last executing test programs: 18.062875382s ago: executing program 2 (id=4390): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x3}, 0x8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00001800"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 17.930969596s ago: executing program 1 (id=4391): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000021c0)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000140)="11f558bcae733bca729fe87677dd6d50906b43994dcf0895dac24826c4393418e838d15fa1b9cbfb36b28ceed3369890ddbb93abd211baa0bfde1466669fdcd191203c8a82d0624aab991b61e3a1a9ab56cd30b8b10d70a45c49a1eb", 0x5c}, {&(0x7f0000000fc0)="516ba06fe505d30f932a1052c830cad6b487ed3617bbb757583e34742fa268d0c7d671fd5c983456f690412819559bd436a83b26b7a43cde9804a24c6650cbd89b38653ad7f3fa8d6f6ccb88868d2c9af6ac09bee0877ae3eadeef60f13eddfb0525e061c069ff524adc492d35d146c3a001c3960ca345efde92346393b8322bf298769e2971594955ce703ff555b57b7fce2e664ceea1978e8c63b5261c740db772691ec4f4c7eabf209eb95fba10127bcdc66c423709b190b942d52fe12abfb97fd371d0436c9361e3726479f3f39bdd3b303b8b22241143a419733f9bd8193434535d9718a279536ea871e206ab5bdbd8ac45cde28168cf44914f644d523b342be6f9b8b4f0bde171e75ac63eee14c666461cad86326d16fdbd042fb296694e1b6a959719ee3fac4f7d01fba4b7174f0438f2fd222819ab91955e66f9f4850ac5ba2d68964a4aa019516683107aed2bac386a4c2e27ae466424171b7b977d4afc659fcb95ea4614eb2ea5f622150da18007d4f3ec999d247f03b4f7a52e71f83aacb6f623f6f8585ad037b7b970f50be7f6914f5e1fe7c64d039e80a587bda3ed8b51797657853d370fd29dbfcf6f2b2551567021b8a31a58afba6fab61bdce10428f948d672ade7b05ae330b9b0e93d83a7605b3772dff9368204d5b75e592214398b0c409b30705be055c888288f3eacf97b4e499b1ec1ac1b721e836076dd03068f4411e4bda6f2d08c742baa2cca06f7f4787bc8598a4ba0e1f007206fdff37a6bd66522ea4c98aabd7654a27460aae1568a8d38efe8a64e3689b8089a96f41c275cd8473c544adf64108a3a0dbd7f573de7507eea6eabb3d47a223cb58cb1b1d6f1f3dbbd857b6ec48e6514b0437327d5b83ec4284485f5d485ff2dce3137d636d2742902d66a71d09927a641a3361645a33018ffcfaa6368883920b2e7122ce8549eb8e5391d68a2bac3f7d69acac6bd9f35a41632c9700117abad4940c8711c06f7303806385e48cb66e02bf91a74e33d97d46bc13df996765378da7097664e85ffcccfc6fd35d7502d6f4b3c0878f87515c97406bbbe522d19639fa5d09938c7cce58d18bd4207131fab2d5343c73a0fef3ae041c445ceaf2027422a01240c2b31b1e690b093301139b50422e3ac3c9e27895d2be3dca47b07f7f5b9a68452d0b2127fda7fc46e914f65b6155b40fa5f63654b7569411449343d8ccc2d0ae27cf33e8608e44827b35b7ea319ee7c8a4a18d54b9965be69ede4fa0676fccca9649c29892024a5a02ff7642e11c067b859541ee21c2c40e16fe178429d460c9faa47da2a94e612a470270bdb766db6efcacf732f277a9f206c22a8a79cf4c7700c33a6e2d91d28e2327875c549ce07bfd5a0d978384187d8aba28663c6b489e7229d1d6a08d4a9653d85b42759d9bc5c20746c21a000d5402fcbf79e23e120105ded699ce4f3e58a4f140c25f4bb479b5441fe9b0804543cbd2eec9c317c3d1010828d22a0acb77688501954c5c1718f33ae11ab1d12b568f77f82d7285c6eb88d295809b90c39953ca3973692a321d29c7bc0e41be5e1d2e201b632c92bea850c34111c3e55f5c54ff3610783b411836e354cc8d1a9d6482ee3cb4e96945a52ff6cf311e4342334ce90596ab158535726ad8c123f6e5b3f583881fb123de7b490a080633ceb90516b99ff35c1e483f3f0193248c658ba8cc6acdc889d3844b8e3a68d089a964f1d8580e2ec1ac4ca7faed06bfb78cef1aed16036b70d2ff4da240ea3afe2aa12110041e429a9dd0a2d174b9ced147c4d319e5e48ab4976b200fad969954f18a3900427929268eaaebf560203ac666504fd35fc5d5cee75d75e92848a04d3565d1fa3ad4ae5b6a66f6aa7e4ee5e50aa433dc9f13a89fc3c0ff77f006dd8a852fa158656caceefa154d3ce46ad5eb5675e56ae90434d172bebe99f81f8d9915decf4e29d3f09769055ea64471462e0741494e577358b08a7b04cb5101bed7964e9e771d3f7ee3232c0e87a78ca2f05b0e89e4cc686130135bb3409491d5681f3dcfc7ecdeea75663283717f5ec05dc7e0fd995a916bb62dcd6f0e73eaf3b3d1e707dd8355fe67719b28ec1c8e2166e48f03cf28f8759e8e76e3f1bd8598c101e7f21a6458e588764e85e3e42e0bfdc238b72027894817fb67ca474e16621d32720bd58aa39bf18f0668cc06e08911fde390fc2bccf3f87206abaf30ce4dcc98f474765bbb1a71af625acff6c0cb2465b2f08c23a0111aa308d8207c54ef722fa0f70b38e288463a898307bdb321de98da319d17df4eea00fc1a2c137e382529af19d7abac638085eb7302b9e1cf0edf59aaa23df296085b3a0666cf169c51f97ea9cf50edbfb5c7a26f3ead6cb38f03eddd16704bb204a90eb4e11d282732b3f461531d3fd28c6331847afca2d394c73c6befe2500b7c330f8346b39021a6bc2434fccf6a0aa6f7450353633f780e503669f61a383e68ac17ca1fbc4eac65a818dbecd5bea48b23c3e94dc97ea98ea7b4dd75a2830a0866f1978febea62d9b7c84f71bf1be5675f3aa7ccdb72a3c7a8da3e76a3522c6e75da95a234d6693276eebce80a598ea045190198b5f085dabcb2e28a7ac72ced71fc059bb930bef6c587c2f4ab653aaeea46da4cda4b25373702baddefc2961fb15a98319d57071368d1db73174105dd95ecf17b4d4e449f757982789d817a4bddfad59c4b592f0573b154e476ec4e016e52e584b5b5fba6f62c5b49e2f88c8376c71a5f458bf639bea44542821c39ac19f74b994bf2137ea8995e4b575110454b21cb7d99893ce973978b94c3d3e8748191b6c7b8f9be29e706728c70281b9522fc11545422160e5cefad8735991b6294bb9e72ac5f3e077332fca75436efb8e6d6037dde9fe7c8cb767bc9548df8703bea6216eeac472abab561a9032ad11234ce491ab7ce2674afafb8c2cba2b99e0a9ec7b131563d4ec279bee4e180f71c16280abe1e4db287c2aecc46e3604fa23bf6dfe9cac52e812f7da8ea7df37d3616b58d28623c6857a942d844808bb3262619279f11276904f6f9cd06400b3a77e3409b22499b1bdc94e9f0dd34b8f32aad38cacb5d177d94b8643d77858706f209467361d9a5282b47ed38942b6a3ec60cf9cfd71267698e13f0425d22d1073aa834245f1784173d2dc2700af7bbd29630be24845f69971b421d39c88759db44ae88f885dd554bb8a891d5c2792fdde238913bbec108b11afc39051ed3e79dc571499dbb9ad392f2fcd4861ae726c352e96a500020b133ae0537665e195f092c7fbe3116a70f52034eefb231140dd1c9573722ad592fdd76aa18a5d2fb0a0a66b5d5be8400ddbbe5669e6593a2850b1be0ff76d43cc7dc593c9f236fcaed69b693d386cbd32c9fe5497eee6706635adc71bd82689b06041132e8b97b97adfa2801bbbb5c757a59dff3b2e2d85fceab7f91e4d95112cf75d78f76746aa460a56426b3d383fc1b0d431b7b58e8ddc036f138e4924dadffdd5f2e02cb2756c18af020a52a6d2f1a7ad260ee645a9e27af9c279aaf71ad5c248db7af3b0e8b7206af90065b6fde8e6e0bcd9702b0b4d65a4a96930dae3ad9fc41e503dab7bb05b353aa52f18149b74270bf417c883a0d94b7bdbde3e9aeae523a8b5b20de6cf86b0e73b4e7ea895c9aa64691cc293201d38bbd3586ea1066383a0ac07b22592fa3f3c6698c76cf703e396558a0db6b176c9f2254486ae33ee52f186345b9ca923ef1f1e47d5473248fa8cfb86877fdc35da4a0f6ea74781b56599aaa28f192d8758fabbad83937c17bb3c0eaab851d504c04c7c86decb2b2c91b58b296c45857eac2a89ca3f79ec55737855cbd57caf402e15b069c9e492a9c3cc0c366d6dc5af64da6c50cf58a165687a106474bb209e7b00a48443b94981f71cb2df4a466d89f92ddc3bcf90cc938b876a78d70c67e9cb4e85ad1b8875c22276f0b0e8737bbc864900af5e6546204442f1d970521faccc04d792a04e8b2465561029f9f5941473cece11cfa6ec5ec7ffdfc6518993e8e9ccc983947532178ddc47f5954820e458214b6ba643f5b1ee0ccdf83f5513712db8502274d7f818a3a736a7673c309dddde9c010e23e7631e2049e7d2de08de4275c41e49d06a6d395df351681d707efdc63d20c9184cb1fa4484cdb3cff64a2cdc6cd683168143826cc66bca68f27b701d9854d6dca6e9830b9be4639496372cbc21e70e0be7b1e93d7a9cc874434aa96b4e2d270cae810e5bbae2b6d3a3637670b282ea8fc8e27886f5b82def9ac32e96bc6a4bab6ed781323ae06547212583077b614cfc981a0c82fea1231d06be3c367bbdecdd4949f3ea2c8f4eb486eac01482358a3e531c13246fa44eec7aceaed6577e6591e6384a644c55d3ec608de6fd69b52ca569252a42e380af18aa0ee1fa2280717d5c12c4574c62f0e2adc58dc162165f53d3b9d03e4a7963ffb058bbc2e76837004c1f24a7cf0f2b18057c19a9acca9be9190b0bc3d247cea254c9b58dc432c6ef9a04d1926ac5e4983aa92ad11e9bc1cf7bd052965c46e356ba3576836524438a2a74e9d7e6c4228befcc7da5521f031acb09db093ff7711cb885564af4072e3044e23ed4b3f21c94aa1d84b8d9e564a8b2141aa90e3a0be45afc5e322e362656a7742e8731ae09f2f45b1f9b2d9b2566d7f09d1c5ba725eac5dd500cd1aadb39520b92625ec42dd26d34d3fc9045927f770d15f02089fd0463ebb53c65519e2b93cb963388e46f6f7af5cf435aab37af23ed450d4396ac417669bbb3293955e938f4ac94bbca8d0702755d67a73e08e74f8e89c50834e67c9f341e9e70b08b958417fcd207cadb839c7c5d836587b6c234b17544c1b8f4cf2c893ad7bb7c717837e0fadb9a33c1628b3e868f0158a7f8f727e11988000e158c92ca763cc4dfb78169ed208e9b9c06c7d7edc6b5e9fc4b92ce1c107f5df05319bd9b09a65042ea7dd92a14f112d589eb0afb1a694dd798ad7e3032362c1f8d0397e3b1e9a30da15aac68af76c1fa022e87d8cb18b15cb79a29d0e4e2fc16fc7e7478b7fff467dc406b0c38f0bf4bbc21f29981e3dfa6b2eb3b490cff1738611d06a01219c74241007568c0e2e76d9077da6c67cf5fe1571e0c528bfbb6c40a32a98c8bbd96469686b51f8feda8eddd66f97127146635fe0335879b45ded793c54eabd925841b52313378b64446e96d576f4890d3fafeeeb1974c6c7646b746524b42a4f1db29acfa7f25b1aaa5a5655d1376a49cd811eaad6223ee6c394c7b616d38b91f82d6040bbb7f2d7c78e2bbeb1a643c8c8c28b37161982799f28b4c5f73aad53eecea485ac775eb2faa7605cf235747c432396be589ad0c6cbfb52a43a098cf5d202d719d8f00ab082ac45a363e69025dab728981bd32c4e65a28b437a51b4dff6c3b772c8401c7a90577f6b8ec19cac6f31f22e62b743c2071cc0431783d8d89121feba52a1ffd0f1bbbe28e91cf79f78e6004551b2e770afecbb89cd60c8aade5a688db4c838439f5a9c8554244aa16e30d2e9723c16b370393a3bab70642d1ff9f87f9a5a7d66f63a144c8993b4c1eb803926f47339930415b5d591c9bbde2722682ba47dad540e5b6324c219ead50298a5d8a4f7c695846e71bcf08c69fdde2c15adf49f6dfa8e9405ee0cec4dff7187a25829580876262f581eff9a8d4ed1821acdb7e33aff2658627c8ad07106cf5af1ef9c00c47941469a28f09fb12c435ba715ce06537302e123068ca3faa28051914998e9898ab064040ed00a", 0x1000}], 0x2, &(0x7f0000002000)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0x1d, 0x0, 0x6, [0x2, 0x8, 0x4, 0xc, 0x7, 0x200, 0x26, 0x3]}, @rr={0x7, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x2, [0x40, 0x1ff, 0x6, 0x7ff, 0x3ff]}, @cipso={0x86, 0x67, 0x1, [{0x0, 0xb, "45b0dc3d9449f1cd3c"}, {0x5, 0x3, "d4"}, {0x2, 0x9, "f5a1236244e154"}, {0x0, 0xd, "0c49056e54cbe807d159d8"}, {0x5, 0xf, "febf6e34417dab9f6a9bbd8731"}, {0x7, 0x3, "e2"}, {0x0, 0xa, "5f5be87fae61057e"}, {0x7, 0x11, "3ad91834f3d0e0924d018bc15119db"}, {0x0, 0x10, "fe0d4658b9677b3ebceb074370aa"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x90, [@local]}, @noop, @end, @rr={0x7, 0x3, 0x61}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@remote}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x188}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x50, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_pid(r3, 0x0, 0x0) 17.778977651s ago: executing program 3 (id=4393): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, 0x0, 0x200ce0c0) write$cgroup_pid(r0, 0x0, 0x0) 17.769177271s ago: executing program 2 (id=4394): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x2e, 0x61]}}, &(0x7f0000000340)=""/77, 0x29, 0x4d, 0x0, 0x3a9, 0x10000}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x2, '\x00', r2, r3, 0x1, 0x2, 0x3}, 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4, r5}, 0x10) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x21, &(0x7f0000001540), 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r7, r4}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x7, 0x2, 0xa, 0x8, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r10, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000180)=r10) 17.698281604s ago: executing program 1 (id=4395): socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) close(r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) 17.651663205s ago: executing program 3 (id=4397): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x22, 0x3, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000021c0)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000140)="11f558bcae733bca729fe87677dd6d50906b43994dcf0895dac24826c4393418e838d15fa1b9cbfb36b28ceed3369890ddbb93abd211baa0bfde1466669fdcd191203c8a82d0624aab991b61e3a1a9ab56cd30b8b10d70a45c49a1eb", 0x5c}, {&(0x7f0000000fc0)="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", 0x1000}], 0x2, &(0x7f0000002000)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0x1d, 0x0, 0x6, [0x2, 0x8, 0x4, 0xc, 0x7, 0x200, 0x26, 0x3]}, @rr={0x7, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x2, [0x40, 0x1ff, 0x6, 0x7ff, 0x3ff]}, @cipso={0x86, 0x67, 0x1, [{0x0, 0xb, "45b0dc3d9449f1cd3c"}, {0x5, 0x3, "d4"}, {0x2, 0x9, "f5a1236244e154"}, {0x0, 0xd, "0c49056e54cbe807d159d8"}, {0x5, 0xf, "febf6e34417dab9f6a9bbd8731"}, {0x7, 0x3, "e2"}, {0x0, 0xa, "5f5be87fae61057e"}, {0x7, 0x11, "3ad91834f3d0e0924d018bc15119db"}, {0x0, 0x10, "fe0d4658b9677b3ebceb074370aa"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x90, [@local]}, @noop, @end, @rr={0x7, 0x3, 0x61}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@remote}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x188}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_pid(r3, 0x0, 0x0) 17.537671889s ago: executing program 2 (id=4398): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b0100", 0x16}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000002c0)="8e27facd0ad02d2a687b091dba48b3bd30f4f1e83fd980f13d7c53d956d5de757b74909913e3cf2c48c79f898af4727db3e6b56fa291d19fb624d0ca8745a312987277a7034c0a1efb54ba26675b174eb16f267245562c984f2031d7b7766e63c7f67816a6c385221e4d7270d1a0ce1958f16fd3d06e35276be3b0db6f1db1980c657c215befb15a9e948afcda2626df4c4ec555148f0a637240ee91b8bf15", &(0x7f0000000400)=""/12, &(0x7f0000000440)="1252272d640455a6b5a7175e21584d3e09087a2d095b4ab89dc229e7f16c54567adba5397c38b10a8c9633d449a4fb582285f51f6477ec752268c302c82a225638fce8d2694a939761dc5d62da1fb0ed7427f07edd61c123db47e6e9c3afff3d4e6a01f160085747884aac7750c00a4209c61356803881eaad46244ae34f11fb", &(0x7f0000000580)="325157ad960169c38a46381d8461f0db57b9db5a86f389ec2c156af8a782b1675b03b5e840e40265303665d48004cf0c1acd1a1ca5e38501186fbec722055cc347edd7f1780d66f09bc4a48dc50d261e610fc82b181fec3358f51125bc", 0x4, r1, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 17.48743874s ago: executing program 1 (id=4399): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1}, 0x40000004) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r6, &(0x7f00000001c0), 0x0) socket$kcm(0xa, 0x3, 0x3a) 17.351757255s ago: executing program 2 (id=4400): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1}, 0x40000004) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r6, &(0x7f00000001c0), 0x0) socket$kcm(0xa, 0x3, 0x3a) 17.351518875s ago: executing program 3 (id=4401): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b405000000000000611082000000000063013800000000009500090000000000f44b149fe383dc29542d2f39185575b7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x62af, 0x62f02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1000, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 17.350665875s ago: executing program 0 (id=4408): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b0100", 0x16}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000002c0)="8e27facd0ad02d2a687b091dba48b3bd30f4f1e83fd980f13d7c53d956d5de757b74909913e3cf2c48c79f898af4727db3e6b56fa291d19fb624d0ca8745a312987277a7034c0a1efb54ba26675b174eb16f267245562c984f2031d7b7766e63c7f67816a6c385221e4d7270d1a0ce1958f16fd3d06e35276be3b0db6f1db1980c657c215befb15a9e948afcda2626df4c4ec555148f0a637240ee91b8bf15", &(0x7f0000000400)=""/12, &(0x7f0000000440)="1252272d640455a6b5a7175e21584d3e09087a2d095b4ab89dc229e7f16c54567adba5397c38b10a8c9633d449a4fb582285f51f6477ec752268c302c82a225638fce8d2694a939761dc5d62da1fb0ed7427f07edd61c123db47e6e9c3afff3d4e6a01f160085747884aac7750c00a4209c61356803881eaad46244ae34f11fb", &(0x7f0000000580)="325157ad960169c38a46381d8461f0db57b9db5a86f389ec2c156af8a782b1675b03b5e840e40265303665d48004cf0c1acd1a1ca5e38501186fbec722055cc347edd7f1780d66f09bc4a48dc50d261e610fc82b181fec3358f51125bc", 0x4, r1, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 16.960067747s ago: executing program 0 (id=4402): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x3}, 0x8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00001800"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 16.811326232s ago: executing program 0 (id=4403): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000021c0)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000140)="11f558bcae733bca729fe87677dd6d50906b43994dcf0895dac24826c4393418e838d15fa1b9cbfb36b28ceed3369890ddbb93abd211baa0bfde1466669fdcd191203c8a82d0624aab991b61e3a1a9ab56cd30b8b10d70a45c49a1eb", 0x5c}, {&(0x7f0000000fc0)="516ba06fe505d30f932a1052c830cad6b487ed3617bbb757583e34742fa268d0c7d671fd5c983456f690412819559bd436a83b26b7a43cde9804a24c6650cbd89b38653ad7f3fa8d6f6ccb88868d2c9af6ac09bee0877ae3eadeef60f13eddfb0525e061c069ff524adc492d35d146c3a001c3960ca345efde92346393b8322bf298769e2971594955ce703ff555b57b7fce2e664ceea1978e8c63b5261c740db772691ec4f4c7eabf209eb95fba10127bcdc66c423709b190b942d52fe12abfb97fd371d0436c9361e3726479f3f39bdd3b303b8b22241143a419733f9bd8193434535d9718a279536ea871e206ab5bdbd8ac45cde28168cf44914f644d523b342be6f9b8b4f0bde171e75ac63eee14c666461cad86326d16fdbd042fb296694e1b6a959719ee3fac4f7d01fba4b7174f0438f2fd222819ab91955e66f9f4850ac5ba2d68964a4aa019516683107aed2bac386a4c2e27ae466424171b7b977d4afc659fcb95ea4614eb2ea5f622150da18007d4f3ec999d247f03b4f7a52e71f83aacb6f623f6f8585ad037b7b970f50be7f6914f5e1fe7c64d039e80a587bda3ed8b51797657853d370fd29dbfcf6f2b2551567021b8a31a58afba6fab61bdce10428f948d672ade7b05ae330b9b0e93d83a7605b3772dff9368204d5b75e592214398b0c409b30705be055c888288f3eacf97b4e499b1ec1ac1b721e836076dd03068f4411e4bda6f2d08c742baa2cca06f7f4787bc8598a4ba0e1f007206fdff37a6bd66522ea4c98aabd7654a27460aae1568a8d38efe8a64e3689b8089a96f41c275cd8473c544adf64108a3a0dbd7f573de7507eea6eabb3d47a223cb58cb1b1d6f1f3dbbd857b6ec48e6514b0437327d5b83ec4284485f5d485ff2dce3137d636d2742902d66a71d09927a641a3361645a33018ffcfaa6368883920b2e7122ce8549eb8e5391d68a2bac3f7d69acac6bd9f35a41632c9700117abad4940c8711c06f7303806385e48cb66e02bf91a74e33d97d46bc13df996765378da7097664e85ffcccfc6fd35d7502d6f4b3c0878f87515c97406bbbe522d19639fa5d09938c7cce58d18bd4207131fab2d5343c73a0fef3ae041c445ceaf2027422a01240c2b31b1e690b093301139b50422e3ac3c9e27895d2be3dca47b07f7f5b9a68452d0b2127fda7fc46e914f65b6155b40fa5f63654b7569411449343d8ccc2d0ae27cf33e8608e44827b35b7ea319ee7c8a4a18d54b9965be69ede4fa0676fccca9649c29892024a5a02ff7642e11c067b859541ee21c2c40e16fe178429d460c9faa47da2a94e612a470270bdb766db6efcacf732f277a9f206c22a8a79cf4c7700c33a6e2d91d28e2327875c549ce07bfd5a0d978384187d8aba28663c6b489e7229d1d6a08d4a9653d85b42759d9bc5c20746c21a000d5402fcbf79e23e120105ded699ce4f3e58a4f140c25f4bb479b5441fe9b0804543cbd2eec9c317c3d1010828d22a0acb77688501954c5c1718f33ae11ab1d12b568f77f82d7285c6eb88d295809b90c39953ca3973692a321d29c7bc0e41be5e1d2e201b632c92bea850c34111c3e55f5c54ff3610783b411836e354cc8d1a9d6482ee3cb4e96945a52ff6cf311e4342334ce90596ab158535726ad8c123f6e5b3f583881fb123de7b490a080633ceb90516b99ff35c1e483f3f0193248c658ba8cc6acdc889d3844b8e3a68d089a964f1d8580e2ec1ac4ca7faed06bfb78cef1aed16036b70d2ff4da240ea3afe2aa12110041e429a9dd0a2d174b9ced147c4d319e5e48ab4976b200fad969954f18a3900427929268eaaebf560203ac666504fd35fc5d5cee75d75e92848a04d3565d1fa3ad4ae5b6a66f6aa7e4ee5e50aa433dc9f13a89fc3c0ff77f006dd8a852fa158656caceefa154d3ce46ad5eb5675e56ae90434d172bebe99f81f8d9915decf4e29d3f09769055ea64471462e0741494e577358b08a7b04cb5101bed7964e9e771d3f7ee3232c0e87a78ca2f05b0e89e4cc686130135bb3409491d5681f3dcfc7ecdeea75663283717f5ec05dc7e0fd995a916bb62dcd6f0e73eaf3b3d1e707dd8355fe67719b28ec1c8e2166e48f03cf28f8759e8e76e3f1bd8598c101e7f21a6458e588764e85e3e42e0bfdc238b72027894817fb67ca474e16621d32720bd58aa39bf18f0668cc06e08911fde390fc2bccf3f87206abaf30ce4dcc98f474765bbb1a71af625acff6c0cb2465b2f08c23a0111aa308d8207c54ef722fa0f70b38e288463a898307bdb321de98da319d17df4eea00fc1a2c137e382529af19d7abac638085eb7302b9e1cf0edf59aaa23df296085b3a0666cf169c51f97ea9cf50edbfb5c7a26f3ead6cb38f03eddd16704bb204a90eb4e11d282732b3f461531d3fd28c6331847afca2d394c73c6befe2500b7c330f8346b39021a6bc2434fccf6a0aa6f7450353633f780e503669f61a383e68ac17ca1fbc4eac65a818dbecd5bea48b23c3e94dc97ea98ea7b4dd75a2830a0866f1978febea62d9b7c84f71bf1be5675f3aa7ccdb72a3c7a8da3e76a3522c6e75da95a234d6693276eebce80a598ea045190198b5f085dabcb2e28a7ac72ced71fc059bb930bef6c587c2f4ab653aaeea46da4cda4b25373702baddefc2961fb15a98319d57071368d1db73174105dd95ecf17b4d4e449f757982789d817a4bddfad59c4b592f0573b154e476ec4e016e52e584b5b5fba6f62c5b49e2f88c8376c71a5f458bf639bea44542821c39ac19f74b994bf2137ea8995e4b575110454b21cb7d99893ce973978b94c3d3e8748191b6c7b8f9be29e706728c70281b9522fc11545422160e5cefad8735991b6294bb9e72ac5f3e077332fca75436efb8e6d6037dde9fe7c8cb767bc9548df8703bea6216eeac472abab561a9032ad11234ce491ab7ce2674afafb8c2cba2b99e0a9ec7b131563d4ec279bee4e180f71c16280abe1e4db287c2aecc46e3604fa23bf6dfe9cac52e812f7da8ea7df37d3616b58d28623c6857a942d844808bb3262619279f11276904f6f9cd06400b3a77e3409b22499b1bdc94e9f0dd34b8f32aad38cacb5d177d94b8643d77858706f209467361d9a5282b47ed38942b6a3ec60cf9cfd71267698e13f0425d22d1073aa834245f1784173d2dc2700af7bbd29630be24845f69971b421d39c88759db44ae88f885dd554bb8a891d5c2792fdde238913bbec108b11afc39051ed3e79dc571499dbb9ad392f2fcd4861ae726c352e96a500020b133ae0537665e195f092c7fbe3116a70f52034eefb231140dd1c9573722ad592fdd76aa18a5d2fb0a0a66b5d5be8400ddbbe5669e6593a2850b1be0ff76d43cc7dc593c9f236fcaed69b693d386cbd32c9fe5497eee6706635adc71bd82689b06041132e8b97b97adfa2801bbbb5c757a59dff3b2e2d85fceab7f91e4d95112cf75d78f76746aa460a56426b3d383fc1b0d431b7b58e8ddc036f138e4924dadffdd5f2e02cb2756c18af020a52a6d2f1a7ad260ee645a9e27af9c279aaf71ad5c248db7af3b0e8b7206af90065b6fde8e6e0bcd9702b0b4d65a4a96930dae3ad9fc41e503dab7bb05b353aa52f18149b74270bf417c883a0d94b7bdbde3e9aeae523a8b5b20de6cf86b0e73b4e7ea895c9aa64691cc293201d38bbd3586ea1066383a0ac07b22592fa3f3c6698c76cf703e396558a0db6b176c9f2254486ae33ee52f186345b9ca923ef1f1e47d5473248fa8cfb86877fdc35da4a0f6ea74781b56599aaa28f192d8758fabbad83937c17bb3c0eaab851d504c04c7c86decb2b2c91b58b296c45857eac2a89ca3f79ec55737855cbd57caf402e15b069c9e492a9c3cc0c366d6dc5af64da6c50cf58a165687a106474bb209e7b00a48443b94981f71cb2df4a466d89f92ddc3bcf90cc938b876a78d70c67e9cb4e85ad1b8875c22276f0b0e8737bbc864900af5e6546204442f1d970521faccc04d792a04e8b2465561029f9f5941473cece11cfa6ec5ec7ffdfc6518993e8e9ccc983947532178ddc47f5954820e458214b6ba643f5b1ee0ccdf83f5513712db8502274d7f818a3a736a7673c309dddde9c010e23e7631e2049e7d2de08de4275c41e49d06a6d395df351681d707efdc63d20c9184cb1fa4484cdb3cff64a2cdc6cd683168143826cc66bca68f27b701d9854d6dca6e9830b9be4639496372cbc21e70e0be7b1e93d7a9cc874434aa96b4e2d270cae810e5bbae2b6d3a3637670b282ea8fc8e27886f5b82def9ac32e96bc6a4bab6ed781323ae06547212583077b614cfc981a0c82fea1231d06be3c367bbdecdd4949f3ea2c8f4eb486eac01482358a3e531c13246fa44eec7aceaed6577e6591e6384a644c55d3ec608de6fd69b52ca569252a42e380af18aa0ee1fa2280717d5c12c4574c62f0e2adc58dc162165f53d3b9d03e4a7963ffb058bbc2e76837004c1f24a7cf0f2b18057c19a9acca9be9190b0bc3d247cea254c9b58dc432c6ef9a04d1926ac5e4983aa92ad11e9bc1cf7bd052965c46e356ba3576836524438a2a74e9d7e6c4228befcc7da5521f031acb09db093ff7711cb885564af4072e3044e23ed4b3f21c94aa1d84b8d9e564a8b2141aa90e3a0be45afc5e322e362656a7742e8731ae09f2f45b1f9b2d9b2566d7f09d1c5ba725eac5dd500cd1aadb39520b92625ec42dd26d34d3fc9045927f770d15f02089fd0463ebb53c65519e2b93cb963388e46f6f7af5cf435aab37af23ed450d4396ac417669bbb3293955e938f4ac94bbca8d0702755d67a73e08e74f8e89c50834e67c9f341e9e70b08b958417fcd207cadb839c7c5d836587b6c234b17544c1b8f4cf2c893ad7bb7c717837e0fadb9a33c1628b3e868f0158a7f8f727e11988000e158c92ca763cc4dfb78169ed208e9b9c06c7d7edc6b5e9fc4b92ce1c107f5df05319bd9b09a65042ea7dd92a14f112d589eb0afb1a694dd798ad7e3032362c1f8d0397e3b1e9a30da15aac68af76c1fa022e87d8cb18b15cb79a29d0e4e2fc16fc7e7478b7fff467dc406b0c38f0bf4bbc21f29981e3dfa6b2eb3b490cff1738611d06a01219c74241007568c0e2e76d9077da6c67cf5fe1571e0c528bfbb6c40a32a98c8bbd96469686b51f8feda8eddd66f97127146635fe0335879b45ded793c54eabd925841b52313378b64446e96d576f4890d3fafeeeb1974c6c7646b746524b42a4f1db29acfa7f25b1aaa5a5655d1376a49cd811eaad6223ee6c394c7b616d38b91f82d6040bbb7f2d7c78e2bbeb1a643c8c8c28b37161982799f28b4c5f73aad53eecea485ac775eb2faa7605cf235747c432396be589ad0c6cbfb52a43a098cf5d202d719d8f00ab082ac45a363e69025dab728981bd32c4e65a28b437a51b4dff6c3b772c8401c7a90577f6b8ec19cac6f31f22e62b743c2071cc0431783d8d89121feba52a1ffd0f1bbbe28e91cf79f78e6004551b2e770afecbb89cd60c8aade5a688db4c838439f5a9c8554244aa16e30d2e9723c16b370393a3bab70642d1ff9f87f9a5a7d66f63a144c8993b4c1eb803926f47339930415b5d591c9bbde2722682ba47dad540e5b6324c219ead50298a5d8a4f7c695846e71bcf08c69fdde2c15adf49f6dfa8e9405ee0cec4dff7187a25829580876262f581eff9a8d4ed1821acdb7e33aff2658627c8ad07106cf5af1ef9c00c47941469a28f09fb12c435ba715ce06537302e123068ca3faa28051914998e9898ab064040ed00a", 0x1000}], 0x2, &(0x7f0000002000)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0x1d, 0x0, 0x6, [0x2, 0x8, 0x4, 0xc, 0x7, 0x200, 0x26, 0x3]}, @rr={0x7, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x2, [0x40, 0x1ff, 0x6, 0x7ff, 0x3ff]}, @cipso={0x86, 0x67, 0x1, [{0x0, 0xb, "45b0dc3d9449f1cd3c"}, {0x5, 0x3, "d4"}, {0x2, 0x9, "f5a1236244e154"}, {0x0, 0xd, "0c49056e54cbe807d159d8"}, {0x5, 0xf, "febf6e34417dab9f6a9bbd8731"}, {0x7, 0x3, "e2"}, {0x0, 0xa, "5f5be87fae61057e"}, {0x7, 0x11, "3ad91834f3d0e0924d018bc15119db"}, {0x0, 0x10, "fe0d4658b9677b3ebceb074370aa"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x90, [@local]}, @noop, @end, @rr={0x7, 0x3, 0x61}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@remote}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x188}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x50, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_pid(r3, 0x0, 0x0) 16.655457396s ago: executing program 3 (id=4404): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) 16.642533097s ago: executing program 0 (id=4405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f0000000140)=ANY=[], 0x0, 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a118001500060014260360", 0x26}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000002c0)="8e27facd0ad02d2a687b091dba48b3bd30f4f1e83fd980f13d7c53d956d5de757b74909913e3cf2c48c79f898af4727db3e6b56fa291d19fb624d0ca8745a312987277a7034c0a1efb54ba26675b174eb16f267245562c984f2031d7b7766e63c7f67816a6c385221e4d7270d1a0ce1958f16fd3d06e35276be3b0db6f1db1980c657c215befb15a9e948afcda2626df4c4ec555148f0a637240ee91b8bf15", &(0x7f0000000400)=""/12, &(0x7f0000000440)="1252272d640455a6b5a7175e21584d3e09087a2d095b4ab89dc229e7f16c54567adba5397c38b10a8c9633d449a4fb582285f51f6477ec752268c302c82a225638fce8d2694a939761dc5d62da1fb0ed7427f07edd61c123db47e6e9c3afff3d4e6a01f160085747884aac7750c00a4209c61356803881eaad46244ae34f11fb", &(0x7f0000000580)="325157ad960169c38a46381d8461f0db57b9db5a86f389ec2c156af8a782b1675b03b5e840e40265303665d48004cf0c1acd1a1ca5e38501186fbec722055cc347edd7f1780d66f09bc4a48dc50d261e610fc82b181fec3358f51125bc", 0x4, r1, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) 16.572727929s ago: executing program 3 (id=4406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f00000002c0)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000b500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) 16.513074131s ago: executing program 0 (id=4407): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8418, 0x1}, 0x48) 16.504834411s ago: executing program 1 (id=4409): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x22, 0x3, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_pid(r2, 0x0, 0x0) 16.374563006s ago: executing program 2 (id=4410): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1200"/12, @ANYRES32=r0, @ANYBLOB="7d178f92a3bad4faac4450565278ce7f94c440f413e2610c070387ac69c53f11b9b34cbc7e615e7c73dc6603881b5cdf2141543a4ab8f5797ead4f9d860134b1f1194412af785dcd3bfe6ccb1169c56a0751e119d955704a5aed6a0ada4b25c7d629cc3eb611280f303945058edfe8e909257c0009bf9cda50", @ANYRES64=0x0], 0x20) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x1a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e030000000000"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) socket$kcm(0x1e, 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$inet(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000001340)}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x480, 0x0, 0x39) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.323667357s ago: executing program 3 (id=4411): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b0100", 0x16}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000002c0)="8e27facd0ad02d2a687b091dba48b3bd30f4f1e83fd980f13d7c53d956d5de757b74909913e3cf2c48c79f898af4727db3e6b56fa291d19fb624d0ca8745a312987277a7034c0a1efb54ba26675b174eb16f267245562c984f2031d7b7766e63c7f67816a6c385221e4d7270d1a0ce1958f16fd3d06e35276be3b0db6f1db1980c657c215befb15a9e948afcda2626df4c4ec555148f0a637240ee91b8bf15", &(0x7f0000000400)=""/12, &(0x7f0000000440)="1252272d640455a6b5a7175e21584d3e09087a2d095b4ab89dc229e7f16c54567adba5397c38b10a8c9633d449a4fb582285f51f6477ec752268c302c82a225638fce8d2694a939761dc5d62da1fb0ed7427f07edd61c123db47e6e9c3afff3d4e6a01f160085747884aac7750c00a4209c61356803881eaad46244ae34f11fb", &(0x7f0000000580)="325157ad960169c38a46381d8461f0db57b9db5a86f389ec2c156af8a782b1675b03b5e840e40265303665d48004cf0c1acd1a1ca5e38501186fbec722055cc347edd7f1780d66f09bc4a48dc50d261e610fc82b181fec3358f51125bc", 0x4, r1, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 16.282796189s ago: executing program 1 (id=4412): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x3}, 0x8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00001800"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 16.187401892s ago: executing program 0 (id=4413): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20549, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x1bd}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@cgroup, 0x14, 0x1, 0x8001, 0x0, 0x0, 0x0, &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840), 0x0}, 0x40) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c40), 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f375"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 16.123679874s ago: executing program 2 (id=4414): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000021c0)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000140)="11f558bcae733bca729fe87677dd6d50906b43994dcf0895dac24826c4393418e838d15fa1b9cbfb36b28ceed3369890ddbb93abd211baa0bfde1466669fdcd191203c8a82d0624aab991b61e3a1a9ab56cd30b8b10d70a45c49a1eb", 0x5c}, {&(0x7f0000000fc0)="516ba06fe505d30f932a1052c830cad6b487ed3617bbb757583e34742fa268d0c7d671fd5c983456f690412819559bd436a83b26b7a43cde9804a24c6650cbd89b38653ad7f3fa8d6f6ccb88868d2c9af6ac09bee0877ae3eadeef60f13eddfb0525e061c069ff524adc492d35d146c3a001c3960ca345efde92346393b8322bf298769e2971594955ce703ff555b57b7fce2e664ceea1978e8c63b5261c740db772691ec4f4c7eabf209eb95fba10127bcdc66c423709b190b942d52fe12abfb97fd371d0436c9361e3726479f3f39bdd3b303b8b22241143a419733f9bd8193434535d9718a279536ea871e206ab5bdbd8ac45cde28168cf44914f644d523b342be6f9b8b4f0bde171e75ac63eee14c666461cad86326d16fdbd042fb296694e1b6a959719ee3fac4f7d01fba4b7174f0438f2fd222819ab91955e66f9f4850ac5ba2d68964a4aa019516683107aed2bac386a4c2e27ae466424171b7b977d4afc659fcb95ea4614eb2ea5f622150da18007d4f3ec999d247f03b4f7a52e71f83aacb6f623f6f8585ad037b7b970f50be7f6914f5e1fe7c64d039e80a587bda3ed8b51797657853d370fd29dbfcf6f2b2551567021b8a31a58afba6fab61bdce10428f948d672ade7b05ae330b9b0e93d83a7605b3772dff9368204d5b75e592214398b0c409b30705be055c888288f3eacf97b4e499b1ec1ac1b721e836076dd03068f4411e4bda6f2d08c742baa2cca06f7f4787bc8598a4ba0e1f007206fdff37a6bd66522ea4c98aabd7654a27460aae1568a8d38efe8a64e3689b8089a96f41c275cd8473c544adf64108a3a0dbd7f573de7507eea6eabb3d47a223cb58cb1b1d6f1f3dbbd857b6ec48e6514b0437327d5b83ec4284485f5d485ff2dce3137d636d2742902d66a71d09927a641a3361645a33018ffcfaa6368883920b2e7122ce8549eb8e5391d68a2bac3f7d69acac6bd9f35a41632c9700117abad4940c8711c06f7303806385e48cb66e02bf91a74e33d97d46bc13df996765378da7097664e85ffcccfc6fd35d7502d6f4b3c0878f87515c97406bbbe522d19639fa5d09938c7cce58d18bd4207131fab2d5343c73a0fef3ae041c445ceaf2027422a01240c2b31b1e690b093301139b50422e3ac3c9e27895d2be3dca47b07f7f5b9a68452d0b2127fda7fc46e914f65b6155b40fa5f63654b7569411449343d8ccc2d0ae27cf33e8608e44827b35b7ea319ee7c8a4a18d54b9965be69ede4fa0676fccca9649c29892024a5a02ff7642e11c067b859541ee21c2c40e16fe178429d460c9faa47da2a94e612a470270bdb766db6efcacf732f277a9f206c22a8a79cf4c7700c33a6e2d91d28e2327875c549ce07bfd5a0d978384187d8aba28663c6b489e7229d1d6a08d4a9653d85b42759d9bc5c20746c21a000d5402fcbf79e23e120105ded699ce4f3e58a4f140c25f4bb479b5441fe9b0804543cbd2eec9c317c3d1010828d22a0acb77688501954c5c1718f33ae11ab1d12b568f77f82d7285c6eb88d295809b90c39953ca3973692a321d29c7bc0e41be5e1d2e201b632c92bea850c34111c3e55f5c54ff3610783b411836e354cc8d1a9d6482ee3cb4e96945a52ff6cf311e4342334ce90596ab158535726ad8c123f6e5b3f583881fb123de7b490a080633ceb90516b99ff35c1e483f3f0193248c658ba8cc6acdc889d3844b8e3a68d089a964f1d8580e2ec1ac4ca7faed06bfb78cef1aed16036b70d2ff4da240ea3afe2aa12110041e429a9dd0a2d174b9ced147c4d319e5e48ab4976b200fad969954f18a3900427929268eaaebf560203ac666504fd35fc5d5cee75d75e92848a04d3565d1fa3ad4ae5b6a66f6aa7e4ee5e50aa433dc9f13a89fc3c0ff77f006dd8a852fa158656caceefa154d3ce46ad5eb5675e56ae90434d172bebe99f81f8d9915decf4e29d3f09769055ea64471462e0741494e577358b08a7b04cb5101bed7964e9e771d3f7ee3232c0e87a78ca2f05b0e89e4cc686130135bb3409491d5681f3dcfc7ecdeea75663283717f5ec05dc7e0fd995a916bb62dcd6f0e73eaf3b3d1e707dd8355fe67719b28ec1c8e2166e48f03cf28f8759e8e76e3f1bd8598c101e7f21a6458e588764e85e3e42e0bfdc238b72027894817fb67ca474e16621d32720bd58aa39bf18f0668cc06e08911fde390fc2bccf3f87206abaf30ce4dcc98f474765bbb1a71af625acff6c0cb2465b2f08c23a0111aa308d8207c54ef722fa0f70b38e288463a898307bdb321de98da319d17df4eea00fc1a2c137e382529af19d7abac638085eb7302b9e1cf0edf59aaa23df296085b3a0666cf169c51f97ea9cf50edbfb5c7a26f3ead6cb38f03eddd16704bb204a90eb4e11d282732b3f461531d3fd28c6331847afca2d394c73c6befe2500b7c330f8346b39021a6bc2434fccf6a0aa6f7450353633f780e503669f61a383e68ac17ca1fbc4eac65a818dbecd5bea48b23c3e94dc97ea98ea7b4dd75a2830a0866f1978febea62d9b7c84f71bf1be5675f3aa7ccdb72a3c7a8da3e76a3522c6e75da95a234d6693276eebce80a598ea045190198b5f085dabcb2e28a7ac72ced71fc059bb930bef6c587c2f4ab653aaeea46da4cda4b25373702baddefc2961fb15a98319d57071368d1db73174105dd95ecf17b4d4e449f757982789d817a4bddfad59c4b592f0573b154e476ec4e016e52e584b5b5fba6f62c5b49e2f88c8376c71a5f458bf639bea44542821c39ac19f74b994bf2137ea8995e4b575110454b21cb7d99893ce973978b94c3d3e8748191b6c7b8f9be29e706728c70281b9522fc11545422160e5cefad8735991b6294bb9e72ac5f3e077332fca75436efb8e6d6037dde9fe7c8cb767bc9548df8703bea6216eeac472abab561a9032ad11234ce491ab7ce2674afafb8c2cba2b99e0a9ec7b131563d4ec279bee4e180f71c16280abe1e4db287c2aecc46e3604fa23bf6dfe9cac52e812f7da8ea7df37d3616b58d28623c6857a942d844808bb3262619279f11276904f6f9cd06400b3a77e3409b22499b1bdc94e9f0dd34b8f32aad38cacb5d177d94b8643d77858706f209467361d9a5282b47ed38942b6a3ec60cf9cfd71267698e13f0425d22d1073aa834245f1784173d2dc2700af7bbd29630be24845f69971b421d39c88759db44ae88f885dd554bb8a891d5c2792fdde238913bbec108b11afc39051ed3e79dc571499dbb9ad392f2fcd4861ae726c352e96a500020b133ae0537665e195f092c7fbe3116a70f52034eefb231140dd1c9573722ad592fdd76aa18a5d2fb0a0a66b5d5be8400ddbbe5669e6593a2850b1be0ff76d43cc7dc593c9f236fcaed69b693d386cbd32c9fe5497eee6706635adc71bd82689b06041132e8b97b97adfa2801bbbb5c757a59dff3b2e2d85fceab7f91e4d95112cf75d78f76746aa460a56426b3d383fc1b0d431b7b58e8ddc036f138e4924dadffdd5f2e02cb2756c18af020a52a6d2f1a7ad260ee645a9e27af9c279aaf71ad5c248db7af3b0e8b7206af90065b6fde8e6e0bcd9702b0b4d65a4a96930dae3ad9fc41e503dab7bb05b353aa52f18149b74270bf417c883a0d94b7bdbde3e9aeae523a8b5b20de6cf86b0e73b4e7ea895c9aa64691cc293201d38bbd3586ea1066383a0ac07b22592fa3f3c6698c76cf703e396558a0db6b176c9f2254486ae33ee52f186345b9ca923ef1f1e47d5473248fa8cfb86877fdc35da4a0f6ea74781b56599aaa28f192d8758fabbad83937c17bb3c0eaab851d504c04c7c86decb2b2c91b58b296c45857eac2a89ca3f79ec55737855cbd57caf402e15b069c9e492a9c3cc0c366d6dc5af64da6c50cf58a165687a106474bb209e7b00a48443b94981f71cb2df4a466d89f92ddc3bcf90cc938b876a78d70c67e9cb4e85ad1b8875c22276f0b0e8737bbc864900af5e6546204442f1d970521faccc04d792a04e8b2465561029f9f5941473cece11cfa6ec5ec7ffdfc6518993e8e9ccc983947532178ddc47f5954820e458214b6ba643f5b1ee0ccdf83f5513712db8502274d7f818a3a736a7673c309dddde9c010e23e7631e2049e7d2de08de4275c41e49d06a6d395df351681d707efdc63d20c9184cb1fa4484cdb3cff64a2cdc6cd683168143826cc66bca68f27b701d9854d6dca6e9830b9be4639496372cbc21e70e0be7b1e93d7a9cc874434aa96b4e2d270cae810e5bbae2b6d3a3637670b282ea8fc8e27886f5b82def9ac32e96bc6a4bab6ed781323ae06547212583077b614cfc981a0c82fea1231d06be3c367bbdecdd4949f3ea2c8f4eb486eac01482358a3e531c13246fa44eec7aceaed6577e6591e6384a644c55d3ec608de6fd69b52ca569252a42e380af18aa0ee1fa2280717d5c12c4574c62f0e2adc58dc162165f53d3b9d03e4a7963ffb058bbc2e76837004c1f24a7cf0f2b18057c19a9acca9be9190b0bc3d247cea254c9b58dc432c6ef9a04d1926ac5e4983aa92ad11e9bc1cf7bd052965c46e356ba3576836524438a2a74e9d7e6c4228befcc7da5521f031acb09db093ff7711cb885564af4072e3044e23ed4b3f21c94aa1d84b8d9e564a8b2141aa90e3a0be45afc5e322e362656a7742e8731ae09f2f45b1f9b2d9b2566d7f09d1c5ba725eac5dd500cd1aadb39520b92625ec42dd26d34d3fc9045927f770d15f02089fd0463ebb53c65519e2b93cb963388e46f6f7af5cf435aab37af23ed450d4396ac417669bbb3293955e938f4ac94bbca8d0702755d67a73e08e74f8e89c50834e67c9f341e9e70b08b958417fcd207cadb839c7c5d836587b6c234b17544c1b8f4cf2c893ad7bb7c717837e0fadb9a33c1628b3e868f0158a7f8f727e11988000e158c92ca763cc4dfb78169ed208e9b9c06c7d7edc6b5e9fc4b92ce1c107f5df05319bd9b09a65042ea7dd92a14f112d589eb0afb1a694dd798ad7e3032362c1f8d0397e3b1e9a30da15aac68af76c1fa022e87d8cb18b15cb79a29d0e4e2fc16fc7e7478b7fff467dc406b0c38f0bf4bbc21f29981e3dfa6b2eb3b490cff1738611d06a01219c74241007568c0e2e76d9077da6c67cf5fe1571e0c528bfbb6c40a32a98c8bbd96469686b51f8feda8eddd66f97127146635fe0335879b45ded793c54eabd925841b52313378b64446e96d576f4890d3fafeeeb1974c6c7646b746524b42a4f1db29acfa7f25b1aaa5a5655d1376a49cd811eaad6223ee6c394c7b616d38b91f82d6040bbb7f2d7c78e2bbeb1a643c8c8c28b37161982799f28b4c5f73aad53eecea485ac775eb2faa7605cf235747c432396be589ad0c6cbfb52a43a098cf5d202d719d8f00ab082ac45a363e69025dab728981bd32c4e65a28b437a51b4dff6c3b772c8401c7a90577f6b8ec19cac6f31f22e62b743c2071cc0431783d8d89121feba52a1ffd0f1bbbe28e91cf79f78e6004551b2e770afecbb89cd60c8aade5a688db4c838439f5a9c8554244aa16e30d2e9723c16b370393a3bab70642d1ff9f87f9a5a7d66f63a144c8993b4c1eb803926f47339930415b5d591c9bbde2722682ba47dad540e5b6324c219ead50298a5d8a4f7c695846e71bcf08c69fdde2c15adf49f6dfa8e9405ee0cec4dff7187a25829580876262f581eff9a8d4ed1821acdb7e33aff2658627c8ad07106cf5af1ef9c00c47941469a28f09fb12c435ba715ce06537302e123068ca3faa28051914998e9898ab064040ed00a", 0x1000}], 0x2, &(0x7f0000002000)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0x1d, 0x0, 0x6, [0x2, 0x8, 0x4, 0xc, 0x7, 0x200, 0x26, 0x3]}, @rr={0x7, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x2, [0x40, 0x1ff, 0x6, 0x7ff, 0x3ff]}, @cipso={0x86, 0x67, 0x1, [{0x0, 0xb, "45b0dc3d9449f1cd3c"}, {0x5, 0x3, "d4"}, {0x2, 0x9, "f5a1236244e154"}, {0x0, 0xd, "0c49056e54cbe807d159d8"}, {0x5, 0xf, "febf6e34417dab9f6a9bbd8731"}, {0x7, 0x3, "e2"}, {0x0, 0xa, "5f5be87fae61057e"}, {0x7, 0x11, "3ad91834f3d0e0924d018bc15119db"}, {0x0, 0x10, "fe0d4658b9677b3ebceb074370aa"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x90, [@local]}, @noop, @end, @rr={0x7, 0x3, 0x61}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@remote}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x188}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x50, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_pid(r3, 0x0, 0x0) 16.058956255s ago: executing program 1 (id=4415): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) 893.146033ms ago: executing program 32 (id=4413): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20549, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x1bd}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@cgroup, 0x14, 0x1, 0x8001, 0x0, 0x0, 0x0, &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840), 0x0}, 0x40) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c40), 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f375"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 683.009779ms ago: executing program 33 (id=4415): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) 385.597198ms ago: executing program 34 (id=4414): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000021c0)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000140)="11f558bcae733bca729fe87677dd6d50906b43994dcf0895dac24826c4393418e838d15fa1b9cbfb36b28ceed3369890ddbb93abd211baa0bfde1466669fdcd191203c8a82d0624aab991b61e3a1a9ab56cd30b8b10d70a45c49a1eb", 0x5c}, {&(0x7f0000000fc0)="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", 0x1000}], 0x2, &(0x7f0000002000)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0x1d, 0x0, 0x6, [0x2, 0x8, 0x4, 0xc, 0x7, 0x200, 0x26, 0x3]}, @rr={0x7, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x2, [0x40, 0x1ff, 0x6, 0x7ff, 0x3ff]}, @cipso={0x86, 0x67, 0x1, [{0x0, 0xb, "45b0dc3d9449f1cd3c"}, {0x5, 0x3, "d4"}, {0x2, 0x9, "f5a1236244e154"}, {0x0, 0xd, "0c49056e54cbe807d159d8"}, {0x5, 0xf, "febf6e34417dab9f6a9bbd8731"}, {0x7, 0x3, "e2"}, {0x0, 0xa, "5f5be87fae61057e"}, {0x7, 0x11, "3ad91834f3d0e0924d018bc15119db"}, {0x0, 0x10, "fe0d4658b9677b3ebceb074370aa"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x90, [@local]}, @noop, @end, @rr={0x7, 0x3, 0x61}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@remote}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x188}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x50, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_pid(r3, 0x0, 0x0) 0s ago: executing program 35 (id=4411): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b0100", 0x16}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000002c0)="8e27facd0ad02d2a687b091dba48b3bd30f4f1e83fd980f13d7c53d956d5de757b74909913e3cf2c48c79f898af4727db3e6b56fa291d19fb624d0ca8745a312987277a7034c0a1efb54ba26675b174eb16f267245562c984f2031d7b7766e63c7f67816a6c385221e4d7270d1a0ce1958f16fd3d06e35276be3b0db6f1db1980c657c215befb15a9e948afcda2626df4c4ec555148f0a637240ee91b8bf15", &(0x7f0000000400)=""/12, &(0x7f0000000440)="1252272d640455a6b5a7175e21584d3e09087a2d095b4ab89dc229e7f16c54567adba5397c38b10a8c9633d449a4fb582285f51f6477ec752268c302c82a225638fce8d2694a939761dc5d62da1fb0ed7427f07edd61c123db47e6e9c3afff3d4e6a01f160085747884aac7750c00a4209c61356803881eaad46244ae34f11fb", &(0x7f0000000580)="325157ad960169c38a46381d8461f0db57b9db5a86f389ec2c156af8a782b1675b03b5e840e40265303665d48004cf0c1acd1a1ca5e38501186fbec722055cc347edd7f1780d66f09bc4a48dc50d261e610fc82b181fec3358f51125bc", 0x4, r1, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): 210] __x64_sys_bpf+0x7c/0x90 [ 772.258498][T16210] do_syscall_64+0x55/0xb0 [ 772.262993][T16210] ? clear_bhb_loop+0x40/0x90 [ 772.267736][T16210] ? clear_bhb_loop+0x40/0x90 [ 772.272495][T16210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.278479][T16210] RIP: 0033:0x7fc00999ce59 [ 772.282959][T16210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.302659][T16210] RSP: 002b:00007fc00a811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.311144][T16210] RAX: ffffffffffffffda RBX: 00007fc009c15fa0 RCX: 00007fc00999ce59 [ 772.319275][T16210] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 772.327320][T16210] RBP: 00007fc00a811090 R08: 0000000000000000 R09: 0000000000000000 [ 772.335357][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.343399][T16210] R13: 00007fc009c16038 R14: 00007fc009c15fa0 R15: 00007ffdf0c53e38 [ 772.351461][T16210] [ 772.738271][T16217] netlink: 'syz.0.3208': attribute type 3 has an invalid length. [ 772.791387][T16217] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3208'. [ 772.878031][T16217] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 772.955027][T16217] team0: Device vxcan1 is of different type [ 773.135310][T16230] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3213'. [ 773.732555][T16232] netlink: 'syz.2.3214': attribute type 3 has an invalid length. [ 773.741568][T16232] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3214'. [ 773.783017][T16237] netlink: 'syz.1.3215': attribute type 16 has an invalid length. [ 773.791580][T16237] netlink: 'syz.1.3215': attribute type 3 has an invalid length. [ 773.818920][T16237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3215'. [ 773.857067][T16233] netlink: 'syz.2.3214': attribute type 10 has an invalid length. [ 774.145054][T16233] team0: Device vxcan1 is of different type [ 775.275444][T16265] netlink: 'syz.3.3223': attribute type 10 has an invalid length. [ 776.357202][T16265] veth1_macvtap: left promiscuous mode [ 778.652115][T16266] netlink: 'syz.2.3224': attribute type 3 has an invalid length. [ 778.660561][T16266] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3224'. [ 778.684214][T16270] netlink: 'syz.2.3224': attribute type 10 has an invalid length. [ 778.703315][T16270] team0: Device vxcan1 is of different type [ 779.046975][T16286] netlink: 'syz.1.3226': attribute type 10 has an invalid length. [ 779.079480][T16286] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.3226'. [ 780.407251][T16306] netlink: 'syz.3.3236': attribute type 3 has an invalid length. [ 780.450692][T16306] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3236'. [ 780.550211][T16306] netlink: 'syz.3.3236': attribute type 10 has an invalid length. [ 780.610519][T16306] team0: Device vxcan1 is of different type [ 780.696568][T16308] FAULT_INJECTION: forcing a failure. [ 780.696568][T16308] name failslab, interval 1, probability 0, space 0, times 0 [ 780.728581][T16308] CPU: 0 PID: 16308 Comm: syz.2.3235 Not tainted syzkaller #0 [ 780.736165][T16308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.746293][T16308] Call Trace: [ 780.749668][T16308] [ 780.752664][T16308] dump_stack_lvl+0x18c/0x250 [ 780.757441][T16308] ? show_regs_print_info+0x20/0x20 [ 780.762706][T16308] ? load_image+0x420/0x420 [ 780.767278][T16308] ? __might_sleep+0xe0/0xe0 [ 780.771961][T16308] ? __lock_acquire+0x7d40/0x7d40 [ 780.777072][T16308] ? mark_lock+0x94/0x320 [ 780.781492][T16308] should_fail_ex+0x39d/0x4d0 [ 780.786239][T16308] should_failslab+0x9/0x20 [ 780.790790][T16308] slab_pre_alloc_hook+0x59/0x310 [ 780.795874][T16308] kmem_cache_alloc+0x5a/0x2d0 [ 780.800683][T16308] ? alloc_empty_file+0x9e/0x1d0 [ 780.805677][T16308] alloc_empty_file+0x9e/0x1d0 [ 780.810484][T16308] alloc_file+0x5c/0x600 [ 780.814768][T16308] alloc_file_pseudo+0x184/0x210 [ 780.819743][T16308] ? alloc_empty_backing_file+0xe0/0xe0 [ 780.825347][T16308] ? _raw_spin_unlock+0x28/0x40 [ 780.830258][T16308] anon_inode_getfile+0xc5/0x1a0 [ 780.835248][T16308] __pidfd_prepare+0x7e/0x140 [ 780.839972][T16308] scm_recv_unix+0x54a/0x840 [ 780.844608][T16308] ? __unix_dgram_recvmsg+0xd90/0xd90 [ 780.850021][T16308] ? scm_fp_dup+0xd5/0x350 [ 780.854492][T16308] ? kasan_check_range+0x89/0x290 [ 780.859590][T16308] ? scm_fp_dup+0x1e8/0x350 [ 780.864142][T16308] __unix_dgram_recvmsg+0x9f8/0xd90 [ 780.869406][T16308] ? unix_unhash+0x10/0x10 [ 780.873882][T16308] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 780.879305][T16308] ? unix_dgram_recvmsg+0xad/0xd0 [ 780.884384][T16308] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 780.889806][T16308] ____sys_recvmsg+0x2ce/0x5e0 [ 780.894642][T16308] ? __sys_recvmsg_sock+0x50/0x50 [ 780.899729][T16308] ? import_iovec+0x73/0xa0 [ 780.904361][T16308] ___sys_recvmsg+0x216/0x590 [ 780.909089][T16308] ? __sys_recvmsg+0x2a0/0x2a0 [ 780.913902][T16308] ? trace_call_bpf+0xc3/0x6c0 [ 780.918756][T16308] ? trace_call_bpf+0x5e9/0x6c0 [ 780.923667][T16308] ? __fget_files+0x43d/0x4b0 [ 780.928404][T16308] __x64_sys_recvmsg+0x20c/0x2e0 [ 780.933396][T16308] ? ___sys_recvmsg+0x590/0x590 [ 780.938396][T16308] ? syscall_enter_from_user_mode+0x2e/0x80 [ 780.944346][T16308] do_syscall_64+0x55/0xb0 [ 780.948805][T16308] ? clear_bhb_loop+0x40/0x90 [ 780.953540][T16308] ? clear_bhb_loop+0x40/0x90 [ 780.958267][T16308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.964213][T16308] RIP: 0033:0x7fae0179ce59 [ 780.968670][T16308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.988320][T16308] RSP: 002b:00007fae0269c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 780.996782][T16308] RAX: ffffffffffffffda RBX: 00007fae01a15fa0 RCX: 00007fae0179ce59 [ 781.005023][T16308] RDX: 0000000000000042 RSI: 0000200000000140 RDI: 0000000000000009 [ 781.013151][T16308] RBP: 00007fae0269c090 R08: 0000000000000000 R09: 0000000000000000 [ 781.021173][T16308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.029184][T16308] R13: 00007fae01a16038 R14: 00007fae01a15fa0 R15: 00007ffc6c1570e8 [ 781.037221][T16308] [ 781.316496][T16318] FAULT_INJECTION: forcing a failure. [ 781.316496][T16318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.337155][T16318] CPU: 1 PID: 16318 Comm: syz.2.3239 Not tainted syzkaller #0 [ 781.344822][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.355059][T16318] Call Trace: [ 781.358494][T16318] [ 781.361585][T16318] dump_stack_lvl+0x18c/0x250 [ 781.366458][T16318] ? show_regs_print_info+0x20/0x20 [ 781.371805][T16318] ? load_image+0x420/0x420 [ 781.376503][T16318] ? __might_fault+0xaa/0x120 [ 781.381346][T16318] ? __lock_acquire+0x7d40/0x7d40 [ 781.386538][T16318] should_fail_ex+0x39d/0x4d0 [ 781.391378][T16318] _copy_from_iter+0x1d9/0x12e0 [ 781.396363][T16318] ? slab_post_alloc_hook+0x8a/0x4b0 [ 781.401775][T16318] ? __virt_addr_valid+0x18c/0x540 [ 781.407032][T16318] ? __lock_acquire+0x7d40/0x7d40 [ 781.412171][T16318] ? rcu_is_watching+0x15/0xb0 [ 781.417094][T16318] ? copyout_mc+0x70/0x70 [ 781.421538][T16318] ? __virt_addr_valid+0x18c/0x540 [ 781.426770][T16318] ? __virt_addr_valid+0x18c/0x540 [ 781.431997][T16318] ? __virt_addr_valid+0x469/0x540 [ 781.437252][T16318] ? __check_object_size+0x506/0xa20 [ 781.442944][T16318] netlink_sendmsg+0x76b/0xbf0 [ 781.447903][T16318] ? netlink_getsockopt+0x590/0x590 [ 781.453240][T16318] ? aa_sock_msg_perm+0x94/0x150 [ 781.458346][T16318] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 781.463774][T16318] ? security_socket_sendmsg+0x80/0xa0 [ 781.469339][T16318] ? netlink_getsockopt+0x590/0x590 [ 781.474675][T16318] ____sys_sendmsg+0x5ba/0x960 [ 781.479600][T16318] ? __asan_memset+0x22/0x40 [ 781.484299][T16318] ? __sys_sendmsg_sock+0x30/0x30 [ 781.489416][T16318] ? __import_iovec+0x5f2/0x850 [ 781.494440][T16318] ? import_iovec+0x73/0xa0 [ 781.499075][T16318] ___sys_sendmsg+0x2a6/0x360 [ 781.503853][T16318] ? get_pid_task+0x20/0x1e0 [ 781.508621][T16318] ? __sys_sendmsg+0x2a0/0x2a0 [ 781.513656][T16318] ? __lock_acquire+0x7d40/0x7d40 [ 781.518968][T16318] __se_sys_sendmsg+0x1c2/0x2b0 [ 781.524001][T16318] ? __x64_sys_sendmsg+0x80/0x80 [ 781.529167][T16318] ? lockdep_hardirqs_on+0x98/0x150 [ 781.534517][T16318] do_syscall_64+0x55/0xb0 [ 781.539033][T16318] ? clear_bhb_loop+0x40/0x90 [ 781.543805][T16318] ? clear_bhb_loop+0x40/0x90 [ 781.548593][T16318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.554588][T16318] RIP: 0033:0x7fae0179ce59 [ 781.559115][T16318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.578833][T16318] RSP: 002b:00007fae0269c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.587363][T16318] RAX: ffffffffffffffda RBX: 00007fae01a15fa0 RCX: 00007fae0179ce59 [ 781.595448][T16318] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 781.603538][T16318] RBP: 00007fae0269c090 R08: 0000000000000000 R09: 0000000000000000 [ 781.611775][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.619835][T16318] R13: 00007fae01a16038 R14: 00007fae01a15fa0 R15: 00007ffc6c1570e8 [ 781.628017][T16318] [ 781.943342][T13095] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 782.261770][T16336] netlink: 163744 bytes leftover after parsing attributes in process `syz.1.3245'. [ 782.338805][T16336] openvswitch: netlink: IP tunnel dst address not specified [ 782.579729][T16353] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3246'. [ 782.764605][T16354] netlink: 'syz.0.3249': attribute type 3 has an invalid length. [ 782.773545][T16354] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3249'. [ 782.874114][T16358] netlink: 'syz.0.3249': attribute type 10 has an invalid length. [ 782.917856][T16358] team0: Device vxcan1 is of different type [ 783.339490][T16361] netlink: 'syz.2.3252': attribute type 1 has an invalid length. [ 783.361824][T16361] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3252'. [ 783.419034][T16360] netlink: 'syz.2.3252': attribute type 1 has an invalid length. [ 783.450906][T16360] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3252'. [ 783.985438][T16372] netlink: 'syz.2.3257': attribute type 2 has an invalid length. [ 784.042852][T16372] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3257'. [ 784.052930][T13095] Bluetooth: hci2: command 0x0406 tx timeout [ 784.763852][T16383] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3259'. [ 785.286756][T16398] netlink: 'syz.1.3263': attribute type 3 has an invalid length. [ 785.296320][T16398] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3263'. [ 785.370977][T16400] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 785.389096][T16400] team0: Device vxcan1 is of different type [ 787.316561][T16425] netlink: 'syz.0.3272': attribute type 3 has an invalid length. [ 787.340608][T16425] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3272'. [ 787.446406][T16425] netlink: 'syz.0.3272': attribute type 10 has an invalid length. [ 787.516521][T16425] team0: Device vxcan1 is of different type [ 787.931964][T16440] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3277'. [ 788.252534][T16445] netlink: 'syz.0.3278': attribute type 3 has an invalid length. [ 788.262576][T16445] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3278'. [ 788.368516][T16445] netlink: 'syz.0.3278': attribute type 10 has an invalid length. [ 788.411141][T16445] team0: Device vxcan1 is of different type [ 789.051587][T16449] netlink: 'syz.2.3280': attribute type 21 has an invalid length. [ 789.076931][T16449] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.3280'. [ 790.402116][T16476] netlink: 'syz.2.3287': attribute type 3 has an invalid length. [ 790.426510][T16476] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3287'. [ 790.491939][T16476] netlink: 'syz.2.3287': attribute type 10 has an invalid length. [ 790.582429][T16476] team0: Device vxcan1 is of different type [ 790.758911][T16489] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3289'. [ 791.762577][T16496] netlink: 'syz.2.3291': attribute type 3 has an invalid length. [ 791.774024][T16496] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3291'. [ 791.822727][T16500] netlink: 'syz.2.3291': attribute type 10 has an invalid length. [ 791.846829][T16500] team0: Device vxcan1 is of different type [ 792.041614][T16503] netlink: 'syz.0.3293': attribute type 2 has an invalid length. [ 792.059437][T16503] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3293'. [ 792.484418][T16507] syzkaller0: entered promiscuous mode [ 792.490626][T16507] syzkaller0: entered allmulticast mode [ 793.391615][T16527] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3301'. [ 793.754818][T16536] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3303'. [ 796.407698][T16539] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3304'. [ 796.730854][T16541] netlink: 'syz.0.3305': attribute type 3 has an invalid length. [ 796.745023][T16541] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3305'. [ 796.786032][T16544] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3306'. [ 796.828406][T16541] netlink: 'syz.0.3305': attribute type 10 has an invalid length. [ 796.861058][T16541] team0: Device vxcan1 is of different type [ 796.997196][T16548] netlink: 'syz.1.3307': attribute type 28 has an invalid length. [ 797.084236][T16548] netlink: 'syz.1.3307': attribute type 29 has an invalid length. [ 797.089844][T16550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3307'. [ 797.122669][T16548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3307'. [ 797.360397][T16557] netlink: 'syz.2.3309': attribute type 3 has an invalid length. [ 797.372804][T16557] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3309'. [ 797.387903][T16552] syzkaller0: entered promiscuous mode [ 797.395799][T16552] syzkaller0: entered allmulticast mode [ 797.460343][T16557] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 797.492158][T16557] team0: Device vxcan1 is of different type [ 797.748453][T16565] netlink: 'syz.0.3312': attribute type 29 has an invalid length. [ 797.757495][T16565] netlink: 'syz.0.3312': attribute type 29 has an invalid length. [ 797.769036][T16565] netlink: 'syz.0.3312': attribute type 29 has an invalid length. [ 798.297576][T16580] IPv6: Can't replace route, no match found [ 798.308419][T16578] netlink: 'syz.0.3315': attribute type 3 has an invalid length. [ 798.321567][T16578] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3315'. [ 798.418528][T16578] team0: Device vxcan1 is of different type [ 798.649352][T16585] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3318'. [ 798.774116][T16585] team0: Device vxcan1 is of different type [ 798.839132][T16587] syzkaller0: entered promiscuous mode [ 798.845743][T16587] syzkaller0: entered allmulticast mode [ 799.813699][T16603] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3324'. [ 799.924851][T16611] FAULT_INJECTION: forcing a failure. [ 799.924851][T16611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.965362][T16603] team0: Device vxcan1 is of different type [ 800.023375][T16611] CPU: 0 PID: 16611 Comm: syz.2.3326 Not tainted syzkaller #0 [ 800.030901][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.041000][T16611] Call Trace: [ 800.044335][T16611] [ 800.047303][T16611] dump_stack_lvl+0x18c/0x250 [ 800.052068][T16611] ? show_regs_print_info+0x20/0x20 [ 800.057327][T16611] ? load_image+0x420/0x420 [ 800.061886][T16611] ? __lock_acquire+0x7d40/0x7d40 [ 800.066974][T16611] ? snprintf+0xe9/0x140 [ 800.071288][T16611] should_fail_ex+0x39d/0x4d0 [ 800.076048][T16611] _copy_to_user+0x2f/0xa0 [ 800.080524][T16611] simple_read_from_buffer+0xe7/0x150 [ 800.085934][T16611] proc_fail_nth_read+0x1e8/0x260 [ 800.091004][T16611] ? proc_fault_inject_write+0x360/0x360 [ 800.096689][T16611] ? fsnotify_perm+0x271/0x5e0 [ 800.101506][T16611] ? proc_fault_inject_write+0x360/0x360 [ 800.107242][T16611] vfs_read+0x28b/0x970 [ 800.111447][T16611] ? kernel_read+0x1e0/0x1e0 [ 800.116092][T16611] ? __fget_files+0x28/0x4b0 [ 800.120757][T16611] ? __fget_files+0x28/0x4b0 [ 800.125424][T16611] ? __fget_files+0x43d/0x4b0 [ 800.130186][T16611] ? __fdget_pos+0x2a3/0x330 [ 800.134845][T16611] ? ksys_read+0x75/0x260 [ 800.139256][T16611] ksys_read+0x150/0x260 [ 800.143579][T16611] ? vfs_write+0x990/0x990 [ 800.148080][T16611] ? lockdep_hardirqs_on+0x98/0x150 [ 800.153359][T16611] do_syscall_64+0x55/0xb0 [ 800.157840][T16611] ? clear_bhb_loop+0x40/0x90 [ 800.162579][T16611] ? clear_bhb_loop+0x40/0x90 [ 800.167372][T16611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.173349][T16611] RIP: 0033:0x7fae0175d68e [ 800.177817][T16611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.197523][T16611] RSP: 002b:00007fae0269bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.206011][T16611] RAX: ffffffffffffffda RBX: 00007fae0269c6c0 RCX: 00007fae0175d68e [ 800.214052][T16611] RDX: 000000000000000f RSI: 00007fae0269c0a0 RDI: 0000000000000004 [ 800.222103][T16611] RBP: 00007fae0269c090 R08: 0000000000000000 R09: 0000000000000000 [ 800.230151][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.238200][T16611] R13: 00007fae01a16038 R14: 00007fae01a15fa0 R15: 00007ffc6c1570e8 [ 800.246261][T16611] [ 800.530222][T16617] syzkaller0: entered promiscuous mode [ 800.536288][T16617] syzkaller0: entered allmulticast mode [ 800.667703][T16623] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3329'. [ 800.744945][T16626] team0: Device vxcan1 is of different type [ 800.801220][T16628] syz.3.3331[16628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.827332][T16628] syz.3.3331[16628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.861122][T16628] syz.3.3331[16628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.895779][T16628] syz.3.3331[16628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 801.599466][T16646] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3338'. [ 801.964563][T16653] validate_nla: 9 callbacks suppressed [ 801.964593][T16653] netlink: 'syz.1.3340': attribute type 3 has an invalid length. [ 801.983904][T16653] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3340'. [ 802.063679][T16661] netlink: 'syz.1.3340': attribute type 10 has an invalid length. [ 802.095079][T16661] team0: Device vxcan1 is of different type [ 802.721055][T16673] netlink: 'syz.1.3347': attribute type 21 has an invalid length. [ 802.753340][T16673] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3347'. [ 802.787589][T16673] netlink: 'syz.1.3347': attribute type 4 has an invalid length. [ 802.921699][T16676] netlink: 'syz.3.3348': attribute type 3 has an invalid length. [ 802.935970][T16676] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3348'. [ 803.193453][T16679] netlink: 'syz.3.3348': attribute type 10 has an invalid length. [ 803.210899][T16679] team0: Device vxcan1 is of different type [ 803.276585][ T12] hsr_slave_0: left promiscuous mode [ 803.301226][ T12] hsr_slave_1: left promiscuous mode [ 803.326649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.343196][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.492343][T16687] netlink: 'syz.2.3351': attribute type 29 has an invalid length. [ 803.635193][ T12] veth1_macvtap: left promiscuous mode [ 803.647902][ T12] veth0_macvtap: left promiscuous mode [ 803.655106][ T12] veth1_vlan: left promiscuous mode [ 803.662047][ T12] veth0_vlan: left promiscuous mode [ 808.192796][ T12] team0 (unregistering): Port device team_slave_1 removed [ 808.255887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 808.319228][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.386708][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.857778][ T12] bond0 (unregistering): Released all slaves [ 808.908248][T16687] netlink: 'syz.2.3351': attribute type 29 has an invalid length. [ 808.925802][T16688] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3351'. [ 809.453989][T16716] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3358'. [ 810.450227][T16728] netlink: 'syz.2.3361': attribute type 10 has an invalid length. [ 810.478795][T16728] team0: Device vxcan1 is of different type [ 811.149754][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.157233][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.330959][T16725] netlink: 'syz.2.3361': attribute type 3 has an invalid length. [ 812.343548][T16725] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3361'. [ 812.640020][T16737] netlink: 'syz.1.3365': attribute type 29 has an invalid length. [ 812.654495][T16730] netlink: 'syz.3.3362': attribute type 3 has an invalid length. [ 812.671494][T16730] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3362'. [ 812.683736][T16737] netlink: 'syz.1.3365': attribute type 29 has an invalid length. [ 812.728441][T16736] netlink: 'syz.0.3363': attribute type 10 has an invalid length. [ 812.740588][T16736] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.752099][T16736] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.873491][T16736] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.882317][T16736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.895181][T16736] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.903560][T16736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.960636][T16736] team0: Port device bridge0 added [ 812.969447][T16739] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3365'. [ 812.987426][T16730] netlink: 'syz.3.3362': attribute type 10 has an invalid length. [ 813.024551][T16730] team0: Device vxcan1 is of different type [ 813.665212][T16751] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 814.561859][T16763] netlink: 'syz.0.3372': attribute type 10 has an invalid length. [ 814.606219][T16763] team0: Device vxcan1 is of different type [ 814.737353][T16771] netlink: 'syz.3.3374': attribute type 29 has an invalid length. [ 814.759356][T16770] netlink: 'syz.2.3375': attribute type 9 has an invalid length. [ 814.780957][T16770] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3375'. [ 814.795292][T16771] netlink: 'syz.3.3374': attribute type 29 has an invalid length. [ 814.819020][T16773] netlink: 'syz.2.3375': attribute type 10 has an invalid length. [ 814.881063][T16771] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3374'. [ 815.283194][T16783] netlink: 'syz.0.3380': attribute type 3 has an invalid length. [ 815.291887][T16783] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3380'. [ 815.321806][T16779] syzkaller0: entered promiscuous mode [ 815.334315][T16779] syzkaller0: entered allmulticast mode [ 815.371869][T16781] netlink: 'syz.1.3379': attribute type 10 has an invalid length. [ 815.383456][T16783] netlink: 'syz.0.3380': attribute type 10 has an invalid length. [ 815.407762][T16783] team0: Device vxcan1 is of different type [ 815.964377][T16794] netlink: 'syz.1.3383': attribute type 10 has an invalid length. [ 815.978504][T16794] team0: Device ipvlan1 failed to register rx_handler [ 816.158281][T16797] netlink: 'syz.3.3385': attribute type 3 has an invalid length. [ 816.183542][T16797] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3385'. [ 816.331622][T16797] team0: Device vxcan1 is of different type [ 816.526624][T16804] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3388'. [ 816.615683][T16809] team0: Device vxcan1 is of different type [ 817.062597][T16815] bridge0: port 3(team0) entered disabled state [ 817.073906][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.087881][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.182799][T16815] team0: Device bridge0 is already an upper device of the team interface [ 819.290247][T16826] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3395'. [ 819.527190][T16830] team0: Device vxcan1 is of different type [ 820.242876][T16834] syzkaller0: entered promiscuous mode [ 820.403290][T16834] syzkaller0: entered allmulticast mode [ 820.569869][T13095] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 820.722698][T16842] validate_nla: 6 callbacks suppressed [ 820.722722][T16842] netlink: 'syz.3.3400': attribute type 19 has an invalid length. [ 820.973385][T16844] netlink: 'syz.1.3401': attribute type 3 has an invalid length. [ 820.982269][T16844] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3401'. [ 821.073183][T16852] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 821.105478][T16852] team0: Device vxcan1 is of different type [ 821.166082][T16850] netlink: 'syz.2.3403': attribute type 10 has an invalid length. [ 821.280959][T16851] netlink: 'syz.3.3404': attribute type 3 has an invalid length. [ 821.305883][T16851] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3404'. [ 821.463871][T16854] netlink: 'syz.3.3404': attribute type 10 has an invalid length. [ 821.526477][T16854] team0: Device vxcan1 is of different type [ 822.056058][T16860] netlink: 'syz.0.3407': attribute type 2 has an invalid length. [ 822.075885][T16860] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3407'. [ 822.576026][T16867] syzkaller0: entered promiscuous mode [ 822.583944][T16867] syzkaller0: entered allmulticast mode [ 825.472981][T16882] netlink: 'syz.0.3414': attribute type 3 has an invalid length. [ 825.490657][T16882] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3414'. [ 825.581195][T16888] netlink: 'syz.0.3414': attribute type 10 has an invalid length. [ 825.591562][T16888] team0: Device vxcan1 is of different type [ 825.769797][T16892] netlink: 'syz.1.3418': attribute type 3 has an invalid length. [ 825.779569][T16892] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3418'. [ 825.917155][T16892] netlink: 'syz.1.3418': attribute type 10 has an invalid length. [ 825.950763][T16892] team0: Device vxcan1 is of different type [ 826.438572][T16906] syzkaller0: entered promiscuous mode [ 826.446346][T16906] syzkaller0: entered allmulticast mode [ 830.137042][T16929] netlink: 'syz.3.3431': attribute type 3 has an invalid length. [ 830.154570][T16929] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3431'. [ 830.271380][T16929] netlink: 'syz.3.3431': attribute type 10 has an invalid length. [ 830.382235][T16929] team0: Device vxcan1 is of different type [ 830.855175][T16948] netlink: 'syz.1.3436': attribute type 3 has an invalid length. [ 830.911584][T16948] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3436'. [ 831.088619][T16948] netlink: 'syz.1.3436': attribute type 10 has an invalid length. [ 831.140100][T16948] team0: Device vxcan1 is of different type [ 832.369981][T16974] syzkaller0: entered promiscuous mode [ 832.407288][T16974] syzkaller0: entered allmulticast mode [ 835.572519][T16990] netlink: 'syz.3.3448': attribute type 3 has an invalid length. [ 836.701463][T16990] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3448'. [ 836.771681][T16993] netlink: 'syz.3.3448': attribute type 10 has an invalid length. [ 836.850561][T16993] team0: Device vxcan1 is of different type [ 838.110509][T17001] netlink: 'syz.3.3452': attribute type 10 has an invalid length. [ 838.434539][T17001] team0: Device bridge0 is already an upper device of the team interface [ 839.491740][T17015] syzkaller0: entered promiscuous mode [ 839.504133][T17015] syzkaller0: entered allmulticast mode [ 839.840135][T17027] FAULT_INJECTION: forcing a failure. [ 839.840135][T17027] name failslab, interval 1, probability 0, space 0, times 0 [ 839.881223][T17026] netlink: 'syz.2.3461': attribute type 3 has an invalid length. [ 839.895800][T17027] CPU: 1 PID: 17027 Comm: syz.1.3460 Not tainted syzkaller #0 [ 839.903382][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.913509][T17027] Call Trace: [ 839.914655][T17026] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3461'. [ 839.916828][T17027] [ 839.916925][T17027] dump_stack_lvl+0x18c/0x250 [ 839.916972][T17027] ? show_regs_print_info+0x20/0x20 [ 839.939273][T17027] ? load_image+0x420/0x420 [ 839.943862][T17027] ? __local_bh_enable_ip+0x13a/0x1c0 [ 839.949330][T17027] ? lockdep_hardirqs_on+0x98/0x150 [ 839.954641][T17027] ? __local_bh_enable_ip+0x13a/0x1c0 [ 839.960106][T17027] should_fail_ex+0x39d/0x4d0 [ 839.964890][T17027] should_failslab+0x9/0x20 [ 839.969490][T17027] slab_pre_alloc_hook+0x59/0x310 [ 839.974618][T17027] ? sctp_get_port_local+0xe65/0x1620 [ 839.980083][T17027] ? sctp_add_bind_addr+0x8c/0x360 [ 839.985269][T17027] __kmem_cache_alloc_node+0x53/0x250 [ 839.990742][T17027] ? sctp_add_bind_addr+0x8c/0x360 [ 839.995944][T17027] kmalloc_trace+0x2a/0xe0 [ 840.000451][T17027] sctp_add_bind_addr+0x8c/0x360 [ 840.005476][T17027] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 840.011033][T17027] sctp_do_bind+0x616/0x990 [ 840.015640][T17027] sctp_connect_new_asoc+0x26a/0x6a0 [ 840.021020][T17027] ? __sctp_connect+0xd80/0xd80 [ 840.025960][T17027] ? __local_bh_enable_ip+0x13a/0x1c0 [ 840.031418][T17027] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 840.037053][T17027] ? security_sctp_bind_connect+0x89/0xb0 [ 840.042872][T17027] sctp_sendmsg+0x15d2/0x2910 [ 840.047663][T17027] ? sctp_getsockopt+0xb60/0xb60 [ 840.052687][T17027] ? aa_sk_perm+0x83c/0x970 [ 840.057259][T17027] ? aa_af_perm+0x330/0x330 [ 840.061821][T17027] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 840.068306][T17027] ? sock_rps_record_flow+0x19/0x3f0 [ 840.073678][T17027] ? inet_sendmsg+0xe9/0x2f0 [ 840.078428][T17027] ? inet_send_prepare+0x260/0x260 [ 840.083604][T17027] ____sys_sendmsg+0x5ba/0x960 [ 840.088486][T17027] ? __lock_acquire+0x7d40/0x7d40 [ 840.093594][T17027] ? __sys_sendmsg_sock+0x30/0x30 [ 840.098685][T17027] ? __import_iovec+0x5f2/0x850 [ 840.103670][T17027] ? import_iovec+0x73/0xa0 [ 840.108235][T17027] ___sys_sendmsg+0x2a6/0x360 [ 840.112982][T17027] ? __sys_sendmsg+0x2a0/0x2a0 [ 840.117834][T17027] ? trace_call_bpf+0xc3/0x6c0 [ 840.122691][T17027] __se_sys_sendmsg+0x1c2/0x2b0 [ 840.127606][T17027] ? __x64_sys_sendmsg+0x80/0x80 [ 840.132631][T17027] ? lockdep_hardirqs_on+0x98/0x150 [ 840.137902][T17027] do_syscall_64+0x55/0xb0 [ 840.142372][T17027] ? clear_bhb_loop+0x40/0x90 [ 840.147092][T17027] ? clear_bhb_loop+0x40/0x90 [ 840.151822][T17027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.157783][T17027] RIP: 0033:0x7fc00999ce59 [ 840.162246][T17027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.181928][T17027] RSP: 002b:00007fc00a811028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.190425][T17027] RAX: ffffffffffffffda RBX: 00007fc009c15fa0 RCX: 00007fc00999ce59 [ 840.198500][T17027] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000006 [ 840.206555][T17027] RBP: 00007fc00a811090 R08: 0000000000000000 R09: 0000000000000000 [ 840.214587][T17027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.222628][T17027] R13: 00007fc009c16038 R14: 00007fc009c15fa0 R15: 00007ffdf0c53e38 [ 840.230768][T17027] [ 840.634120][T17026] netlink: 'syz.2.3461': attribute type 10 has an invalid length. [ 840.728635][T17026] team0: Device vxcan1 is of different type [ 842.722682][T17030] syzkaller0: entered promiscuous mode [ 842.748010][T17030] syzkaller0: entered allmulticast mode [ 844.099871][T17054] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 844.108980][T17054] team0: Device bridge0 is already an upper device of the team interface [ 844.590962][T17059] netlink: 'syz.2.3468': attribute type 3 has an invalid length. [ 844.615152][T17059] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3468'. [ 844.688062][T17062] netlink: 'syz.2.3468': attribute type 10 has an invalid length. [ 844.698257][T17062] team0: Device vxcan1 is of different type [ 845.319395][T17066] netlink: 'syz.0.3469': attribute type 3 has an invalid length. [ 845.346880][T17066] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3469'. [ 845.467111][T17071] netlink: 'syz.3.3472': attribute type 3 has an invalid length. [ 845.487962][T17071] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3472'. [ 845.506852][T17066] netlink: 'syz.0.3469': attribute type 10 has an invalid length. [ 845.559276][T17066] team0: Device vxcan1 is of different type [ 845.670499][T17071] netlink: 'syz.3.3472': attribute type 10 has an invalid length. [ 845.711670][T17071] team0: Device vxcan1 is of different type [ 846.387592][T17082] netlink: 'syz.0.3484': attribute type 3 has an invalid length. [ 846.396684][T17082] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3484'. [ 846.556373][T17082] netlink: 'syz.0.3484': attribute type 10 has an invalid length. [ 846.613427][T17082] team0: Device vxcan1 is of different type [ 847.310612][T17093] netlink: 'syz.1.3478': attribute type 29 has an invalid length. [ 847.393469][T17091] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3479'. [ 847.426236][T17093] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3478'. [ 847.471950][T17098] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3481'. [ 847.514851][T17091] team0: Device vxcan1 is of different type [ 848.200442][T17105] syzkaller0: entered promiscuous mode [ 848.214139][T17105] syzkaller0: entered allmulticast mode [ 848.576114][T17109] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3485'. [ 848.702887][T17109] team0: Device vxcan1 is of different type [ 849.015444][T17122] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3490'. [ 849.063201][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 849.128105][T17122] validate_nla: 6 callbacks suppressed [ 849.128130][T17122] netlink: 'syz.1.3490': attribute type 10 has an invalid length. [ 849.176444][T17122] team0: Device hsr_slave_0 failed to register rx_handler [ 849.315788][T17130] netlink: 'syz.3.3493': attribute type 3 has an invalid length. [ 849.326068][T17130] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3493'. [ 849.397177][T17131] netlink: 'syz.3.3493': attribute type 10 has an invalid length. [ 849.425744][T17131] team0: Device vxcan1 is of different type [ 849.605723][T17138] netlink: 'syz.1.3496': attribute type 29 has an invalid length. [ 849.643645][T17138] netlink: 'syz.1.3496': attribute type 29 has an invalid length. [ 849.702416][T17138] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3496'. [ 849.938782][T17143] netlink: 'syz.0.3498': attribute type 27 has an invalid length. [ 849.974587][T17143] netlink: 'syz.0.3498': attribute type 25 has an invalid length. [ 850.222516][T17149] FAULT_INJECTION: forcing a failure. [ 850.222516][T17149] name failslab, interval 1, probability 0, space 0, times 0 [ 850.236331][T17149] CPU: 0 PID: 17149 Comm: syz.0.3501 Not tainted syzkaller #0 [ 850.243867][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.254009][T17149] Call Trace: [ 850.257346][T17149] [ 850.260335][T17149] dump_stack_lvl+0x18c/0x250 [ 850.265102][T17149] ? show_regs_print_info+0x20/0x20 [ 850.270428][T17149] ? load_image+0x420/0x420 [ 850.275019][T17149] should_fail_ex+0x39d/0x4d0 [ 850.279774][T17149] should_failslab+0x9/0x20 [ 850.284335][T17149] slab_pre_alloc_hook+0x59/0x310 [ 850.289492][T17149] kmem_cache_alloc+0x5a/0x2d0 [ 850.294302][T17149] ? radix_tree_node_alloc+0x7e/0x3a0 [ 850.299716][T17149] radix_tree_node_alloc+0x7e/0x3a0 [ 850.304962][T17149] idr_get_free+0x2b3/0xa60 [ 850.309514][T17149] idr_alloc_cyclic+0x27b/0x5d0 [ 850.314416][T17149] ? idr_alloc+0x2f0/0x2f0 [ 850.318882][T17149] ? do_raw_spin_lock+0x11f/0x2c0 [ 850.323962][T17149] ? __radix_tree_preload+0x82/0x880 [ 850.329287][T17149] ? btf_alloc_id+0x30/0x2d0 [ 850.333940][T17149] btf_alloc_id+0x4f/0x2d0 [ 850.338395][T17149] btf_new_fd+0x81b/0x9f0 [ 850.342779][T17149] ? bpf_btf_show_fdinfo+0x80/0x80 [ 850.347952][T17149] ? capable+0x88/0xe0 [ 850.352059][T17149] __sys_bpf+0x670/0x890 [ 850.356334][T17149] ? bpf_link_show_fdinfo+0x390/0x390 [ 850.361750][T17149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 850.367961][T17149] __x64_sys_bpf+0x7c/0x90 [ 850.372417][T17149] do_syscall_64+0x55/0xb0 [ 850.376876][T17149] ? clear_bhb_loop+0x40/0x90 [ 850.381594][T17149] ? clear_bhb_loop+0x40/0x90 [ 850.386313][T17149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.392253][T17149] RIP: 0033:0x7f118af9ce59 [ 850.396702][T17149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.416339][T17149] RSP: 002b:00007f118bd7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.424789][T17149] RAX: ffffffffffffffda RBX: 00007f118b215fa0 RCX: 00007f118af9ce59 [ 850.432797][T17149] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000012 [ 850.440801][T17149] RBP: 00007f118bd7f090 R08: 0000000000000000 R09: 0000000000000000 [ 850.448802][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 850.456804][T17149] R13: 00007f118b216038 R14: 00007f118b215fa0 R15: 00007ffec19917d8 [ 850.464819][T17149] [ 850.840859][T17155] netlink: 'syz.2.3503': attribute type 3 has an invalid length. [ 850.851829][T17155] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3503'. [ 850.968174][T17155] netlink: 'syz.2.3503': attribute type 10 has an invalid length. [ 851.012507][T17155] team0: Device vxcan1 is of different type [ 853.041489][T17173] netlink: 'syz.1.3509': attribute type 29 has an invalid length. [ 853.152196][T17171] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3510'. [ 853.197690][T17176] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3509'. [ 853.241214][T17175] syzkaller0: entered promiscuous mode [ 853.252425][T17175] syzkaller0: entered allmulticast mode [ 853.351197][T17171] team0: Device vxcan1 is of different type [ 853.558437][T17185] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3513'. [ 854.395302][T17203] validate_nla: 3 callbacks suppressed [ 854.395360][T17203] netlink: 'syz.2.3519': attribute type 3 has an invalid length. [ 854.410635][T17203] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3519'. [ 854.504274][T17203] netlink: 'syz.2.3519': attribute type 10 has an invalid length. [ 854.543488][T17203] team0: Device vxcan1 is of different type [ 855.332601][T17211] netlink: 'syz.0.3521': attribute type 29 has an invalid length. [ 855.341223][T17211] netlink: 'syz.0.3521': attribute type 29 has an invalid length. [ 855.875892][T17221] netlink: 'syz.0.3526': attribute type 3 has an invalid length. [ 855.891632][T17221] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3526'. [ 855.921076][T17223] netlink: 'syz.0.3526': attribute type 10 has an invalid length. [ 855.938830][T17223] team0: Device vxcan1 is of different type [ 855.957334][T17216] Ÿë: port 1(veth0_to_team) entered blocking state [ 855.971304][T17216] Ÿë: port 1(veth0_to_team) entered disabled state [ 855.979957][T17216] veth0_to_team: entered allmulticast mode [ 855.988168][T17216] veth0_to_team: entered promiscuous mode [ 856.018587][T17226] netlink: 'syz.3.3527': attribute type 3 has an invalid length. [ 856.031522][T17226] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3527'. [ 859.490848][T17242] netlink: 'syz.2.3532': attribute type 3 has an invalid length. [ 859.525885][T17242] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3532'. [ 859.606244][T17242] netlink: 'syz.2.3532': attribute type 10 has an invalid length. [ 859.650177][T17242] team0: Device vxcan1 is of different type [ 859.770421][T17249] netlink: 'syz.1.3534': attribute type 29 has an invalid length. [ 859.801251][T17249] netlink: 'syz.1.3534': attribute type 29 has an invalid length. [ 860.367748][T17253] Ÿë: port 1(veth0_to_team) entered blocking state [ 860.387865][T17253] Ÿë: port 1(veth0_to_team) entered disabled state [ 860.401423][T17253] veth0_to_team: entered allmulticast mode [ 860.427600][T17253] veth0_to_team: entered promiscuous mode [ 860.501356][T17259] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.3539'. [ 860.534116][T17259] netlink: 'syz.2.3539': attribute type 4 has an invalid length. [ 860.698675][T17262] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 860.715072][T17262] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3541'. [ 860.804896][T17267] netlink: 'syz.3.3541': attribute type 10 has an invalid length. [ 860.815393][T17267] team0: Device vxcan1 is of different type [ 861.380157][T17281] netlink: 'syz.0.3546': attribute type 29 has an invalid length. [ 861.392345][T17281] netlink: 'syz.0.3546': attribute type 29 has an invalid length. [ 861.429632][T17283] netlink: 'syz.2.3547': attribute type 3 has an invalid length. [ 861.484717][T17283] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3547'. [ 861.512786][T17284] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3547'. [ 861.791615][T17286] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3548'. [ 861.965321][T17289] team0: Device vxcan1 is of different type [ 861.995028][T17288] syzkaller0: entered promiscuous mode [ 862.008072][T17288] syzkaller0: entered allmulticast mode [ 865.317188][T17310] syzkaller0: left promiscuous mode [ 865.322546][T17310] syzkaller0: left allmulticast mode [ 865.529196][T17315] validate_nla: 2 callbacks suppressed [ 865.529225][T17315] netlink: 'syz.2.3557': attribute type 29 has an invalid length. [ 865.567512][T17315] netlink: 'syz.2.3557': attribute type 29 has an invalid length. [ 865.650021][T17316] netlink: 'syz.1.3556': attribute type 3 has an invalid length. [ 865.667520][T17316] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3556'. [ 865.760558][T17316] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 865.799217][T17316] team0: Device vxcan1 is of different type [ 865.974993][T17323] sctp: [Deprecated]: syz.0.3558 (pid 17323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 865.974993][T17323] Use struct sctp_sack_info instead [ 866.020564][T13095] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 866.125611][T17325] syzkaller0: entered promiscuous mode [ 866.140719][T17325] syzkaller0: entered allmulticast mode [ 866.320897][T17328] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3561'. [ 866.622112][T17330] netlink: 'syz.1.3562': attribute type 10 has an invalid length. [ 866.837857][T17335] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3565'. [ 867.084077][T17345] netlink: 'syz.2.3568': attribute type 29 has an invalid length. [ 867.092447][T17345] netlink: 'syz.2.3568': attribute type 29 has an invalid length. [ 867.250548][T17350] netlink: 'syz.3.3570': attribute type 3 has an invalid length. [ 867.296622][T17350] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3570'. [ 867.396060][T17350] netlink: 'syz.3.3570': attribute type 10 has an invalid length. [ 867.467986][T17350] team0: Device vxcan1 is of different type [ 867.607109][T17355] netlink: 'syz.0.3579': attribute type 29 has an invalid length. [ 867.728302][T17357] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3572'. [ 868.407305][T17371] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3576'. [ 868.758614][T17377] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3588'. [ 868.789747][T17379] team0: Device bridge0 is already an upper device of the team interface [ 869.159374][T17389] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3583'. [ 869.218221][T17387] FAULT_INJECTION: forcing a failure. [ 869.218221][T17387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.275845][T17387] CPU: 1 PID: 17387 Comm: syz.2.3584 Not tainted syzkaller #0 [ 869.283418][T17387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 869.293527][T17387] Call Trace: [ 869.296855][T17387] [ 869.299831][T17387] dump_stack_lvl+0x18c/0x250 [ 869.304592][T17387] ? show_regs_print_info+0x20/0x20 [ 869.309888][T17387] ? load_image+0x420/0x420 [ 869.314489][T17387] ? __lock_acquire+0x7d40/0x7d40 [ 869.319587][T17387] ? __virt_addr_valid+0x18c/0x540 [ 869.320993][T17391] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3582'. [ 869.324759][T17387] should_fail_ex+0x39d/0x4d0 [ 869.324811][T17387] _copy_from_user+0x2f/0xe0 [ 869.324844][T17387] bpf_test_init+0xde/0x140 [ 869.324885][T17387] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 869.324927][T17387] ? lockdep_hardirqs_on+0x98/0x150 [ 869.324964][T17387] ? dev_put+0x80/0x80 [ 869.324999][T17387] ? bpf_prog_test_run+0x256/0x390 [ 869.367755][T17387] ? dev_put+0x80/0x80 [ 869.371906][T17387] bpf_prog_test_run+0x321/0x390 [ 869.376922][T17387] __sys_bpf+0x49d/0x890 [ 869.381243][T17387] ? bpf_link_show_fdinfo+0x390/0x390 [ 869.386709][T17387] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.392970][T17387] __x64_sys_bpf+0x7c/0x90 [ 869.397462][T17387] do_syscall_64+0x55/0xb0 [ 869.401983][T17387] ? clear_bhb_loop+0x40/0x90 [ 869.406727][T17387] ? clear_bhb_loop+0x40/0x90 [ 869.411481][T17387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.417431][T17387] RIP: 0033:0x7fae0179ce59 [ 869.421883][T17387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.441535][T17387] RSP: 002b:00007fae0269c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 869.450036][T17387] RAX: ffffffffffffffda RBX: 00007fae01a15fa0 RCX: 00007fae0179ce59 [ 869.458045][T17387] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 869.466060][T17387] RBP: 00007fae0269c090 R08: 0000000000000000 R09: 0000000000000000 [ 869.474056][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.482057][T17387] R13: 00007fae01a16038 R14: 00007fae01a15fa0 R15: 00007ffc6c1570e8 [ 869.490074][T17387] [ 869.674207][T17393] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3585'. [ 869.754427][T17396] team0: Device vxcan1 is of different type [ 869.913382][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.923349][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.298016][T17408] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3592'. [ 870.577918][T17413] validate_nla: 8 callbacks suppressed [ 870.577985][T17413] netlink: 'syz.2.3594': attribute type 5 has an invalid length. [ 871.845310][T17428] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3598'. [ 871.866022][T17428] netlink: 'syz.1.3598': attribute type 21 has an invalid length. [ 871.882467][T17428] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 871.890718][T17428] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3598'. [ 871.905831][T17428] netlink: 'syz.1.3598': attribute type 16 has an invalid length. [ 871.916776][T17428] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3598'. [ 872.603697][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.610132][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.026570][T17434] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3601'. [ 874.058722][T17436] netlink: 'syz.0.3602': attribute type 10 has an invalid length. [ 874.457114][T17442] netlink: 'syz.2.3604': attribute type 3 has an invalid length. [ 874.469639][T17442] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3604'. [ 874.570765][T17442] netlink: 'syz.2.3604': attribute type 10 has an invalid length. [ 874.625885][T17442] team0: Device vxcan1 is of different type [ 875.016962][T17453] netlink: 'syz.3.3606': attribute type 10 has an invalid length. [ 875.042312][T17453] team0: Device bridge0 is already an upper device of the team interface [ 878.674244][T17475] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3612'. [ 879.028517][T17484] netlink: 'syz.3.3618': attribute type 3 has an invalid length. [ 879.077439][T17484] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3618'. [ 879.106481][T17485] netlink: 'syz.1.3617': attribute type 5 has an invalid length. [ 879.191402][T17484] netlink: 'syz.3.3618': attribute type 10 has an invalid length. [ 879.275679][T17484] team0: Device vxcan1 is of different type [ 879.974833][T17491] netlink: 'syz.2.3620': attribute type 3 has an invalid length. [ 879.988166][T17491] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3620'. [ 880.029021][T17493] netlink: 'syz.2.3620': attribute type 10 has an invalid length. [ 880.065059][T17493] team0: Device vxcan1 is of different type [ 880.699446][T17500] netlink: 'syz.1.3623': attribute type 29 has an invalid length. [ 880.755459][T17500] netlink: 'syz.1.3623': attribute type 29 has an invalid length. [ 880.871724][T17500] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3623'. [ 880.895139][T17502] netlink: 'syz.3.3624': attribute type 10 has an invalid length. [ 880.914619][T17502] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3624'. [ 880.953498][T17502] bond0: entered promiscuous mode [ 880.962567][T17502] bond_slave_0: entered promiscuous mode [ 880.968985][T17502] bond_slave_1: entered promiscuous mode [ 880.977005][T17502] bridge0: port 4(bond0) entered blocking state [ 880.984718][T17502] bridge0: port 4(bond0) entered disabled state [ 880.992197][T17502] bond0: entered allmulticast mode [ 880.997961][T17502] bond_slave_0: entered allmulticast mode [ 881.004043][T17502] bond_slave_1: entered allmulticast mode [ 881.018535][T17505] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3625'. [ 882.125883][T17520] netlink: 'syz.1.3629': attribute type 3 has an invalid length. [ 882.140187][T17520] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3629'. [ 882.150844][T17522] netlink: 'syz.3.3630': attribute type 3 has an invalid length. [ 882.159570][T17522] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3630'. [ 882.198647][T17525] team0: Device vxcan1 is of different type [ 882.214864][T17526] team0: Device vxcan1 is of different type [ 882.996386][T17530] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3631'. [ 883.098403][T17535] team0: Device vxcan1 is of different type [ 884.020804][T17545] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3635'. [ 884.055729][T17547] validate_nla: 5 callbacks suppressed [ 884.055757][T17547] netlink: 'syz.0.3636': attribute type 29 has an invalid length. [ 884.098792][T17547] netlink: 'syz.0.3636': attribute type 29 has an invalid length. [ 884.314803][T17547] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3636'. [ 884.427884][T17555] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3640'. [ 884.595062][T17557] netlink: 'syz.2.3640': attribute type 2 has an invalid length. [ 884.637626][T17559] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 884.658513][T17557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3640'. [ 884.756018][T17559] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 884.846790][T17561] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3642'. [ 885.934471][T17567] netlink: 'syz.0.3645': attribute type 27 has an invalid length. [ 885.942574][T17567] netlink: 'syz.0.3645': attribute type 25 has an invalid length. [ 886.239750][T17570] netlink: 'syz.3.3647': attribute type 3 has an invalid length. [ 886.257033][T17570] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3647'. [ 886.378186][T17578] netlink: 'syz.3.3647': attribute type 10 has an invalid length. [ 886.397566][T17578] team0: Device vxcan1 is of different type [ 886.441487][T17577] netlink: 'syz.0.3648': attribute type 5 has an invalid length. [ 886.477070][T17580] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3649'. [ 887.173751][T17586] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3652'. [ 887.206716][T17590] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3660'. [ 887.463383][T17596] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3657'. [ 888.818754][T17621] team0: Device vxcan1 is of different type [ 888.883475][T17622] team0: Device vxcan1 is of different type [ 889.088803][T17624] __nla_validate_parse: 4 callbacks suppressed [ 889.088874][T17624] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3665'. [ 889.254636][T13095] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 889.782369][T17633] validate_nla: 12 callbacks suppressed [ 889.782877][T17633] netlink: 'syz.2.3668': attribute type 3 has an invalid length. [ 889.820442][T17633] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3668'. [ 890.054716][T17639] netlink: 'syz.2.3668': attribute type 10 has an invalid length. [ 890.098019][T17639] team0: Device vxcan1 is of different type [ 891.305081][T13095] Bluetooth: hci1: command 0x0406 tx timeout [ 894.375034][T17647] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3672'. [ 894.406051][T17647] bridge_slave_1: entered promiscuous mode [ 894.659715][T17658] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3675'. [ 895.036047][T17662] netlink: 'syz.3.3677': attribute type 29 has an invalid length. [ 895.081008][T17662] netlink: 'syz.3.3677': attribute type 29 has an invalid length. [ 895.240190][T17664] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3677'. [ 895.809024][T17670] netlink: 'syz.0.3678': attribute type 3 has an invalid length. [ 895.818247][T17670] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3678'. [ 895.853848][T17676] netlink: 'syz.0.3678': attribute type 10 has an invalid length. [ 895.891820][T17676] team0: Device vxcan1 is of different type [ 897.165336][T17690] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3686'. [ 897.208734][T17692] netlink: 'syz.1.3687': attribute type 3 has an invalid length. [ 897.219977][T17692] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3687'. [ 897.312273][T17692] netlink: 'syz.1.3687': attribute type 10 has an invalid length. [ 897.342752][T17692] team0: Device vxcan1 is of different type [ 897.457519][T17697] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3689'. [ 900.450367][T17707] netlink: 'syz.0.3692': attribute type 17 has an invalid length. [ 900.466605][T17707] netlink: 'syz.0.3692': attribute type 16 has an invalid length. [ 900.475043][T17707] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3692'. [ 900.504781][T17708] netlink: 'syz.0.3692': attribute type 46 has an invalid length. [ 904.199441][T17731] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3698'. [ 904.377274][T17736] netlink: 'syz.3.3700': attribute type 10 has an invalid length. [ 904.386905][T17736] team0: Device bridge0 is already an upper device of the team interface [ 904.600250][T17740] netlink: 'syz.2.3702': attribute type 3 has an invalid length. [ 904.612039][T17740] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3702'. [ 904.723983][T17740] netlink: 'syz.2.3702': attribute type 10 has an invalid length. [ 904.778749][T17740] team0: Device vxcan1 is of different type [ 905.078205][T17751] netlink: 'syz.3.3707': attribute type 10 has an invalid length. [ 905.115760][T17751] geneve0: entered promiscuous mode [ 905.309657][T17751] geneve0: entered allmulticast mode [ 905.345734][T17751] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 905.550476][T17760] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3711'. [ 908.838076][T17776] netlink: 'syz.1.3718': attribute type 10 has an invalid length. [ 912.063628][T17793] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3725'. [ 912.208241][T17800] netlink: 'syz.2.3730': attribute type 3 has an invalid length. [ 912.234235][T17800] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3730'. [ 912.324535][T17802] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 912.351636][T17802] geneve0: entered promiscuous mode [ 912.397185][T17800] netlink: 'syz.2.3730': attribute type 10 has an invalid length. [ 912.434426][T17800] team0: Device vxcan1 is of different type [ 912.760239][T17813] netlink: 'syz.1.3735': attribute type 3 has an invalid length. [ 912.773685][T17813] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3735'. [ 912.788353][T17817] netlink: 'syz.0.3736': attribute type 10 has an invalid length. [ 912.871515][T17813] netlink: 'syz.1.3735': attribute type 10 has an invalid length. [ 912.954723][T17813] team0: Device vxcan1 is of different type [ 913.057526][T17822] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3739'. [ 913.337936][T17830] netlink: 'syz.2.3743': attribute type 29 has an invalid length. [ 913.359436][T17830] netlink: 'syz.2.3743': attribute type 29 has an invalid length. [ 913.406878][T17830] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3743'. [ 913.566171][T17836] netlink: 'syz.0.3744': attribute type 10 has an invalid length. [ 913.595129][T17836] geneve0: entered promiscuous mode [ 913.729478][T17836] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 913.935578][T17848] netlink: 'syz.2.3749': attribute type 10 has an invalid length. [ 914.041106][T17850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3750'. [ 914.282123][T17856] netlink: 'syz.3.3752': attribute type 3 has an invalid length. [ 914.304232][T17856] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3752'. [ 914.354734][T17858] netlink: 'syz.2.3754': attribute type 29 has an invalid length. [ 914.374000][T17858] netlink: 'syz.2.3754': attribute type 29 has an invalid length. [ 914.403719][T17859] netlink: 'syz.3.3752': attribute type 10 has an invalid length. [ 914.415403][T17859] team0: Device vxcan1 is of different type [ 914.436709][T17858] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3754'. [ 914.639852][T17863] netlink: 'syz.1.3756': attribute type 3 has an invalid length. [ 914.649167][T17863] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3756'. [ 914.717577][T17870] netlink: 'syz.1.3756': attribute type 10 has an invalid length. [ 914.735136][T17870] team0: Device vxcan1 is of different type [ 915.003469][T17881] netlink: 'syz.2.3764': attribute type 2 has an invalid length. [ 915.011645][T17881] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3764'. [ 915.374399][T17889] netlink: 'syz.3.3767': attribute type 29 has an invalid length. [ 915.383264][T17889] netlink: 'syz.3.3767': attribute type 29 has an invalid length. [ 915.565083][T17891] geneve0: entered promiscuous mode [ 915.671400][T17891] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 916.307993][T17915] team0: Device vxcan1 is of different type [ 917.299467][T17941] __nla_validate_parse: 7 callbacks suppressed [ 917.299515][T17941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'. [ 917.351687][T17941] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3790'. [ 917.379249][T17943] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3791'. [ 917.878082][T17958] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3796'. [ 917.906003][T17940] delete_channel: no stack [ 918.032877][T17961] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3797'. [ 918.127374][T17963] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3798'. [ 918.201074][T17969] team0: Device vxcan1 is of different type [ 918.434295][T17979] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3805'. [ 918.649093][T17985] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3808'. [ 919.193783][T17999] validate_nla: 13 callbacks suppressed [ 919.193814][T17999] netlink: 'syz.1.3814': attribute type 1 has an invalid length. [ 919.208009][T17999] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3814'. [ 919.243494][T17997] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 919.262558][T17997] team0: Device bridge0 is already an upper device of the team interface [ 919.354645][T18001] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3816'. [ 919.759926][T18011] netlink: 'syz.2.3820': attribute type 3 has an invalid length. [ 919.775445][T18014] netlink: 'syz.1.3821': attribute type 3 has an invalid length. [ 919.837378][T18015] netlink: 'syz.2.3820': attribute type 10 has an invalid length. [ 919.865046][T18015] team0: Device vxcan1 is of different type [ 919.926536][T18014] netlink: 'syz.1.3821': attribute type 10 has an invalid length. [ 919.967922][T18014] team0: Device vxcan1 is of different type [ 920.093706][T18024] netlink: 'syz.3.3826': attribute type 21 has an invalid length. [ 920.102133][T18024] netlink: 'syz.3.3826': attribute type 6 has an invalid length. [ 920.121314][T18024] netlink: 'syz.3.3826': attribute type 10 has an invalid length. [ 920.137141][T18024] batadv0: entered promiscuous mode [ 920.144363][T18024] batadv0: entered allmulticast mode [ 920.150985][T18024] bridge0: port 5(batadv0) entered blocking state [ 920.158425][T18024] bridge0: port 5(batadv0) entered disabled state [ 920.412165][T18032] netlink: 'syz.3.3828': attribute type 2 has an invalid length. [ 920.633170][ T3536] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 920.643149][ T3536] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 921.343298][T18062] team0: Device vxcan1 is of different type [ 921.464477][T18063] team0: Device vxcan1 is of different type [ 921.924138][T18071] sctp: [Deprecated]: syz.0.3843 (pid 18071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 921.924138][T18071] Use struct sctp_sack_info instead [ 922.748919][T18095] __nla_validate_parse: 14 callbacks suppressed [ 922.748983][T18095] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3851'. [ 923.037843][T18100] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3854'. [ 923.121539][T18104] team0: Device vxcan1 is of different type [ 923.477534][T18114] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3857'. [ 923.526789][T18116] team0: Device bridge0 is already an upper device of the team interface [ 923.678109][T18114] team0: Device vxcan1 is of different type [ 923.954293][T18122] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3862'. [ 924.135866][T18129] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3865'. [ 924.785979][T18141] validate_nla: 16 callbacks suppressed [ 924.786020][T18141] netlink: 'syz.0.3870': attribute type 10 has an invalid length. [ 924.939058][T18143] netlink: 'syz.3.3871': attribute type 3 has an invalid length. [ 924.954590][T18143] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3871'. [ 925.069713][T18143] netlink: 'syz.3.3871': attribute type 10 has an invalid length. [ 925.146030][T18143] team0: Device vxcan1 is of different type [ 925.834653][T18163] netlink: 'syz.0.3877': attribute type 3 has an invalid length. [ 925.849957][T18163] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3877'. [ 925.889426][T18165] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3878'. [ 925.955684][T18163] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 926.018098][T18163] team0: Device vxcan1 is of different type [ 930.587124][T18193] netlink: 'syz.2.3887': attribute type 3 has an invalid length. [ 930.602904][T18193] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3887'. [ 930.615627][T18197] netlink: 'syz.2.3887': attribute type 10 has an invalid length. [ 930.631301][T18197] team0: Device vxcan1 is of different type [ 930.648104][T18199] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3889'. [ 930.816222][T18206] netlink: 'syz.3.3892': attribute type 2 has an invalid length. [ 930.838308][T18206] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3892'. [ 930.998162][T18208] netlink: 'syz.2.3891': attribute type 3 has an invalid length. [ 931.011872][T18208] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3891'. [ 931.097431][T18214] netlink: 'syz.2.3891': attribute type 10 has an invalid length. [ 931.130701][T18214] team0: Device vxcan1 is of different type [ 931.778233][T18227] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3898'. [ 932.006763][T18233] netlink: 'syz.2.3902': attribute type 2 has an invalid length. [ 932.019241][T18233] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3902'. [ 932.057396][T18231] netlink: 'syz.3.3900': attribute type 3 has an invalid length. [ 932.066591][T18231] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3900'. [ 932.091383][T18235] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3901'. [ 932.156753][T18231] netlink: 'syz.3.3900': attribute type 10 has an invalid length. [ 932.201988][T18231] team0: Device vxcan1 is of different type [ 932.389198][T18242] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3905'. [ 932.512561][T18240] netlink: 177620 bytes leftover after parsing attributes in process `syz.1.3904'. [ 933.000036][T18260] netlink: 'syz.2.3911': attribute type 2 has an invalid length. [ 934.066121][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.072567][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.080269][T18279] netlink: 'syz.2.3920': attribute type 3 has an invalid length. [ 934.197105][T18279] team0: Device vxcan1 is of different type [ 934.645368][T18294] team0: Device vxcan1 is of different type [ 935.016659][T18300] bridge_slave_1: entered promiscuous mode [ 935.153271][T18305] team0: Device vxcan1 is of different type [ 935.202303][T18306] team0: Device vxcan1 is of different type [ 935.648929][T18312] validate_nla: 9 callbacks suppressed [ 935.648988][T18312] netlink: 'syz.3.3932': attribute type 10 has an invalid length. [ 935.676565][T18312] team0: Device bridge0 is already an upper device of the team interface [ 936.013518][T18320] __nla_validate_parse: 14 callbacks suppressed [ 936.013562][T18320] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3936'. [ 936.020644][T18322] netlink: 'syz.1.3937': attribute type 2 has an invalid length. [ 936.080199][T18322] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3937'. [ 936.313632][T18329] netlink: 'syz.2.3940': attribute type 3 has an invalid length. [ 936.321973][T18329] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3940'. [ 936.369393][T18332] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3941'. [ 936.446256][T18329] netlink: 'syz.2.3940': attribute type 10 has an invalid length. [ 936.526120][T18329] team0: Device vxcan1 is of different type [ 936.685292][T18340] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3944'. [ 937.063656][T18350] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3948'. [ 937.365195][T18359] netlink: 'syz.3.3952': attribute type 2 has an invalid length. [ 937.403957][T18357] netlink: 'syz.1.3951': attribute type 3 has an invalid length. [ 937.412259][T18357] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3951'. [ 937.434981][T18359] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3952'. [ 937.509696][T18363] netlink: 'syz.1.3951': attribute type 10 has an invalid length. [ 937.525780][T18363] team0: Device vxcan1 is of different type [ 937.628133][T18365] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3953'. [ 937.814500][T18369] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3955'. [ 937.988471][T18373] netlink: 'syz.2.3957': attribute type 3 has an invalid length. [ 938.096028][T18373] netlink: 'syz.2.3957': attribute type 10 has an invalid length. [ 938.144171][T18373] team0: Device vxcan1 is of different type [ 938.658520][T18391] netlink: 'syz.1.3962': attribute type 2 has an invalid length. [ 939.786142][T18427] team0: Device vxcan1 is of different type [ 941.189369][T18470] __nla_validate_parse: 13 callbacks suppressed [ 941.189393][T18470] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.3997'. [ 941.320903][T18474] validate_nla: 5 callbacks suppressed [ 941.321009][T18474] netlink: 'syz.3.3999': attribute type 3 has an invalid length. [ 941.339227][T18476] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 941.353709][T18476] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4000'. [ 941.364005][T18474] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3999'. [ 941.466892][T18474] netlink: 'syz.3.3999': attribute type 10 has an invalid length. [ 941.524981][T18474] team0: Device vxcan1 is of different type [ 941.676088][T18481] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4001'. [ 942.086182][T18496] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4008'. [ 942.247609][T18501] netlink: 'syz.3.4011': attribute type 2 has an invalid length. [ 942.275454][T18501] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4011'. [ 942.298837][T18503] netlink: 'syz.0.4010': attribute type 2 has an invalid length. [ 942.315149][T18503] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4010'. [ 942.440767][T18509] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4013'. [ 942.986826][T18524] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4020'. [ 943.039532][T18522] netlink: 'syz.3.4018': attribute type 3 has an invalid length. [ 943.081876][T18522] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4018'. [ 943.145565][T18522] netlink: 'syz.3.4018': attribute type 10 has an invalid length. [ 943.156829][T18531] netlink: 'syz.2.4022': attribute type 2 has an invalid length. [ 943.185896][T18529] netlink: 'syz.1.4023': attribute type 2 has an invalid length. [ 943.234517][T18522] team0: Device vxcan1 is of different type [ 944.178338][T18557] netlink: 'syz.2.4033': attribute type 2 has an invalid length. [ 944.412161][T18564] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 944.936511][T18576] team0: Device vxcan1 is of different type [ 946.297481][T18612] __nla_validate_parse: 13 callbacks suppressed [ 946.297570][T18612] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4056'. [ 946.565390][T18620] validate_nla: 6 callbacks suppressed [ 946.565414][T18620] netlink: 'syz.0.4059': attribute type 10 has an invalid length. [ 946.580019][T18620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4059'. [ 947.014229][T18626] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4061'. [ 947.188811][T18632] netlink: 'syz.3.4062': attribute type 2 has an invalid length. [ 947.199818][T18632] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4062'. [ 947.275865][T18629] netlink: 'syz.0.4064': attribute type 3 has an invalid length. [ 947.284632][T18629] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4064'. [ 947.346860][T18635] netlink: 'syz.2.4065': attribute type 2 has an invalid length. [ 947.355090][T18635] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4065'. [ 947.390152][T18629] netlink: 'syz.0.4064': attribute type 10 has an invalid length. [ 947.454820][T18629] team0: Device vxcan1 is of different type [ 947.619679][T18637] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4066'. [ 948.162104][T18655] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4073'. [ 948.336785][T18658] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4077'. [ 948.356159][T18662] netlink: 'syz.3.4076': attribute type 2 has an invalid length. [ 948.370539][T18662] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4076'. [ 948.529621][T18665] netlink: 'syz.0.4078': attribute type 2 has an invalid length. [ 949.110707][T18679] netlink: 'syz.1.4082': attribute type 3 has an invalid length. [ 949.127268][T18684] syzkaller0: entered promiscuous mode [ 949.140297][T18684] syzkaller0: entered allmulticast mode [ 949.221575][T18686] netlink: 'syz.1.4082': attribute type 10 has an invalid length. [ 949.234990][T18686] team0: Device vxcan1 is of different type [ 949.380112][T18691] netlink: 'syz.3.4088': attribute type 2 has an invalid length. [ 950.119166][T18705] team0: Device vxcan1 is of different type [ 951.491363][T18729] __nla_validate_parse: 9 callbacks suppressed [ 951.491384][T18729] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4103'. [ 951.824472][T18738] validate_nla: 6 callbacks suppressed [ 951.824497][T18738] netlink: 'syz.1.4114': attribute type 2 has an invalid length. [ 951.863853][T18738] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4114'. [ 952.088203][T18742] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4107'. [ 952.350385][T18746] netlink: 'syz.0.4109': attribute type 3 has an invalid length. [ 952.360171][T18746] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4109'. [ 952.417707][T18751] netlink: 'syz.3.4111': attribute type 10 has an invalid length. [ 952.440361][T18751] team0: Device bridge0 is already an upper device of the team interface [ 952.488578][T18746] netlink: 'syz.0.4109': attribute type 10 has an invalid length. [ 952.520059][T18746] team0: Device vxcan1 is of different type [ 952.591537][T18752] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4110'. [ 953.172895][T18766] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4116'. [ 953.357829][T18770] netlink: 'syz.0.4117': attribute type 3 has an invalid length. [ 953.367092][T18770] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4117'. [ 953.482655][T18770] netlink: 'syz.0.4117': attribute type 10 has an invalid length. [ 953.501381][T18776] netlink: 'syz.3.4118': attribute type 2 has an invalid length. [ 953.501418][T18776] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4118'. [ 953.576135][T18770] team0: Device vxcan1 is of different type [ 953.634458][T18774] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4119'. [ 953.693951][T18778] netlink: 'syz.2.4120': attribute type 2 has an invalid length. [ 953.707200][T18778] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4120'. [ 953.850513][T18782] netlink: 'syz.3.4122': attribute type 10 has an invalid length. [ 953.859053][T18782] team0: Device bridge0 is already an upper device of the team interface [ 954.332157][T18796] netlink: 'syz.0.4127': attribute type 2 has an invalid length. [ 955.728457][T18821] team0: Device vxcan1 is of different type [ 956.885188][T18835] __nla_validate_parse: 9 callbacks suppressed [ 956.885225][T18835] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4143'. [ 957.091177][T18844] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4147'. [ 957.237276][T18847] validate_nla: 7 callbacks suppressed [ 957.237313][T18847] netlink: 'syz.2.4148': attribute type 10 has an invalid length. [ 957.636022][T18850] netlink: 'syz.0.4149': attribute type 3 has an invalid length. [ 957.729460][T18850] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4149'. [ 957.855507][T18852] netlink: 'syz.0.4149': attribute type 10 has an invalid length. [ 957.888110][T18852] team0: Device vxcan1 is of different type [ 957.978630][T18854] netlink: 'syz.3.4150': attribute type 2 has an invalid length. [ 958.043100][T18854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4150'. [ 958.821656][T18861] netlink: 'syz.3.4152': attribute type 10 has an invalid length. [ 958.833164][T18861] team0: Device bridge0 is already an upper device of the team interface [ 959.145342][T18868] netlink: 'syz.0.4155': attribute type 2 has an invalid length. [ 959.158984][T18868] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4155'. [ 959.447468][T18870] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4157'. [ 959.468691][T18873] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4156'. [ 959.494945][T18874] netlink: 'syz.0.4164': attribute type 2 has an invalid length. [ 959.517606][T18874] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4164'. [ 959.665403][T18880] netlink: 'syz.3.4160': attribute type 2 has an invalid length. [ 959.673722][T18880] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4160'. [ 959.744759][T18881] netlink: 'syz.1.4159': attribute type 10 has an invalid length. [ 962.417351][T18895] netlink: 'syz.0.4165': attribute type 3 has an invalid length. [ 962.435154][T18895] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4165'. [ 962.455283][T18900] netlink: 'syz.0.4165': attribute type 10 has an invalid length. [ 962.484790][T18900] team0: Device hsr_slave_0 failed to register rx_handler [ 962.738701][T18906] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4169'. [ 962.803866][T18912] netlink: 'syz.2.4171': attribute type 2 has an invalid length. [ 962.812141][T18912] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4171'. [ 962.895823][T18914] netlink: 'syz.3.4172': attribute type 2 has an invalid length. [ 962.908225][T18914] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4172'. [ 963.063847][T18918] netlink: 'syz.0.4173': attribute type 10 has an invalid length. [ 964.212536][T18936] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4180'. [ 964.396169][T18943] netlink: 'syz.3.4182': attribute type 2 has an invalid length. [ 964.404904][T18943] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4182'. [ 964.440661][T18945] netlink: 'syz.2.4183': attribute type 2 has an invalid length. [ 964.454776][T18945] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4183'. [ 964.588524][T13095] Bluetooth: hci0: ACL packet too small [ 964.595081][T18947] netlink: 'syz.0.4184': attribute type 12 has an invalid length. [ 964.603618][T18947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4184'. [ 964.720819][T18947] IPv6: Can't replace route, no match found [ 965.088572][T18961] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4190'. [ 965.359991][T18967] netlink: 'syz.2.4193': attribute type 2 has an invalid length. [ 965.393397][T18967] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4193'. [ 965.437618][T18971] netlink: 'syz.3.4194': attribute type 2 has an invalid length. [ 966.212231][T18987] FAULT_INJECTION: forcing a failure. [ 966.212231][T18987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.225615][T18987] CPU: 0 PID: 18987 Comm: syz.3.4199 Not tainted syzkaller #0 [ 966.233121][T18987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 966.243224][T18987] Call Trace: [ 966.246542][T18987] [ 966.249512][T18987] dump_stack_lvl+0x18c/0x250 [ 966.254265][T18987] ? show_regs_print_info+0x20/0x20 [ 966.259530][T18987] ? load_image+0x420/0x420 [ 966.264118][T18987] ? __might_fault+0xaa/0x120 [ 966.268849][T18987] ? __lock_acquire+0x7d40/0x7d40 [ 966.273932][T18987] should_fail_ex+0x39d/0x4d0 [ 966.278702][T18987] _copy_from_user+0x2f/0xe0 [ 966.283352][T18987] ___sys_recvmsg+0x176/0x590 [ 966.288090][T18987] ? __sys_recvmsg+0x2a0/0x2a0 [ 966.292908][T18987] ? ksys_write+0x1c4/0x260 [ 966.297495][T18987] ? __fget_files+0x43d/0x4b0 [ 966.302237][T18987] __x64_sys_recvmsg+0x20c/0x2e0 [ 966.307225][T18987] ? ___sys_recvmsg+0x590/0x590 [ 966.312133][T18987] ? lockdep_hardirqs_on+0x98/0x150 [ 966.317372][T18987] do_syscall_64+0x55/0xb0 [ 966.321817][T18987] ? clear_bhb_loop+0x40/0x90 [ 966.326522][T18987] ? clear_bhb_loop+0x40/0x90 [ 966.331239][T18987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.337180][T18987] RIP: 0033:0x7f402759ce59 [ 966.341654][T18987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.361315][T18987] RSP: 002b:00007f40257f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 966.369765][T18987] RAX: ffffffffffffffda RBX: 00007f4027815fa0 RCX: 00007f402759ce59 [ 966.377851][T18987] RDX: 0000000000002040 RSI: 0000200000000400 RDI: 0000000000000004 [ 966.385848][T18987] RBP: 00007f40257f6090 R08: 0000000000000000 R09: 0000000000000000 [ 966.393841][T18987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.401834][T18987] R13: 00007f4027816038 R14: 00007f4027815fa0 R15: 00007ffc5456fcb8 [ 966.409856][T18987] [ 966.781173][T18997] team0: Device vxcan1 is of different type [ 967.165656][T19004] team0: Device vxcan1 is of different type [ 967.844493][T19008] validate_nla: 5 callbacks suppressed [ 967.844600][T19008] netlink: 'syz.1.4207': attribute type 3 has an invalid length. [ 967.865460][T19008] __nla_validate_parse: 4 callbacks suppressed [ 967.865603][T19008] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4207'. [ 967.974719][T19008] netlink: 'syz.1.4207': attribute type 10 has an invalid length. [ 968.037561][T19008] team0: Device vxcan1 is of different type [ 968.172640][T19015] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4210'. [ 968.357984][T19020] FAULT_INJECTION: forcing a failure. [ 968.357984][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 968.371401][T19020] CPU: 0 PID: 19020 Comm: syz.2.4212 Not tainted syzkaller #0 [ 968.378956][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 968.389088][T19020] Call Trace: [ 968.392452][T19020] [ 968.395447][T19020] dump_stack_lvl+0x18c/0x250 [ 968.400227][T19020] ? show_regs_print_info+0x20/0x20 [ 968.405513][T19020] ? load_image+0x420/0x420 [ 968.410130][T19020] ? __might_sleep+0xe0/0xe0 [ 968.414818][T19020] ? __lock_acquire+0x7d40/0x7d40 [ 968.419930][T19020] should_fail_ex+0x39d/0x4d0 [ 968.424676][T19020] should_failslab+0x9/0x20 [ 968.429230][T19020] slab_pre_alloc_hook+0x59/0x310 [ 968.434310][T19020] ? trace_event_raw_event_lock+0x250/0x250 [ 968.440268][T19020] ? ip_options_get+0x52/0x4a0 [ 968.445112][T19020] ? ip_options_get+0x52/0x4a0 [ 968.449922][T19020] __kmem_cache_alloc_node+0x53/0x250 [ 968.455518][T19020] ? tomoyo_profile+0x50/0x50 [ 968.460265][T19020] ? ip_options_get+0x52/0x4a0 [ 968.465094][T19020] __kmalloc+0xa4/0x230 [ 968.469316][T19020] ip_options_get+0x52/0x4a0 [ 968.473985][T19020] ? tomoyo_check_inet_address+0x287/0x930 [ 968.479850][T19020] ip_cmsg_send+0x591/0xa70 [ 968.484477][T19020] raw_sendmsg+0x55f/0x1c00 [ 968.489057][T19020] ? __might_sleep+0xe0/0xe0 [ 968.493721][T19020] ? compat_raw_ioctl+0x70/0x70 [ 968.498703][T19020] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 968.505196][T19020] ? sock_rps_record_flow+0x19/0x3f0 [ 968.510575][T19020] ? inet_sendmsg+0x7c/0x2f0 [ 968.515205][T19020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 968.520543][T19020] ? security_socket_sendmsg+0x80/0xa0 [ 968.526062][T19020] ? inet_send_prepare+0x260/0x260 [ 968.531233][T19020] ____sys_sendmsg+0x5ba/0x960 [ 968.536042][T19020] ? __lock_acquire+0x7d40/0x7d40 [ 968.541244][T19020] ? __sys_sendmsg_sock+0x30/0x30 [ 968.546315][T19020] ? __import_iovec+0x3fa/0x850 [ 968.551234][T19020] ? import_iovec+0x73/0xa0 [ 968.555810][T19020] ___sys_sendmsg+0x2a6/0x360 [ 968.560568][T19020] ? __sys_sendmsg+0x2a0/0x2a0 [ 968.565447][T19020] ? trace_call_bpf+0xc3/0x6c0 [ 968.570339][T19020] __se_sys_sendmsg+0x1c2/0x2b0 [ 968.575245][T19020] ? __x64_sys_sendmsg+0x80/0x80 [ 968.580270][T19020] ? lockdep_hardirqs_on+0x98/0x150 [ 968.585542][T19020] do_syscall_64+0x55/0xb0 [ 968.590013][T19020] ? clear_bhb_loop+0x40/0x90 [ 968.594737][T19020] ? clear_bhb_loop+0x40/0x90 [ 968.599462][T19020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.605413][T19020] RIP: 0033:0x7fae0179ce59 [ 968.609882][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.629535][T19020] RSP: 002b:00007fae0269c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 968.638008][T19020] RAX: ffffffffffffffda RBX: 00007fae01a15fa0 RCX: 00007fae0179ce59 [ 968.646032][T19020] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 968.654044][T19020] RBP: 00007fae0269c090 R08: 0000000000000000 R09: 0000000000000000 [ 968.662058][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.670072][T19020] R13: 00007fae01a16038 R14: 00007fae01a15fa0 R15: 00007ffc6c1570e8 [ 968.678184][T19020] [ 968.786275][T19023] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4213'. [ 968.859698][T19025] netlink: 'syz.1.4214': attribute type 10 has an invalid length. [ 969.172125][T19033] netlink: 'syz.0.4216': attribute type 3 has an invalid length. [ 969.183078][T19033] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4216'. [ 969.261909][T19033] netlink: 'syz.0.4216': attribute type 10 has an invalid length. [ 969.289435][T19033] team0: Device vxcan1 is of different type [ 969.376002][T19040] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4220'. [ 969.519690][T19043] netlink: 'syz.2.4222': attribute type 10 has an invalid length. [ 969.665314][T19046] netlink: 'syz.3.4223': attribute type 3 has an invalid length. [ 969.695060][T19046] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4223'. [ 969.743088][T19049] netlink: 'syz.3.4223': attribute type 10 has an invalid length. [ 969.753734][T19049] team0: Device vxcan1 is of different type [ 969.787485][T19051] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4224'. [ 970.281271][T19060] netlink: 'syz.0.4228': attribute type 10 has an invalid length. [ 970.638056][T19066] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4231'. [ 971.070563][T19073] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4234'. [ 971.140766][T19077] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4236'. [ 971.370131][T19082] netlink: 'syz.3.4238': attribute type 2 has an invalid length. [ 972.382291][T19113] FAULT_INJECTION: forcing a failure. [ 972.382291][T19113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 972.413194][T19113] CPU: 1 PID: 19113 Comm: syz.1.4251 Not tainted syzkaller #0 [ 972.420791][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 972.430893][T19113] Call Trace: [ 972.434203][T19113] [ 972.437166][T19113] dump_stack_lvl+0x18c/0x250 [ 972.441891][T19113] ? show_regs_print_info+0x20/0x20 [ 972.447115][T19113] ? load_image+0x420/0x420 [ 972.451644][T19113] ? __lock_acquire+0x7d40/0x7d40 [ 972.456697][T19113] should_fail_ex+0x39d/0x4d0 [ 972.461416][T19113] prepare_alloc_pages+0x1e2/0x5f0 [ 972.466552][T19113] __alloc_pages+0x134/0x460 [ 972.471181][T19113] ? zone_statistics+0x170/0x170 [ 972.476150][T19113] ? alloc_pages+0x4dc/0x740 [ 972.480813][T19113] ? do_raw_spin_unlock+0x121/0x230 [ 972.486057][T19113] __get_free_pages+0xc/0x30 [ 972.490690][T19113] kasan_populate_vmalloc_pte+0x35/0x100 [ 972.496361][T19113] __apply_to_page_range+0x860/0xdd0 [ 972.501689][T19113] ? kasan_populate_vmalloc+0x70/0x70 [ 972.507093][T19113] ? apply_to_page_range+0x50/0x50 [ 972.512233][T19113] ? do_raw_spin_unlock+0x121/0x230 [ 972.517556][T19113] alloc_vmap_area+0x1d0c/0x1e30 [ 972.522590][T19113] ? vm_map_ram+0xcb0/0xcb0 [ 972.527134][T19113] ? rcu_is_watching+0x15/0xb0 [ 972.531969][T19113] __get_vm_area_node+0x162/0x370 [ 972.537030][T19113] __vmalloc_node_range+0x36e/0x1330 [ 972.542381][T19113] ? array_map_alloc+0x280/0x6f0 [ 972.547423][T19113] ? verify_lock_unused+0x140/0x140 [ 972.552690][T19113] ? end_current_label_crit_section+0x170/0x170 [ 972.558974][T19113] ? free_vm_area+0x50/0x50 [ 972.563522][T19113] ? bpf_lsm_capable+0x9/0x10 [ 972.568249][T19113] bpf_map_area_alloc+0xf1/0x110 [ 972.573229][T19113] ? array_map_alloc+0x280/0x6f0 [ 972.578201][T19113] array_map_alloc+0x280/0x6f0 [ 972.583017][T19113] map_create+0x877/0x12f0 [ 972.587459][T19113] ? bpf_lsm_bpf+0x9/0x10 [ 972.591823][T19113] __sys_bpf+0x651/0x890 [ 972.596088][T19113] ? bpf_link_show_fdinfo+0x390/0x390 [ 972.601507][T19113] ? lock_chain_count+0x20/0x20 [ 972.606393][T19113] __x64_sys_bpf+0x7c/0x90 [ 972.610830][T19113] do_syscall_64+0x55/0xb0 [ 972.615274][T19113] ? clear_bhb_loop+0x40/0x90 [ 972.619981][T19113] ? clear_bhb_loop+0x40/0x90 [ 972.624685][T19113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.630654][T19113] RIP: 0033:0x7fc00999ce59 [ 972.635107][T19113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.654753][T19113] RSP: 002b:00007fc00a811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 972.663198][T19113] RAX: ffffffffffffffda RBX: 00007fc009c15fa0 RCX: 00007fc00999ce59 [ 972.671200][T19113] RDX: 0000000000000050 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 972.679202][T19113] RBP: 00007fc00a811090 R08: 0000000000000000 R09: 0000000000000000 [ 972.687725][T19113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.695721][T19113] R13: 00007fc009c16038 R14: 00007fc009c15fa0 R15: 00007ffdf0c53e38 [ 972.703742][T19113] [ 972.862723][T19118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.104291][T19127] validate_nla: 5 callbacks suppressed [ 973.104333][T19127] netlink: 'syz.3.4257': attribute type 10 has an invalid length. [ 973.133694][T19127] team0: Device bridge0 is already an upper device of the team interface [ 973.242212][T19133] __nla_validate_parse: 9 callbacks suppressed [ 973.242274][T19133] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4258'. [ 973.482552][T19135] netlink: 'syz.0.4259': attribute type 3 has an invalid length. [ 973.491593][T19135] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4259'. [ 973.523052][T19140] netlink: 'syz.1.4261': attribute type 2 has an invalid length. [ 973.531078][T19140] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4261'. [ 973.577216][T19135] netlink: 'syz.0.4259': attribute type 10 has an invalid length. [ 973.589939][T19142] FAULT_INJECTION: forcing a failure. [ 973.589939][T19142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 973.603893][T19142] CPU: 0 PID: 19142 Comm: syz.3.4262 Not tainted syzkaller #0 [ 973.611413][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 973.621526][T19142] Call Trace: [ 973.624851][T19142] [ 973.627838][T19142] dump_stack_lvl+0x18c/0x250 [ 973.632588][T19142] ? show_regs_print_info+0x20/0x20 [ 973.637853][T19142] ? load_image+0x420/0x420 [ 973.642402][T19142] ? __lock_acquire+0x7d40/0x7d40 [ 973.647479][T19142] should_fail_ex+0x39d/0x4d0 [ 973.652200][T19142] prepare_alloc_pages+0x1e2/0x5f0 [ 973.657351][T19142] __alloc_pages+0x134/0x460 [ 973.661968][T19142] ? zone_statistics+0x170/0x170 [ 973.666945][T19142] ? alloc_pages+0x4dc/0x740 [ 973.671565][T19142] ? do_raw_spin_unlock+0x121/0x230 [ 973.676798][T19142] __get_free_pages+0xc/0x30 [ 973.681415][T19142] kasan_populate_vmalloc_pte+0x35/0x100 [ 973.687085][T19142] __apply_to_page_range+0x860/0xdd0 [ 973.692423][T19142] ? kasan_populate_vmalloc+0x70/0x70 [ 973.697924][T19142] ? apply_to_page_range+0x50/0x50 [ 973.703080][T19142] ? do_raw_spin_unlock+0x121/0x230 [ 973.708314][T19142] alloc_vmap_area+0x1d0c/0x1e30 [ 973.713297][T19142] ? vm_map_ram+0xcb0/0xcb0 [ 973.717830][T19142] ? rcu_is_watching+0x15/0xb0 [ 973.722628][T19142] __get_vm_area_node+0x162/0x370 [ 973.727685][T19142] __vmalloc_node_range+0x36e/0x1330 [ 973.733002][T19142] ? array_map_alloc+0x280/0x6f0 [ 973.737969][T19142] ? verify_lock_unused+0x140/0x140 [ 973.743207][T19142] ? end_current_label_crit_section+0x170/0x170 [ 973.749482][T19142] ? free_vm_area+0x50/0x50 [ 973.754030][T19142] ? bpf_lsm_capable+0x9/0x10 [ 973.758754][T19142] bpf_map_area_alloc+0xf1/0x110 [ 973.763724][T19142] ? array_map_alloc+0x280/0x6f0 [ 973.768688][T19142] array_map_alloc+0x280/0x6f0 [ 973.773496][T19142] map_create+0x877/0x12f0 [ 973.777941][T19142] ? bpf_lsm_bpf+0x9/0x10 [ 973.782321][T19142] __sys_bpf+0x651/0x890 [ 973.786620][T19142] ? bpf_link_show_fdinfo+0x390/0x390 [ 973.792026][T19142] ? lock_chain_count+0x20/0x20 [ 973.796916][T19142] __x64_sys_bpf+0x7c/0x90 [ 973.801374][T19142] do_syscall_64+0x55/0xb0 [ 973.805825][T19142] ? clear_bhb_loop+0x40/0x90 [ 973.810524][T19142] ? clear_bhb_loop+0x40/0x90 [ 973.815226][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.821153][T19142] RIP: 0033:0x7f402759ce59 [ 973.825593][T19142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.845317][T19142] RSP: 002b:00007f40257f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.853848][T19142] RAX: ffffffffffffffda RBX: 00007f4027815fa0 RCX: 00007f402759ce59 [ 973.861852][T19142] RDX: 0000000000000050 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 973.869947][T19142] RBP: 00007f40257f6090 R08: 0000000000000000 R09: 0000000000000000 [ 973.877953][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.885963][T19142] R13: 00007f4027816038 R14: 00007f4027815fa0 R15: 00007ffc5456fcb8 [ 973.894004][T19142] [ 973.905821][T19135] team0: Device vxcan1 is of different type [ 974.157842][T19148] netlink: 'syz.3.4264': attribute type 2 has an invalid length. [ 974.183103][T19148] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4264'. [ 974.330077][T19151] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 974.344122][T19151] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4266'. [ 974.427804][T19155] netlink: 'syz.1.4266': attribute type 10 has an invalid length. [ 974.456937][T19155] team0: Device vxcan1 is of different type [ 974.528838][T19157] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4268'. [ 974.551845][T19158] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4269'. [ 974.646784][T19160] netlink: 'syz.3.4270': attribute type 10 has an invalid length. [ 974.670861][T19160] team0: Device bridge0 is already an upper device of the team interface [ 974.996692][T19164] netlink: 'syz.0.4271': attribute type 3 has an invalid length. [ 975.006443][T19164] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4271'. [ 975.052076][T19169] FAULT_INJECTION: forcing a failure. [ 975.052076][T19169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.070290][T19169] CPU: 0 PID: 19169 Comm: syz.2.4273 Not tainted syzkaller #0 [ 975.077937][T19169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 975.085891][T19164] netlink: 'syz.0.4271': attribute type 10 has an invalid length. [ 975.088020][T19169] Call Trace: [ 975.099302][T19169] [ 975.102285][T19169] dump_stack_lvl+0x18c/0x250 [ 975.107013][T19169] ? show_regs_print_info+0x20/0x20 [ 975.112273][T19169] ? load_image+0x420/0x420 [ 975.116821][T19169] ? __lock_acquire+0x7d40/0x7d40 [ 975.121916][T19169] ? snprintf+0xe9/0x140 [ 975.126218][T19169] should_fail_ex+0x39d/0x4d0 [ 975.130949][T19169] _copy_to_user+0x2f/0xa0 [ 975.135414][T19169] simple_read_from_buffer+0xe7/0x150 [ 975.140855][T19169] proc_fail_nth_read+0x1e8/0x260 [ 975.145933][T19169] ? proc_fault_inject_write+0x360/0x360 [ 975.151611][T19169] ? fsnotify_perm+0x271/0x5e0 [ 975.156407][T19169] ? proc_fault_inject_write+0x360/0x360 [ 975.162077][T19169] vfs_read+0x28b/0x970 [ 975.166277][T19169] ? kernel_read+0x1e0/0x1e0 [ 975.170906][T19169] ? __fget_files+0x28/0x4b0 [ 975.175530][T19169] ? __fget_files+0x28/0x4b0 [ 975.180162][T19169] ? __fget_files+0x43d/0x4b0 [ 975.184901][T19169] ? __fdget_pos+0x2a3/0x330 [ 975.189556][T19169] ? ksys_read+0x75/0x260 [ 975.193935][T19169] ksys_read+0x150/0x260 [ 975.198231][T19169] ? vfs_write+0x990/0x990 [ 975.202702][T19169] ? lockdep_hardirqs_on+0x98/0x150 [ 975.207942][T19169] do_syscall_64+0x55/0xb0 [ 975.212394][T19169] ? clear_bhb_loop+0x40/0x90 [ 975.217115][T19169] ? clear_bhb_loop+0x40/0x90 [ 975.221853][T19169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 975.227800][T19169] RIP: 0033:0x7fae0175d68e [ 975.232259][T19169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 975.242178][T19164] team0: Device vxcan1 is of different type [ 975.251903][T19169] RSP: 002b:00007fae0269bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 975.251931][T19169] RAX: ffffffffffffffda RBX: 00007fae0269c6c0 RCX: 00007fae0175d68e [ 975.251946][T19169] RDX: 000000000000000f RSI: 00007fae0269c0a0 RDI: 0000000000000004 [ 975.251959][T19169] RBP: 00007fae0269c090 R08: 0000000000000000 R09: 0000000000000000 [ 975.251972][T19169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.251984][T19169] R13: 00007fae01a16038 R14: 00007fae01a15fa0 R15: 00007ffc6c1570e8 [ 975.252014][T19169] [ 975.484660][T19175] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4274'. [ 975.607177][T19181] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4278'. [ 976.048473][T19194] FAULT_INJECTION: forcing a failure. [ 976.048473][T19194] name failslab, interval 1, probability 0, space 0, times 0 [ 976.062101][T19194] CPU: 1 PID: 19194 Comm: syz.2.4283 Not tainted syzkaller #0 [ 976.069648][T19194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 976.079793][T19194] Call Trace: [ 976.083120][T19194] [ 976.086082][T19194] dump_stack_lvl+0x18c/0x250 [ 976.090807][T19194] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 976.096920][T19194] ? show_regs_print_info+0x20/0x20 [ 976.102148][T19194] ? load_image+0x420/0x420 [ 976.106687][T19194] ? mark_lock+0x94/0x320 [ 976.111065][T19194] should_fail_ex+0x39d/0x4d0 [ 976.115798][T19194] should_failslab+0x9/0x20 [ 976.120355][T19194] slab_pre_alloc_hook+0x59/0x310 [ 976.125446][T19194] kmem_cache_alloc+0x5a/0x2d0 [ 976.130251][T19194] ? inet_getpeer+0xbee/0x14f0 [ 976.135056][T19194] inet_getpeer+0xbee/0x14f0 [ 976.139707][T19194] ? verify_lock_unused+0x140/0x140 [ 976.144967][T19194] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 976.150643][T19194] ? ipv6_addr_label+0x31/0x1e0 [ 976.155533][T19194] ? icmpv6_xrlim_allow+0x43d/0x620 [ 976.160768][T19194] ? inet_peer_base_init+0x110/0x110 [ 976.166231][T19194] ? icmpv6_xrlim_allow+0x432/0x620 [ 976.171466][T19194] icmpv6_xrlim_allow+0x43d/0x620 [ 976.176526][T19194] ? icmpv6_xrlim_allow+0x318/0x620 [ 976.181758][T19194] ? dev_put+0x70/0x70 [ 976.185856][T19194] ? dev_get_by_index+0x22/0x2d0 [ 976.190835][T19194] ? dev_get_by_index+0x22/0x2d0 [ 976.195815][T19194] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 976.201577][T19194] icmp6_send+0x103f/0x1b40 [ 976.206111][T19194] ? trace_call_bpf+0xc3/0x6c0 [ 976.211007][T19194] ? icmp6_send+0x233/0x1b40 [ 976.215649][T19194] ? icmpv6_push_pending_frames+0x400/0x400 [ 976.221581][T19194] ? ip6_neigh_lookup+0x14b/0x480 [ 976.226672][T19194] ? ip6_neigh_lookup+0x14b/0x480 [ 976.231747][T19194] ? rt6_uncached_list_del+0x150/0x150 [ 976.237246][T19194] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 976.243282][T19194] ip6_link_failure+0x3b/0x4c0 [ 976.248102][T19194] ip_tunnel_xmit+0x1728/0x2410 [ 976.252994][T19194] ? kasan_quarantine_put+0xd8/0x220 [ 976.258329][T19194] ? ip_tunnel_xmit+0x110/0x2410 [ 976.263360][T19194] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 976.268462][T19194] ? gre_build_header+0x25b/0x990 [ 976.273531][T19194] gre_tap_xmit+0x4fe/0x6f0 [ 976.278078][T19194] dev_hard_start_xmit+0x246/0x740 [ 976.283244][T19194] sch_direct_xmit+0x25e/0x4c0 [ 976.288065][T19194] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 976.294095][T19194] __dev_queue_xmit+0x165d/0x3660 [ 976.299173][T19194] ? __dev_queue_xmit+0x265/0x3660 [ 976.304324][T19194] ? lockdep_hardirqs_on+0x98/0x150 [ 976.309558][T19194] ? read_seqbegin+0x1c8/0x270 [ 976.314362][T19194] ? lockdep_hardirqs_on+0x98/0x150 [ 976.319597][T19194] ? neigh_event_send+0x110/0x110 [ 976.324664][T19194] ? netdev_core_pick_tx+0x340/0x340 [ 976.329995][T19194] ? __asan_memcpy+0x40/0x70 [ 976.334629][T19194] ? eth_header+0x11b/0x200 [ 976.339196][T19194] ? llc_sysctl_exit+0x70/0x70 [ 976.343989][T19194] ? neigh_resolve_output+0x618/0x730 [ 976.349416][T19194] ip6_finish_output2+0xe3d/0x1630 [ 976.354657][T19194] ? ip6_finish_output2+0x645/0x1630 [ 976.360054][T19194] ? ip6_mtu+0x7d/0x3f0 [ 976.364244][T19194] ? nf_hook+0x390/0x390 [ 976.368531][T19194] ? ip6_finish_output+0x57b/0x820 [ 976.373701][T19194] rawv6_send_hdrinc+0xd9e/0x1640 [ 976.378772][T19194] ? txopt_get+0x3f0/0x3f0 [ 976.383216][T19194] ? txopt_get+0x344/0x3f0 [ 976.387657][T19194] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 976.393487][T19194] ? fl6_sock_lookup+0xc0/0xc0 [ 976.398290][T19194] rawv6_sendmsg+0x12cc/0x1770 [ 976.403114][T19194] ? compat_rawv6_ioctl+0x70/0x70 [ 976.408185][T19194] ? aa_sk_perm+0x83c/0x970 [ 976.412727][T19194] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 976.419182][T19194] ? inet_sendmsg+0x7c/0x2f0 [ 976.423839][T19194] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 976.429158][T19194] ? security_socket_sendmsg+0x80/0xa0 [ 976.434653][T19194] ? inet_send_prepare+0x260/0x260 [ 976.439805][T19194] ____sys_sendmsg+0x5ba/0x960 [ 976.444602][T19194] ? __lock_acquire+0x7d40/0x7d40 [ 976.449670][T19194] ? __asan_memset+0x22/0x40 [ 976.454312][T19194] ? __sys_sendmsg_sock+0x30/0x30 [ 976.459391][T19194] ? __import_iovec+0x5f2/0x850 [ 976.464287][T19194] ? import_iovec+0x73/0xa0 [ 976.468816][T19194] ___sys_sendmsg+0x2a6/0x360 [ 976.473529][T19194] ? __sys_sendmsg+0x2a0/0x2a0 [ 976.478343][T19194] ? trace_call_bpf+0xc3/0x6c0 [ 976.483161][T19194] __se_sys_sendmsg+0x1c2/0x2b0 [ 976.488056][T19194] ? __x64_sys_sendmsg+0x80/0x80 [ 976.493041][T19194] ? lockdep_hardirqs_on+0x98/0x150 [ 976.498295][T19194] do_syscall_64+0x55/0xb0 [ 976.502735][T19194] ? clear_bhb_loop+0x40/0x90 [ 976.507429][T19194] ? clear_bhb_loop+0x40/0x90 [ 976.512126][T19194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.518051][T19194] RIP: 0033:0x7fae0179ce59 [ 976.522511][T19194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.542153][T19194] RSP: 002b:00007fae0267b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.550602][T19194] RAX: ffffffffffffffda RBX: 00007fae01a16090 RCX: 00007fae0179ce59 [ 976.558598][T19194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 976.566598][T19194] RBP: 00007fae0267b090 R08: 0000000000000000 R09: 0000000000000000 [ 976.574600][T19194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.582589][T19194] R13: 00007fae01a16128 R14: 00007fae01a16090 R15: 00007ffc6c1570e8 [ 976.590605][T19194] [ 976.748180][T19195] team0: Device vxcan1 is of different type [ 977.002633][T19203] FAULT_INJECTION: forcing a failure. [ 977.002633][T19203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.042419][T19203] CPU: 1 PID: 19203 Comm: syz.3.4286 Not tainted syzkaller #0 [ 977.050109][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.060300][T19203] Call Trace: [ 977.063690][T19203] [ 977.066727][T19203] dump_stack_lvl+0x18c/0x250 [ 977.071566][T19203] ? show_regs_print_info+0x20/0x20 [ 977.076897][T19203] ? load_image+0x420/0x420 [ 977.081558][T19203] ? __lock_acquire+0x7d40/0x7d40 [ 977.086771][T19203] should_fail_ex+0x39d/0x4d0 [ 977.091634][T19203] _copy_from_user+0x2f/0xe0 [ 977.096360][T19203] __copy_msghdr+0x3bb/0x580 [ 977.101094][T19203] ___sys_sendmsg+0x214/0x360 [ 977.105956][T19203] ? __sys_sendmsg+0x2a0/0x2a0 [ 977.110978][T19203] ? __lock_acquire+0x7d40/0x7d40 [ 977.116305][T19203] __se_sys_sendmsg+0x1c2/0x2b0 [ 977.121307][T19203] ? __x64_sys_sendmsg+0x80/0x80 [ 977.126469][T19203] ? lockdep_hardirqs_on+0x98/0x150 [ 977.131823][T19203] do_syscall_64+0x55/0xb0 [ 977.136353][T19203] ? clear_bhb_loop+0x40/0x90 [ 977.141135][T19203] ? clear_bhb_loop+0x40/0x90 [ 977.145945][T19203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.151954][T19203] RIP: 0033:0x7f402759ce59 [ 977.156496][T19203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.176222][T19203] RSP: 002b:00007f40257f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.184773][T19203] RAX: ffffffffffffffda RBX: 00007f4027815fa0 RCX: 00007f402759ce59 [ 977.192958][T19203] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 977.201042][T19203] RBP: 00007f40257f6090 R08: 0000000000000000 R09: 0000000000000000 [ 977.209123][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.217223][T19203] R13: 00007f4027816038 R14: 00007f4027815fa0 R15: 00007ffc5456fcb8 [ 977.225414][T19203] [ 977.378256][T19201] team0: Device vxcan1 is of different type [ 978.092096][T19229] wg1: entered promiscuous mode [ 978.101013][T19229] wg1: entered allmulticast mode [ 978.231816][T19233] validate_nla: 9 callbacks suppressed [ 978.231833][T19233] netlink: 'syz.2.4302': attribute type 2 has an invalid length. [ 978.262969][T19233] __nla_validate_parse: 6 callbacks suppressed [ 978.262993][T19233] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4302'. [ 978.569081][T19245] netlink: 'syz.2.4306': attribute type 10 has an invalid length. [ 978.672408][T19248] netlink: 'syz.1.4308': attribute type 3 has an invalid length. [ 978.681680][T19248] netlink: 'syz.1.4308': attribute type 8 has an invalid length. [ 978.690175][T19248] netlink: 'syz.1.4308': attribute type 6 has an invalid length. [ 978.698739][T19248] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.4308'. [ 978.984348][T19254] netlink: 'syz.2.4311': attribute type 2 has an invalid length. [ 978.993579][T19254] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4311'. [ 979.067523][T19256] netlink: 'syz.1.4312': attribute type 13 has an invalid length. [ 979.076826][T19256] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4312'. [ 979.098966][T19256] erspan0: refused to change device tx_queue_len [ 979.110229][T19256] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 979.226322][T19262] netlink: 'syz.2.4315': attribute type 2 has an invalid length. [ 979.263042][T19262] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4315'. [ 979.410099][T19266] netlink: 'syz.0.4316': attribute type 3 has an invalid length. [ 979.433197][T19266] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4316'. [ 979.543633][T19266] netlink: 'syz.0.4316': attribute type 10 has an invalid length. [ 979.590171][T19266] team0: Device vxcan1 is of different type [ 980.161057][T19287] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4324'. [ 980.442303][T19295] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4328'. [ 980.568527][T19299] syzkaller0: entered promiscuous mode [ 980.595565][T19299] syzkaller0: entered allmulticast mode [ 980.596498][T19307] FAULT_INJECTION: forcing a failure. [ 980.596498][T19307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.650195][T19300] team0: Device vxcan1 is of different type [ 980.653843][T19307] CPU: 1 PID: 19307 Comm: syz.0.4330 Not tainted syzkaller #0 [ 980.663791][T19307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 980.673915][T19307] Call Trace: [ 980.677250][T19307] [ 980.680236][T19307] dump_stack_lvl+0x18c/0x250 [ 980.685001][T19307] ? show_regs_print_info+0x20/0x20 [ 980.690284][T19307] ? load_image+0x420/0x420 [ 980.694852][T19307] ? __might_fault+0xaa/0x120 [ 980.699609][T19307] ? __lock_acquire+0x7d40/0x7d40 [ 980.704698][T19307] ? __might_fault+0xaa/0x120 [ 980.709446][T19307] should_fail_ex+0x39d/0x4d0 [ 980.714195][T19307] _copy_from_iter+0x1d9/0x12e0 [ 980.719098][T19307] ? __might_fault+0xaa/0x120 [ 980.723832][T19307] ? _copy_from_iter+0x24e/0x12e0 [ 980.728928][T19307] ? __virt_addr_valid+0x18c/0x540 [ 980.734116][T19307] ? __lock_acquire+0x7d40/0x7d40 [ 980.739215][T19307] ? copyout_mc+0x70/0x70 [ 980.743618][T19307] ? copyout_mc+0x70/0x70 [ 980.748142][T19307] ? __virt_addr_valid+0x18c/0x540 [ 980.753336][T19307] ? page_copy_sane+0x16a/0x270 [ 980.758258][T19307] copy_page_from_iter+0x7b/0x100 [ 980.763349][T19307] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 980.769236][T19307] tun_get_user+0x15db/0x3ca0 [ 980.774022][T19307] ? aa_file_perm+0x11b/0xee0 [ 980.778788][T19307] ? rcu_read_unlock+0xa0/0xa0 [ 980.783662][T19307] ? tun_get+0x1c/0x2e0 [ 980.787879][T19307] ? __lock_acquire+0x7d40/0x7d40 [ 980.792982][T19307] ? tun_get+0x1c/0x2e0 [ 980.797217][T19307] tun_chr_write_iter+0x119/0x200 [ 980.802307][T19307] vfs_write+0x46c/0x990 [ 980.806628][T19307] ? file_end_write+0x250/0x250 [ 980.811551][T19307] ? __fget_files+0x43d/0x4b0 [ 980.816314][T19307] ? __fdget_pos+0x1d8/0x330 [ 980.820957][T19307] ? ksys_write+0x75/0x260 [ 980.825435][T19307] ksys_write+0x150/0x260 [ 980.829836][T19307] ? __ia32_sys_read+0x90/0x90 [ 980.834673][T19307] ? lockdep_hardirqs_on+0x98/0x150 [ 980.839946][T19307] do_syscall_64+0x55/0xb0 [ 980.844412][T19307] ? clear_bhb_loop+0x40/0x90 [ 980.849133][T19307] ? clear_bhb_loop+0x40/0x90 [ 980.853862][T19307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.859816][T19307] RIP: 0033:0x7f118af9ce59 [ 980.864315][T19307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.883996][T19307] RSP: 002b:00007f11891f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.892470][T19307] RAX: ffffffffffffffda RBX: 00007f118b216090 RCX: 00007f118af9ce59 [ 980.900490][T19307] RDX: 000000000000ffdd RSI: 0000200000000000 RDI: 0000000000000003 [ 980.908514][T19307] RBP: 00007f11891f6090 R08: 0000000000000000 R09: 0000000000000000 [ 980.916562][T19307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.924580][T19307] R13: 00007f118b216128 R14: 00007f118b216090 R15: 00007ffec19917d8 [ 980.932654][T19307] [ 980.978956][T19306] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4331'. [ 981.042007][T19310] team0: Device vxcan1 is of different type [ 983.692427][T19312] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4333'. [ 983.721093][T19316] validate_nla: 6 callbacks suppressed [ 983.721118][T19316] netlink: 'syz.2.4341': attribute type 10 has an invalid length. [ 983.741080][T19318] netlink: 'syz.1.4334': attribute type 3 has an invalid length. [ 983.750182][T19318] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4334'. [ 983.768723][T19322] netlink: 'syz.1.4334': attribute type 10 has an invalid length. [ 983.782505][T19322] team0: Device vxcan1 is of different type [ 983.904448][T19325] sctp: [Deprecated]: syz.3.4335 (pid 19325) Use of int in maxseg socket option. [ 983.904448][T19325] Use struct sctp_assoc_value instead [ 984.032157][T19327] netlink: 'syz.0.4336': attribute type 3 has an invalid length. [ 984.040862][T19327] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4336'. [ 984.119651][T19332] netlink: 'syz.0.4336': attribute type 10 has an invalid length. [ 984.156963][T19332] team0: Device vxcan1 is of different type [ 984.994980][T19344] netlink: 'syz.0.4344': attribute type 10 has an invalid length. [ 985.295244][T19342] netlink: 'syz.3.4343': attribute type 3 has an invalid length. [ 985.305897][T19342] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4343'. [ 985.321032][T19348] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4345'. [ 985.341130][T19349] netlink: 'syz.3.4343': attribute type 10 has an invalid length. [ 985.375429][T19349] team0: Device vxcan1 is of different type [ 985.535050][T19357] netlink: 'syz.1.4348': attribute type 2 has an invalid length. [ 985.550249][T19357] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4348'. [ 985.621551][T19356] netlink: 'syz.0.4347': attribute type 3 has an invalid length. [ 985.640762][T19356] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4347'. [ 985.763058][T19356] team0: Device vxcan1 is of different type [ 985.966216][T19368] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4353'. [ 986.304141][T19367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.316318][T19367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.431287][T19367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.456269][T19367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.989313][T19374] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4355'. [ 987.328893][T19385] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4359'. [ 987.345694][T19383] team0: Device bridge0 is already an upper device of the team interface [ 987.636709][T19393] team0: Device vxcan1 is of different type [ 987.839768][T19402] sctp: [Deprecated]: syz.1.4364 (pid 19402) Use of int in maxseg socket option. [ 987.839768][T19402] Use struct sctp_assoc_value instead [ 988.183032][ T5835] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 988.982390][T19424] validate_nla: 13 callbacks suppressed [ 988.982518][T19424] netlink: 'syz.3.4375': attribute type 3 has an invalid length. [ 989.026865][T19424] __nla_validate_parse: 4 callbacks suppressed [ 989.026990][T19424] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4375'. [ 989.073886][T19427] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4376'. [ 989.107912][T19424] netlink: 'syz.3.4375': attribute type 10 has an invalid length. [ 989.138360][T19424] team0: Device vxcan1 is of different type [ 989.231526][T19430] netlink: 'syz.2.4377': attribute type 10 has an invalid length. [ 989.440678][T19436] netlink: 'syz.1.4379': attribute type 3 has an invalid length. [ 989.449918][T19436] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4379'. [ 989.523481][T19439] sctp: [Deprecated]: syz.2.4380 (pid 19439) Use of int in maxseg socket option. [ 989.523481][T19439] Use struct sctp_assoc_value instead [ 989.540268][T19440] netlink: 'syz.1.4379': attribute type 10 has an invalid length. [ 989.553265][T19440] team0: Device vxcan1 is of different type [ 989.826535][T19442] netlink: 'syz.0.4381': attribute type 2 has an invalid length. [ 989.834524][T19442] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4381'. [ 990.479703][T19454] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4386'. [ 990.625926][T19460] netlink: 'syz.3.4388': attribute type 10 has an invalid length. [ 990.641932][T19460] team0: Device bridge0 is already an upper device of the team interface [ 990.745328][T19463] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4390'. [ 990.838351][T19465] netlink: 'syz.1.4391': attribute type 2 has an invalid length. [ 990.880366][T19465] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4391'. [ 991.141921][T19475] netlink: 'syz.3.4397': attribute type 2 has an invalid length. [ 991.187662][T19475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4397'. [ 991.286727][T19479] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4398'. [ 991.527051][T19487] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4408'. [ 991.920436][T19495] netlink: 'syz.3.4401': attribute type 10 has an invalid length. [ 991.928510][T19495] hsr0: entered promiscuous mode [ 991.934001][T19495] bridge0: port 6(hsr0) entered blocking state [ 991.940435][T19495] bridge0: port 6(hsr0) entered disabled state [ 991.947763][T19495] hsr0: entered allmulticast mode [ 991.952918][T19495] hsr_slave_0: entered allmulticast mode [ 991.958599][T19495] hsr_slave_1: entered allmulticast mode [ 1001.263406][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.269824][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1010.837908][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1010.848279][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1010.856529][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.865646][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.873565][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1010.881275][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1011.075268][T13095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1011.086303][T13095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1011.094222][T13095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1011.102542][T13095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1011.110925][T13095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1011.118597][T13095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1011.439105][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1011.452327][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1011.460510][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1011.471208][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1011.479389][ T5788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1011.486855][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1011.846415][ T5788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1011.862399][ T5788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1011.871328][ T5788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1011.880287][ T5788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1011.895004][ T5788] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1011.913076][ T5788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1012.983580][ T5788] Bluetooth: hci3: command tx timeout [ 1013.189476][T19529] chnl_net:caif_netlink_parms(): no params data found [ 1013.233004][ T5788] Bluetooth: hci5: command tx timeout [ 1013.543162][ T5788] Bluetooth: hci6: command tx timeout [ 1014.028456][ T5788] Bluetooth: hci7: command tx timeout [ 1014.337010][T19529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.383133][T19529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.390571][T19529] bridge_slave_0: entered allmulticast mode [ 1014.461603][T19529] bridge_slave_0: entered promiscuous mode [ 1014.574756][T19533] chnl_net:caif_netlink_parms(): no params data found [ 1014.588869][T19529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.633195][T19529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.640981][T19529] bridge_slave_1: entered allmulticast mode [ 1014.703142][T19529] bridge_slave_1: entered promiscuous mode [ 1014.743685][T19537] chnl_net:caif_netlink_parms(): no params data found [ 1015.063162][ T5788] Bluetooth: hci3: command tx timeout [ 1015.303298][ T5788] Bluetooth: hci5: command tx timeout [ 1015.451141][T19529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.591176][T19529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.632937][ T5788] Bluetooth: hci6: command tx timeout [ 1015.779556][T19539] chnl_net:caif_netlink_parms(): no params data found [ 1016.103311][ T5788] Bluetooth: hci7: command tx timeout [ 1017.143293][ T5788] Bluetooth: hci3: command tx timeout [ 1017.383061][ T5788] Bluetooth: hci5: command tx timeout [ 1017.707085][ T5788] Bluetooth: hci6: command tx timeout [ 1018.183192][ T5788] Bluetooth: hci7: command tx timeout [ 1019.223039][ T5788] Bluetooth: hci3: command tx timeout [ 1019.463158][ T5788] Bluetooth: hci5: command tx timeout [ 1019.783109][ T5788] Bluetooth: hci6: command tx timeout [ 1020.263515][ T5788] Bluetooth: hci7: command tx timeout [ 1073.451144][T19531] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1073.476446][T19531] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1073.485646][T19531] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1073.494521][T19531] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1073.503825][T19531] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1073.511247][T19531] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1073.540976][T19531] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1073.554979][T19531] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1073.563417][T19531] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1073.571674][T19531] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1073.593194][T19531] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1073.600684][T19531] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1073.934033][T13095] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1073.955870][T13095] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1073.964543][T13095] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1073.973155][T13095] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1073.981504][T13095] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1073.989092][T13095] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1074.433866][T19531] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1074.447770][T19531] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1074.458490][T19531] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1074.467539][T19531] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1074.475638][T19531] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1074.484099][T19531] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1075.552944][T19531] Bluetooth: hci8: command tx timeout [ 1075.703061][T19531] Bluetooth: hci9: command tx timeout [ 1076.104350][T19531] Bluetooth: hci10: command tx timeout [ 1076.584940][T19531] Bluetooth: hci11: command tx timeout [ 1077.632894][T19531] Bluetooth: hci8: command tx timeout [ 1077.792948][T19531] Bluetooth: hci9: command tx timeout [ 1078.183051][T19531] Bluetooth: hci10: command tx timeout [ 1078.663672][T19531] Bluetooth: hci11: command tx timeout [ 1079.703008][T19531] Bluetooth: hci8: command tx timeout [ 1079.863027][T19531] Bluetooth: hci9: command tx timeout [ 1080.272939][T19531] Bluetooth: hci10: command tx timeout [ 1080.753009][T19531] Bluetooth: hci11: command tx timeout [ 1081.782977][T19531] Bluetooth: hci8: command tx timeout [ 1081.943106][T19531] Bluetooth: hci9: command tx timeout [ 1082.353048][T19531] Bluetooth: hci10: command tx timeout [ 1082.823489][T19531] Bluetooth: hci11: command tx timeout [ 1097.662919][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1097.669844][ C0] rcu: 0-....: (10431 ticks this GP) idle=6ffc/1/0x4000000000000000 softirq=77870/77872 fqs=4797 [ 1097.682042][ C0] rcu: hardirqs softirqs csw/system [ 1097.688473][ C0] rcu: number: 1173049 0 0 [ 1097.694896][ C0] rcu: cputime: 21597 30881 38 ==> 52510(ms) [ 1097.702713][ C0] rcu: (t=10503 jiffies g=111317 q=2506 ncpus=2) [ 1097.709151][ C0] CPU: 0 PID: 19516 Comm: syz.0.4413 Not tainted syzkaller #0 [ 1097.716650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1097.726724][ C0] RIP: 0010:queue_work_on+0x1a4/0x1f0 [ 1097.732146][ C0] Code: 4d 85 e4 75 16 e8 bc c0 2f 00 eb 15 e8 b5 c0 2f 00 e8 a0 f0 30 09 4d 85 e4 74 ea e8 a6 c0 2f 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 41 c7 44 [ 1097.751773][ C0] RSP: 0018:ffffc90000007380 EFLAGS: 00000246 [ 1097.757866][ C0] RAX: ffffffff81576aea RBX: 0000000000000000 RCX: ffff88807ab8da00 [ 1097.765863][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1097.773852][ C0] RBP: ffffc90000007460 R08: ffffffff911cd5f7 R09: 1ffffffff2239abe [ 1097.781846][ C0] R10: dffffc0000000000 R11: fffffbfff2239abf R12: 0000000000000200 [ 1097.789838][ C0] R13: 1ffff92000000e74 R14: 0000000000000000 R15: ffff888025d0c001 [ 1097.797914][ C0] FS: 00007f118bd7f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1097.806958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1097.813561][ C0] CR2: 0000001b2de22ff8 CR3: 0000000074078000 CR4: 00000000003506f0 [ 1097.821634][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 1097.829707][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1097.837699][ C0] Call Trace: [ 1097.840991][ C0] [ 1097.843856][ C0] ? wq_worker_last_func+0x40/0x40 [ 1097.848990][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1097.854917][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1097.860830][ C0] ? wiphy_work_queue+0x151/0x1a0 [ 1097.865888][ C0] ieee80211_rx_h_mgmt+0x4f8/0x6f0 [ 1097.871064][ C0] ieee80211_rx_handlers+0x65f9/0xb4a0 [ 1097.876559][ C0] ? drv_event_callback+0x250/0x250 [ 1097.881790][ C0] ? __lock_acquire+0x1273/0x7d40 [ 1097.886890][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1097.892118][ C0] ? sched_clock_cpu+0x75/0x430 [ 1097.897021][ C0] ieee80211_prepare_and_rx_handle+0x29ab/0x62c0 [ 1097.903383][ C0] ? ieee80211_rx_8023+0x1280/0x1280 [ 1097.908683][ C0] ? sta_info_get_bss+0x54/0x320 [ 1097.913672][ C0] ? sta_info_get_bss+0x54/0x320 [ 1097.918637][ C0] ? sta_info_get_bss+0x54/0x320 [ 1097.923587][ C0] ? ieee80211_rx_data_set_sta+0x20f/0x410 [ 1097.929435][ C0] ieee80211_rx_list+0x295e/0x32d0 [ 1097.934582][ C0] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 1097.940759][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1097.946770][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1097.952954][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1097.959153][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1097.964547][ C0] ? ieee80211_rx_napi+0xd4/0x3d0 [ 1097.969605][ C0] ieee80211_rx_napi+0x1b2/0x3d0 [ 1097.974581][ C0] ? ieee80211_rx_list+0x32d0/0x32d0 [ 1097.979921][ C0] ? skb_dequeue+0x124/0x160 [ 1097.984569][ C0] ieee80211_handle_queued_frames+0x106/0x1a0 [ 1097.990704][ C0] tasklet_action_common+0x302/0x4d0 [ 1097.996040][ C0] ? trace_raw_output_tasklet+0xc0/0xc0 [ 1098.001630][ C0] handle_softirqs+0x280/0x820 [ 1098.006466][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1098.011249][ C0] ? do_softirq+0x1a0/0x1a0 [ 1098.015778][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1098.021010][ C0] __irq_exit_rcu+0xd3/0x190 [ 1098.025637][ C0] ? irq_exit_rcu+0x20/0x20 [ 1098.030182][ C0] irq_exit_rcu+0x9/0x20 [ 1098.034458][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1098.040130][ C0] [ 1098.043084][ C0] [ 1098.046031][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1098.052046][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 1098.058020][ C0] Code: 75 11 e8 c2 06 0b 00 48 85 db 75 16 e8 b8 06 0b 00 eb 15 e8 b1 06 0b 00 e8 9c 36 0c 09 48 85 db 74 ea e8 a2 06 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1098.077690][ C0] RSP: 0018:ffffc9001252fa00 EFLAGS: 00000246 [ 1098.083811][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 1098.091806][ C0] RDX: ffffc9000d4cb000 RSI: 0000000000005595 RDI: 0000000000005596 [ 1098.099818][ C0] RBP: ffffc9001252fad0 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 1098.107819][ C0] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: 1ffff920024a5f44 [ 1098.115808][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920024a5f65 [ 1098.123900][ C0] ? event_function+0x300/0x300 [ 1098.128784][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1098.134551][ C0] ? percpu_counter_add_batch+0x24f/0x2a0 [ 1098.140307][ C0] ? percpu_counter_add_batch+0x259/0x2a0 [ 1098.146052][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 1098.151715][ C0] smp_call_function_single+0x36d/0x5a0 [ 1098.157299][ C0] ? event_function+0x300/0x300 [ 1098.162174][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1098.168345][ C0] ? event_function+0x300/0x300 [ 1098.173226][ C0] perf_install_in_context+0x5be/0x920 [ 1098.178713][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1098.184721][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 1098.189959][ C0] ? anon_inode_getfile+0x29/0x1a0 [ 1098.195115][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1098.200353][ C0] ? perf_event__header_size+0x165/0x220 [ 1098.206018][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 1098.211779][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1098.217454][ C0] ? lock_chain_count+0x20/0x20 [ 1098.222345][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1098.227569][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1098.233234][ C0] do_syscall_64+0x55/0xb0 [ 1098.237676][ C0] ? clear_bhb_loop+0x40/0x90 [ 1098.242369][ C0] ? clear_bhb_loop+0x40/0x90 [ 1098.247064][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.252986][ C0] RIP: 0033:0x7f118af9ce59 [ 1098.257428][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.277081][ C0] RSP: 002b:00007f118bd7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1098.285545][ C0] RAX: ffffffffffffffda RBX: 00007f118b215fa0 RCX: 00007f118af9ce59 [ 1098.293548][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1098.301553][ C0] RBP: 00007f118b032d6f R08: 0000000000000002 R09: 0000000000000000 [ 1098.309564][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1098.317576][ C0] R13: 00007f118b216038 R14: 00007f118b215fa0 R15: 00007ffec19917d8 [ 1098.325590][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)