542d9e019 [ 313.445732][ T9422] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 313.453734][ T9422] RBP: 00007fe543bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 313.461752][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.469759][ T9422] R13: 00007fe543026038 R14: 00007fe543025fa0 R15: 00007fff881241d8 [ 313.477795][ T9422] [ 313.771971][ T9441] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 313.797813][ T9441] team0: Device veth1_vlan failed to register rx_handler [ 313.823355][ T9440] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 313.842851][ T9440] team0: Device veth1_vlan failed to register rx_handler [ 313.901844][ T9441] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 313.940056][ T9440] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1296'. [ 313.963169][ T9441] team0: Device veth1_vlan failed to register rx_handler [ 314.029126][ T9445] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1296'. [ 314.057344][ T9445] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.105179][ T9443] netlink: 'syz.1.1297': attribute type 10 has an invalid length. [ 314.129010][ T9443] team0: Device veth1_vlan failed to register rx_handler [ 314.200277][ T9449] netlink: 'syz.1.1297': attribute type 10 has an invalid length. [ 314.242399][ T9449] team0: Device veth1_vlan failed to register rx_handler [ 314.814867][ T9461] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1303'. [ 314.874744][ T9463] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 314.905875][ T9463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1302'. [ 314.945860][ T9463] team0: entered promiscuous mode [ 314.951125][ T9463] team_slave_1: entered promiscuous mode [ 315.001917][ T9461] netlink: zone id is out of range [ 315.029774][ T9463] team0: entered allmulticast mode [ 315.036153][ T9461] netlink: set zone limit has 8 unknown bytes [ 315.043224][ T9463] team_slave_1: entered allmulticast mode [ 315.070392][ T9463] bond0: (slave team0): Releasing backup interface [ 315.169888][ T9463] bridge0: port 3(team0) entered blocking state [ 315.189525][ T9463] bridge0: port 3(team0) entered disabled state [ 315.793102][ T9479] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 315.828055][ T9479] team0: Device veth1_vlan failed to register rx_handler [ 315.919943][ T9479] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1310'. [ 315.955976][ T9479] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.960583][ T9483] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1310'. [ 316.043947][ T9482] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 316.067894][ T9482] team0: Device veth1_vlan failed to register rx_handler [ 316.103705][ T9488] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 316.192222][ T9488] team0: Device veth1_vlan failed to register rx_handler [ 316.586857][ T9498] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1315'. [ 316.603235][ T9498] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1315'. [ 317.364581][ T9515] netlink: 'syz.3.1323': attribute type 9 has an invalid length. [ 317.378468][ T9522] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1325'. [ 317.402058][ T9523] netlink: 'syz.0.1326': attribute type 10 has an invalid length. [ 317.406791][ T9515] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1323'. [ 317.531210][ T9525] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1326'. [ 317.547865][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554278][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.557874][ T9523] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1326'. [ 317.619400][ T9523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 318.039606][ T9537] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1331'. [ 318.137431][ T9537] netlink: zone id is out of range [ 318.143441][ T9537] netlink: set zone limit has 8 unknown bytes [ 318.511926][ T9550] netlink: 'syz.3.1336': attribute type 12 has an invalid length. [ 318.535194][ T9550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1336'. [ 318.561651][ T9552] netlink: 'syz.2.1335': attribute type 10 has an invalid length. [ 318.582256][ T9552] team0: Device veth1_vlan failed to register rx_handler [ 318.649697][ T9552] netlink: 'syz.2.1335': attribute type 10 has an invalid length. [ 318.676769][ T9552] team0: Device veth1_vlan failed to register rx_handler [ 319.013616][ T9566] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 319.023266][ T9566] team0: Device veth1_vlan failed to register rx_handler [ 319.084418][ T9566] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1343'. [ 319.099733][ T9566] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.147977][ T9566] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1343'. [ 319.717301][ T9578] netlink: zone id is out of range [ 319.739416][ T9578] netlink: set zone limit has 8 unknown bytes [ 320.454551][ T9599] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 320.472357][ T9599] team0: Device veth1_vlan failed to register rx_handler [ 320.538213][ T9599] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 320.564516][ T9599] team0: Device veth1_vlan failed to register rx_handler [ 320.852886][ T9614] netlink: 'syz.0.1357': attribute type 10 has an invalid length. [ 320.891394][ T9614] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 322.156639][ T9632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.473786][ T9652] netlink: 'syz.2.1372': attribute type 10 has an invalid length. [ 322.493159][ T9652] team0: Device veth1_vlan failed to register rx_handler [ 322.587313][ T9657] __nla_validate_parse: 3 callbacks suppressed [ 322.587334][ T9657] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1372'. [ 322.623463][ T9656] netlink: 'syz.0.1373': attribute type 10 has an invalid length. [ 322.645083][ T9652] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1372'. [ 322.676454][ T9652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 322.696738][ T9659] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1375'. [ 322.710264][ T9659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.746177][ T9656] netlink: 'syz.0.1373': attribute type 10 has an invalid length. [ 322.757030][ T9659] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 323.879281][ T9678] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1383'. [ 323.889523][ T9678] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 324.680759][ T9705] FAULT_INJECTION: forcing a failure. [ 324.680759][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.696894][ T9706] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 324.709370][ T9706] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 324.729342][ T9705] CPU: 1 PID: 9705 Comm: syz.2.1395 Not tainted syzkaller #0 [ 324.736788][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.746893][ T9705] Call Trace: [ 324.750212][ T9705] [ 324.753180][ T9705] dump_stack_lvl+0x18c/0x250 [ 324.757897][ T9705] ? show_regs_print_info+0x20/0x20 [ 324.763133][ T9705] ? load_image+0x420/0x420 [ 324.767704][ T9705] ? __lock_acquire+0x7d80/0x7d80 [ 324.772802][ T9705] ? snprintf+0xe9/0x140 [ 324.777074][ T9705] should_fail_ex+0x394/0x4c0 [ 324.781797][ T9705] _copy_to_user+0x2f/0xa0 [ 324.786252][ T9705] simple_read_from_buffer+0xe7/0x150 [ 324.791669][ T9705] proc_fail_nth_read+0x1e8/0x260 [ 324.796733][ T9705] ? proc_fault_inject_write+0x360/0x360 [ 324.802416][ T9705] ? fsnotify_perm+0x271/0x5e0 [ 324.807207][ T9705] ? proc_fault_inject_write+0x360/0x360 [ 324.812897][ T9705] vfs_read+0x298/0x990 [ 324.817090][ T9705] ? kernel_read+0x1e0/0x1e0 [ 324.821708][ T9705] ? __fget_files+0x28/0x460 [ 324.826337][ T9705] ? __fget_files+0x3fc/0x460 [ 324.831055][ T9705] ? __fdget_pos+0x2a3/0x330 [ 324.835679][ T9705] ? ksys_read+0x74/0x260 [ 324.840051][ T9705] ksys_read+0x151/0x260 [ 324.844327][ T9705] ? vfs_write+0x9a0/0x9a0 [ 324.848788][ T9705] ? lockdep_hardirqs_on+0x98/0x150 [ 324.854024][ T9705] do_syscall_64+0x55/0xb0 [ 324.858472][ T9705] ? clear_bhb_loop+0x40/0x90 [ 324.863175][ T9705] ? clear_bhb_loop+0x40/0x90 [ 324.867877][ T9705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.873803][ T9705] RIP: 0033:0x7f009a95e84e [ 324.878242][ T9705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.897888][ T9705] RSP: 002b:00007f009b8dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.906331][ T9705] RAX: ffffffffffffffda RBX: 00007f009b8e06c0 RCX: 00007f009a95e84e [ 324.914323][ T9705] RDX: 000000000000000f RSI: 00007f009b8e00a0 RDI: 0000000000000006 [ 324.922317][ T9705] RBP: 00007f009b8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 324.930321][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.938320][ T9705] R13: 00007f009ac26038 R14: 00007f009ac25fa0 R15: 00007fff1a7eb0f8 [ 324.946331][ T9705] [ 325.263493][ T9714] netlink: 'syz.2.1398': attribute type 10 has an invalid length. [ 325.274710][ T9714] team0: Device veth1_vlan failed to register rx_handler [ 325.342298][ T9714] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1398'. [ 325.357914][ T9714] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 325.430718][ T9714] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1398'. [ 325.971909][ T9726] FAULT_INJECTION: forcing a failure. [ 325.971909][ T9726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.009878][ T9726] CPU: 0 PID: 9726 Comm: syz.0.1404 Not tainted syzkaller #0 [ 326.017370][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.027506][ T9726] Call Trace: [ 326.030860][ T9726] [ 326.033863][ T9726] dump_stack_lvl+0x18c/0x250 [ 326.038645][ T9726] ? show_regs_print_info+0x20/0x20 [ 326.043934][ T9726] ? load_image+0x420/0x420 [ 326.048546][ T9726] ? __lock_acquire+0x7d80/0x7d80 [ 326.053679][ T9726] should_fail_ex+0x394/0x4c0 [ 326.058458][ T9726] _copy_from_user+0x2f/0xe0 [ 326.063110][ T9726] __copy_msghdr+0x388/0x560 [ 326.067769][ T9726] ___sys_sendmsg+0x214/0x360 [ 326.072517][ T9726] ? __sys_sendmsg+0x2b0/0x2b0 [ 326.077387][ T9726] ? trace_call_bpf+0xc3/0x6c0 [ 326.082301][ T9726] __se_sys_sendmsg+0x1d0/0x2c0 [ 326.087207][ T9726] ? perf_trace_preemptirq_template+0x269/0x330 [ 326.093511][ T9726] ? __x64_sys_sendmsg+0x80/0x80 [ 326.098541][ T9726] ? lockdep_hardirqs_on+0x98/0x150 [ 326.103805][ T9726] do_syscall_64+0x55/0xb0 [ 326.108280][ T9726] ? clear_bhb_loop+0x40/0x90 [ 326.113008][ T9726] ? clear_bhb_loop+0x40/0x90 [ 326.117749][ T9726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.123689][ T9726] RIP: 0033:0x7fe542d9e019 [ 326.128164][ T9726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.147812][ T9726] RSP: 002b:00007fe543bfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.156291][ T9726] RAX: ffffffffffffffda RBX: 00007fe543025fa0 RCX: 00007fe542d9e019 [ 326.164304][ T9726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 326.172326][ T9726] RBP: 00007fe543bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 326.180372][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.188416][ T9726] R13: 00007fe543026038 R14: 00007fe543025fa0 R15: 00007fff881241d8 [ 326.196492][ T9726] [ 326.338114][ T9722] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1403'. [ 326.349568][ T9722] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1403'. [ 326.782712][ T9741] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1409'. [ 326.831544][ T9741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.905332][ T9742] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1409'. [ 327.081194][ T9746] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 327.102892][ T9746] batman_adv: batadv0: Adding interface: vlan1 [ 327.109452][ T9746] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.135069][ T9746] batman_adv: batadv0: Interface activated: vlan1 [ 327.568941][ T9755] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 327.593839][ T9755] team0: Device veth1_vlan failed to register rx_handler [ 327.661694][ T9755] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 327.675551][ T9755] team0: Device veth1_vlan failed to register rx_handler [ 327.714857][ T9761] netlink: 'syz.3.1415': attribute type 10 has an invalid length. [ 327.731516][ T9761] team0: Device veth1_vlan failed to register rx_handler [ 327.750167][ T9760] __nla_validate_parse: 1 callbacks suppressed [ 327.750205][ T9760] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1423'. [ 327.792459][ T9760] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 327.812428][ T9762] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1423'. [ 327.825275][ T9761] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1415'. [ 327.839073][ T9761] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 327.867310][ T9763] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1415'. [ 328.648002][ T9776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1421'. [ 328.987026][ T9776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.408674][ T9806] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1432'. [ 329.426434][ T9806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 329.470732][ T9812] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1432'. [ 329.844211][ T52] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 330.207306][ T9829] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1441'. [ 330.399331][ T9834] delete_channel: no stack [ 330.405446][ T9834] delete_channel: no stack [ 330.431481][ T9834] delete_channel: no stack [ 330.442049][ T9834] delete_channel: no stack [ 330.467002][ T9834] delete_channel: no stack [ 330.476308][ T9834] delete_channel: no stack [ 330.480990][ T9834] delete_channel: no stack [ 330.499403][ T9834] delete_channel: no stack [ 330.504123][ T9834] delete_channel: no stack [ 330.509289][ T9834] delete_channel: no stack [ 330.513936][ T9834] delete_channel: no stack [ 330.525879][ T9834] delete_channel: no stack [ 330.533289][ T9834] delete_channel: no stack [ 330.541908][ T9834] delete_channel: no stack [ 330.556652][ T9834] delete_channel: no stack [ 330.561341][ T9834] delete_channel: no stack [ 330.580381][ T9834] delete_channel: no stack [ 330.585106][ T9834] delete_channel: no stack [ 330.614557][ T9834] delete_channel: no stack [ 330.624101][ T9834] delete_channel: no stack [ 330.635416][ T9834] delete_channel: no stack [ 330.651573][ T9834] delete_channel: no stack [ 330.671097][ T9834] delete_channel: no stack [ 330.675945][ T9834] delete_channel: no stack [ 330.686906][ T9834] delete_channel: no stack [ 330.720173][ T9834] delete_channel: no stack [ 330.730780][ T9834] delete_channel: no stack [ 330.742314][ T9834] delete_channel: no stack [ 330.760754][ T9834] delete_channel: no stack [ 330.771821][ T9834] delete_channel: no stack [ 330.797889][ T9834] delete_channel: no stack [ 330.817445][ T9834] delete_channel: no stack [ 330.822323][ T9834] delete_channel: no stack [ 330.831306][ T9834] delete_channel: no stack [ 330.838787][ T9834] delete_channel: no stack [ 330.843668][ T9834] delete_channel: no stack [ 330.852708][ T9834] delete_channel: no stack [ 330.875993][ T9834] delete_channel: no stack [ 330.883035][ T9834] delete_channel: no stack [ 330.894828][ T9834] delete_channel: no stack [ 330.903340][ T9834] delete_channel: no stack [ 330.926853][ T9834] delete_channel: no stack [ 330.943252][ T9834] delete_channel: no stack [ 330.961457][ T9834] delete_channel: no stack [ 330.983477][ T9834] delete_channel: no stack [ 330.988345][ T9834] delete_channel: no stack [ 330.999013][ T9834] delete_channel: no stack [ 331.010289][ T9834] delete_channel: no stack [ 331.041973][ T9834] delete_channel: no stack [ 331.048377][ T9834] delete_channel: no stack [ 331.053349][ T9834] delete_channel: no stack [ 331.219689][ T9858] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1451'. [ 331.250462][ T9858] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 331.289547][ T9859] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1451'. [ 332.730935][ T9887] netlink: 'syz.1.1464': attribute type 21 has an invalid length. [ 332.758775][ T9887] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1464'. [ 332.800346][ T9892] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1465'. [ 334.842919][ T9939] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1480'. [ 334.893143][ T9939] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 334.935024][ T9943] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1480'. [ 335.011680][ T52] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 335.585179][ T9955] netlink: 'syz.2.1489': attribute type 3 has an invalid length. [ 335.615859][ T9955] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1489'. [ 336.429708][ T9967] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 336.444169][ T9967] team0: Device veth1_vlan failed to register rx_handler [ 336.509792][ T52] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 336.519659][ T9967] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1492'. [ 336.576452][ T9967] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 336.682637][ T9967] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1492'. [ 336.916340][ T9974] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1498'. [ 337.619623][ T9990] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1502'. [ 337.664927][ T9990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 337.821030][ T9990] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1502'. [ 337.909079][ T9993] netlink: 'syz.3.1504': attribute type 3 has an invalid length. [ 337.930015][ T9993] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1504'. [ 338.324245][ T9999] delete_channel: no stack [ 338.345826][ T9999] delete_channel: no stack [ 338.412367][ T9999] netlink: 'syz.0.1506': attribute type 21 has an invalid length. [ 338.470980][ T9999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1506'. [ 338.595876][T10008] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 338.614396][T10008] team0: Device veth1_vlan failed to register rx_handler [ 338.622492][T10010] FAULT_INJECTION: forcing a failure. [ 338.622492][T10010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.655806][T10010] CPU: 0 PID: 10010 Comm: syz.0.1512 Not tainted syzkaller #0 [ 338.663354][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.673462][T10010] Call Trace: [ 338.676794][T10010] [ 338.679771][T10010] dump_stack_lvl+0x18c/0x250 [ 338.684511][T10010] ? show_regs_print_info+0x20/0x20 [ 338.689773][T10010] ? load_image+0x420/0x420 [ 338.694340][T10010] ? __might_fault+0xaa/0x120 [ 338.699100][T10010] ? __lock_acquire+0x7d80/0x7d80 [ 338.704183][T10010] should_fail_ex+0x394/0x4c0 [ 338.708925][T10010] _copy_from_user+0x2f/0xe0 [ 338.713568][T10010] __sys_bpf+0x23e/0x890 [ 338.717871][T10010] ? bpf_link_show_fdinfo+0x390/0x390 [ 338.723299][T10010] ? lock_chain_count+0x20/0x20 [ 338.728190][T10010] __x64_sys_bpf+0x7c/0x90 [ 338.732635][T10010] do_syscall_64+0x55/0xb0 [ 338.737077][T10010] ? clear_bhb_loop+0x40/0x90 [ 338.741782][T10010] ? clear_bhb_loop+0x40/0x90 [ 338.746517][T10010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.752447][T10010] RIP: 0033:0x7fe542d9e019 [ 338.756891][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.776525][T10010] RSP: 002b:00007fe543bfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.785060][T10010] RAX: ffffffffffffffda RBX: 00007fe543025fa0 RCX: 00007fe542d9e019 [ 338.793066][T10010] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 338.801157][T10010] RBP: 00007fe543bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 338.809153][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.817153][T10010] R13: 00007fe543026038 R14: 00007fe543025fa0 R15: 00007fff881241d8 [ 338.825186][T10010] [ 338.875448][T10008] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1510'. [ 338.920640][T10011] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1510'. [ 338.940979][T10011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 339.217900][T10019] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 339.410990][T10025] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1516'. [ 339.548897][T10029] netlink: 'syz.1.1518': attribute type 3 has an invalid length. [ 339.558003][T10029] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1518'. [ 339.760565][T10035] delete_channel: no stack [ 339.778273][T10035] delete_channel: no stack [ 339.816387][T10035] netlink: 'syz.2.1520': attribute type 21 has an invalid length. [ 339.862103][T10035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1520'. [ 340.393198][T10049] netlink: 'syz.1.1526': attribute type 13 has an invalid length. [ 340.416427][T10049] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1526'. [ 340.534011][T10049] erspan0: refused to change device tx_queue_len [ 340.848564][T10066] netlink: 'syz.3.1528': attribute type 10 has an invalid length. [ 340.863909][T10066] team0: Device veth1_vlan failed to register rx_handler [ 340.927871][T10066] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1528'. [ 340.940129][T10066] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 342.089715][T10089] tap0: tun_chr_ioctl cmd 1074812117 [ 342.096855][T10089] tap0: tun_chr_ioctl cmd 1074820166 [ 344.746302][T10112] __nla_validate_parse: 1 callbacks suppressed [ 344.746319][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1547'. [ 344.775984][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1547'. [ 344.785497][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1547'. [ 344.810541][T10113] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 344.833715][T10113] team0: Device veth1_vlan failed to register rx_handler [ 344.947712][T10118] netlink: 'syz.2.1550': attribute type 10 has an invalid length. [ 344.967028][T10118] team0: Device veth1_vlan failed to register rx_handler [ 345.012196][T10118] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1550'. [ 345.022381][T10118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 345.076318][T10118] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1550'. [ 345.736422][T10125] tap0: tun_chr_ioctl cmd 1074812117 [ 345.764473][T10125] tap0: tun_chr_ioctl cmd 1074820166 [ 346.549658][T10149] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 346.590247][T10149] team0: Device veth1_vlan failed to register rx_handler [ 346.695469][T10154] netlink: 'syz.0.1565': attribute type 10 has an invalid length. [ 346.732968][T10154] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1565'. [ 346.751091][T10154] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 346.810660][T10154] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1565'. [ 346.856282][T10162] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1568'. [ 346.874338][T10160] netlink: 'syz.3.1567': attribute type 10 has an invalid length. [ 346.886471][T10160] team0: Device veth1_vlan failed to register rx_handler [ 347.655822][T10172] FAULT_INJECTION: forcing a failure. [ 347.655822][T10172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.671376][T10172] CPU: 0 PID: 10172 Comm: syz.0.1580 Not tainted syzkaller #0 [ 347.679076][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.689195][T10172] Call Trace: [ 347.692531][T10172] [ 347.695506][T10172] dump_stack_lvl+0x18c/0x250 [ 347.700313][T10172] ? show_regs_print_info+0x20/0x20 [ 347.705575][T10172] ? load_image+0x420/0x420 [ 347.710191][T10172] ? __lock_acquire+0x7d80/0x7d80 [ 347.715285][T10172] should_fail_ex+0x394/0x4c0 [ 347.720035][T10172] _copy_to_user+0x2f/0xa0 [ 347.724506][T10172] simple_read_from_buffer+0xe7/0x150 [ 347.729933][T10172] proc_fail_nth_read+0x1e8/0x260 [ 347.735025][T10172] ? proc_fault_inject_write+0x360/0x360 [ 347.740724][T10172] ? fsnotify_perm+0x271/0x5e0 [ 347.745549][T10172] ? proc_fault_inject_write+0x360/0x360 [ 347.751236][T10172] vfs_read+0x298/0x990 [ 347.755492][T10172] ? kernel_read+0x1e0/0x1e0 [ 347.760140][T10172] ? __fget_files+0x28/0x460 [ 347.764961][T10172] ? __fget_files+0x3fc/0x460 [ 347.769729][T10172] ? __fdget_pos+0x2a3/0x330 [ 347.774384][T10172] ? ksys_read+0x74/0x260 [ 347.778785][T10172] ksys_read+0x151/0x260 [ 347.783096][T10172] ? vfs_write+0x9a0/0x9a0 [ 347.787604][T10172] ? lockdep_hardirqs_on+0x98/0x150 [ 347.792880][T10172] do_syscall_64+0x55/0xb0 [ 347.797356][T10172] ? clear_bhb_loop+0x40/0x90 [ 347.802217][T10172] ? clear_bhb_loop+0x40/0x90 [ 347.806952][T10172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.812897][T10172] RIP: 0033:0x7fe542d5e84e [ 347.817361][T10172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.837155][T10172] RSP: 002b:00007fe543bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.845625][T10172] RAX: ffffffffffffffda RBX: 00007fe543bfa6c0 RCX: 00007fe542d5e84e [ 347.853661][T10172] RDX: 000000000000000f RSI: 00007fe543bfa0a0 RDI: 0000000000000005 [ 347.861695][T10172] RBP: 00007fe543bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 347.869733][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.877752][T10172] R13: 00007fe543026038 R14: 00007fe543025fa0 R15: 00007fff881241d8 [ 347.885777][T10172] [ 348.077292][T10170] tap0: tun_chr_ioctl cmd 1074812117 [ 348.092671][T10170] tap0: tun_chr_ioctl cmd 1074820166 [ 348.313618][T10184] netlink: 'syz.1.1578': attribute type 21 has an invalid length. [ 348.331908][T10184] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1578'. [ 348.379255][T10184] sit0: left promiscuous mode [ 348.906667][T10192] sit0: entered promiscuous mode [ 349.414858][T10212] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 349.471287][T10211] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1584'. [ 349.979161][T10231] netlink: 'syz.1.1593': attribute type 21 has an invalid length. [ 349.987664][T10231] __nla_validate_parse: 1 callbacks suppressed [ 349.987680][T10231] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1593'. [ 350.300674][T10240] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 350.550584][T10248] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 350.908592][T10248] geneve1: entered promiscuous mode [ 350.920462][T10248] geneve1: entered allmulticast mode [ 350.976726][T10248] team0: Port device geneve1 added [ 351.312176][T10248] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1599'. [ 351.324621][T10248] bridge_slave_1: default FDB implementation only supports local addresses [ 351.384994][T10264] FAULT_INJECTION: forcing a failure. [ 351.384994][T10264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.433147][T10264] CPU: 0 PID: 10264 Comm: syz.3.1605 Not tainted syzkaller #0 [ 351.440715][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.442409][T10263] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 351.450803][T10264] Call Trace: [ 351.450843][T10264] [ 351.450855][T10264] dump_stack_lvl+0x18c/0x250 [ 351.450891][T10264] ? show_regs_print_info+0x20/0x20 [ 351.450918][T10264] ? load_image+0x420/0x420 [ 351.450956][T10264] ? __lock_acquire+0x7d80/0x7d80 [ 351.450987][T10264] ? snprintf+0xe9/0x140 [ 351.451024][T10264] should_fail_ex+0x394/0x4c0 [ 351.451063][T10264] _copy_to_user+0x2f/0xa0 [ 351.451091][T10264] simple_read_from_buffer+0xe7/0x150 [ 351.451122][T10264] proc_fail_nth_read+0x1e8/0x260 [ 351.508867][T10264] ? proc_fault_inject_write+0x360/0x360 [ 351.514637][T10264] ? fsnotify_perm+0x271/0x5e0 [ 351.519481][T10264] ? proc_fault_inject_write+0x360/0x360 [ 351.525194][T10264] vfs_read+0x298/0x990 [ 351.529432][T10264] ? kernel_read+0x1e0/0x1e0 [ 351.534093][T10264] ? __fget_files+0x28/0x460 [ 351.538775][T10264] ? __fget_files+0x3fc/0x460 [ 351.543533][T10264] ? __fdget_pos+0x2a3/0x330 [ 351.548195][T10264] ? ksys_read+0x74/0x260 [ 351.552595][T10264] ksys_read+0x151/0x260 [ 351.556909][T10264] ? vfs_write+0x9a0/0x9a0 [ 351.561457][T10264] ? lockdep_hardirqs_on+0x98/0x150 [ 351.566732][T10264] do_syscall_64+0x55/0xb0 [ 351.571205][T10264] ? clear_bhb_loop+0x40/0x90 [ 351.575946][T10264] ? clear_bhb_loop+0x40/0x90 [ 351.580694][T10264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.586908][T10264] RIP: 0033:0x7f0e6235e84e [ 351.591384][T10264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.611152][T10264] RSP: 002b:00007f0e6328dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.619636][T10264] RAX: ffffffffffffffda RBX: 00007f0e6328e6c0 RCX: 00007f0e6235e84e [ 351.627676][T10264] RDX: 000000000000000f RSI: 00007f0e6328e0a0 RDI: 0000000000000006 [ 351.635705][T10264] RBP: 00007f0e6328e090 R08: 0000000000000000 R09: 0000000000000000 [ 351.643737][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.651764][T10264] R13: 00007f0e62626038 R14: 00007f0e62625fa0 R15: 00007ffd08dbc2e8 [ 351.659825][T10264] [ 351.692528][T10263] team0: Device veth1_vlan failed to register rx_handler [ 352.396394][ T52] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 353.354280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 353.566733][T10311] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1623'. [ 353.615764][T10311] netlink: get zone limit has 4 unknown bytes [ 353.957916][T10324] FAULT_INJECTION: forcing a failure. [ 353.957916][T10324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.006563][T10324] CPU: 1 PID: 10324 Comm: syz.2.1629 Not tainted syzkaller #0 [ 354.014113][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.024285][T10324] Call Trace: [ 354.027637][T10324] [ 354.030627][T10324] dump_stack_lvl+0x18c/0x250 [ 354.035383][T10324] ? show_regs_print_info+0x20/0x20 [ 354.040644][T10324] ? load_image+0x420/0x420 [ 354.045232][T10324] ? __might_fault+0xaa/0x120 [ 354.049974][T10324] ? __lock_acquire+0x7d80/0x7d80 [ 354.055067][T10324] ? __virt_addr_valid+0x10c/0x380 [ 354.060252][T10324] should_fail_ex+0x394/0x4c0 [ 354.065002][T10324] _copy_from_user+0x2f/0xe0 [ 354.069660][T10324] generic_map_update_batch+0x53e/0x800 [ 354.075282][T10324] ? rcu_read_unlock+0xa0/0xa0 [ 354.080113][T10324] ? __fdget+0x180/0x210 [ 354.084426][T10324] ? rcu_read_unlock+0xa0/0xa0 [ 354.089253][T10324] bpf_map_do_batch+0x3f2/0x600 [ 354.094164][T10324] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 354.100738][T10324] __sys_bpf+0x381/0x890 [ 354.105048][T10324] ? bpf_link_show_fdinfo+0x390/0x390 [ 354.110506][T10324] ? lock_chain_count+0x20/0x20 [ 354.115446][T10324] __x64_sys_bpf+0x7c/0x90 [ 354.119931][T10324] do_syscall_64+0x55/0xb0 [ 354.124401][T10324] ? clear_bhb_loop+0x40/0x90 [ 354.129138][T10324] ? clear_bhb_loop+0x40/0x90 [ 354.133873][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.139831][T10324] RIP: 0033:0x7f009a99e019 [ 354.144301][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.163985][T10324] RSP: 002b:00007f009b8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.172462][T10324] RAX: ffffffffffffffda RBX: 00007f009ac25fa0 RCX: 00007f009a99e019 [ 354.180485][T10324] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 354.188505][T10324] RBP: 00007f009b8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 354.196522][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.204552][T10324] R13: 00007f009ac26038 R14: 00007f009ac25fa0 R15: 00007fff1a7eb0f8 [ 354.212606][T10324] [ 354.799725][T10343] syzkaller0: entered promiscuous mode [ 354.822553][T10343] syzkaller0: entered allmulticast mode [ 354.850798][T10347] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1637'. [ 354.866042][T10347] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1637'. [ 354.887931][T10347] bond0: (slave bond_slave_0): Releasing backup interface [ 354.904894][T10347] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 355.798073][T10367] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1643'. [ 357.007719][T10363] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 357.022484][T10363] team0: Device veth1_vlan failed to register rx_handler [ 357.042628][T10366] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 357.065891][T10365] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1643'. [ 357.099905][T10365] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 357.395221][T10380] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 357.448481][T10380] team0: Device veth1_vlan failed to register rx_handler [ 357.559026][ T52] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 357.655198][T10384] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1652'. [ 357.688633][T10384] netlink: 6116 bytes leftover after parsing attributes in process `syz.0.1652'. [ 357.701939][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 357.726856][T10387] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 357.742514][T10387] team0: Device veth1_vlan failed to register rx_handler [ 357.924135][T10394] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 357.940575][T10395] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 357.968363][T10395] team0: Device veth1_vlan failed to register rx_handler [ 357.999327][T10394] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1656'. [ 358.017531][T10394] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 358.044021][T10396] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1656'. [ 358.963618][T10416] batman_adv: batadv0: Interface deactivated: vlan1 [ 359.365391][T10416] batman_adv: batadv0: Removing interface: vlan1 [ 359.510858][T10422] netlink: 111004 bytes leftover after parsing attributes in process `syz.1.1668'. [ 359.545568][T10422] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 359.571136][T10422] veth0_macvtap: left promiscuous mode [ 359.927563][T10434] netlink: 'syz.1.1672': attribute type 10 has an invalid length. [ 359.947428][T10434] team0: Device veth1_vlan failed to register rx_handler [ 359.982764][T10436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1674'. [ 359.992416][T10436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1674'. [ 360.053742][T10434] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 360.228790][T10439] netlink: 'syz.3.1675': attribute type 10 has an invalid length. [ 360.823780][ T52] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 360.858073][T10450] __nla_validate_parse: 5 callbacks suppressed [ 360.858118][T10450] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1680'. [ 360.893259][T10450] netlink: 6116 bytes leftover after parsing attributes in process `syz.0.1680'. [ 360.903616][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 361.516656][T10468] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 361.536026][T10468] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1687'. [ 361.799162][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 362.020199][T10482] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1691'. [ 362.037409][T10482] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 362.079916][T10485] validate_nla: 1 callbacks suppressed [ 362.079954][T10485] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 362.124040][T10482] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1691'. [ 364.193286][ T52] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 364.498713][T10509] syzkaller0: entered promiscuous mode [ 364.545970][T10509] syzkaller0: entered allmulticast mode [ 364.897493][T10524] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1709'. [ 366.258777][T10522] netlink: 'syz.2.1707': attribute type 10 has an invalid length. [ 366.267945][T10522] team0: Device veth1_vlan failed to register rx_handler [ 366.284686][T10524] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1709'. [ 366.485950][T10531] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 366.512739][T10531] team0: Device veth1_vlan failed to register rx_handler [ 366.543619][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 366.588402][T10531] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1711'. [ 366.629621][T10534] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1711'. [ 366.650203][T10531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 367.618260][T10547] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1718'. [ 367.640137][T10547] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1718'. [ 367.664389][T10552] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 367.680344][T10552] team0: Device veth1_vlan failed to register rx_handler [ 367.821236][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 367.830240][T10556] netlink: 'syz.0.1721': attribute type 39 has an invalid length. [ 368.275268][T10571] syzkaller0: entered promiscuous mode [ 368.281004][T10571] syzkaller0: entered allmulticast mode [ 368.293492][T10572] netlink: 'syz.0.1727': attribute type 10 has an invalid length. [ 368.337823][T10572] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1727'. [ 368.348561][T10572] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 368.418912][T10572] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1727'. [ 368.553065][T10575] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1729'. [ 369.041237][ T52] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 370.894198][T10609] netlink: 'syz.2.1737': attribute type 10 has an invalid length. [ 370.929968][T10609] team0: Device veth1_vlan failed to register rx_handler [ 371.012994][T10615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1740'. [ 371.027989][T10614] netlink: 'syz.1.1741': attribute type 10 has an invalid length. [ 371.049822][T10614] netlink: 164888 bytes leftover after parsing attributes in process `syz.1.1741'. [ 371.178469][ T52] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 371.236547][T10621] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 371.756644][T10642] FAULT_INJECTION: forcing a failure. [ 371.756644][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 371.807138][T10642] CPU: 1 PID: 10642 Comm: syz.1.1752 Not tainted syzkaller #0 [ 371.814982][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.825091][T10642] Call Trace: [ 371.828424][T10642] [ 371.831399][T10642] dump_stack_lvl+0x18c/0x250 [ 371.836143][T10642] ? show_regs_print_info+0x20/0x20 [ 371.841392][T10642] ? load_image+0x420/0x420 [ 371.845941][T10642] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 371.852030][T10642] ? __asan_memset+0x22/0x40 [ 371.856735][T10642] should_fail_ex+0x394/0x4c0 [ 371.861480][T10642] should_failslab+0x9/0x20 [ 371.866041][T10642] slab_pre_alloc_hook+0x59/0x300 [ 371.871113][T10642] ? __debug_object_init+0xec/0x450 [ 371.876348][T10642] kmem_cache_alloc+0x5a/0x2c0 [ 371.881144][T10642] ? slab_build_skb+0x28/0x3e0 [ 371.885966][T10642] slab_build_skb+0x28/0x3e0 [ 371.890591][T10642] bpf_prog_test_run_skb+0x38f/0x18f0 [ 371.896065][T10642] ? __fget_files+0x28/0x460 [ 371.900691][T10642] ? __fget_files+0x3fc/0x460 [ 371.905413][T10642] ? cpu_online+0x60/0x60 [ 371.909784][T10642] bpf_prog_test_run+0x31f/0x390 [ 371.914811][T10642] __sys_bpf+0x49d/0x890 [ 371.919126][T10642] ? bpf_link_show_fdinfo+0x390/0x390 [ 371.924559][T10642] ? lock_chain_count+0x20/0x20 [ 371.929467][T10642] __x64_sys_bpf+0x7c/0x90 [ 371.933942][T10642] do_syscall_64+0x55/0xb0 [ 371.938406][T10642] ? clear_bhb_loop+0x40/0x90 [ 371.943123][T10642] ? clear_bhb_loop+0x40/0x90 [ 371.947847][T10642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.953779][T10642] RIP: 0033:0x7f3484d9e019 [ 371.958241][T10642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.977892][T10642] RSP: 002b:00007f3485b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.986352][T10642] RAX: ffffffffffffffda RBX: 00007f3485025fa0 RCX: 00007f3484d9e019 [ 371.994349][T10642] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 372.002347][T10642] RBP: 00007f3485b97090 R08: 0000000000000000 R09: 0000000000000000 [ 372.010345][T10642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.018341][T10642] R13: 00007f3485026038 R14: 00007f3485025fa0 R15: 00007ffe59ac86b8 [ 372.026354][T10642] [ 372.067323][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 372.531439][T10666] netlink: 'syz.1.1761': attribute type 10 has an invalid length. [ 372.620818][T10666] team0: Device veth1_vlan failed to register rx_handler [ 372.698790][T10668] __nla_validate_parse: 1 callbacks suppressed [ 372.698817][T10668] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1763'. [ 372.791184][T10672] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1766'. [ 373.011533][ T52] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 373.906766][ T52] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 376.576106][T10728] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 376.596681][T10728] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 376.610073][T10728] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 376.625499][T10728] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 376.649581][T10728] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 377.287985][T10737] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 377.305142][T10737] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1790'. [ 378.952251][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.958727][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.539737][T10757] netlink: 'syz.0.1798': attribute type 10 has an invalid length. [ 380.570910][T10757] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1798'. [ 380.583202][T10757] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 380.771375][T10757] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1798'. [ 381.432846][T10766] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 381.459676][T10766] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 381.474914][T10771] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 381.614460][T10774] validate_nla: 2 callbacks suppressed [ 381.614497][T10774] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 381.648178][T10776] FAULT_INJECTION: forcing a failure. [ 381.648178][T10776] name failslab, interval 1, probability 0, space 0, times 0 [ 381.661291][T10776] CPU: 1 PID: 10776 Comm: syz.3.1804 Not tainted syzkaller #0 [ 381.668808][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.678916][T10776] Call Trace: [ 381.682237][T10776] [ 381.685210][T10776] dump_stack_lvl+0x18c/0x250 [ 381.689976][T10776] ? show_regs_print_info+0x20/0x20 [ 381.695249][T10776] ? load_image+0x420/0x420 [ 381.699804][T10776] ? __might_sleep+0xe0/0xe0 [ 381.704431][T10776] ? __lock_acquire+0x7d80/0x7d80 [ 381.709500][T10776] should_fail_ex+0x394/0x4c0 [ 381.714217][T10776] should_failslab+0x9/0x20 [ 381.718757][T10776] slab_pre_alloc_hook+0x59/0x300 [ 381.723825][T10776] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 381.729241][T10776] __kmem_cache_alloc_node+0x53/0x250 [ 381.734649][T10776] ? __asan_memset+0x22/0x40 [ 381.739275][T10776] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 381.744598][T10776] kmalloc_trace+0x2a/0xe0 [ 381.749051][T10776] __xdp_reg_mem_model+0x1e3/0x5a0 [ 381.754194][T10776] ? kvmalloc_node+0x70/0x180 [ 381.758911][T10776] ? kvmalloc_node+0x70/0x180 [ 381.763619][T10776] ? xdp_reg_mem_model+0x40/0x40 [ 381.768601][T10776] xdp_reg_mem_model+0x22/0x40 [ 381.773486][T10776] bpf_test_run_xdp_live+0x262/0x1b30 [ 381.778906][T10776] ? 0xffffffffa0004740 [ 381.783086][T10776] ? 0xffffffffa0004740 [ 381.787266][T10776] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 381.793197][T10776] ? xdp_convert_md_to_buff+0x330/0x330 [ 381.798806][T10776] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 381.805084][T10776] ? _copy_from_user+0xa5/0xe0 [ 381.809885][T10776] ? bpf_test_init+0x119/0x140 [ 381.814681][T10776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 381.820176][T10776] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 381.825590][T10776] ? __lock_acquire+0x7d80/0x7d80 [ 381.830667][T10776] ? dev_put+0x80/0x80 [ 381.834779][T10776] ? dev_put+0x80/0x80 [ 381.838884][T10776] bpf_prog_test_run+0x31f/0x390 [ 381.843863][T10776] __sys_bpf+0x49d/0x890 [ 381.848140][T10776] ? bpf_link_show_fdinfo+0x390/0x390 [ 381.853579][T10776] ? lock_chain_count+0x20/0x20 [ 381.858468][T10776] __x64_sys_bpf+0x7c/0x90 [ 381.862913][T10776] do_syscall_64+0x55/0xb0 [ 381.867360][T10776] ? clear_bhb_loop+0x40/0x90 [ 381.872062][T10776] ? clear_bhb_loop+0x40/0x90 [ 381.876793][T10776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.882739][T10776] RIP: 0033:0x7f0e6239e019 [ 381.887181][T10776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.906822][T10776] RSP: 002b:00007f0e6328e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.915306][T10776] RAX: ffffffffffffffda RBX: 00007f0e62625fa0 RCX: 00007f0e6239e019 [ 381.923331][T10776] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 381.931326][T10776] RBP: 00007f0e6328e090 R08: 0000000000000000 R09: 0000000000000000 [ 381.939410][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.947403][T10776] R13: 00007f0e62626038 R14: 00007f0e62625fa0 R15: 00007ffd08dbc2e8 [ 381.955418][T10776] [ 381.969090][T10774] team0: Device veth1_vlan failed to register rx_handler [ 382.472655][T10792] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 382.499114][T10792] team0: Device veth1_vlan failed to register rx_handler [ 382.646900][T10799] FAULT_INJECTION: forcing a failure. [ 382.646900][T10799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.677297][T10799] CPU: 1 PID: 10799 Comm: syz.2.1811 Not tainted syzkaller #0 [ 382.684840][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.694940][T10799] Call Trace: [ 382.698276][T10799] [ 382.701254][T10799] dump_stack_lvl+0x18c/0x250 [ 382.705989][T10799] ? show_regs_print_info+0x20/0x20 [ 382.711244][T10799] ? load_image+0x420/0x420 [ 382.715826][T10799] ? __might_fault+0xaa/0x120 [ 382.720551][T10799] ? __lock_acquire+0x7d80/0x7d80 [ 382.725632][T10799] should_fail_ex+0x394/0x4c0 [ 382.730370][T10799] _copy_from_user+0x2f/0xe0 [ 382.735009][T10799] kstrtouint_from_user+0xde/0x170 [ 382.740180][T10799] ? kstrtol_from_user+0x190/0x190 [ 382.745364][T10799] proc_fail_nth_write+0x8f/0x250 [ 382.750485][T10799] ? proc_fail_nth_read+0x260/0x260 [ 382.755755][T10799] ? proc_fail_nth_read+0x260/0x260 [ 382.761011][T10799] vfs_write+0x299/0x9a0 [ 382.765314][T10799] ? file_end_write+0x250/0x250 [ 382.770220][T10799] ? __fget_files+0x28/0x460 [ 382.774868][T10799] ? __fget_files+0x3fc/0x460 [ 382.779612][T10799] ? __fdget_pos+0x2a3/0x330 [ 382.784290][T10799] ? ksys_write+0x74/0x260 [ 382.788764][T10799] ksys_write+0x151/0x260 [ 382.793192][T10799] ? __ia32_sys_read+0x90/0x90 [ 382.798019][T10799] ? lockdep_hardirqs_on+0x98/0x150 [ 382.803289][T10799] do_syscall_64+0x55/0xb0 [ 382.807758][T10799] ? clear_bhb_loop+0x40/0x90 [ 382.812493][T10799] ? clear_bhb_loop+0x40/0x90 [ 382.817228][T10799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.823174][T10799] RIP: 0033:0x7f009a95e84e [ 382.827653][T10799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.847321][T10799] RSP: 002b:00007f009b8befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.855788][T10799] RAX: ffffffffffffffda RBX: 00007f009b8bf6c0 RCX: 00007f009a95e84e [ 382.863806][T10799] RDX: 0000000000000001 RSI: 00007f009b8bf0a0 RDI: 0000000000000007 [ 382.871822][T10799] RBP: 00007f009b8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 382.879837][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.887852][T10799] R13: 00007f009ac26128 R14: 00007f009ac26090 R15: 00007fff1a7eb0f8 [ 382.895896][T10799] [ 382.929093][T10801] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1809'. [ 383.529530][T10781] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1806'. [ 383.562111][T10781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.595190][T10797] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1809'. [ 383.611393][T10797] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 384.556341][T10828] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 384.854370][T10830] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 384.873666][T10830] team0: Device veth1_vlan failed to register rx_handler [ 384.972122][T10832] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 384.989253][T10832] team0: Device veth1_vlan failed to register rx_handler [ 385.107721][T10832] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1822'. [ 385.167165][T10835] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1822'. [ 385.182213][T10832] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 385.946694][T10860] netlink: 'syz.0.1833': attribute type 10 has an invalid length. [ 386.169677][T10865] netlink: 'syz.0.1835': attribute type 10 has an invalid length. [ 386.239644][T10865] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1835'. [ 386.259693][T10865] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 386.290725][T10868] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1835'. [ 387.004129][T10878] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1841'. [ 387.184698][T10880] netlink: 'syz.3.1843': attribute type 10 has an invalid length. [ 387.287128][T10880] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.319937][T10880] bond0: (slave team0): Enslaving as an active interface with an up link [ 387.465209][T10889] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 388.520399][T10912] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 388.843739][T10912] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1853'. [ 388.881082][T10912] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 388.914269][T10920] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1853'. [ 389.223173][T10931] netlink: 'syz.1.1862': attribute type 10 has an invalid length. [ 389.271605][T10931] team0: Device veth1_vlan failed to register rx_handler [ 390.249928][T10954] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1870'. [ 390.269692][T10954] netlink: 'syz.1.1870': attribute type 19 has an invalid length. [ 390.278199][T10954] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1870'. [ 390.585035][T10962] netlink: 'syz.2.1872': attribute type 10 has an invalid length. [ 390.609909][T10962] team0: Device veth1_vlan failed to register rx_handler [ 390.686159][T10962] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1872'. [ 390.709246][T10962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 390.801076][T10962] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1872'. [ 391.018069][ T52] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 391.356505][T10979] FAULT_INJECTION: forcing a failure. [ 391.356505][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 391.376239][T10979] CPU: 0 PID: 10979 Comm: syz.1.1879 Not tainted syzkaller #0 [ 391.383751][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.393854][T10979] Call Trace: [ 391.397176][T10979] [ 391.400149][T10979] dump_stack_lvl+0x18c/0x250 [ 391.404882][T10979] ? show_regs_print_info+0x20/0x20 [ 391.410130][T10979] ? load_image+0x420/0x420 [ 391.414766][T10979] should_fail_ex+0x394/0x4c0 [ 391.419511][T10979] should_failslab+0x9/0x20 [ 391.424078][T10979] slab_pre_alloc_hook+0x59/0x300 [ 391.424805][T10980] netlink: 'syz.3.1876': attribute type 10 has an invalid length. [ 391.429148][T10979] kmem_cache_alloc+0x5a/0x2c0 [ 391.429196][T10979] ? dst_alloc+0x105/0x170 [ 391.446384][T10979] dst_alloc+0x105/0x170 [ 391.450699][T10979] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 391.456940][T10979] ? ip_route_output_key_hash+0x13d/0x330 [ 391.462706][T10979] ip_route_output_key_hash+0x1f3/0x330 [ 391.468295][T10979] ? ip_route_input_rcu+0x3120/0x3120 [ 391.473711][T10979] ? __asan_memset+0x22/0x40 [ 391.478342][T10979] ip_route_output_flow+0x2a/0x150 [ 391.483671][T10979] ip_tunnel_xmit+0x9c2/0x25b0 [ 391.488563][T10979] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 391.493642][T10979] ? validate_xmit_xfrm+0xbb/0x1340 [ 391.498931][T10979] ? skb_push+0x8e/0xe0 [ 391.503129][T10979] ipgre_xmit+0x7eb/0xb70 [ 391.507533][T10979] dev_hard_start_xmit+0x269/0x790 [ 391.512687][T10979] ? __dev_queue_xmit+0x275/0x3630 [ 391.517830][T10979] __dev_queue_xmit+0x198c/0x3630 [ 391.522890][T10979] ? __dev_queue_xmit+0x275/0x3630 [ 391.528054][T10979] ? netdev_core_pick_tx+0x370/0x370 [ 391.533367][T10979] ? pskb_expand_head+0x17a/0x1150 [ 391.538518][T10979] ? pskb_expand_head+0x17a/0x1150 [ 391.543667][T10979] ? skb_release_data+0x1de/0x7f0 [ 391.548730][T10979] ? __bpf_redirect+0x4d1/0xdf0 [ 391.553615][T10979] __bpf_tx_skb+0x181/0x260 [ 391.558187][T10979] bpf_clone_redirect+0x315/0x4a0 [ 391.563256][T10979] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 391.568745][T10979] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 391.574756][T10979] ? __lock_acquire+0x7d80/0x7d80 [ 391.579813][T10979] ? lock_chain_count+0x20/0x20 [ 391.584698][T10979] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 391.591003][T10979] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 391.596334][T10979] ? ktime_get+0x7f/0x280 [ 391.600718][T10979] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 391.607181][T10979] ? ktime_get_real_ts64+0x440/0x440 [ 391.612509][T10979] ? __x64_sys_bpf+0x7c/0x90 [ 391.617137][T10979] ? __local_bh_disable_ip+0x108/0x1a0 [ 391.622627][T10979] ? __cant_sleep+0x220/0x220 [ 391.627379][T10979] ? read_tsc+0x9/0x20 [ 391.631478][T10979] ? ktime_get+0x24b/0x280 [ 391.636194][T10979] ? bpf_test_run+0x174/0x870 [ 391.640906][T10979] bpf_test_run+0x2df/0x870 [ 391.645454][T10979] ? bpf_test_run+0x174/0x870 [ 391.650161][T10979] ? dst_hold+0x70/0x70 [ 391.654403][T10979] ? eth_get_headlen+0x210/0x210 [ 391.659455][T10979] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 391.664874][T10979] ? cpu_online+0x60/0x60 [ 391.669237][T10979] bpf_prog_test_run+0x31f/0x390 [ 391.674204][T10979] __sys_bpf+0x49d/0x890 [ 391.678475][T10979] ? bpf_link_show_fdinfo+0x390/0x390 [ 391.683901][T10979] ? lock_chain_count+0x20/0x20 [ 391.688796][T10979] __x64_sys_bpf+0x7c/0x90 [ 391.693242][T10979] do_syscall_64+0x55/0xb0 [ 391.697688][T10979] ? clear_bhb_loop+0x40/0x90 [ 391.702392][T10979] ? clear_bhb_loop+0x40/0x90 [ 391.707106][T10979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.713126][T10979] RIP: 0033:0x7f3484d9e019 [ 391.717611][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.737248][T10979] RSP: 002b:00007f3485b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.745794][T10979] RAX: ffffffffffffffda RBX: 00007f3485025fa0 RCX: 00007f3484d9e019 [ 391.753839][T10979] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 391.761845][T10979] RBP: 00007f3485b97090 R08: 0000000000000000 R09: 0000000000000000 [ 391.769854][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.777858][T10979] R13: 00007f3485026038 R14: 00007f3485025fa0 R15: 00007ffe59ac86b8 [ 391.785885][T10979] [ 392.183680][ T52] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 392.364889][T11009] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 392.413440][T11009] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1888'. [ 392.426544][T11009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 392.472914][T11009] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1888'. [ 392.947493][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 393.208835][T11034] FAULT_INJECTION: forcing a failure. [ 393.208835][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 393.234230][T11034] CPU: 0 PID: 11034 Comm: syz.3.1899 Not tainted syzkaller #0 [ 393.241849][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.251955][T11034] Call Trace: [ 393.255284][T11034] [ 393.258271][T11034] dump_stack_lvl+0x18c/0x250 [ 393.263015][T11034] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.269236][T11034] ? show_regs_print_info+0x20/0x20 [ 393.274492][T11034] ? load_image+0x420/0x420 [ 393.279065][T11034] ? kasan_check_range+0x7f/0x290 [ 393.284155][T11034] should_fail_ex+0x394/0x4c0 [ 393.288906][T11034] should_failslab+0x9/0x20 [ 393.293466][T11034] slab_pre_alloc_hook+0x59/0x300 [ 393.298552][T11034] ? __debug_object_init+0xec/0x450 [ 393.303856][T11034] kmem_cache_alloc+0x5a/0x2c0 [ 393.308698][T11034] ? slab_build_skb+0x28/0x3e0 [ 393.313521][T11034] slab_build_skb+0x28/0x3e0 [ 393.318174][T11034] bpf_prog_test_run_skb+0x38f/0x18f0 [ 393.323621][T11034] ? lockdep_hardirqs_on+0x98/0x150 [ 393.328895][T11034] ? cpu_online+0x60/0x60 [ 393.333285][T11034] bpf_prog_test_run+0x31f/0x390 [ 393.338287][T11034] __sys_bpf+0x49d/0x890 [ 393.342591][T11034] ? bpf_link_show_fdinfo+0x390/0x390 [ 393.348037][T11034] ? lock_chain_count+0x20/0x20 [ 393.352944][T11034] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 393.358994][T11034] __x64_sys_bpf+0x7c/0x90 [ 393.363466][T11034] do_syscall_64+0x55/0xb0 [ 393.367941][T11034] ? clear_bhb_loop+0x40/0x90 [ 393.372679][T11034] ? clear_bhb_loop+0x40/0x90 [ 393.377414][T11034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.383358][T11034] RIP: 0033:0x7f0e6239e019 [ 393.387820][T11034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.407486][T11034] RSP: 002b:00007f0e6328e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.415962][T11034] RAX: ffffffffffffffda RBX: 00007f0e62625fa0 RCX: 00007f0e6239e019 [ 393.423983][T11034] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 393.431976][T11034] RBP: 00007f0e6328e090 R08: 0000000000000000 R09: 0000000000000000 [ 393.439974][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.447970][T11034] R13: 00007f0e62626038 R14: 00007f0e62625fa0 R15: 00007ffd08dbc2e8 [ 393.455986][T11034] [ 393.493055][T11038] netlink: 'syz.2.1898': attribute type 10 has an invalid length. [ 393.502750][T11038] team0: Device veth1_vlan failed to register rx_handler [ 393.625573][T11038] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1898'. [ 393.644607][T11038] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 393.666697][T11038] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1898'. [ 393.849531][ T52] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 395.575291][T11066] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 395.895408][T11073] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 395.952653][T11073] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1913'. [ 396.006915][T11073] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 396.073297][T11076] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1913'. [ 396.201615][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 396.292988][T11082] netlink: 'syz.1.1917': attribute type 29 has an invalid length. [ 396.317194][T11082] netlink: 'syz.1.1917': attribute type 29 has an invalid length. [ 396.919291][T11093] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 396.965264][T11093] team0: Device veth1_vlan failed to register rx_handler [ 397.221007][T11094] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1921'. [ 397.611203][T11110] netlink: 'syz.0.1928': attribute type 10 has an invalid length. [ 397.644479][ T52] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 398.573571][T11128] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 398.918753][T11140] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 398.973229][T11140] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1939'. [ 399.036390][T11143] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1939'. [ 399.052866][T11140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 399.131195][T11145] FAULT_INJECTION: forcing a failure. [ 399.131195][T11145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.147552][T11145] CPU: 0 PID: 11145 Comm: syz.2.1942 Not tainted syzkaller #0 [ 399.155082][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.165272][T11145] Call Trace: [ 399.168593][T11145] [ 399.171574][T11145] dump_stack_lvl+0x18c/0x250 [ 399.176310][T11145] ? show_regs_print_info+0x20/0x20 [ 399.181562][T11145] ? load_image+0x420/0x420 [ 399.186167][T11145] ? __might_fault+0xaa/0x120 [ 399.190891][T11145] ? __lock_acquire+0x7d80/0x7d80 [ 399.195969][T11145] ? __virt_addr_valid+0x10c/0x380 [ 399.201137][T11145] should_fail_ex+0x394/0x4c0 [ 399.205876][T11145] _copy_from_user+0x2f/0xe0 [ 399.210576][T11145] sctp_setsockopt+0x19e/0x11e0 [ 399.215645][T11145] ? sock_common_recvmsg+0x190/0x190 [ 399.220981][T11145] do_sock_setsockopt+0x175/0x1a0 [ 399.226119][T11145] ? __fdget+0x180/0x210 [ 399.230421][T11145] __x64_sys_setsockopt+0x182/0x200 [ 399.235676][T11145] do_syscall_64+0x55/0xb0 [ 399.240143][T11145] ? clear_bhb_loop+0x40/0x90 [ 399.244911][T11145] ? clear_bhb_loop+0x40/0x90 [ 399.249642][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.255590][T11145] RIP: 0033:0x7f009a99e019 [ 399.260055][T11145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.279721][T11145] RSP: 002b:00007f009b8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.288194][T11145] RAX: ffffffffffffffda RBX: 00007f009ac25fa0 RCX: 00007f009a99e019 [ 399.296228][T11145] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 399.304245][T11145] RBP: 00007f009b8e0090 R08: 0000000000000008 R09: 0000000000000000 [ 399.312273][T11145] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.320295][T11145] R13: 00007f009ac26038 R14: 00007f009ac25fa0 R15: 00007fff1a7eb0f8 [ 399.328336][T11145] [ 399.522903][T11154] netlink: 'syz.2.1944': attribute type 3 has an invalid length. [ 399.536862][T11154] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 399.551061][T11154] netlink: 'syz.2.1944': attribute type 6 has an invalid length. [ 399.565045][T11154] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1944'. [ 399.895154][T11160] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 399.912398][T11160] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 400.122317][T11160] syzkaller0: entered promiscuous mode [ 400.135672][T11160] syzkaller0: entered allmulticast mode [ 402.993969][T11165] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 403.001384][T11175] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1952'. [ 403.012216][T11175] team_slave_0: left promiscuous mode [ 403.021673][T11175] team_slave_0: left allmulticast mode [ 403.040045][T11175] team0: Port device team_slave_0 removed [ 403.055287][T11175] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 403.282522][T11187] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 403.323205][T11187] team0: Device veth1_vlan failed to register rx_handler [ 403.501480][T11190] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1955'. [ 403.513867][ T52] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 403.524453][T11187] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1955'. [ 403.547540][T11187] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 403.763948][T11194] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 403.865787][T11194] team0: Device veth1_vlan failed to register rx_handler [ 405.022542][T11210] can: request_module (can-proto-0) failed. [ 405.113516][T11218] netlink: 'syz.3.1966': attribute type 10 has an invalid length. [ 406.523210][T11231] netlink: 'syz.2.1971': attribute type 10 has an invalid length. [ 406.550902][T11231] team0: Device veth1_vlan failed to register rx_handler [ 406.733923][T11233] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1971'. [ 406.766385][T11231] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1971'. [ 406.776956][T11231] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 406.828852][T11235] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 406.976216][T11239] netlink: 'syz.0.1973': attribute type 10 has an invalid length. [ 407.932984][T11257] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 407.990530][T11257] team0: Device veth1_vlan failed to register rx_handler [ 408.086133][T11261] netlink: 'syz.0.1982': attribute type 10 has an invalid length. [ 408.177881][T11261] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1982'. [ 408.223308][T11261] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 408.239852][T11263] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1982'. [ 408.313889][T11266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1984'. [ 408.740885][T11271] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 409.257035][T11286] netlink: 'syz.2.1990': attribute type 10 has an invalid length. [ 409.280074][T11286] team0: Device veth1_vlan failed to register rx_handler [ 409.586932][T11295] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 409.620866][T11295] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1996'. [ 409.631716][T11295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 409.677299][T11295] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1996'. [ 410.110804][T11302] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 410.872504][T11318] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 410.931288][T11317] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 410.951523][T11317] syzkaller1: linktype set to 6 [ 411.273659][T11329] netlink: 'syz.2.2010': attribute type 9 has an invalid length. [ 411.281836][T11329] netlink: 'syz.2.2010': attribute type 23 has an invalid length. [ 411.293352][T11329] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.2010'. [ 411.490111][T11336] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2012'. [ 411.575449][T11336] C: renamed from team_slave_0 [ 411.608724][T11336] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2012'. [ 413.274647][T11376] netlink: 'syz.0.2024': attribute type 10 has an invalid length. [ 413.317410][T11379] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 414.327927][T11387] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2030'. [ 414.493456][T11393] netlink: 'syz.1.2031': attribute type 10 has an invalid length. [ 414.502973][T11393] team0: Device veth1_vlan failed to register rx_handler [ 414.541558][T11393] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2031'. [ 414.553876][T11393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 414.604554][T11393] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2031'. [ 415.470279][T11408] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 415.492829][T11408] team0: Device veth1_vlan failed to register rx_handler [ 415.685249][T11413] FAULT_INJECTION: forcing a failure. [ 415.685249][T11413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.711556][T11413] CPU: 0 PID: 11413 Comm: syz.3.2042 Not tainted syzkaller #0 [ 415.719115][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.729208][T11413] Call Trace: [ 415.732528][T11413] [ 415.735516][T11413] dump_stack_lvl+0x18c/0x250 [ 415.740263][T11413] ? lockdep_hardirqs_on+0x98/0x150 [ 415.745518][T11413] ? show_regs_print_info+0x20/0x20 [ 415.750773][T11413] ? dump_stack+0x9/0x20 [ 415.755065][T11413] ? dump_stack_lvl+0xc/0x250 [ 415.759816][T11413] should_fail_ex+0x394/0x4c0 [ 415.764555][T11413] _copy_from_user+0x2f/0xe0 [ 415.769196][T11413] __sys_bpf+0x23e/0x890 [ 415.773485][T11413] ? bpf_link_show_fdinfo+0x390/0x390 [ 415.778914][T11413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.785141][T11413] __x64_sys_bpf+0x7c/0x90 [ 415.789604][T11413] do_syscall_64+0x55/0xb0 [ 415.794065][T11413] ? clear_bhb_loop+0x40/0x90 [ 415.798793][T11413] ? clear_bhb_loop+0x40/0x90 [ 415.803547][T11413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.809483][T11413] RIP: 0033:0x7f0e6239e019 [ 415.813940][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.833587][T11413] RSP: 002b:00007f0e6328e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.842052][T11413] RAX: ffffffffffffffda RBX: 00007f0e62625fa0 RCX: 00007f0e6239e019 [ 415.850074][T11413] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 415.858103][T11413] RBP: 00007f0e6328e090 R08: 0000000000000000 R09: 0000000000000000 [ 415.866118][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.874128][T11413] R13: 00007f0e62626038 R14: 00007f0e62625fa0 R15: 00007ffd08dbc2e8 [ 415.882156][T11413] [ 418.657742][T11441] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2048'. [ 418.914302][T11435] C: renamed from team_slave_0 [ 418.921793][T11447] netlink: 'syz.0.2052': attribute type 28 has an invalid length. [ 418.933198][T11447] netlink: 'syz.0.2052': attribute type 29 has an invalid length. [ 418.941859][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2052'. [ 418.948513][T11435] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2048'. [ 418.963076][T11447] netlink: 'syz.0.2052': attribute type 28 has an invalid length. [ 418.971734][T11447] netlink: 'syz.0.2052': attribute type 29 has an invalid length. [ 418.981171][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2052'. [ 419.310382][T11457] netlink: 'syz.3.2058': attribute type 21 has an invalid length. [ 419.512983][T11462] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2058'. [ 420.048563][T11479] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2065'. [ 420.152361][T11478] C: renamed from team_slave_0 [ 420.163652][T11478] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2065'. [ 420.207356][T11478] bridge0: port 3(team0) entered disabled state [ 420.244141][T11478] bridge_slave_1: left allmulticast mode [ 420.257165][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.282327][T11478] bridge_slave_0: left allmulticast mode [ 420.294993][T11478] bridge_slave_0: left promiscuous mode [ 420.314243][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.394175][T11478] bond0: (slave bridge0): Releasing backup interface [ 421.757654][T11505] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 421.796382][T11505] team0: Device veth1_vlan failed to register rx_handler [ 422.395380][T11508] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2079'. [ 422.981204][T11519] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2083'. [ 423.035704][T11519] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 423.376828][T11530] netlink: 'syz.2.2086': attribute type 10 has an invalid length. [ 423.400773][T11530] team0: Device veth1_vlan failed to register rx_handler [ 423.534536][T11532] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2086'. [ 423.584331][T11530] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2086'. [ 423.623516][T11530] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 424.483124][ T52] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 424.622616][T11549] netlink: 'syz.2.2091': attribute type 10 has an invalid length. [ 424.670883][T11549] team0: Device veth1_vlan failed to register rx_handler [ 427.086093][T11589] netlink: 'syz.2.2108': attribute type 10 has an invalid length. [ 427.121971][T11589] team0: Device veth1_vlan failed to register rx_handler [ 428.020223][ C1] ================================================================== [ 428.028353][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 428.036237][ C1] Write of size 104 at addr ffff888077a9ef90 by task syz.1.2117/11607 [ 428.044420][ C1] [ 428.046775][ C1] CPU: 1 PID: 11607 Comm: syz.1.2117 Not tainted syzkaller #0 [ 428.054269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.064367][ C1] Call Trace: [ 428.067679][ C1] [ 428.070557][ C1] dump_stack_lvl+0x18c/0x250 [ 428.075282][ C1] ? read_lock_is_recursive+0x20/0x20 [ 428.080699][ C1] ? show_regs_print_info+0x20/0x20 [ 428.085946][ C1] ? load_image+0x420/0x420 [ 428.090504][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 428.096091][ C1] ? __virt_addr_valid+0x10c/0x380 [ 428.101251][ C1] ? __virt_addr_valid+0x10c/0x380 [ 428.106432][ C1] ? __virt_addr_valid+0x10c/0x380 [ 428.111594][ C1] print_report+0xa8/0x210 [ 428.116078][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 428.121227][ C1] kasan_report+0x117/0x150 [ 428.125772][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 428.130932][ C1] kasan_check_range+0x241/0x290 [ 428.135906][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 428.141050][ C1] __asan_memcpy+0x40/0x70 [ 428.145495][ C1] __bpf_get_stackid+0x6c7/0x900 [ 428.150467][ C1] bpf_get_stackid_pe+0x343/0x410 [ 428.155526][ C1] bpf_prog_ceda4e53fcf21ae1+0x30/0x48 [ 428.161010][ C1] bpf_overflow_handler+0x1fc/0x510 [ 428.166251][ C1] ? bpf_overflow_handler+0xde/0x510 [ 428.171569][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 428.176984][ C1] ? __lock_acquire+0x1336/0x7d80 [ 428.182032][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 428.188306][ C1] __perf_event_overflow+0x461/0x660 [ 428.193656][ C1] perf_swevent_hrtimer+0x437/0x610 [ 428.198897][ C1] ? cpu_clock_event_read+0x40/0x40 [ 428.204141][ C1] ? __hrtimer_run_queues+0x426/0xc10 [ 428.209561][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 428.214796][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 428.220727][ C1] ? _raw_spin_unlock+0x40/0x40 [ 428.225620][ C1] ? cpu_clock_event_read+0x40/0x40 [ 428.230877][ C1] __hrtimer_run_queues+0x4e8/0xc10 [ 428.236105][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 428.242130][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 428.248145][ C1] ? hrtimer_interrupt+0x980/0x980 [ 428.253279][ C1] ? read_tsc+0x9/0x20 [ 428.257375][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 428.263470][ C1] hrtimer_interrupt+0x39d/0x980 [ 428.268447][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 428.274369][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 428.280036][ C1] [ 428.282986][ C1] [ 428.285971][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.291973][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 428.297804][ C1] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 428.317522][ C1] RSP: 0018:ffffc900033c7800 EFLAGS: 00000286 [ 428.323616][ C1] RAX: ec665af3001f7900 RBX: 0000000000000000 RCX: ec665af3001f7900 [ 428.331623][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 428.339623][ C1] RBP: ffffc900033c7850 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 428.347617][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88802b5a1e00 [ 428.355700][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 428.363713][ C1] __schedule+0x15b6/0x4660 [ 428.368254][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 428.374173][ C1] ? perf_trace_lock+0xfc/0x3b0 [ 428.379057][ C1] ? asan.module_dtor+0x20/0x20 [ 428.383938][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 428.389946][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 428.394996][ C1] ? preempt_schedule+0xc0/0xd0 [ 428.399883][ C1] preempt_schedule_common+0x82/0xc0 [ 428.405193][ C1] preempt_schedule+0xc0/0xd0 [ 428.409901][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 428.415662][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 428.421591][ C1] ? _raw_spin_unlock+0x40/0x40 [ 428.426471][ C1] preempt_schedule_thunk+0x1a/0x30 [ 428.431739][ C1] try_to_wake_up+0x6f5/0x10e0 [ 428.436529][ C1] wake_up_q+0xb6/0x100 [ 428.440719][ C1] futex_wake+0x42a/0x4f0 [ 428.445075][ C1] ? futex_wake_mark+0x150/0x150 [ 428.450041][ C1] ? perf_poll+0x1b0/0x1b0 [ 428.454496][ C1] do_futex+0x35d/0x3e0 [ 428.458681][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 428.464599][ C1] __se_sys_futex+0x3a9/0x440 [ 428.469297][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 428.474090][ C1] ? __x64_sys_futex+0x21/0xf0 [ 428.478879][ C1] do_syscall_64+0x55/0xb0 [ 428.483317][ C1] ? clear_bhb_loop+0x40/0x90 [ 428.488021][ C1] ? clear_bhb_loop+0x40/0x90 [ 428.492721][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.498632][ C1] RIP: 0033:0x7f3484d9e019 [ 428.503067][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.522693][ C1] RSP: 002b:00007f3485b970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 428.531140][ C1] RAX: ffffffffffffffda RBX: 00007f3485025fa8 RCX: 00007f3484d9e019 [ 428.539153][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3485025fac [ 428.547161][ C1] RBP: 00007f3485025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 428.555182][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.563195][ C1] R13: 00007f3485026038 R14: 00007ffe59ac85d0 R15: 00007ffe59ac86b8 [ 428.571225][ C1] [ 428.574280][ C1] [ 428.576622][ C1] Allocated by task 11607: [ 428.581060][ C1] kasan_set_track+0x4e/0x70 [ 428.585695][ C1] __kasan_kmalloc+0x8f/0xa0 [ 428.590330][ C1] __kmalloc_node+0xb6/0x240 [ 428.594952][ C1] bpf_map_area_alloc+0x5e/0x110 [ 428.599933][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 428.605692][ C1] stack_map_alloc+0x32b/0x4b0 [ 428.610534][ C1] map_create+0x877/0x12f0 [ 428.614978][ C1] __sys_bpf+0x651/0x890 [ 428.619247][ C1] __x64_sys_bpf+0x7c/0x90 [ 428.623686][ C1] do_syscall_64+0x55/0xb0 [ 428.628131][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.634056][ C1] [ 428.636401][ C1] The buggy address belongs to the object at ffff888077a9ef80 [ 428.636401][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 428.650573][ C1] The buggy address is located 16 bytes inside of [ 428.650573][ C1] allocated 40-byte region [ffff888077a9ef80, ffff888077a9efa8) [ 428.664580][ C1] [ 428.666933][ C1] The buggy address belongs to the physical page: [ 428.673375][ C1] page:ffffea0001dea780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77a9e [ 428.683567][ C1] memcg:ffff88802e525401 [ 428.687826][ C1] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 428.695831][ C1] page_type: 0xffffffff() [ 428.700185][ C1] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 dead000000000001 [ 428.708804][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802e525401 [ 428.717406][ C1] page dumped because: kasan: bad access detected [ 428.723877][ C1] page_owner tracks the page as allocated [ 428.729603][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 7467, tgid 7458 (syz.0.622), ts 180662582611, free_ts 180632592015 [ 428.747771][ C1] post_alloc_hook+0x1c1/0x200 [ 428.752590][ C1] get_page_from_freelist+0x2181/0x22a0 [ 428.758158][ C1] __alloc_pages+0x1f0/0x460 [ 428.762765][ C1] alloc_slab_page+0x5d/0x180 [ 428.767457][ C1] new_slab+0x87/0x2d0 [ 428.771546][ C1] ___slab_alloc+0xc5c/0x12f0 [ 428.776269][ C1] __kmem_cache_alloc_node+0x11f/0x250 [ 428.781754][ C1] __kmalloc_node+0xa6/0x240 [ 428.786373][ C1] kvmalloc_node+0x70/0x180 [ 428.790909][ C1] __nf_hook_entries_try_shrink+0x336/0x700 [ 428.796933][ C1] __nf_unregister_net_hook+0x4da/0x6d0 [ 428.802527][ C1] nf_unregister_net_hooks+0xcb/0x130 [ 428.807920][ C1] nf_ct_netns_put+0x36d/0x520 [ 428.812762][ C1] nf_conncount_destroy+0x41/0x150 [ 428.817959][ C1] ovs_ct_exit+0x9c/0x200 [ 428.822362][ C1] ovs_exit_net+0xed/0x7a0 [ 428.826793][ C1] page last free stack trace: [ 428.831476][ C1] free_unref_page_prepare+0x7d7/0x8f0 [ 428.836950][ C1] free_unref_page+0x32/0x2e0 [ 428.841639][ C1] __slab_free+0x35a/0x400 [ 428.846068][ C1] qlist_free_all+0x75/0xd0 [ 428.850592][ C1] kasan_quarantine_reduce+0x143/0x160 [ 428.856098][ C1] __kasan_slab_alloc+0x22/0x80 [ 428.860966][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 428.866103][ C1] kmem_cache_alloc_lru+0x175/0x2b0 [ 428.871333][ C1] __d_alloc+0x31/0x710 [ 428.875501][ C1] d_alloc_pseudo+0x1d/0x70 [ 428.880020][ C1] alloc_file_pseudo+0xe4/0x210 [ 428.884892][ C1] anon_inode_getfile+0xc5/0x1a0 [ 428.889865][ C1] __se_sys_perf_event_open+0xeed/0x1c60 [ 428.895521][ C1] do_syscall_64+0x55/0xb0 [ 428.899957][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.905879][ C1] [ 428.908229][ C1] Memory state around the buggy address: [ 428.913883][ C1] ffff888077a9ee80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 428.921960][ C1] ffff888077a9ef00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 428.930033][ C1] >ffff888077a9ef80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 428.938103][ C1] ^ [ 428.943506][ C1] ffff888077a9f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.951598][ C1] ffff888077a9f080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 428.959676][ C1] ================================================================== [ 428.967756][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 428.974958][ C1] CPU: 1 PID: 11607 Comm: syz.1.2117 Not tainted syzkaller #0 [ 428.982429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.992498][ C1] Call Trace: [ 428.995798][ C1] [ 428.998667][ C1] dump_stack_lvl+0x18c/0x250 [ 429.003369][ C1] ? show_regs_print_info+0x20/0x20 [ 429.008589][ C1] ? load_image+0x420/0x420 [ 429.013135][ C1] panic+0x2ca/0x720 [ 429.017068][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 429.022132][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 429.026675][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 429.032611][ C1] ? _raw_spin_unlock+0x40/0x40 [ 429.037497][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 429.042646][ C1] check_panic_on_warn+0x84/0xa0 [ 429.047644][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 429.052785][ C1] end_report+0x6f/0x130 [ 429.057055][ C1] kasan_report+0x128/0x150 [ 429.061595][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 429.066763][ C1] kasan_check_range+0x241/0x290 [ 429.071730][ C1] ? __bpf_get_stackid+0x6c7/0x900 [ 429.076866][ C1] __asan_memcpy+0x40/0x70 [ 429.081312][ C1] __bpf_get_stackid+0x6c7/0x900 [ 429.086295][ C1] bpf_get_stackid_pe+0x343/0x410 [ 429.091363][ C1] bpf_prog_ceda4e53fcf21ae1+0x30/0x48 [ 429.096854][ C1] bpf_overflow_handler+0x1fc/0x510 [ 429.102088][ C1] ? bpf_overflow_handler+0xde/0x510 [ 429.107435][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 429.112759][ C1] ? __lock_acquire+0x1336/0x7d80 [ 429.117823][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 429.124102][ C1] __perf_event_overflow+0x461/0x660 [ 429.129420][ C1] perf_swevent_hrtimer+0x437/0x610 [ 429.134647][ C1] ? cpu_clock_event_read+0x40/0x40 [ 429.139897][ C1] ? __hrtimer_run_queues+0x426/0xc10 [ 429.145310][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 429.150535][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 429.156462][ C1] ? _raw_spin_unlock+0x40/0x40 [ 429.161342][ C1] ? cpu_clock_event_read+0x40/0x40 [ 429.166559][ C1] __hrtimer_run_queues+0x4e8/0xc10 [ 429.171831][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 429.177838][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 429.183851][ C1] ? hrtimer_interrupt+0x980/0x980 [ 429.188983][ C1] ? read_tsc+0x9/0x20 [ 429.193075][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 429.199172][ C1] hrtimer_interrupt+0x39d/0x980 [ 429.204144][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 429.210114][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 429.215787][ C1] [ 429.218752][ C1] [ 429.221714][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.227723][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 429.233576][ C1] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 429.253223][ C1] RSP: 0018:ffffc900033c7800 EFLAGS: 00000286 [ 429.259317][ C1] RAX: ec665af3001f7900 RBX: 0000000000000000 RCX: ec665af3001f7900 [ 429.267336][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 429.275330][ C1] RBP: ffffc900033c7850 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 429.283408][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88802b5a1e00 [ 429.291407][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 429.299413][ C1] __schedule+0x15b6/0x4660 [ 429.303973][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 429.309896][ C1] ? perf_trace_lock+0xfc/0x3b0 [ 429.314772][ C1] ? asan.module_dtor+0x20/0x20 [ 429.319689][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 429.325694][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 429.330742][ C1] ? preempt_schedule+0xc0/0xd0 [ 429.335636][ C1] preempt_schedule_common+0x82/0xc0 [ 429.340943][ C1] preempt_schedule+0xc0/0xd0 [ 429.345646][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 429.351340][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 429.357276][ C1] ? _raw_spin_unlock+0x40/0x40 [ 429.362161][ C1] preempt_schedule_thunk+0x1a/0x30 [ 429.367408][ C1] try_to_wake_up+0x6f5/0x10e0 [ 429.372201][ C1] wake_up_q+0xb6/0x100 [ 429.376391][ C1] futex_wake+0x42a/0x4f0 [ 429.380761][ C1] ? futex_wake_mark+0x150/0x150 [ 429.385736][ C1] ? perf_poll+0x1b0/0x1b0 [ 429.390199][ C1] do_futex+0x35d/0x3e0 [ 429.394383][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 429.400304][ C1] __se_sys_futex+0x3a9/0x440 [ 429.405025][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 429.409836][ C1] ? __x64_sys_futex+0x21/0xf0 [ 429.414629][ C1] do_syscall_64+0x55/0xb0 [ 429.419086][ C1] ? clear_bhb_loop+0x40/0x90 [ 429.423791][ C1] ? clear_bhb_loop+0x40/0x90 [ 429.428504][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.434426][ C1] RIP: 0033:0x7f3484d9e019 [ 429.438861][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.458497][ C1] RSP: 002b:00007f3485b970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 429.466943][ C1] RAX: ffffffffffffffda RBX: 00007f3485025fa8 RCX: 00007f3484d9e019 [ 429.474933][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3485025fac [ 429.482926][ C1] RBP: 00007f3485025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 429.490924][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.498913][ C1] R13: 00007f3485026038 R14: 00007ffe59ac85d0 R15: 00007ffe59ac86b8 [ 429.506919][ C1] [ 429.510116][ C1] Kernel Offset: disabled [ 429.514445][ C1] Rebooting in 86400 seconds..