last executing test programs: 8.421509925s ago: executing program 0 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000001100000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 8.198515361s ago: executing program 0 (id=1192): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003a40)={0x0, &(0x7f0000001ec0)=""/92, &(0x7f0000002a00)="0da87458f1df9c0f4ec68002d4a64829d10c662b4702d6ca68807024926972ac770b94e47a4d96f852c7ba741c293c776cc57820118e4673f8bc4bd811f27fc5f89de0fb8903f6fd2aa428181c4918beb9eec32029b75acdee4f40e939f92f56f724ed34bd64ddbe0eb54de970d681dd0ab0cce064243bca43aaf1afa621703382e29e2df24ccd404b437068feb0be882027ce8c79c0fbfcfbc9db7df4ed636716582dc728ce070390151750ece909bf6254a7d78dbf20f6940f5ae214d34af2985e7faddb6d7858a765273d4f1a5787cd757003a90b1761a206877bd93edcbcbff002e2a59245bbe7ded4c3a396b1eb13f65fd4b3f6beade2ba6f7ed45eb055b795b043c21aff5aafc4ffdce1158bebe927010f481158833f6dcec82332e00f6fbbae91f50f29e440f41e27d1eb45a57640d61215ebd1caf564c09e4186dc41a04ad827a7b739bfbf8ce818d24847aad5086466375b21a1d5082e79913ded9f9b64243604b923836af758da9303ff3116423515818db9e5c20a9c914b7c8de1e666dcd1dc4ead2e3a9af4318bf83d104ed47ed8ea38778e04c0e8c6713ed0656c7bfe65a5980b252f8dd59f68bc1e7462709e375101797cd797c554b18bde1004117ada526e369f46020b724eb8d68a36b3574e75073f0934d361f964ffa4655c428a5bf9ca570a52c555d5b3627718f962ff84e9dc6a36c9bbbad6687931083de83f0b0fae4520bcca93e32fe60a604adb1f1a6ea535b7425c44d5773917756734428b982bfe5590aba89654ae5db786b0c66efc05206bf5bc937c2303c22ff4f71a5cb8d71abf5e18454aa063a1b06c7f2a8073b5c21f9cba3a4509ae5454524a615545d36b6f68550b0220d966beac018f6c39db838c04db1beb4406af763cab27af6217860bac7c7eb8bb88f3faa65f86ee6022c1a6ea867206240abe35ae2fcf08dbe135a1322cd8040f89fd8954309b281dff66f9746f770e989812159950a55c9b2ebf88322480352a3269e9c0d1f1defe8e397a4937b2b293beeb596dd4e1499b42478b4ca43b5faa2388c48d2bcf031cf5c652d42e4249c216c98d7027292853f0dffb4ce00ba6c07139945ce5c0cccb30a4d92f16ada7b679d8a2beca89fa87e7fedd1d699994efcfc1e4ead837eb97b08ca05b182781d4306a1ca789936c0142c00749c9803713d5efd62553ccce537785fd7ace971aa950b958451cc3ec9a720f71e49b961b5a95993e7c545aa9679e56aadc361e2e3500e9d6795a93857b63bfc4812302ecd689ab26b612bd3d9b33e27c706d1ac03f97c994447f862da59ae28032d39f454f6cb5933e12950764fd820aaa61a56a42fd2998ed7866a0e14083d1f1cd4a0b1298c92958ce6527ea54148292ceb6ccb1b7134f509da2ce2cacbd74143e693daad1ce3a2eecadcb8212d04c4c356bad9e7a89f4408c90749c271bf6dfa9ceab06e18b2cfe0f5e7a29cc6db7921135bc329f823ea5d6bf123b01cfebdb3b88fb5f8d040e561618fe02c7f032b07e63fe9393341d27753331b6eebbdf66b1eddae34b48647fa70d7d486c798ac203a0e8b044dd2cbe645fdb7c989741c70db1c700b3b1043464373292d02a51cd29700e55710a0172bedff2d466f3e75685cc72dc92b76f8740c98f8a9bceb581149f26f099b9a01ed16f7614b5f34094b6b8ba23e04736146e00fae368ba7e3b6c19a8f3a3c107de9f68dbdacf6ceb60b564c544a9bbd59a7de4a07c64cc87ac0cb88e12c20e06d47f7ec83e7060c0ff11877154a5b2baafd68b03f1ed52a8fa86458e4768077d69fef588acb7b40378253a7b369b03dd24dbb4ad7403218f6657b8674318f7247ca46bf9a9e955a0db13475fef9b89420f97b4bda1747c19228ded1cb94be672e3375fb3404a533dd7ecde0d211b58c248f67950267d408f0ea8fbb0f1add9b98ba8cf606e2867c56aceaa605aead939117f312b0c2171c65775b56841d85670cebd5fbf1990ad47bb67bd5fde1656f5d9aaaa76a361074f007e07a1a247af5ff91baccad24ba3177e014cb2fbdf6fdff4ea9fc2ed99b26d0e2cd0610bdd398d53d85b9a6cf3d99e19d288733e8ce23d5c3849d079317a49217ee399c62d7f352f2d0260033c294dabaff98e18bde8c51992bc19fc21ecd02e19d1c7091e3af63a3604319ed36e857b99cb94fafdfc458ffe0559862fc25e641d8f7c786034f0558b7c96eef7d4135db163cbff0d424ff3e2cb554ebd6be86f91dff91703ebd9dfb265e16a5ee890588cca97ed8885145e9003e2c511969f7242997d87ab10984ed96b167842742039dc5401917dd9d7c8ea23f82ddcdffad7a08adc00dd287e0fd1926c2cdc0c4d01e07015f545e7ac86e7bb628709c35ec61e6551f313347d6b0ddc61655e416d01ed59ebedebab2f060799f5374cd5661b1eeafdf7d90c2e4453c61c5b84db7a7ac0f3d015bce16df28a0aed6a9745a7c88ae0dee5488e54fc3c2b1e366d19d0ceeef0c02c7d9d0776f9bd8dfbd1f1aa624ad6ea27d25e07978808d1cfef618186e6d4f5a750554e653a30e7995851aaf29542be38bb05dae5f8d9e028f21a2214c8e3d3253436ce6d3a2bf9fabb7f8120153f758d0e1316cf71ab0ac5af7e6af9f703349ec9be9aaf6bb656cfbc06e2169d1a1200f405ee125319b0997a140fc5acbed0188a8834740387df199ad1db77f243971a88a2567b34e4cde2827cbb0d1fff7a7889203715c48f33e0a9f52fdbeffc2a60dcb7cbe4e69bfbaddb469a4aa52b876d4bd57d74e55d03dea5ed4f16fc9d4a98c6a437d7d667071e9e124034c57f45e7d1121ead757ed23ecd4b33ef302834a96b2cb02a514a237e18df000f85eabff43c3e67ffa7b3ce7f3ebd194fd58f9307dcdd962322c390d99fe86fabaffdd2c997b152f1364bf56b825c70ad5647e0d3e1dea827c0d59dda73f76b7c7b08804b1af861132ec85311a23b3ba1f862a901a56a65fb709b2e3524092a3019a4583376d32ca98c8aa72bb27fac84cbbe0c53d9c0f8d0b49c542a3e42827ce2311410fc3a95ed18ad9fdf5bd8792d542936314d7adec0f09976d7eead2f8cdabd42a55cd895394789338a4e6aec4ded18177d6362ffea7ba6f992c9394ebba686eab2e5f1165be7c8610d447bb9dde422b3327de42357e0fbd64553c5272c6afe2fc8729e6d22fbcf95e3fe98eae0bfa27f22104f22ef3fe2abae4a1a4d1360451d7a9018b398e5b4d22d4176a51f75d7ddd229baaa75db08182cc0abbe06a8c07d7fb30be39ebc17fadcae05048e96adf5abd5c6f6a5b853a67947fcd730a1275d9db44ed03331ae3f341f1bbff55d59eec9d96ff59e3f4cffc12a730a2a92b88e279eade05eb8fe970027ce6c750603cc2a917d6bb5b15e5a978c33069259c1665da8282533019b35ac7ce83517bea169cf15d71f8dc7f8d592fa7eed4110284f6b671be718ebea9431576fcd44cb4f4a50b973a707e4514fe209b864e35122b7e13cfe126aa0d175b698ab50ebd5b987dfb7d4046a759861db225340669bb43b3dbab25827dfbf1570172e3c196f0218b86ac919a106c8b11860b9a609e0391a09424865e67e73c354a47af63c108aa5fa325bfc9933e161ad74dcc04a4bfc4429a7a72f8fd3dfe7bd1a10c2bba4f2594324ebe3ba05c33599efee39c90ddb94c6bef4736b248a9174c57aec0758d5d0c8c96478227d552d5714202a45df1c4e2b07416e9c510dcc3d7e43c2dfb925c06a0435d0032248d736e9977a1b73d9cd63dce36ea200a7cadcf4fde15cda3994473c514fe6089e76a8a3e764b0203eed83c876eb4e551a0a78cd361fe5a4ba29f4d6cd1658b41a1fb83b829fe6e82482c024e61c34928c7c0161b53d30a15e7590a134cec607f4fcb4f81b27321deac9831a4dc11c171477bdb49b80958fd2e688b7987249c05597031d46ba17d6b2a87590ff02602b3953ff824c079322f7b77d6c4232e08d78058c8ef3369cc2fb3d8beb49b7e46194eea6282db9a56dfe2fc10dcbfe0f8ba9243a83413c2db9d4bacbe1920dde899ba73332d9cef86b8dfea516e0e3b34ed039dc8e128d4d4c765061e07dfd5ed74f826eceba409f1cbdee77e5b1b74aa46a3a8de83c4a6ba036a57376e8d38c1b1d25853bed2511c86984a329d28927f5a72111d9cb2d828337d648950c84809448d395c463ddc2090f07c7f3be152a9b54db34ecd860b19e33e2c8a1b62bcf564b1a4687a7f7a6eab44f133e909bcd92ec230935674896f107bb1eb8c668d0623ca1789c2d33e5d486bade5b39da8814eda6723ca1dd91bddf3e4da39fb15d335487ef72eb8a8667210361e83706e7b27b1b5cb8e72f58b5d9d9f37b7eadd2b2022e9e38dede0c554adaf55fefb32c7cc37010f96894555aa83bea7465f2decfa0193b68bf5bac2fd28c2495fb3313a63bb307edd8e3af32869640ed7bc762261124de57854e9ed8f27082bcdd16303f39fdf64b8e058c9c61e6961e14418a298b27559eabf7ef5df97ac95e59a2d94f51b7147374b633ec5d3042979d3eadb1871be68bc5d386585300a0ad0e2f01d5c1a0e7b6eea8bdde573a0f08615a663768915a78afb71ad75e9de6fd71ba4e182d8103dd02c36b7fb8182cf7ad329c755cc8170616c423d0854ef76f07ad716ed8e5455f01de5324c10a8255468830a21e6674a85c87814ce7d3141abaf76677530cc37112d173aae9e22847046c98732e7d7d12f517d1b62b697a284a45b4c7aeb627b95f11fcf61ecef442200bcb41f48125ac7afe24284030f383e6afb23466a3378122d7315fd8471c24985c5f4df93a3654f46c05a7ea0302831f5b54da2b9db2d18d211199157d5ccb74c178c52edf25240534728bcb23f4611d23cc344ec5aa96dbd8b1c318c55c5b6b372c74f784e9ee426d22c0ea0246237a508c7deb63aaf8191320fca8b5e11daa6c065158306ea1f68ec57acccf20c1bfacffd072f67a96c31a58517dd214cfd0fed56c3eb2bcf103138cd4045b42fe80d42843966da1e33398485ba7cee404f38841ba416ea9a83dc3e8632c88fe406a7023847e53534c080e25b42eaf75cb468a4db19299936a69b8bc28fafd20b8e2d2fe849737b2e55a8c09d8724a2241911aa7f068265355ec45e583b0fd292e1ca820b9e866bec6890cbc03668dd4923543e206bb5516220ca83e53623930542b7f0eda6955f31d844d21de80de7f8130f20d5708cad591b099775b740bdc4b7fa03d3c353ed98eb85a8e1ac7b5975a53fbf26c4d892d6af18708834f3d5a588f7fde6727fe72c1d1f2a0a8572befc1eadd779da2caba2f47b8eb126d2a71be34dbac3f4e4e7bfda6832a266162ee35024ad68bf8c794258eb27852cb46306d71a94e2623522631a836ffea0446f2df3d2e86af5f7cf967b6baf09c5b487cf233f55e035a29249751fba2409d3b915f9bd1a88c16d8cc020423e5845215ace78594a27b329677962dd438744026f5cdeb7e475b4cae3dc8aa7e5d8e276aba2aee038980d6ad865533406aa68e335270b74d4b3f1f5c0e1a4e0a59a3d67ba78f8a9bbb35137ec628f4805228358b8034c0c3f33d57e667e83555034d47fa06cac7e4b9bb0e2f8335a2ac909629694dfd574ae231bd5aeb548cdc83ce4bba397d09062f5910850b504223e6e0cb6c62f2b5efccd7a15e53672ed6998aac59ae0f1d3fb7a33b559c475158520190c9f6e57faca0da1e74728031180ef54a55c40b59ce7e2451a35e6ffd4076911828a29ca59d1e45ab0c41699ecaf6eaec4b6a6d30c9", &(0x7f0000003a00)="0975137ad6b799513d66275e3a46b634c9ca", 0x7, 0xffffffffffffffff, 0x4}, 0x38) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001c40)) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x11, 0x0, 0x8}, 0x0, 0x0, r7, 0x2) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000001e40)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x9a) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001e00)={&(0x7f0000001580), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001600)=""/33, 0x21}, {&(0x7f0000001640)=""/241, 0xf1}, {&(0x7f0000001740)=""/77, 0x4d}, {&(0x7f00000017c0)=""/57, 0x39}, {&(0x7f0000001800)=""/162, 0xa2}, {&(0x7f00000018c0)=""/6, 0x6}, {&(0x7f0000001900)=""/240, 0xf0}, {&(0x7f0000001a00)=""/220, 0xdc}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/82, 0x52}], 0xa, &(0x7f0000001d40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2000) 7.813370281s ago: executing program 0 (id=1195): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x3e8) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRESOCT=r0, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 6.961290873s ago: executing program 0 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = syz_clone(0x20000000, &(0x7f0000000180)="121775952618d2fee3323997bc5de9cd200a6257e28a7dda6fb95ec639f629621de15bc64a252acb9d55902c4e5ed865639bf2720d2e4bca10e01b0c745c765d35005512dd278c9b5111d871d69dfb7c090d8282b339761c9b9c80d417a2aee7edfe2b82d5d4647e6880f8e7ae5d025f4aae8a170349927f8f22f7718f8f1570f54026750592", 0x86, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b86a072b344c2f4ba6190e6e24c330534a0f6697ed85d84a8b662e8db30536c4c39b44e7697b39edec7c8eff47012cba59c934") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xe2, 0xa, 0x9, 0x0, 0xfffffffffffffff3, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x323da72d, 0x1, @perf_config_ext={0x6, 0x8}, 0x10000, 0x9, 0x9, 0x0, 0x1, 0xf2d1, 0xffff, 0x0, 0x3, 0x0, 0x3}, r1, 0xf, r2, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) sendmsg$sock(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="1c42496cb57a06", 0x7}], 0x1}, 0xb736997ed67fabbd) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 4.263498682s ago: executing program 1 (id=1202): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d000347fe000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d2f, 0x18004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xeb, 0x1}, 0x0, 0x2, 0x7, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x3, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/150, 0x96}], 0x2}, 0x2020) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="70e31074fe6216d8f1eeae84cc92c8163485b8db7045d0573fb1e900cbc8cb557488535108b5f3bf6da109601fe88966722c22589b87fd3295042716315de9bbd8195bf6a196124579c1a70c07079083901c9b45d9dfba9b8ea237596502e0dde57c5cb8d6587650bab91e88c582c719", 0x70}, {&(0x7f0000000500)="3f98592dfe486003b72adcdaf1f456a08dd434145eb7ec7eeea7d93480ca7cb77dbf13cdc5b58bb0150701171b2cd9c66b2a6c2bd94fb86f7d52a1ca55a4e1e438ba17007460edfa4317870de782bc59ad5cb1a9d7b6ce587bb0e2ca5d905dd6cb7aeed2a8d03b61e9f3d30e811e3066c69aa8930c62965e8ba425", 0x7b}], 0x2, 0x0, 0x0, 0x800}, 0x4000010) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.859685612s ago: executing program 3 (id=1204): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="17000000140081ae10003c000500018311001f9f660fcf", 0x17}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3b1286460e8d0fa02f88484278fe6de6c7d0d8713c105c2c9682650e6bab0cc78ac7f4ce0e7f13eaa48631fcec861f351429b8c5201f31f0f08fe7055fc96d0b3c0767e546d09f2e512a84bc4185ecdb00491685aca89da091a7f46a2901850e69cbb7a32d3f4994091c59a0cd7dc56a7981a06f37fbfbb8aa12793bf524a28525ccb303d34a1f35c0736b009cd2f12704a6902b5f2fac3042db97ae4be1e85a87666e65e528cb1cacd6468f03a771e43f20c8db4f792e70591f38d66a63da8256d03ebc504e5402b90d0a9d96d5061f5321fccfa29cab16836bdace5c3c6c8804f2bae91e6d8bc4d2c9fd3f0086b0870d3a783625d886bb0d87fcc83abe71dd466df33f294df8b8dd083f26f3074004302f40c20e7d51fe45b7c23fe6a1ae41e9e1d7ec3e2cba932a85437fea65b49db2cc894f916bbcfce8a9cc7693279c70e23954cf01658dae31ad8d2dfd5641e14c318e0d4685342b8aa2ff5709f8dee0c9818686364428fcdfff1000e0f02e88f0110c57c97d2856416", 0x5e7}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002dc0)=""/4119, 0x1017}, {&(0x7f0000001a40)=""/4070, 0xfe6}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000001980)=""/168, 0xa8}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000002c80)=""/134, 0x86}], 0x6}, 0x20) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) 1.793753894s ago: executing program 0 (id=1205): socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x3b35, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0xfc2}, 0x8081, 0x0, 0x541714f0, 0x8, 0x7, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRES64=r3, @ANYBLOB="34616c73e713fefa52df7d7f50ad065ec7bc424f02dca51886ec4d75fb6de7a66ce8bab73a", @ANYRESOCT], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x15, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa91", 0x0, 0x2, 0x0, 0x7}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000940)="38d26a3d9673399025aae4121e4207", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a12900150006001426036018120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4eccb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eedee5de6ccd40dd6e4ed12e749d21e100f323c4c716d15", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.738564226s ago: executing program 3 (id=1206): perf_event_open(&(0x7f0000000380)={0x4bc875e52fd0ba69, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7ff}, 0x0, 0xc8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x2d, 0x0, &(0x7f00000006c0)="81306a417b342cba7f0fbe077791c02f97da79d16781af13b815da329204a28025d63275b3d2f332a53b4979fb", 0x0, 0x9, 0x0, 0xf, 0x0, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c", &(0x7f0000000800), 0x1, 0x0, 0xf05f}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2b, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x16, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000200)=[{0x2d, 0x3, 0x2, 0x2}]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x6}, {0x2, 0x2, 0x8, 0xa}], 0x10, 0x7}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 1.517126272s ago: executing program 2 (id=1207): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00ef0010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.439572103s ago: executing program 1 (id=1208): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000060000000000000000000400"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110000000000000630122000000170095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b40800000000000073119e00000000008510000002000000b7000000000000009500c2000000000095000012000000009e2295506f677f5bfeae2b33e96a58c1b492215fce398050e15092a17ffa4e0609e9a4fb7cabfc45b51dacef93473fae5030067151728ba68ac9513d82f4a70c8f672ddd07ba7cf7"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.413873624s ago: executing program 2 (id=1209): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065", 0x2c}], 0x2, 0x0, 0x0, 0xff97}, 0x0) 1.325804827s ago: executing program 3 (id=1210): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000009, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000001080), 0x1}, 0x0, 0x31, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001040)={0x2, &(0x7f0000001000)=[{0x1, 0x2, 0x7, 0x10001}, {0x0, 0x7, 0x3, 0x9}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0xb0, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x100000001}, 0x0, 0x3, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x19) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001180)=ANY=[@ANYRESHEX=r8], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786", 0x54}, {&(0x7f0000000700)="3efb8b6afd3c7d", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) socket$kcm(0xa, 0x5, 0x0) 1.206870849s ago: executing program 2 (id=1211): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000023000000950000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000580), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0189436, &(0x7f0000000000)={'bond_slave_0\x00', @random='\\\x00\x00 \x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0011000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.20583092s ago: executing program 1 (id=1212): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003a40)={&(0x7f0000001e80), &(0x7f0000001ec0)=""/92, &(0x7f0000002a00)="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", &(0x7f0000003a00)="0975137ad6b799513d66275e3a46b634c9ca", 0x7, 0xffffffffffffffff, 0x4}, 0x38) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001c40)) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x11, 0x0, 0x8}, 0x0, 0x0, r7, 0x2) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000001e40)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x9a) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001e00)={&(0x7f0000001580), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001600)=""/33, 0x21}, {&(0x7f0000001640)=""/241, 0xf1}, {&(0x7f0000001740)=""/77, 0x4d}, {&(0x7f00000017c0)=""/57, 0x39}, {&(0x7f0000001800)=""/162, 0xa2}, {&(0x7f00000018c0)=""/6, 0x6}, {&(0x7f0000001900)=""/240, 0xf0}, {&(0x7f0000001a00)=""/220, 0xdc}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/82, 0x52}], 0xa, &(0x7f0000001d40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2000) 709.078462ms ago: executing program 1 (id=1213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r3, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001980)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a00)={0x30}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), &(0x7f0000001a80)='%ps \x00'}, 0x20) 694.144342ms ago: executing program 2 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117600000000008510000002000000c50000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x500, &(0x7f0000000000)=[{0x20, 0x0, 0x1}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x3, 0x3f, 0x6}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 591.903685ms ago: executing program 3 (id=1215): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014261260cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) 513.161087ms ago: executing program 1 (id=1216): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0xffffffff, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, '\t\x00A\x00'}]}}}], 0x38}, 0x20002800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$kcm(r4, 0x0, 0x0) 468.905598ms ago: executing program 3 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff00c}, {0x6, 0x0, 0x3, 0x8}]}) 440.251509ms ago: executing program 2 (id=1218): perf_event_open(&(0x7f0000000380)={0x4bc875e52fd0ba69, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7ff}, 0x0, 0xc8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x2d, 0x0, &(0x7f00000006c0)="81306a417b342cba7f0fbe077791c02f97da79d16781af13b815da329204a28025d63275b3d2f332a53b4979fb", 0x0, 0x9, 0x0, 0xf, 0x0, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c", &(0x7f0000000800), 0x1, 0x0, 0xf05f}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2b, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x16, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000200)=[{0x2d, 0x3, 0x2, 0x2}]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x6}, {0x2, 0x2, 0x8, 0xa}], 0x10, 0x7}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 163.192926ms ago: executing program 1 (id=1219): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x24299, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x12}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x0, 0x0, 0x3426, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xf}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000)=r12, 0x4) 57.798359ms ago: executing program 3 (id=1220): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x4c}, {0x6}]}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) 56.742109ms ago: executing program 0 (id=1221): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003a40)={&(0x7f0000001e80), &(0x7f0000001ec0)=""/92, &(0x7f0000002a00)="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", &(0x7f0000003a00)="0975137ad6b799513d66275e3a46b634c9ca", 0x7, 0xffffffffffffffff, 0x4}, 0x38) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001c40)) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x11, 0x0, 0x8}, 0x0, 0x0, r7, 0x2) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000001e40)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x9a) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001e00)={&(0x7f0000001580), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001600)=""/33, 0x21}, {&(0x7f0000001640)=""/241, 0xf1}, {&(0x7f0000001740)=""/77, 0x4d}, {&(0x7f00000017c0)=""/57, 0x39}, {&(0x7f0000001800)=""/162, 0xa2}, {&(0x7f00000018c0)=""/6, 0x6}, {&(0x7f0000001900)=""/240, 0xf0}, {&(0x7f0000001a00)=""/220, 0xdc}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/82, 0x52}], 0xa, &(0x7f0000001d40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2000) 0s ago: executing program 2 (id=1222): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000023000000950000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000580), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0189436, &(0x7f0000000000)={'bond_slave_0\x00', @random='\\\x00\x00 \x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0011000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.924014][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.925712][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.936307][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.027838][ T5781] veth0_macvtap: entered promiscuous mode [ 85.041279][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.049659][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.054825][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.069709][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.084620][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.095716][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.107752][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.133123][ T5781] veth1_macvtap: entered promiscuous mode [ 85.156660][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.166368][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.177547][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.187634][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.285040][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.305981][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.331090][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.346062][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358999][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.375288][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.388493][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.402579][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.416705][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.468855][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.486215][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.497145][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.508341][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.518914][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.530569][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.550567][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.593442][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603193][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.613859][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.623144][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638231][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.668979][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.754599][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.795412][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.881833][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.914415][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.981379][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.022793][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.121935][ T52] Bluetooth: hci3: command tx timeout [ 86.173408][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.196434][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.209089][ T52] Bluetooth: hci1: command tx timeout [ 86.210783][ T5784] Bluetooth: hci0: command tx timeout [ 86.215065][ T52] Bluetooth: hci2: command tx timeout [ 86.269709][ T5847] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 86.278641][ T5847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.311453][ T5847] bridge0: port 3(team0) entered blocking state [ 86.330709][ T5847] bridge0: port 3(team0) entered disabled state [ 86.370581][ T5847] team0: entered allmulticast mode [ 86.376643][ T5847] team_slave_0: entered allmulticast mode [ 86.420803][ T5847] team_slave_1: entered allmulticast mode [ 86.483926][ T5847] team0: entered promiscuous mode [ 86.489805][ C1] hrtimer: interrupt took 56652 ns [ 86.498010][ T5847] team_slave_0: entered promiscuous mode [ 86.507820][ T5847] team_slave_1: entered promiscuous mode [ 86.658337][ T5847] bridge0: port 3(team0) entered blocking state [ 86.667759][ T5847] bridge0: port 3(team0) entered forwarding state [ 86.722283][ T5859] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.7'. [ 86.737108][ T5858] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 86.757407][ T5859] openvswitch: netlink: IP tunnel dst address not specified [ 86.765743][ T5858] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.832904][ T5856] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3'. [ 87.201235][ T5867] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 87.247409][ T5871] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 87.268153][ T5871] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 87.281809][ T5871] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.479749][ T5875] Zero length message leads to an empty skb [ 88.089572][ T5870] syzkaller0: entered promiscuous mode [ 88.098004][ T5870] syzkaller0: entered allmulticast mode [ 88.201448][ T5785] Bluetooth: hci3: command tx timeout [ 88.280185][ T5785] Bluetooth: hci0: command tx timeout [ 88.285771][ T5785] Bluetooth: hci1: command tx timeout [ 88.293444][ T52] Bluetooth: hci2: command tx timeout [ 88.566663][ T5785] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4 [ 88.646245][ T5895] netlink: 'syz.1.17': attribute type 3 has an invalid length. [ 88.679938][ T5895] netlink: 'syz.1.17': attribute type 8 has an invalid length. [ 88.689409][ T5895] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.17'. [ 90.988431][ T5903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 91.027606][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.115871][ T5903] bridge_slave_0 (unregistering): left allmulticast mode [ 91.129574][ T5903] bridge_slave_0 (unregistering): left promiscuous mode [ 91.139831][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.224870][ T5909] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.20'. [ 91.247556][ T5907] netlink: 'syz.1.20': attribute type 4 has an invalid length. [ 91.265557][ T5907] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20'. [ 91.299420][ T5913] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.21'. [ 91.309586][ T5913] openvswitch: netlink: IP tunnel dst address not specified [ 91.608959][ T5918] netlink: 'syz.1.23': attribute type 10 has an invalid length. [ 91.916900][ T5785] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4 [ 92.326331][ T178] cfg80211: failed to load regulatory.db [ 92.621291][ T5785] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 92.631837][ T5785] Bluetooth: hci1: Injecting HCI hardware error event [ 92.640788][ T52] Bluetooth: hci1: hardware error 0x00 [ 92.754430][ T5940] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.32'. [ 92.768567][ T5940] openvswitch: netlink: IP tunnel dst address not specified [ 92.940449][ T5931] syzkaller0: entered promiscuous mode [ 92.946285][ T5931] syzkaller0: entered allmulticast mode [ 92.955032][ T5936] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.31'. [ 92.991816][ T5938] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 93.010592][ T5938] netlink: 152 bytes leftover after parsing attributes in process `syz.1.31'. [ 94.680389][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 95.098249][ T52] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4 [ 95.588061][ T5964] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.41'. [ 95.615693][ T5964] openvswitch: netlink: IP tunnel dst address not specified [ 95.689728][ T5948] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 96.093860][ T5970] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.43'. [ 96.143148][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 96.152385][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 96.160548][ T52] Bluetooth: hci0: hardware error 0x00 [ 96.203667][ T5970] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 96.248777][ T5970] netlink: 152 bytes leftover after parsing attributes in process `syz.3.43'. [ 97.241104][ T5988] netlink: 'syz.1.50': attribute type 10 has an invalid length. [ 97.645010][ T5999] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.53'. [ 97.738662][ T6002] raw_sendmsg: syz.1.56 forgot to set AF_INET. Fix it! [ 97.755641][ T5999] openvswitch: netlink: IP tunnel dst address not specified [ 98.078257][ T6009] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.58'. [ 98.230043][ T5992] syzkaller0: entered promiscuous mode [ 98.235696][ T5992] syzkaller0: entered allmulticast mode [ 98.242860][ T6009] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.58'. [ 98.271600][ T6007] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.57'. [ 98.284844][ T6012] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 98.311216][ T6012] netlink: 152 bytes leftover after parsing attributes in process `syz.3.57'. [ 98.441122][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 99.112641][ T6031] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 99.396218][ T6034] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.67'. [ 99.424909][ T6034] openvswitch: netlink: IP tunnel dst address not specified [ 100.628374][ T6026] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.64'. [ 100.639575][ T6031] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 100.655802][ T6043] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.70'. [ 100.687760][ T6044] netlink: 'syz.1.70': attribute type 4 has an invalid length. [ 100.726143][ T6044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.70'. [ 100.755176][ T6032] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 101.107801][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 101.443877][ T6060] openvswitch: netlink: IP tunnel dst address not specified [ 101.808688][ T6065] warning: `syz.2.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.155653][ T6059] syz.2.77 (6059) used greatest stack depth: 19560 bytes left [ 102.443794][ T52] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4 [ 102.550800][ T6078] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 103.075269][ T6071] syzkaller0: entered promiscuous mode [ 103.100893][ T6071] syzkaller0: entered allmulticast mode [ 103.124422][ T6081] __nla_validate_parse: 1 callbacks suppressed [ 103.124439][ T6081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.804092][ T6098] delete_channel: no stack [ 103.982893][ T6105] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.91'. [ 103.999957][ T6105] openvswitch: netlink: IP tunnel dst address not specified [ 106.531025][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.541351][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 106.555002][ T5785] Bluetooth: hci3: hardware error 0x00 [ 108.544107][ T6131] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.102'. [ 108.566011][ T6131] openvswitch: netlink: IP tunnel dst address not specified [ 108.584978][ T6124] netlink: 'syz.2.101': attribute type 10 has an invalid length. [ 108.600338][ T5785] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 108.609747][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'. [ 108.623071][ T6124] bridge0: port 3(team0) entered blocking state [ 108.633790][ T6124] bridge0: port 3(team0) entered disabled state [ 108.646743][ T6124] team0: entered allmulticast mode [ 108.653344][ T6124] team_slave_0: entered allmulticast mode [ 108.660180][ T6124] team_slave_1: entered allmulticast mode [ 108.739560][ T6124] team0: entered promiscuous mode [ 108.747418][ T6124] team_slave_0: entered promiscuous mode [ 108.760684][ T6124] team_slave_1: entered promiscuous mode [ 108.802762][ T6124] bridge0: port 3(team0) entered blocking state [ 108.812502][ T6124] bridge0: port 3(team0) entered forwarding state [ 108.832354][ T6127] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.100'. [ 108.900941][ T6130] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 108.908837][ T6130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.100'. [ 109.376571][ T6139] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.106'. [ 109.430701][ T6142] netlink: 'syz.0.108': attribute type 39 has an invalid length. [ 109.787807][ T6144] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 109.798205][ T6144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.106'. [ 109.820139][ T6149] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.110'. [ 109.862706][ T6152] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 109.906064][ T6152] netlink: 152 bytes leftover after parsing attributes in process `syz.1.110'. [ 109.950785][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.108'. [ 110.014021][ T6155] syzkaller0: entered promiscuous mode [ 110.019618][ T6155] syzkaller0: entered allmulticast mode [ 110.163299][ T6158] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.112'. [ 110.180904][ T6158] openvswitch: netlink: IP tunnel dst address not specified [ 111.854044][ T6161] bridge0: port 3(team0) entered disabled state [ 111.862562][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.872900][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.888189][ T6161] bridge0: entered allmulticast mode [ 112.245381][ T6177] openvswitch: netlink: IP tunnel dst address not specified [ 112.382214][ T6173] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 112.410064][ T6173] bridge0: port 3(team0) entered blocking state [ 112.426802][ T6173] bridge0: port 3(team0) entered disabled state [ 112.442202][ T6173] team0: entered allmulticast mode [ 112.457537][ T6173] team_slave_0: entered allmulticast mode [ 112.500685][ T6173] team_slave_1: entered allmulticast mode [ 112.573244][ T6173] team0: entered promiscuous mode [ 112.599295][ T6173] team_slave_0: entered promiscuous mode [ 112.646389][ T6173] team_slave_1: entered promiscuous mode [ 112.703881][ T6173] bridge0: port 3(team0) entered blocking state [ 112.711661][ T6173] bridge0: port 3(team0) entered forwarding state [ 113.154487][ T6184] netlink: 'syz.2.121': attribute type 4 has an invalid length. [ 113.435762][ T6186] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 113.442986][ T6186] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 114.222364][ T6197] __nla_validate_parse: 4 callbacks suppressed [ 114.222383][ T6197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.123'. [ 114.796747][ T6199] syzkaller0: entered promiscuous mode [ 114.802669][ T6199] syzkaller0: entered allmulticast mode [ 115.914944][ T6220] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.131'. [ 115.942479][ T6220] openvswitch: netlink: IP tunnel dst address not specified [ 118.496092][ T6227] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.134'. [ 118.532871][ T6228] netlink: 'syz.3.134': attribute type 4 has an invalid length. [ 118.568545][ T6228] netlink: 152 bytes leftover after parsing attributes in process `syz.3.134'. [ 118.595925][ T6229] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 118.611898][ T6229] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 118.931977][ T6243] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.967523][ T6247] netlink: 'syz.0.139': attribute type 39 has an invalid length. [ 119.077989][ T6243] netlink: 'syz.2.138': attribute type 39 has an invalid length. [ 119.436125][ T6250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'. [ 119.936541][ T6256] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.141'. [ 119.985263][ T6256] openvswitch: netlink: IP tunnel dst address not specified [ 120.015271][ T6263] Driver unsupported XDP return value 0 on prog (id 128) dev N/A, expect packet loss! [ 120.904867][ T6280] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 120.920496][ T6280] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 122.500545][ T6297] syzkaller0: entered promiscuous mode [ 122.514555][ T6297] syzkaller0: entered allmulticast mode [ 133.266573][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.273525][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.784347][ T6354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.175'. [ 135.343861][ T6377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.183'. [ 135.725507][ T6382] netlink: 'syz.2.185': attribute type 12 has an invalid length. [ 135.734156][ T6382] netlink: 112 bytes leftover after parsing attributes in process `syz.2.185'. [ 135.934336][ T6385] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.186'. [ 136.035391][ T6395] netlink: 'syz.1.186': attribute type 4 has an invalid length. [ 136.122306][ T6395] netlink: 152 bytes leftover after parsing attributes in process `syz.1.186'. [ 136.387855][ T6397] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 136.429928][ T6397] netlink: 152 bytes leftover after parsing attributes in process `syz.3.187'. [ 136.463728][ T6387] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.187'. [ 136.661494][ T6399] syzkaller0: entered promiscuous mode [ 136.690018][ T6399] syzkaller0: entered allmulticast mode [ 137.765711][ T6421] netlink: 'syz.3.198': attribute type 9 has an invalid length. [ 137.774106][ T6421] netlink: 399 bytes leftover after parsing attributes in process `syz.3.198'. [ 139.372212][ T6406] netlink: 'syz.2.193': attribute type 39 has an invalid length. [ 139.383455][ T6426] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.200'. [ 139.402384][ T6430] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 139.410379][ T6430] netlink: 152 bytes leftover after parsing attributes in process `syz.3.200'. [ 140.125977][ T6444] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.207'. [ 140.192617][ T6444] netlink: 'syz.0.207': attribute type 4 has an invalid length. [ 140.225834][ T6444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.207'. [ 140.318978][ T6450] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.210'. [ 140.393925][ T6450] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 140.443211][ T6450] netlink: 152 bytes leftover after parsing attributes in process `syz.2.210'. [ 141.404541][ T6456] syzkaller0: entered promiscuous mode [ 141.424936][ T6456] syzkaller0: entered allmulticast mode [ 141.442589][ T6463] netlink: 'syz.1.213': attribute type 39 has an invalid length. [ 142.802546][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.220'. [ 144.050102][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.220'. [ 144.059596][ T6486] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.222'. [ 144.076001][ T6487] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 144.087046][ T6487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.222'. [ 144.427179][ T6496] netlink: 'syz.3.226': attribute type 39 has an invalid length. [ 147.957672][ T6517] syzkaller0: entered promiscuous mode [ 147.986876][ T6517] syzkaller0: entered allmulticast mode [ 148.004912][ T6526] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.234'. [ 149.655324][ T6543] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.240'. [ 149.681142][ T6543] openvswitch: netlink: Geneve option length err (len 20224, max 255). [ 149.926153][ T6546] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.739099][ T6530] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 151.747211][ T6530] netlink: 152 bytes leftover after parsing attributes in process `syz.0.234'. [ 152.103891][ T6561] delete_channel: no stack [ 152.122175][ T6553] netlink: 'syz.0.242': attribute type 39 has an invalid length. [ 152.136418][ T6561] delete_channel: no stack [ 154.463647][ T6581] syzkaller0: entered promiscuous mode [ 154.477141][ T6581] syzkaller0: entered allmulticast mode [ 154.487672][ T6586] netlink: 'syz.2.253': attribute type 4 has an invalid length. [ 154.501405][ T6586] netlink: 152 bytes leftover after parsing attributes in process `syz.2.253'. [ 154.566425][ T6585] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.253'. [ 155.835592][ T6612] FAULT_INJECTION: forcing a failure. [ 155.835592][ T6612] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.854320][ T6612] CPU: 0 PID: 6612 Comm: syz.0.262 Not tainted syzkaller #0 [ 155.861770][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.872095][ T6612] Call Trace: [ 155.875410][ T6612] [ 155.878472][ T6612] dump_stack_lvl+0x18c/0x250 [ 155.883380][ T6612] ? show_regs_print_info+0x20/0x20 [ 155.888965][ T6612] ? load_image+0x420/0x420 [ 155.894239][ T6612] ? __lock_acquire+0x7d80/0x7d80 [ 155.899374][ T6612] ? snprintf+0xe9/0x140 [ 155.903821][ T6612] should_fail_ex+0x394/0x4c0 [ 155.908622][ T6612] _copy_to_user+0x2f/0xa0 [ 155.913147][ T6612] simple_read_from_buffer+0xe7/0x150 [ 155.918719][ T6612] proc_fail_nth_read+0x1e8/0x260 [ 155.923771][ T6612] ? proc_fault_inject_write+0x360/0x360 [ 155.929828][ T6612] ? fsnotify_perm+0x271/0x5e0 [ 155.934823][ T6612] ? proc_fault_inject_write+0x360/0x360 [ 155.940759][ T6612] vfs_read+0x298/0x990 [ 155.944945][ T6612] ? kernel_read+0x1e0/0x1e0 [ 155.950206][ T6612] ? __fget_files+0x28/0x460 [ 155.954861][ T6612] ? __fget_files+0x3fc/0x460 [ 155.960249][ T6612] ? __fdget_pos+0x2a3/0x330 [ 155.965143][ T6612] ? ksys_read+0x74/0x260 [ 155.969508][ T6612] ksys_read+0x151/0x260 [ 155.973875][ T6612] ? vfs_write+0x9a0/0x9a0 [ 155.978373][ T6612] ? lockdep_hardirqs_on+0x98/0x150 [ 155.983744][ T6612] do_syscall_64+0x55/0xb0 [ 155.988283][ T6612] ? clear_bhb_loop+0x40/0x90 [ 155.993056][ T6612] ? clear_bhb_loop+0x40/0x90 [ 155.998011][ T6612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.004258][ T6612] RIP: 0033:0x7f985455e90e [ 156.008704][ T6612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.029224][ T6612] RSP: 002b:00007f9855395fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.037762][ T6612] RAX: ffffffffffffffda RBX: 00007f98553966c0 RCX: 00007f985455e90e [ 156.045992][ T6612] RDX: 000000000000000f RSI: 00007f98553960a0 RDI: 0000000000000000 [ 156.053980][ T6612] RBP: 00007f9855396090 R08: 0000000000000000 R09: 0000000000000000 [ 156.062078][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.070156][ T6612] R13: 00007f9854826128 R14: 00007f9854826090 R15: 00007ffd72a86638 [ 156.078191][ T6612] [ 156.823888][ T6619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'. [ 157.914730][ T6619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'. [ 158.177507][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.268'. [ 158.194633][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.268'. [ 158.280897][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.268'. [ 158.812710][ T6650] delete_channel: no stack [ 158.817673][ T6650] delete_channel: no stack [ 159.806867][ T6653] syzkaller0: entered promiscuous mode [ 159.815489][ T6653] syzkaller0: entered allmulticast mode [ 162.650073][ T6692] delete_channel: no stack [ 162.654697][ T6692] delete_channel: no stack [ 164.739989][ T6695] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 164.747920][ T6695] netlink: 55 bytes leftover after parsing attributes in process `syz.2.291'. [ 165.582399][ T6706] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.296'. [ 165.783922][ T6713] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.299'. [ 165.829968][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 166.591104][ T6716] syzkaller0: entered promiscuous mode [ 166.596670][ T6716] syzkaller0: entered allmulticast mode [ 166.610007][ T6724] netlink: 'syz.3.303': attribute type 5 has an invalid length. [ 166.618209][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 166.656620][ T6729] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 166.699927][ T6729] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.304'. [ 169.986791][ T6770] netlink: 52 bytes leftover after parsing attributes in process `syz.3.318'. [ 172.730697][ T6815] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 173.081837][ T6815] gre0: entered promiscuous mode [ 173.087191][ T6815] gre0: entered allmulticast mode [ 173.139825][ T6815] team0: Device gre0 is of different type [ 173.505098][ T6823] syzkaller0: entered promiscuous mode [ 173.515063][ T6823] syzkaller0: entered allmulticast mode [ 173.551617][ T6828] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.336'. [ 177.901441][ T6887] syzkaller0: entered promiscuous mode [ 177.907624][ T6887] syzkaller0: entered allmulticast mode [ 179.345815][ T6912] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.366'. [ 179.380020][ T6912] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 179.388522][ T6912] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 180.967269][ T6913] netlink: 'syz.1.366': attribute type 17 has an invalid length. [ 180.975221][ T6913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.366'. [ 180.990594][ T6913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.379982][ T6928] netlink: 'syz.3.371': attribute type 2 has an invalid length. [ 181.450368][ T6928] netlink: 'syz.3.371': attribute type 8 has an invalid length. [ 181.490131][ T6928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.371'. [ 182.464464][ T6941] netlink: 'syz.3.373': attribute type 6 has an invalid length. [ 182.501333][ T6941] netlink: 164 bytes leftover after parsing attributes in process `syz.3.373'. [ 182.772328][ T6944] syz.3.373 uses obsolete (PF_INET,SOCK_PACKET) [ 182.945029][ T6927] €Â0: renamed from pim6reg1 [ 183.836068][ T6958] syzkaller0: entered promiscuous mode [ 183.843926][ T6958] syzkaller0: entered allmulticast mode [ 189.311594][ T7028] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.398'. [ 189.333932][ T7032] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 189.349237][ T7032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.398'. [ 190.173797][ T7042] syzkaller0: entered promiscuous mode [ 190.182743][ T7042] syzkaller0: entered allmulticast mode [ 193.568026][ T7060] €Â0: renamed from pim6reg1 [ 194.099482][ T7074] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.410'. [ 194.138872][ T7074] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 194.153391][ T7074] netlink: 152 bytes leftover after parsing attributes in process `syz.1.410'. [ 194.410652][ T7079] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 194.588068][ T7079] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 194.760689][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.767122][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.134191][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.248924][ T7079] bond0: entered promiscuous mode [ 195.262500][ T7079] bond_slave_0: entered promiscuous mode [ 195.273200][ T7079] bond_slave_1: entered promiscuous mode [ 195.290455][ T7079] bond0: entered allmulticast mode [ 195.306228][ T7079] bond_slave_0: entered allmulticast mode [ 195.326431][ T7079] bond_slave_1: entered allmulticast mode [ 195.341541][ T7079] team0: Port device bond0 added [ 195.362086][ T7079] syz.1.413 (7079) used greatest stack depth: 18728 bytes left [ 198.047960][ T5785] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 198.641621][ T7112] €Â0: renamed from pim6reg1 [ 201.758246][ T7143] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 201.902904][ T7136] syzkaller0: entered promiscuous mode [ 201.909999][ T7136] syzkaller0: entered allmulticast mode [ 201.919267][ T7144] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 202.120619][ T5785] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 202.130632][ T5785] Bluetooth: hci2: Injecting HCI hardware error event [ 202.138730][ T52] Bluetooth: hci2: hardware error 0x00 [ 202.320326][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.382251][ T7144] team0: Port device bond0 added [ 202.541740][ T7144] syz.0.431 (7144) used greatest stack depth: 18088 bytes left [ 204.280904][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 206.775092][ T7174] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 206.819798][ T7174] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.440'. [ 206.897331][ T7177] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.439'. [ 207.010579][ T7170] netlink: 'syz.3.439': attribute type 4 has an invalid length. [ 207.018742][ T7170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.439'. [ 207.541603][ T7187] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 207.763031][ T7187] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 208.184916][ T7187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.258678][ T7187] bond0: entered promiscuous mode [ 208.265228][ T7187] bond_slave_0: entered promiscuous mode [ 208.278447][ T7187] bond_slave_1: entered promiscuous mode [ 208.297163][ T7187] bond0: entered allmulticast mode [ 208.312403][ T7187] bond_slave_0: entered allmulticast mode [ 208.374278][ T7187] bond_slave_1: entered allmulticast mode [ 208.572782][ T7187] team0: Port device bond0 added [ 208.592176][ T7196] netlink: 'syz.1.447': attribute type 33 has an invalid length. [ 208.611031][ T7196] netlink: 152 bytes leftover after parsing attributes in process `syz.1.447'. [ 208.629135][ T7196] `: renamed from ip6tnl0 (while UP) [ 208.905100][ T7196] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 209.886377][ T7205] syzkaller0: entered promiscuous mode [ 209.909871][ T7205] syzkaller0: entered allmulticast mode [ 209.917249][ T7206] netlink: 'syz.3.449': attribute type 22 has an invalid length. [ 209.933289][ T7217] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.454'. [ 209.971454][ T7214] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 209.996731][ T7214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.454'. [ 210.048038][ T7214] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.692952][ T7238] veth0_vlan: entered allmulticast mode [ 213.796293][ T7240] ÿÿÿÿÿÿ: renamed from vlan1 [ 213.928333][ T7247] FAULT_INJECTION: forcing a failure. [ 213.928333][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.948666][ T7247] CPU: 1 PID: 7247 Comm: syz.0.464 Not tainted syzkaller #0 [ 213.956166][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.966764][ T7247] Call Trace: [ 213.970164][ T7247] [ 213.973214][ T7247] dump_stack_lvl+0x18c/0x250 [ 213.978455][ T7247] ? show_regs_print_info+0x20/0x20 [ 213.984201][ T7247] ? load_image+0x420/0x420 [ 213.989147][ T7247] ? __lock_acquire+0x7d80/0x7d80 [ 213.994300][ T7247] should_fail_ex+0x394/0x4c0 [ 213.999293][ T7247] _copy_from_user+0x2f/0xe0 [ 214.004575][ T7247] __copy_msghdr+0x388/0x560 [ 214.009546][ T7247] ___sys_sendmsg+0x214/0x360 [ 214.014621][ T7247] ? __sys_sendmsg+0x2b0/0x2b0 [ 214.020165][ T7247] ? __lock_acquire+0x7d80/0x7d80 [ 214.025443][ T7247] __se_sys_sendmsg+0x1d0/0x2c0 [ 214.030441][ T7247] ? __x64_sys_sendmsg+0x80/0x80 [ 214.035540][ T7247] ? lockdep_hardirqs_on+0x98/0x150 [ 214.040900][ T7247] do_syscall_64+0x55/0xb0 [ 214.045356][ T7247] ? clear_bhb_loop+0x40/0x90 [ 214.050094][ T7247] ? clear_bhb_loop+0x40/0x90 [ 214.054800][ T7247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.060891][ T7247] RIP: 0033:0x7f985459e0d9 [ 214.065508][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.086043][ T7247] RSP: 002b:00007f98553b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.095219][ T7247] RAX: ffffffffffffffda RBX: 00007f9854825fa0 RCX: 00007f985459e0d9 [ 214.103706][ T7247] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000004 [ 214.111818][ T7247] RBP: 00007f98553b7090 R08: 0000000000000000 R09: 0000000000000000 [ 214.120716][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.129317][ T7247] R13: 00007f9854826038 R14: 00007f9854825fa0 R15: 00007ffd72a86638 [ 214.137842][ T7247] [ 214.405626][ T7250] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.465'. [ 214.541797][ T7254] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.467'. [ 214.564891][ T7258] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 214.619870][ T7258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.467'. [ 214.654610][ T7258] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.261972][ T7268] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 215.290022][ T7268] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 215.427122][ T7272] veth0_vlan: entered allmulticast mode [ 215.589135][ T7273] ÿÿÿÿÿÿ: renamed from vlan1 [ 215.860031][ T7274] syzkaller0: entered promiscuous mode [ 215.870261][ T7274] syzkaller0: entered allmulticast mode [ 218.835475][ T7285] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.478'. [ 218.849287][ T7289] netlink: 'syz.3.478': attribute type 4 has an invalid length. [ 218.858257][ T7289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.478'. [ 218.869133][ T7289] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.886297][ T7293] netlink: 'syz.1.481': attribute type 13 has an invalid length. [ 218.909812][ T7293] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.481'. [ 218.919054][ T7295] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.481'. [ 220.239511][ T7312] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.494'. [ 221.459937][ T7317] netlink: 'syz.2.494': attribute type 4 has an invalid length. [ 221.481070][ T7317] netlink: 152 bytes leftover after parsing attributes in process `syz.2.494'. [ 222.661803][ T7335] syzkaller0: entered promiscuous mode [ 222.698390][ T7335] syzkaller0: entered allmulticast mode [ 223.202737][ T7338] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.495'. [ 228.376492][ T7363] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.502'. [ 228.390081][ T7367] netlink: 'syz.0.502': attribute type 4 has an invalid length. [ 228.397890][ T7367] netlink: 152 bytes leftover after parsing attributes in process `syz.0.502'. [ 228.408006][ T7367] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 228.635854][ T7375] netlink: 'syz.1.506': attribute type 9 has an invalid length. [ 228.645020][ T7375] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.506'. [ 228.739821][ T7378] netlink: 'syz.1.506': attribute type 9 has an invalid length. [ 228.773868][ T7378] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.506'. [ 229.292638][ T7385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.510'. [ 230.039642][ T7395] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.513'. [ 230.157341][ T7395] netlink: 'syz.0.513': attribute type 4 has an invalid length. [ 230.175710][ T7395] netlink: 152 bytes leftover after parsing attributes in process `syz.0.513'. [ 230.242653][ T7395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 230.483927][ T7402] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.515'. [ 231.141582][ T7398] syzkaller0: entered promiscuous mode [ 231.147785][ T7398] syzkaller0: entered allmulticast mode [ 233.778063][ T7432] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.526'. [ 233.794861][ T7433] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 233.804731][ T7433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.526'. [ 233.822010][ T7433] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.120676][ T7452] FAULT_INJECTION: forcing a failure. [ 234.120676][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.182970][ T7452] CPU: 1 PID: 7452 Comm: syz.1.535 Not tainted syzkaller #0 [ 234.190357][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.200669][ T7452] Call Trace: [ 234.204009][ T7452] [ 234.206981][ T7452] dump_stack_lvl+0x18c/0x250 [ 234.211785][ T7452] ? show_regs_print_info+0x20/0x20 [ 234.217125][ T7452] ? load_image+0x420/0x420 [ 234.221690][ T7452] ? __lock_acquire+0x7d80/0x7d80 [ 234.226936][ T7452] ? __virt_addr_valid+0x10c/0x380 [ 234.232110][ T7452] should_fail_ex+0x394/0x4c0 [ 234.236946][ T7452] _copy_from_user+0x2f/0xe0 [ 234.241628][ T7452] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 234.246909][ T7452] bpf_vlog_finalize+0x174/0x3e0 [ 234.251994][ T7452] btf_new_fd+0x4ca/0x9e0 [ 234.256385][ T7452] ? bpf_btf_show_fdinfo+0x80/0x80 [ 234.261746][ T7452] ? capable+0x88/0xe0 [ 234.265934][ T7452] __sys_bpf+0x670/0x890 [ 234.270289][ T7452] ? bpf_link_show_fdinfo+0x390/0x390 [ 234.275956][ T7452] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.282572][ T7452] __x64_sys_bpf+0x7c/0x90 [ 234.287005][ T7452] do_syscall_64+0x55/0xb0 [ 234.291535][ T7452] ? clear_bhb_loop+0x40/0x90 [ 234.296430][ T7452] ? clear_bhb_loop+0x40/0x90 [ 234.301305][ T7452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.308184][ T7452] RIP: 0033:0x7f366ff9e0d9 [ 234.312620][ T7452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.332857][ T7452] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.341295][ T7452] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 234.349279][ T7452] RDX: 0000000000000028 RSI: 0000200000001480 RDI: 0000000000000012 [ 234.357300][ T7452] RBP: 00007f3670dac090 R08: 0000000000000000 R09: 0000000000000000 [ 234.365319][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.373584][ T7452] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 234.381711][ T7452] [ 234.859459][ T7448] syzkaller0: entered promiscuous mode [ 234.865973][ T7448] syzkaller0: entered allmulticast mode [ 237.084725][ T7479] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.544'. [ 237.113066][ T7478] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 237.141204][ T7478] netlink: 152 bytes leftover after parsing attributes in process `syz.1.544'. [ 237.163003][ T7478] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 237.314143][ T7485] veth1_macvtap: left promiscuous mode [ 237.336340][ T7485] macsec0: entered allmulticast mode [ 237.634632][ T7497] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.550'. [ 237.851617][ T7503] FAULT_INJECTION: forcing a failure. [ 237.851617][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.907268][ T7503] CPU: 0 PID: 7503 Comm: syz.2.553 Not tainted syzkaller #0 [ 237.914645][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.925092][ T7503] Call Trace: [ 237.928410][ T7503] [ 237.931460][ T7503] dump_stack_lvl+0x18c/0x250 [ 237.936715][ T7503] ? show_regs_print_info+0x20/0x20 [ 237.942052][ T7503] ? load_image+0x420/0x420 [ 237.946612][ T7503] ? __might_fault+0xaa/0x120 [ 237.951521][ T7503] ? __lock_acquire+0x7d80/0x7d80 [ 237.956700][ T7503] should_fail_ex+0x394/0x4c0 [ 237.961440][ T7503] _copy_from_user+0x2f/0xe0 [ 237.966164][ T7503] get_user_ifreq+0x6b/0x180 [ 237.970814][ T7503] sock_ioctl+0x6f1/0x7e0 [ 237.975193][ T7503] ? sock_poll+0x3e0/0x3e0 [ 237.979661][ T7503] ? bpf_lsm_file_ioctl+0x9/0x10 [ 237.984724][ T7503] ? security_file_ioctl+0x80/0xa0 [ 237.989888][ T7503] ? sock_poll+0x3e0/0x3e0 [ 237.994557][ T7503] __se_sys_ioctl+0xfd/0x170 [ 237.999190][ T7503] do_syscall_64+0x55/0xb0 [ 238.003671][ T7503] ? clear_bhb_loop+0x40/0x90 [ 238.008396][ T7503] ? clear_bhb_loop+0x40/0x90 [ 238.013124][ T7503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.019151][ T7503] RIP: 0033:0x7fac9cd9e0d9 [ 238.023861][ T7503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.043596][ T7503] RSP: 002b:00007fac9dcab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.052159][ T7503] RAX: ffffffffffffffda RBX: 00007fac9d025fa0 RCX: 00007fac9cd9e0d9 [ 238.060268][ T7503] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 238.068449][ T7503] RBP: 00007fac9dcab090 R08: 0000000000000000 R09: 0000000000000000 [ 238.076543][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.084901][ T7503] R13: 00007fac9d026038 R14: 00007fac9d025fa0 R15: 00007ffe988a5de8 [ 238.093459][ T7503] [ 238.785722][ T7510] syzkaller0: entered promiscuous mode [ 238.792275][ T7510] syzkaller0: entered allmulticast mode [ 241.025213][ T7516] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.557'. [ 241.034799][ T7519] netlink: 'syz.2.557': attribute type 4 has an invalid length. [ 241.043044][ T7519] netlink: 152 bytes leftover after parsing attributes in process `syz.2.557'. [ 241.053642][ T7522] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.559'. [ 241.064218][ T7522] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 241.079967][ T7528] netlink: 'syz.0.560': attribute type 5 has an invalid length. [ 241.223076][ T7532] netlink: 112 bytes leftover after parsing attributes in process `syz.1.562'. [ 242.529187][ T7559] netlink: 'syz.2.569': attribute type 21 has an invalid length. [ 242.548146][ T7559] netlink: 152 bytes leftover after parsing attributes in process `syz.2.569'. [ 242.573999][ T7561] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 242.610408][ T7557] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.570'. [ 242.701041][ T7557] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 242.746141][ T7557] netlink: 152 bytes leftover after parsing attributes in process `syz.1.570'. [ 242.938679][ T7557] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.168657][ T7565] syzkaller0: entered promiscuous mode [ 243.209894][ T7565] syzkaller0: entered allmulticast mode [ 243.980904][ T7577] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 244.000111][ T7577] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.575'. [ 244.009600][ T7577] netlink: 1 bytes leftover after parsing attributes in process `syz.1.575'. [ 244.070809][ T7577] netlink: 'syz.1.575': attribute type 3 has an invalid length. [ 244.079415][ T7577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.575'. [ 246.520031][ T7594] netlink: 'syz.1.581': attribute type 21 has an invalid length. [ 246.555456][ T7594] __nla_validate_parse: 1 callbacks suppressed [ 246.555521][ T7594] netlink: 152 bytes leftover after parsing attributes in process `syz.1.581'. [ 246.795771][ T7600] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.582'. [ 246.877302][ T7600] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 246.893615][ T7600] netlink: 152 bytes leftover after parsing attributes in process `syz.2.582'. [ 246.968292][ T7604] syzkaller0: entered promiscuous mode [ 246.975021][ T7604] syzkaller0: entered allmulticast mode [ 246.995394][ T7602] sit0: entered allmulticast mode [ 247.112626][ T7605] sit0: entered promiscuous mode [ 247.144095][ T7609] FAULT_INJECTION: forcing a failure. [ 247.144095][ T7609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.165294][ T7609] CPU: 1 PID: 7609 Comm: syz.2.586 Not tainted syzkaller #0 [ 247.172669][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.183105][ T7609] Call Trace: [ 247.186642][ T7609] [ 247.189595][ T7609] dump_stack_lvl+0x18c/0x250 [ 247.194382][ T7609] ? show_regs_print_info+0x20/0x20 [ 247.199624][ T7609] ? load_image+0x420/0x420 [ 247.204343][ T7609] ? __lock_acquire+0x7d80/0x7d80 [ 247.209481][ T7609] should_fail_ex+0x394/0x4c0 [ 247.214273][ T7609] prepare_alloc_pages+0x1e1/0x5b0 [ 247.219413][ T7609] __alloc_pages+0x134/0x460 [ 247.224202][ T7609] ? zone_statistics+0x170/0x170 [ 247.229163][ T7609] ? alloc_pages+0x4e1/0x740 [ 247.233853][ T7609] ? do_raw_spin_unlock+0x121/0x230 [ 247.239091][ T7609] __get_free_pages+0xc/0x30 [ 247.243689][ T7609] kasan_populate_vmalloc_pte+0x35/0x100 [ 247.249550][ T7609] __apply_to_page_range+0x860/0xdd0 [ 247.254945][ T7609] ? kasan_populate_vmalloc+0x70/0x70 [ 247.260438][ T7609] ? apply_to_page_range+0x50/0x50 [ 247.265559][ T7609] ? do_raw_spin_unlock+0x121/0x230 [ 247.270779][ T7609] alloc_vmap_area+0x1d26/0x1e50 [ 247.275756][ T7609] ? vm_map_ram+0xcf0/0xcf0 [ 247.280403][ T7609] ? rcu_is_watching+0x15/0xb0 [ 247.285720][ T7609] __get_vm_area_node+0x162/0x370 [ 247.290889][ T7609] __vmalloc_node_range+0x36f/0x1320 [ 247.296203][ T7609] ? reuseport_array_alloc+0x98/0x120 [ 247.301610][ T7609] ? aa_get_newest_label+0xfd/0x5c0 [ 247.306828][ T7609] ? end_current_label_crit_section+0x170/0x170 [ 247.313091][ T7609] ? free_vm_area+0x50/0x50 [ 247.317786][ T7609] ? apparmor_capable+0x137/0x1a0 [ 247.323035][ T7609] bpf_map_area_alloc+0xf1/0x110 [ 247.328012][ T7609] ? reuseport_array_alloc+0x98/0x120 [ 247.333534][ T7609] reuseport_array_alloc+0x98/0x120 [ 247.338945][ T7609] map_create+0x877/0x12f0 [ 247.343465][ T7609] __sys_bpf+0x651/0x890 [ 247.347747][ T7609] ? bpf_link_show_fdinfo+0x390/0x390 [ 247.353174][ T7609] ? lock_chain_count+0x20/0x20 [ 247.358052][ T7609] __x64_sys_bpf+0x7c/0x90 [ 247.362493][ T7609] do_syscall_64+0x55/0xb0 [ 247.366923][ T7609] ? clear_bhb_loop+0x40/0x90 [ 247.371644][ T7609] ? clear_bhb_loop+0x40/0x90 [ 247.376341][ T7609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.382251][ T7609] RIP: 0033:0x7fac9cd9e0d9 [ 247.390156][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.411211][ T7609] RSP: 002b:00007fac9dcab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.419741][ T7609] RAX: ffffffffffffffda RBX: 00007fac9d025fa0 RCX: 00007fac9cd9e0d9 [ 247.427769][ T7609] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 247.435848][ T7609] RBP: 00007fac9dcab090 R08: 0000000000000000 R09: 0000000000000000 [ 247.444089][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.452433][ T7609] R13: 00007fac9d026038 R14: 00007fac9d025fa0 R15: 00007ffe988a5de8 [ 247.460443][ T7609] [ 250.027719][ T7630] syz.2.591[7630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.028009][ T7630] syz.2.591[7630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.046013][ T7630] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 250.068427][ T7630] netlink: 60179 bytes leftover after parsing attributes in process `syz.2.591'. [ 250.232501][ T7635] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.593'. [ 250.437724][ T7639] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.594'. [ 250.468880][ T7639] netlink: 'syz.1.594': attribute type 4 has an invalid length. [ 250.482271][ T7639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.594'. [ 250.508347][ T7639] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 250.559360][ T7643] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 250.732344][ T7645] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 250.840124][ T7645] netlink: 55 bytes leftover after parsing attributes in process `syz.0.603'. [ 251.388433][ T7660] syzkaller0: entered promiscuous mode [ 251.406065][ T7660] syzkaller0: entered allmulticast mode [ 255.180829][ T7682] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.608'. [ 255.190297][ T7683] netlink: 'syz.1.608': attribute type 4 has an invalid length. [ 255.197983][ T7683] netlink: 152 bytes leftover after parsing attributes in process `syz.1.608'. [ 255.209038][ T7683] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 255.529970][ T7692] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 256.124553][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.131061][ T7702] netlink: 'syz.0.613': attribute type 21 has an invalid length. [ 256.131470][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.139952][ T7702] netlink: 152 bytes leftover after parsing attributes in process `syz.0.613'. [ 257.160809][ T7713] syzkaller0: entered promiscuous mode [ 257.166625][ T7713] syzkaller0: entered allmulticast mode [ 257.189581][ T7719] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 257.206588][ T7719] netlink: 152 bytes leftover after parsing attributes in process `syz.1.619'. [ 257.252650][ T7719] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 257.300547][ T7715] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.619'. [ 257.329471][ T7721] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 258.276214][ T7741] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.629'. [ 261.047567][ T7746] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.630'. [ 261.126412][ T7753] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 261.279095][ T7752] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.632'. [ 261.340339][ T7752] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 261.353905][ T7752] netlink: 152 bytes leftover after parsing attributes in process `syz.1.632'. [ 261.389124][ T7752] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 261.483124][ T7755] sit0: entered allmulticast mode [ 261.633649][ T7755] sit0: entered promiscuous mode [ 262.081768][ T7770] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 262.180075][ T7770] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.639'. [ 262.697384][ T7775] syzkaller0: entered promiscuous mode [ 262.705356][ T7775] syzkaller0: entered allmulticast mode [ 264.901639][ T7785] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 264.909565][ T7791] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.647'. [ 264.920764][ T7790] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 264.934335][ T7790] netlink: 152 bytes leftover after parsing attributes in process `syz.3.647'. [ 264.951747][ T7790] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 265.020706][ T7801] veth1_to_bond: entered allmulticast mode [ 265.112805][ T7804] sit0: left promiscuous mode [ 265.504690][ T7809] sit0: entered promiscuous mode [ 265.558024][ T7806] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 265.579639][ T7815] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 265.595816][ T7814] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 265.620979][ T7813] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 265.951174][ T7813] nlmon0: entered promiscuous mode [ 266.006076][ T7813] nlmon0: entered allmulticast mode [ 266.027328][ T7813] team0: Device nlmon0 is of different type [ 266.144208][ T7839] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 266.649549][ T7841] syzkaller0: entered promiscuous mode [ 266.664598][ T7841] syzkaller0: entered allmulticast mode [ 266.722734][ T7844] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.662'. [ 270.468846][ T7850] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 270.477004][ T7850] netlink: 152 bytes leftover after parsing attributes in process `syz.2.662'. [ 270.486986][ T7869] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 270.794627][ T7879] syzkaller0: entered promiscuous mode [ 270.809913][ T7879] syzkaller0: entered allmulticast mode [ 270.932762][ T7881] syzkaller0: entered promiscuous mode [ 270.938932][ T7881] syzkaller0: entered allmulticast mode [ 275.559328][ T7904] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.682'. [ 275.569238][ T7905] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 275.578113][ T7905] netlink: 152 bytes leftover after parsing attributes in process `syz.2.682'. [ 275.588153][ T7908] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 277.065305][ T7935] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.693'. [ 277.861701][ T7937] syzkaller0: entered promiscuous mode [ 277.867254][ T7937] syzkaller0: entered allmulticast mode [ 277.875480][ T7935] netlink: 'syz.1.693': attribute type 4 has an invalid length. [ 277.894404][ T7935] netlink: 152 bytes leftover after parsing attributes in process `syz.1.693'. [ 277.915093][ T7935] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 277.944858][ T7941] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 282.026628][ T7968] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 282.035274][ T7976] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.706'. [ 282.060249][ T7977] netlink: 'syz.3.706': attribute type 4 has an invalid length. [ 282.067974][ T7977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.706'. [ 282.086738][ T7977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 282.221982][ T7985] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 283.798751][ T8006] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.716'. [ 283.845357][ T8006] netlink: 'syz.2.716': attribute type 4 has an invalid length. [ 283.874619][ T8006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.716'. [ 284.699994][ T8010] syzkaller0: entered promiscuous mode [ 284.705953][ T8010] syzkaller0: entered allmulticast mode [ 284.713864][ T8021] netlink: 'syz.0.720': attribute type 10 has an invalid length. [ 285.605189][ T8036] FAULT_INJECTION: forcing a failure. [ 285.605189][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 285.662824][ T8036] CPU: 0 PID: 8036 Comm: syz.0.726 Not tainted syzkaller #0 [ 285.670448][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.680554][ T8036] Call Trace: [ 285.683954][ T8036] [ 285.686920][ T8036] dump_stack_lvl+0x18c/0x250 [ 285.691658][ T8036] ? show_regs_print_info+0x20/0x20 [ 285.696910][ T8036] ? load_image+0x420/0x420 [ 285.701915][ T8036] ? __lock_acquire+0x7d80/0x7d80 [ 285.707005][ T8036] should_fail_ex+0x394/0x4c0 [ 285.711744][ T8036] should_failslab+0x9/0x20 [ 285.716306][ T8036] slab_pre_alloc_hook+0x59/0x300 [ 285.721486][ T8036] ? security_sk_alloc+0x4b/0x130 [ 285.726649][ T8036] ? security_sk_alloc+0x4b/0x130 [ 285.731731][ T8036] __kmem_cache_alloc_node+0x53/0x250 [ 285.737337][ T8036] ? security_sk_alloc+0x4b/0x130 [ 285.742418][ T8036] __kmalloc+0xa7/0x240 [ 285.746636][ T8036] security_sk_alloc+0x4b/0x130 [ 285.751798][ T8036] sk_prot_alloc+0x101/0x210 [ 285.756446][ T8036] ? sk_alloc+0x24/0x350 [ 285.760870][ T8036] sk_alloc+0x3a/0x350 [ 285.765054][ T8036] ? bpf_ctx_init+0x154/0x190 [ 285.770663][ T8036] bpf_prog_test_run_skb+0x371/0x18f0 [ 285.776179][ T8036] ? __fget_files+0x28/0x460 [ 285.780821][ T8036] ? __fget_files+0x3fc/0x460 [ 285.785589][ T8036] ? cpu_online+0x60/0x60 [ 285.789978][ T8036] bpf_prog_test_run+0x31f/0x390 [ 285.794982][ T8036] __sys_bpf+0x49d/0x890 [ 285.799278][ T8036] ? read_tsc+0x9/0x20 [ 285.803398][ T8036] ? bpf_link_show_fdinfo+0x390/0x390 [ 285.808836][ T8036] ? lock_chain_count+0x20/0x20 [ 285.813781][ T8036] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 285.819821][ T8036] __x64_sys_bpf+0x7c/0x90 [ 285.824297][ T8036] do_syscall_64+0x55/0xb0 [ 285.828770][ T8036] ? clear_bhb_loop+0x40/0x90 [ 285.833595][ T8036] ? clear_bhb_loop+0x40/0x90 [ 285.838326][ T8036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.844277][ T8036] RIP: 0033:0x7f985459e0d9 [ 285.848924][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.868760][ T8036] RSP: 002b:00007f98553b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.877505][ T8036] RAX: ffffffffffffffda RBX: 00007f9854825fa0 RCX: 00007f985459e0d9 [ 285.885529][ T8036] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 285.893645][ T8036] RBP: 00007f98553b7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.901761][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.909791][ T8036] R13: 00007f9854826038 R14: 00007f9854825fa0 R15: 00007ffd72a86638 [ 285.917812][ T8036] [ 286.873522][ T8051] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.731'. [ 289.981362][ T8043] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.728'. [ 289.991000][ T8044] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 289.998862][ T8044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.728'. [ 290.020168][ T8051] netlink: 17224 bytes leftover after parsing attributes in process `syz.0.731'. [ 290.236840][ T8065] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 290.740429][ T8078] netlink: 'syz.3.740': attribute type 29 has an invalid length. [ 290.749143][ T8078] netlink: 'syz.3.740': attribute type 29 has an invalid length. [ 291.213282][ T8084] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.742'. [ 291.246741][ T8084] netlink: 'syz.2.742': attribute type 4 has an invalid length. [ 291.258572][ T8084] netlink: 152 bytes leftover after parsing attributes in process `syz.2.742'. [ 291.780968][ T8090] syzkaller0: entered promiscuous mode [ 291.787004][ T8090] syzkaller0: entered allmulticast mode [ 291.831488][ T8098] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 295.179124][ T8126] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.753'. [ 295.188677][ T8127] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 295.196606][ T8127] netlink: 152 bytes leftover after parsing attributes in process `syz.3.753'. [ 295.206554][ T8127] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 295.534062][ T8140] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 295.788580][ T8149] netlink: 'syz.0.760': attribute type 10 has an invalid length. [ 295.826584][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.760'. [ 296.192948][ T8156] netlink: 'syz.3.762': attribute type 33 has an invalid length. [ 296.301296][ T8156] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.762'. [ 296.752268][ T8153] syzkaller0: entered promiscuous mode [ 296.757939][ T8153] syzkaller0: entered allmulticast mode [ 296.768255][ T8160] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.764'. [ 296.862343][ T8161] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 296.888261][ T8161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.764'. [ 296.918787][ T8161] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 301.027257][ T8173] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 301.041531][ T8179] vcan0: entered allmulticast mode [ 301.073421][ T8182] netlink: 'syz.3.771': attribute type 10 has an invalid length. [ 301.092147][ T8184] FAULT_INJECTION: forcing a failure. [ 301.092147][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.121680][ T8184] CPU: 1 PID: 8184 Comm: syz.1.772 Not tainted syzkaller #0 [ 301.129293][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.139389][ T8184] Call Trace: [ 301.142923][ T8184] [ 301.145932][ T8184] dump_stack_lvl+0x18c/0x250 [ 301.150834][ T8184] ? show_regs_print_info+0x20/0x20 [ 301.156089][ T8184] ? load_image+0x420/0x420 [ 301.160663][ T8184] ? __might_fault+0xaa/0x120 [ 301.165558][ T8184] should_fail_ex+0x394/0x4c0 [ 301.170382][ T8184] copyin+0x1a/0x90 [ 301.174249][ T8184] _copy_from_iter+0x3ec/0x1290 [ 301.179158][ T8184] ? copyout_mc+0x70/0x70 [ 301.183629][ T8184] ? copyout_mc+0x70/0x70 [ 301.187999][ T8184] ? __virt_addr_valid+0x10c/0x380 [ 301.193162][ T8184] ? page_copy_sane+0x16a/0x270 [ 301.198083][ T8184] copy_page_from_iter+0x7b/0x100 [ 301.203327][ T8184] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 301.209183][ T8184] packet_sendmsg+0x345e/0x4c70 [ 301.214107][ T8184] ? set_user_nice+0x620/0xb20 [ 301.218943][ T8184] ? aa_sk_perm+0x83c/0x970 [ 301.223495][ T8184] ? packet_getsockopt+0xad0/0xad0 [ 301.228626][ T8184] ? tomoyo_write_file+0x1e2/0xc50 [ 301.233765][ T8184] ? aa_sock_msg_perm+0x94/0x150 [ 301.238716][ T8184] ? apparmor_socket_sendmsg+0x23d/0x330 [ 301.244368][ T8184] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 301.249673][ T8184] ? security_socket_sendmsg+0x80/0xa0 [ 301.255148][ T8184] ? packet_getsockopt+0xad0/0xad0 [ 301.260275][ T8184] ____sys_sendmsg+0x61b/0x980 [ 301.265056][ T8184] ? __asan_memset+0x22/0x40 [ 301.269681][ T8184] ? __sys_sendmsg_sock+0x30/0x30 [ 301.274846][ T8184] ? __import_iovec+0x3fa/0x850 [ 301.279810][ T8184] ? import_iovec+0x73/0xa0 [ 301.284415][ T8184] ___sys_sendmsg+0x2a6/0x360 [ 301.289106][ T8184] ? get_pid_task+0x20/0x1e0 [ 301.293836][ T8184] ? __sys_sendmsg+0x2b0/0x2b0 [ 301.298633][ T8184] ? __lock_acquire+0x7d80/0x7d80 [ 301.303818][ T8184] __se_sys_sendmsg+0x1d0/0x2c0 [ 301.308688][ T8184] ? __x64_sys_sendmsg+0x80/0x80 [ 301.313648][ T8184] ? lockdep_hardirqs_on+0x98/0x150 [ 301.318958][ T8184] do_syscall_64+0x55/0xb0 [ 301.323392][ T8184] ? clear_bhb_loop+0x40/0x90 [ 301.328077][ T8184] ? clear_bhb_loop+0x40/0x90 [ 301.332858][ T8184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.338760][ T8184] RIP: 0033:0x7f366ff9e0d9 [ 301.343196][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.362926][ T8184] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.371449][ T8184] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 301.379628][ T8184] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 301.387793][ T8184] RBP: 00007f3670dac090 R08: 0000000000000000 R09: 0000000000000000 [ 301.395865][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.403844][ T8184] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 301.411838][ T8184] [ 301.438513][ T8182] veth0_macvtap: left promiscuous mode [ 302.071661][ T8198] netlink: 'syz.1.776': attribute type 33 has an invalid length. [ 302.085449][ T8198] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.776'. [ 302.413723][ T8207] netlink: 'syz.2.780': attribute type 29 has an invalid length. [ 302.445705][ T8207] netlink: 'syz.2.780': attribute type 29 has an invalid length. [ 302.964951][ T8210] syzkaller0: entered promiscuous mode [ 302.985992][ T8210] syzkaller0: entered allmulticast mode [ 303.007889][ T8211] netlink: 'syz.2.780': attribute type 29 has an invalid length. [ 306.366720][ T8207] netlink: 'syz.2.780': attribute type 29 has an invalid length. [ 306.879014][ T8241] netlink: 'syz.2.790': attribute type 33 has an invalid length. [ 306.909642][ T8241] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.790'. [ 307.554010][ T8256] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 307.694318][ T8258] netlink: 'syz.1.794': attribute type 2 has an invalid length. [ 307.735166][ T8258] netlink: 'syz.1.794': attribute type 8 has an invalid length. [ 307.789488][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.794'. [ 308.717739][ T8266] netlink: 'syz.3.795': attribute type 29 has an invalid length. [ 308.732052][ T8265] netlink: 'syz.2.803': attribute type 3 has an invalid length. [ 308.770583][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.803'. [ 308.884319][ T8266] netlink: 'syz.3.795': attribute type 29 has an invalid length. [ 308.934669][ T8270] netlink: 'syz.3.795': attribute type 29 has an invalid length. [ 309.219055][ T8272] netlink: 'syz.3.795': attribute type 29 has an invalid length. [ 311.155879][ T8319] netlink: 156 bytes leftover after parsing attributes in process `syz.2.815'. [ 311.540954][ T8327] netlink: 164 bytes leftover after parsing attributes in process `syz.2.817'. [ 311.970749][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 312.138344][ T8343] validate_nla: 10 callbacks suppressed [ 312.138361][ T8343] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 312.270663][ T8338] netlink: 10 bytes leftover after parsing attributes in process `syz.1.818'. [ 312.421443][ T8347] netlink: 'syz.3.823': attribute type 10 has an invalid length. [ 313.155881][ T8363] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.827'. [ 313.220099][ T8360] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.827'. [ 313.567966][ T8368] netlink: 'syz.3.831': attribute type 11 has an invalid length. [ 314.467102][ T8366] netlink: 'syz.1.829': attribute type 29 has an invalid length. [ 314.487601][ T8378] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 314.614737][ T8366] netlink: 'syz.1.829': attribute type 29 has an invalid length. [ 314.752500][ T8383] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.834'. [ 314.833333][ T8375] netlink: 'syz.1.829': attribute type 29 has an invalid length. [ 314.940841][ T8376] netlink: 'syz.1.829': attribute type 29 has an invalid length. [ 314.985853][ T8379] netlink: 'syz.1.829': attribute type 29 has an invalid length. [ 316.956219][ T8408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.842'. [ 317.565886][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.572762][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.877266][ T8413] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.845'. [ 317.913146][ T8421] netlink: 'syz.1.845': attribute type 4 has an invalid length. [ 317.934271][ T8421] netlink: 152 bytes leftover after parsing attributes in process `syz.1.845'. [ 317.983218][ T8421] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.941112][ T8428] netlink: 'syz.3.848': attribute type 3 has an invalid length. [ 319.010447][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.848'. [ 320.055449][ T8444] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.854'. [ 321.057624][ T8449] netlink: 'syz.3.857': attribute type 21 has an invalid length. [ 321.165947][ T8449] netlink: 156 bytes leftover after parsing attributes in process `syz.3.857'. [ 321.279063][ T8452] FAULT_INJECTION: forcing a failure. [ 321.279063][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 321.402267][ T8452] CPU: 0 PID: 8452 Comm: syz.0.858 Not tainted syzkaller #0 [ 321.409646][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.419753][ T8452] Call Trace: [ 321.423072][ T8452] [ 321.426040][ T8452] dump_stack_lvl+0x18c/0x250 [ 321.430856][ T8452] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.437148][ T8452] ? show_regs_print_info+0x20/0x20 [ 321.442520][ T8452] ? load_image+0x420/0x420 [ 321.447191][ T8452] should_fail_ex+0x394/0x4c0 [ 321.452013][ T8452] should_failslab+0x9/0x20 [ 321.456647][ T8452] slab_pre_alloc_hook+0x59/0x300 [ 321.461725][ T8452] ? bpf_test_init+0x9f/0x140 [ 321.466620][ T8452] ? bpf_test_init+0x9f/0x140 [ 321.471348][ T8452] __kmem_cache_alloc_node+0x53/0x250 [ 321.476786][ T8452] ? bpf_test_init+0x9f/0x140 [ 321.481597][ T8452] __kmalloc+0xa7/0x240 [ 321.485804][ T8452] bpf_test_init+0x9f/0x140 [ 321.490497][ T8452] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 321.495913][ T8452] ? __lock_acquire+0x7d80/0x7d80 [ 321.501259][ T8452] ? dev_put+0x80/0x80 [ 321.505388][ T8452] ? dev_put+0x80/0x80 [ 321.509508][ T8452] bpf_prog_test_run+0x31f/0x390 [ 321.514501][ T8452] __sys_bpf+0x49d/0x890 [ 321.518783][ T8452] ? read_tsc+0x9/0x20 [ 321.522899][ T8452] ? bpf_link_show_fdinfo+0x390/0x390 [ 321.528355][ T8452] __x64_sys_bpf+0x7c/0x90 [ 321.532842][ T8452] do_syscall_64+0x55/0xb0 [ 321.537316][ T8452] ? clear_bhb_loop+0x40/0x90 [ 321.542037][ T8452] ? clear_bhb_loop+0x40/0x90 [ 321.546768][ T8452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.553185][ T8452] RIP: 0033:0x7f985459e0d9 [ 321.557647][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.577603][ T8452] RSP: 002b:00007f9855396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.586172][ T8452] RAX: ffffffffffffffda RBX: 00007f9854826090 RCX: 00007f985459e0d9 [ 321.594190][ T8452] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 321.602779][ T8452] RBP: 00007f9855396090 R08: 0000000000000000 R09: 0000000000000000 [ 321.610968][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.619065][ T8452] R13: 00007f9854826128 R14: 00007f9854826090 R15: 00007ffd72a86638 [ 321.627196][ T8452] [ 322.067467][ T8458] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.859'. [ 322.205513][ T8458] netlink: 'syz.2.859': attribute type 4 has an invalid length. [ 322.284901][ T8458] netlink: 152 bytes leftover after parsing attributes in process `syz.2.859'. [ 323.491843][ T8481] netlink: 'syz.2.865': attribute type 11 has an invalid length. [ 323.653954][ T8480] netlink: 'syz.3.867': attribute type 21 has an invalid length. [ 323.758621][ T8481] netlink: 'syz.2.865': attribute type 15 has an invalid length. [ 323.768583][ T8480] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.867'. [ 323.795858][ T8481] netlink: 'syz.2.865': attribute type 7 has an invalid length. [ 323.867988][ T8488] FAULT_INJECTION: forcing a failure. [ 323.867988][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.926891][ T8485] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.869'. [ 324.009889][ T8488] CPU: 0 PID: 8488 Comm: syz.1.869 Not tainted syzkaller #0 [ 324.017263][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.027455][ T8488] Call Trace: [ 324.030831][ T8488] [ 324.033904][ T8488] dump_stack_lvl+0x18c/0x250 [ 324.038805][ T8488] ? show_regs_print_info+0x20/0x20 [ 324.044334][ T8488] ? load_image+0x420/0x420 [ 324.048895][ T8488] ? __might_fault+0xaa/0x120 [ 324.053620][ T8488] ? __lock_acquire+0x7d80/0x7d80 [ 324.058696][ T8488] ? bpf_percpu_array_update+0xec/0x490 [ 324.064301][ T8488] ? __virt_addr_valid+0x10c/0x380 [ 324.069661][ T8488] should_fail_ex+0x394/0x4c0 [ 324.074394][ T8488] _copy_from_user+0x2f/0xe0 [ 324.079038][ T8488] generic_map_update_batch+0x58c/0x800 [ 324.084726][ T8488] ? rcu_read_unlock+0xa0/0xa0 [ 324.089549][ T8488] ? __fdget+0x180/0x210 [ 324.093875][ T8488] ? rcu_read_unlock+0xa0/0xa0 [ 324.098682][ T8488] bpf_map_do_batch+0x3f2/0x600 [ 324.103760][ T8488] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 324.110505][ T8488] __sys_bpf+0x381/0x890 [ 324.114799][ T8488] ? bpf_link_show_fdinfo+0x390/0x390 [ 324.120242][ T8488] ? lock_chain_count+0x20/0x20 [ 324.125157][ T8488] __x64_sys_bpf+0x7c/0x90 [ 324.129704][ T8488] do_syscall_64+0x55/0xb0 [ 324.134532][ T8488] ? clear_bhb_loop+0x40/0x90 [ 324.139360][ T8488] ? clear_bhb_loop+0x40/0x90 [ 324.144264][ T8488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.150386][ T8488] RIP: 0033:0x7f366ff9e0d9 [ 324.154936][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.174865][ T8488] RSP: 002b:00007f3670d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.183593][ T8488] RAX: ffffffffffffffda RBX: 00007f3670226090 RCX: 00007f366ff9e0d9 [ 324.191787][ T8488] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 324.199807][ T8488] RBP: 00007f3670d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 324.208006][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.216024][ T8488] R13: 00007f3670226128 R14: 00007f3670226090 R15: 00007fff776c8658 [ 324.224075][ T8488] [ 324.284843][ T8491] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 324.325591][ T8489] delete_channel: no stack [ 324.652214][ T8495] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.874'. [ 324.671912][ T8499] FAULT_INJECTION: forcing a failure. [ 324.671912][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 324.681460][ T8495] netlink: 'syz.0.874': attribute type 4 has an invalid length. [ 324.700488][ T8495] netlink: 152 bytes leftover after parsing attributes in process `syz.0.874'. [ 324.747849][ T8499] CPU: 1 PID: 8499 Comm: syz.1.875 Not tainted syzkaller #0 [ 324.749523][ T8495] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.755284][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.755332][ T8499] Call Trace: [ 324.755342][ T8499] [ 324.755352][ T8499] dump_stack_lvl+0x18c/0x250 [ 324.755387][ T8499] ? show_regs_print_info+0x20/0x20 [ 324.755409][ T8499] ? load_image+0x420/0x420 [ 324.755440][ T8499] ? __might_sleep+0xe0/0xe0 [ 324.755464][ T8499] ? __lock_acquire+0x7d80/0x7d80 [ 324.755492][ T8499] should_fail_ex+0x394/0x4c0 [ 324.755524][ T8499] should_failslab+0x9/0x20 [ 324.755551][ T8499] slab_pre_alloc_hook+0x59/0x300 [ 324.755581][ T8499] ? ethnl_default_start+0x135/0x560 [ 324.755602][ T8499] ? ethnl_default_start+0x135/0x560 [ 324.755619][ T8499] __kmem_cache_alloc_node+0x53/0x250 [ 324.755652][ T8499] ? ethnl_default_start+0x135/0x560 [ 324.755670][ T8499] __kmalloc+0xa7/0x240 [ 324.755700][ T8499] ethnl_default_start+0x135/0x560 [ 324.755727][ T8499] genl_start+0x4b4/0x6c0 [ 324.755756][ T8499] __netlink_dump_start+0x43c/0x7a0 [ 324.755784][ T8499] genl_family_rcv_msg_dumpit+0x214/0x310 [ 324.755810][ T8499] ? genl_rcv_msg+0x7a0/0x7a0 [ 324.755829][ T8499] ? genl_get_cmd+0x693/0x930 [ 324.755857][ T8499] ? genl_family_rcv_msg_doit+0x310/0x310 [ 324.755877][ T8499] ? genl_start+0x6c0/0x6c0 [ 324.755895][ T8499] ? genl_dumpit+0x1a0/0x1a0 [ 324.755933][ T8499] genl_rcv_msg+0x5de/0x7a0 [ 324.755962][ T8499] ? genl_bind+0x360/0x360 [ 324.755982][ T8499] ? ethnl_default_doit+0xba0/0xba0 [ 324.755998][ T8499] ? ethnl_default_start+0x560/0x560 [ 324.917382][ T8499] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 324.922813][ T8499] ? ref_tracker_free+0x686/0x830 [ 324.927864][ T8499] netlink_rcv_skb+0x235/0x4c0 [ 324.932646][ T8499] ? genl_bind+0x360/0x360 [ 324.937084][ T8499] ? netlink_ack+0x1160/0x1160 [ 324.941875][ T8499] ? __lock_acquire+0x7d80/0x7d80 [ 324.946922][ T8499] ? down_read+0x1ac/0x2e0 [ 324.951357][ T8499] genl_rcv+0x28/0x40 [ 324.955386][ T8499] netlink_unicast+0x7b1/0x930 [ 324.960271][ T8499] netlink_sendmsg+0x8d0/0xbf0 [ 324.965173][ T8499] ? netlink_getsockopt+0x590/0x590 [ 324.970384][ T8499] ? apparmor_socket_sendmsg+0x8e/0x330 [ 324.976174][ T8499] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 324.981476][ T8499] ? security_socket_sendmsg+0x80/0xa0 [ 324.987031][ T8499] ? netlink_getsockopt+0x590/0x590 [ 324.992343][ T8499] ____sys_sendmsg+0x61b/0x980 [ 324.997224][ T8499] ? __asan_memset+0x22/0x40 [ 325.001840][ T8499] ? __sys_sendmsg_sock+0x30/0x30 [ 325.006965][ T8499] ? __import_iovec+0x5f2/0x850 [ 325.011875][ T8499] ? import_iovec+0x73/0xa0 [ 325.016431][ T8499] ___sys_sendmsg+0x2a6/0x360 [ 325.021137][ T8499] ? get_pid_task+0x20/0x1e0 [ 325.025844][ T8499] ? __sys_sendmsg+0x2b0/0x2b0 [ 325.030643][ T8499] ? __lock_acquire+0x7d80/0x7d80 [ 325.035791][ T8499] __se_sys_sendmsg+0x1d0/0x2c0 [ 325.040767][ T8499] ? __x64_sys_sendmsg+0x80/0x80 [ 325.045780][ T8499] ? lockdep_hardirqs_on+0x98/0x150 [ 325.051193][ T8499] do_syscall_64+0x55/0xb0 [ 325.055637][ T8499] ? clear_bhb_loop+0x40/0x90 [ 325.060338][ T8499] ? clear_bhb_loop+0x40/0x90 [ 325.065034][ T8499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.070960][ T8499] RIP: 0033:0x7f366ff9e0d9 [ 325.075390][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.095613][ T8499] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.104138][ T8499] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 325.112126][ T8499] RDX: 0000000002000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 325.120109][ T8499] RBP: 00007f3670dac090 R08: 0000000000000000 R09: 0000000000000000 [ 325.128266][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.136426][ T8499] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 325.144430][ T8499] [ 326.124935][ T8518] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.883'. [ 326.220154][ T8523] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 326.351497][ T8523] veth0_macvtap: left promiscuous mode [ 326.924128][ T8531] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.886'. [ 326.999183][ T8532] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 327.069889][ T8532] netlink: 152 bytes leftover after parsing attributes in process `syz.3.886'. [ 327.144850][ T8532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 327.536646][ T8537] syzkaller0: entered promiscuous mode [ 327.590901][ T8537] syzkaller0: entered allmulticast mode [ 333.363997][ T8550] syzkaller0: entered promiscuous mode [ 333.369561][ T8550] syzkaller0: entered allmulticast mode [ 333.464386][ T8566] netlink: 'syz.0.895': attribute type 3 has an invalid length. [ 333.499734][ T8566] netlink: 'syz.0.895': attribute type 6 has an invalid length. [ 333.519788][ T8566] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.895'. [ 336.951401][ T8578] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.900'. [ 337.146739][ T8588] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 337.497007][ T8591] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 337.520914][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.904'. [ 337.653115][ T8597] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 337.673355][ T8597] netlink: 140 bytes leftover after parsing attributes in process `syz.1.907'. [ 337.830803][ T8603] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 337.953396][ T8603] geneve1: entered promiscuous mode [ 337.957749][ T8608] FAULT_INJECTION: forcing a failure. [ 337.957749][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 337.971973][ T8608] CPU: 0 PID: 8608 Comm: syz.1.910 Not tainted syzkaller #0 [ 337.979355][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.982398][ T8606] netlink: 'syz.3.909': attribute type 6 has an invalid length. [ 337.989554][ T8608] Call Trace: [ 337.989576][ T8608] [ 337.989591][ T8608] dump_stack_lvl+0x18c/0x250 [ 337.989640][ T8608] ? show_regs_print_info+0x20/0x20 [ 337.989676][ T8608] ? load_image+0x420/0x420 [ 337.989726][ T8608] ? __might_sleep+0xe0/0xe0 [ 338.022930][ T8608] ? __lock_acquire+0x7d80/0x7d80 [ 338.028079][ T8608] should_fail_ex+0x394/0x4c0 [ 338.031708][ T8603] geneve1: entered allmulticast mode [ 338.033111][ T8608] should_failslab+0x9/0x20 [ 338.033154][ T8608] slab_pre_alloc_hook+0x59/0x300 [ 338.041539][ T8603] team0: Port device geneve1 added [ 338.043034][ T8608] ? __get_vm_area_node+0x125/0x370 [ 338.043086][ T8608] __kmem_cache_alloc_node+0x53/0x250 [ 338.043135][ T8608] ? __get_vm_area_node+0x125/0x370 [ 338.043172][ T8608] kmalloc_node_trace+0x26/0xe0 [ 338.043230][ T8608] __get_vm_area_node+0x125/0x370 [ 338.043296][ T8608] __vmalloc_node_range+0x36f/0x1320 [ 338.043334][ T8608] ? netlink_sendmsg+0x602/0xbf0 [ 338.054925][ T8605] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 338.058756][ T8608] ? netlink_insert+0x1094/0x1390 [ 338.058854][ T8608] ? netlink_insert+0x2ba/0x1390 [ 338.064679][ T8606] netlink: 'syz.3.909': attribute type 3 has an invalid length. [ 338.069505][ T8608] ? free_vm_area+0x50/0x50 [ 338.120389][ T8608] ? netlink_sendmsg+0x602/0xbf0 [ 338.125372][ T8608] vmalloc+0x79/0x90 [ 338.129332][ T8608] ? netlink_sendmsg+0x602/0xbf0 [ 338.134483][ T8608] netlink_sendmsg+0x602/0xbf0 [ 338.139842][ T8608] ? netlink_getsockopt+0x590/0x590 [ 338.145358][ T8608] ? apparmor_socket_sendmsg+0x8e/0x330 [ 338.150949][ T8608] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 338.156273][ T8608] ? security_socket_sendmsg+0x80/0xa0 [ 338.161777][ T8608] sock_write_iter+0x2dc/0x420 [ 338.166585][ T8608] ? sock_read_iter+0x3f0/0x3f0 [ 338.171516][ T8608] ? common_file_perm+0x198/0x1f0 [ 338.176693][ T8608] vfs_write+0x474/0x9a0 [ 338.180998][ T8608] ? file_end_write+0x250/0x250 [ 338.185915][ T8608] ? __fget_files+0x3fc/0x460 [ 338.190657][ T8608] ? __fdget_pos+0x1d8/0x330 [ 338.195282][ T8608] ? ksys_write+0x74/0x260 [ 338.199752][ T8608] ksys_write+0x151/0x260 [ 338.204400][ T8608] ? __ia32_sys_read+0x90/0x90 [ 338.209219][ T8608] ? lockdep_hardirqs_on+0x98/0x150 [ 338.214473][ T8608] do_syscall_64+0x55/0xb0 [ 338.218931][ T8608] ? clear_bhb_loop+0x40/0x90 [ 338.223733][ T8608] ? clear_bhb_loop+0x40/0x90 [ 338.228461][ T8608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.234398][ T8608] RIP: 0033:0x7f366ff9e0d9 [ 338.238850][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.258779][ T8608] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.267329][ T8608] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 338.275337][ T8608] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 338.283347][ T8608] RBP: 00007f3670dac090 R08: 0000000000000000 R09: 0000000000000000 [ 338.291363][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.299362][ T8608] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 338.307626][ T8608] [ 338.360430][ T8608] syz.1.910: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 338.362147][ T8606] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.909'. [ 338.389884][ T8608] CPU: 1 PID: 8608 Comm: syz.1.910 Not tainted syzkaller #0 [ 338.389948][ T8605] netlink: 152 bytes leftover after parsing attributes in process `syz.0.908'. [ 338.398100][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.398118][ T8608] Call Trace: [ 338.398132][ T8608] [ 338.398148][ T8608] dump_stack_lvl+0x18c/0x250 [ 338.398195][ T8608] ? show_regs_print_info+0x20/0x20 [ 338.434529][ T8608] ? load_image+0x420/0x420 [ 338.439154][ T8608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 338.445941][ T8608] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 338.452552][ T8608] warn_alloc+0x246/0x340 [ 338.456971][ T8608] ? __get_vm_area_node+0x125/0x370 [ 338.462462][ T8608] ? zone_watermark_ok_safe+0x230/0x230 [ 338.468354][ T8608] ? rcu_is_watching+0x15/0xb0 [ 338.473255][ T8608] ? __get_vm_area_node+0x356/0x370 [ 338.478805][ T8608] __vmalloc_node_range+0x394/0x1320 [ 338.484171][ T8608] ? netlink_insert+0x1094/0x1390 [ 338.489367][ T8608] ? netlink_insert+0x2ba/0x1390 [ 338.494594][ T8608] ? free_vm_area+0x50/0x50 [ 338.499237][ T8608] ? netlink_sendmsg+0x602/0xbf0 [ 338.504443][ T8608] vmalloc+0x79/0x90 [ 338.508429][ T8608] ? netlink_sendmsg+0x602/0xbf0 [ 338.514032][ T8608] netlink_sendmsg+0x602/0xbf0 [ 338.519101][ T8608] ? netlink_getsockopt+0x590/0x590 [ 338.524404][ T8608] ? apparmor_socket_sendmsg+0x8e/0x330 [ 338.530053][ T8608] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 338.535609][ T8608] ? security_socket_sendmsg+0x80/0xa0 [ 338.541194][ T8608] sock_write_iter+0x2dc/0x420 [ 338.546063][ T8608] ? sock_read_iter+0x3f0/0x3f0 [ 338.551159][ T8608] ? common_file_perm+0x198/0x1f0 [ 338.556482][ T8608] vfs_write+0x474/0x9a0 [ 338.561111][ T8608] ? file_end_write+0x250/0x250 [ 338.566073][ T8608] ? __fget_files+0x3fc/0x460 [ 338.570913][ T8608] ? __fdget_pos+0x1d8/0x330 [ 338.575668][ T8608] ? ksys_write+0x74/0x260 [ 338.580167][ T8608] ksys_write+0x151/0x260 [ 338.584552][ T8608] ? __ia32_sys_read+0x90/0x90 [ 338.589374][ T8608] ? lockdep_hardirqs_on+0x98/0x150 [ 338.594801][ T8608] do_syscall_64+0x55/0xb0 [ 338.599252][ T8608] ? clear_bhb_loop+0x40/0x90 [ 338.603962][ T8608] ? clear_bhb_loop+0x40/0x90 [ 338.608681][ T8608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.614611][ T8608] RIP: 0033:0x7f366ff9e0d9 [ 338.619065][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.638703][ T8608] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.647252][ T8608] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 338.655353][ T8608] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 338.663531][ T8608] RBP: 00007f3670dac090 R08: 0000000000000000 R09: 0000000000000000 [ 338.671714][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.679732][ T8608] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 338.687800][ T8608] [ 338.789948][ T8608] Mem-Info: [ 338.793171][ T8608] active_anon:8791 inactive_anon:0 isolated_anon:0 [ 338.793171][ T8608] active_file:18717 inactive_file:40046 isolated_file:0 [ 338.793171][ T8608] unevictable:768 dirty:142 writeback:0 [ 338.793171][ T8608] slab_reclaimable:10645 slab_unreclaimable:90857 [ 338.793171][ T8608] mapped:26655 shmem:4176 pagetables:569 [ 338.793171][ T8608] sec_pagetables:0 bounce:0 [ 338.793171][ T8608] kernel_misc_reclaimable:0 [ 338.793171][ T8608] free:1342006 free_pcp:11081 free_cma:0 [ 338.918350][ T8608] Node 0 active_anon:37364kB inactive_anon:0kB active_file:74868kB inactive_file:159984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108420kB dirty:568kB writeback:0kB shmem:17368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 338.951406][ T8608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 338.990266][ T8608] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.036239][ T8608] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 339.042584][ T8608] Node 0 DMA32 free:1461256kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:39724kB inactive_anon:0kB active_file:74868kB inactive_file:159156kB unevictable:1536kB writepending:568kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:6692kB free_cma:0kB [ 339.116622][ T8608] lowmem_reserve[]: 0 0 0 0 0 [ 339.159599][ T8608] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.239972][ T8608] lowmem_reserve[]: 0 0 0 0 0 [ 339.247745][ T8608] Node 1 Normal free:3889640kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19652kB local_pcp:12292kB free_cma:0kB [ 339.282799][ T8608] lowmem_reserve[]: 0 0 0 0 0 [ 339.287725][ T8608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 339.307124][ T8608] Node 0 DMA32: 354*4kB (UM) 1258*8kB (UM) 1464*16kB (UME) 1418*32kB (UM) 958*64kB (UME) 428*128kB (UME) 194*256kB (UME) 94*512kB (UM) 17*1024kB (ME) 5*2048kB (M) 278*4096kB (M) = 1460504kB [ 339.337624][ T8608] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 339.372995][ T8608] Node 1 Normal: 246*4kB (UME) 48*8kB (UME) 45*16kB (UME) 62*32kB (UME) 22*64kB (UME) 7*128kB (UME) 1*256kB (M) 0*512kB 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889640kB [ 339.374879][ T8614] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 339.397902][ T8608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.418752][ T8608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.460411][ T8608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.472657][ T8608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.481572][ T8616] netlink: 'syz.2.914': attribute type 10 has an invalid length. [ 339.491771][ T8608] 66101 total pagecache pages [ 339.496499][ T8608] 0 pages in swap cache [ 339.512163][ T8608] Free swap = 124996kB [ 339.523426][ T8608] Total swap = 124996kB [ 339.527647][ T8608] 2097051 pages RAM [ 339.540294][ T8608] 0 pages HighMem/MovableOnly [ 339.545342][ T8608] 416955 pages reserved [ 339.549611][ T8608] 0 pages cma reserved [ 339.980931][ T8624] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 339.997330][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.918'. [ 340.160202][ T8630] netlink: 'syz.3.920': attribute type 10 has an invalid length. [ 340.226809][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.270160][ T8630] bridge_slave_1: left allmulticast mode [ 340.289036][ T8630] bridge_slave_1: left promiscuous mode [ 340.304042][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.346793][ T8630] bridge_slave_1: entered promiscuous mode [ 340.377575][ T8630] bridge_slave_1: entered allmulticast mode [ 340.401271][ T8630] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 340.867784][ T8638] syzkaller0: entered promiscuous mode [ 340.882236][ T8638] syzkaller0: entered allmulticast mode [ 345.922543][ T8654] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 346.479498][ T8672] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 346.488977][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.931'. [ 346.533018][ T8672] bridge0: port 1(team0) entered blocking state [ 346.560909][ T8672] bridge0: port 1(team0) entered disabled state [ 346.601198][ T8672] team0: entered allmulticast mode [ 346.608578][ T8672] team_slave_0: entered allmulticast mode [ 346.625127][ T8672] team_slave_1: entered allmulticast mode [ 346.635359][ T8672] bond0: entered allmulticast mode [ 346.645776][ T8672] bond_slave_0: entered allmulticast mode [ 346.660643][ T8672] bond_slave_1: entered allmulticast mode [ 346.728938][ T8672] team0: entered promiscuous mode [ 346.742517][ T8672] team_slave_0: entered promiscuous mode [ 346.757595][ T8672] team_slave_1: entered promiscuous mode [ 346.772602][ T8672] bond0: entered promiscuous mode [ 346.784548][ T8672] bond_slave_0: entered promiscuous mode [ 346.809022][ T8672] bond_slave_1: entered promiscuous mode [ 346.830542][ T8672] bridge0: port 1(team0) entered blocking state [ 346.837739][ T8672] bridge0: port 1(team0) entered forwarding state [ 346.874474][ T8681] netlink: 'syz.3.935': attribute type 17 has an invalid length. [ 347.097526][ T8688] netlink: 'syz.2.940': attribute type 21 has an invalid length. [ 347.129106][ T8688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.940'. [ 349.011592][ T8718] netlink: 'syz.2.953': attribute type 10 has an invalid length. [ 349.070159][ T8718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.953'. [ 349.117682][ T8722] netlink: 'syz.1.955': attribute type 17 has an invalid length. [ 349.302913][ T8730] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.958'. [ 349.327347][ T8730] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 350.108513][ T8746] syzkaller0: entered promiscuous mode [ 350.139735][ T8746] syzkaller0: entered allmulticast mode [ 350.150949][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.964'. [ 354.833672][ T8760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.967'. [ 354.844286][ T8768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.970'. [ 354.854068][ T8769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'. [ 354.872647][ T8770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.889772][ T8770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.909980][ T8770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.917799][ T8770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.070607][ T8775] netlink: 'syz.3.971': attribute type 21 has an invalid length. [ 355.079265][ T8775] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.094603][ T8775] IPv6: Can't replace route, no match found [ 355.677095][ T8792] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.978'. [ 355.711005][ T8793] netlink: 'syz.1.978': attribute type 4 has an invalid length. [ 355.719038][ T8793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.978'. [ 355.777172][ T8793] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 356.047581][ T8799] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.980'. [ 356.163460][ T8807] FAULT_INJECTION: forcing a failure. [ 356.163460][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 356.176721][ T8807] CPU: 0 PID: 8807 Comm: syz.0.983 Not tainted syzkaller #0 [ 356.184080][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.194299][ T8807] Call Trace: [ 356.197860][ T8807] [ 356.200915][ T8807] dump_stack_lvl+0x18c/0x250 [ 356.205815][ T8807] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 356.212670][ T8807] ? show_regs_print_info+0x20/0x20 [ 356.217937][ T8807] ? load_image+0x420/0x420 [ 356.222692][ T8807] should_fail_ex+0x394/0x4c0 [ 356.227620][ T8807] should_failslab+0x9/0x20 [ 356.232221][ T8807] slab_pre_alloc_hook+0x59/0x300 [ 356.237362][ T8807] ? __lock_acquire+0x7d80/0x7d80 [ 356.242451][ T8807] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 356.248963][ T8807] kmem_cache_alloc+0x5a/0x2c0 [ 356.253909][ T8807] ? skb_clone+0x1eb/0x370 [ 356.258474][ T8807] skb_clone+0x1eb/0x370 [ 356.262788][ T8807] ? packet_rcv+0x4d0/0x1410 [ 356.267523][ T8807] packet_rcv+0x658/0x1410 [ 356.272155][ T8807] ? fanout_init_data+0xf0/0xf0 [ 356.277097][ T8807] dev_queue_xmit_nit+0x5d5/0xba0 [ 356.282431][ T8807] ? dev_queue_xmit_nit+0x2d/0xba0 [ 356.287643][ T8807] dev_hard_start_xmit+0x150/0x790 [ 356.292888][ T8807] ? __dev_queue_xmit+0x275/0x3630 [ 356.298091][ T8807] __dev_queue_xmit+0x198c/0x3630 [ 356.303215][ T8807] ? __dev_queue_xmit+0x275/0x3630 [ 356.308482][ T8807] ? netdev_core_pick_tx+0x370/0x370 [ 356.313863][ T8807] ? pskb_expand_head+0x17a/0x1150 [ 356.319226][ T8807] ? pskb_expand_head+0x17a/0x1150 [ 356.324417][ T8807] ? skb_release_data+0x1de/0x7f0 [ 356.329559][ T8807] ? __bpf_redirect+0x4d1/0xdf0 [ 356.334654][ T8807] __bpf_tx_skb+0x181/0x260 [ 356.339327][ T8807] bpf_clone_redirect+0x315/0x4a0 [ 356.344467][ T8807] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 356.350034][ T8807] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.356163][ T8807] ? perf_trace_preemptirq_template+0xac/0x330 [ 356.362441][ T8807] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.368591][ T8807] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 356.374079][ T8807] ? lock_chain_count+0x20/0x20 [ 356.379090][ T8807] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 356.385629][ T8807] ? __local_bh_disable_ip+0x108/0x1a0 [ 356.391269][ T8807] ? __cant_sleep+0x220/0x220 [ 356.396154][ T8807] ? __local_bh_enable_ip+0x13a/0x1c0 [ 356.401612][ T8807] ? _local_bh_enable+0xa0/0xa0 [ 356.407107][ T8807] ? bpf_test_timer_continue+0x135/0x380 [ 356.412902][ T8807] ? bpf_test_run+0x174/0x870 [ 356.417744][ T8807] bpf_test_run+0x2df/0x870 [ 356.422468][ T8807] ? bpf_test_run+0x174/0x870 [ 356.427324][ T8807] ? dst_hold+0x70/0x70 [ 356.431572][ T8807] ? eth_get_headlen+0x210/0x210 [ 356.436688][ T8807] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 356.442214][ T8807] ? cpu_online+0x60/0x60 [ 356.446708][ T8807] bpf_prog_test_run+0x31f/0x390 [ 356.451750][ T8807] __sys_bpf+0x49d/0x890 [ 356.456160][ T8807] ? bpf_link_show_fdinfo+0x390/0x390 [ 356.461665][ T8807] ? lock_chain_count+0x20/0x20 [ 356.466719][ T8807] __x64_sys_bpf+0x7c/0x90 [ 356.471213][ T8807] do_syscall_64+0x55/0xb0 [ 356.475691][ T8807] ? clear_bhb_loop+0x40/0x90 [ 356.480635][ T8807] ? clear_bhb_loop+0x40/0x90 [ 356.485385][ T8807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.491352][ T8807] RIP: 0033:0x7f985459e0d9 [ 356.496013][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.515934][ T8807] RSP: 002b:00007f98553b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.524528][ T8807] RAX: ffffffffffffffda RBX: 00007f9854825fa0 RCX: 00007f985459e0d9 [ 356.532586][ T8807] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 356.540714][ T8807] RBP: 00007f98553b7090 R08: 0000000000000000 R09: 0000000000000000 [ 356.548756][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.556984][ T8807] R13: 00007f9854826038 R14: 00007f9854825fa0 R15: 00007ffd72a86638 [ 356.565205][ T8807] [ 357.312610][ T8823] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.990'. [ 357.353995][ T8826] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 357.372997][ T8826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.990'. [ 357.400613][ T8826] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.756874][ T8832] netlink: 'syz.2.993': attribute type 3 has an invalid length. [ 357.792998][ T8832] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.993'. [ 357.846515][ T8829] netlink: 'syz.3.992': attribute type 17 has an invalid length. [ 359.560545][ T8855] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1003'. [ 359.670121][ T8855] netlink: 'syz.2.1003': attribute type 4 has an invalid length. [ 360.387952][ T8865] netlink: 'syz.2.1006': attribute type 17 has an invalid length. [ 361.841779][ T8890] __nla_validate_parse: 1 callbacks suppressed [ 361.841842][ T8890] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1014'. [ 361.941234][ T8893] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 361.999816][ T8893] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1014'. [ 362.077705][ T8893] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 362.213709][ T8899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1019'. [ 362.588655][ T8909] macsec0: entered promiscuous mode [ 362.622031][ T8909] macsec0: entered allmulticast mode [ 362.628378][ T8909] veth1_macvtap: entered allmulticast mode [ 363.127511][ T8921] FAULT_INJECTION: forcing a failure. [ 363.127511][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 363.140484][ T8921] CPU: 1 PID: 8921 Comm: syz.1.1028 Not tainted syzkaller #0 [ 363.147912][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.158106][ T8921] Call Trace: [ 363.161429][ T8921] [ 363.164399][ T8921] dump_stack_lvl+0x18c/0x250 [ 363.169133][ T8921] ? show_regs_print_info+0x20/0x20 [ 363.174390][ T8921] ? load_image+0x420/0x420 [ 363.179000][ T8921] should_fail_ex+0x394/0x4c0 [ 363.183993][ T8921] should_failslab+0x9/0x20 [ 363.188547][ T8921] slab_pre_alloc_hook+0x59/0x300 [ 363.193601][ T8921] kmem_cache_alloc+0x5a/0x2c0 [ 363.198472][ T8921] ? skb_clone+0x1eb/0x370 [ 363.202994][ T8921] skb_clone+0x1eb/0x370 [ 363.207343][ T8921] bpf_clone_redirect+0x16d/0x4a0 [ 363.212399][ T8921] bpf_prog_208b094576c80b22+0x5e/0x63 [ 363.217966][ T8921] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 363.223896][ T8921] ? perf_trace_preemptirq_template+0x269/0x330 [ 363.230161][ T8921] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 363.236539][ T8921] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 363.241940][ T8921] ? lock_chain_count+0x20/0x20 [ 363.246809][ T8921] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 363.253085][ T8921] ? __local_bh_disable_ip+0x108/0x1a0 [ 363.258640][ T8921] ? __cant_sleep+0x220/0x220 [ 363.263335][ T8921] ? __local_bh_enable_ip+0x13a/0x1c0 [ 363.268810][ T8921] ? _local_bh_enable+0xa0/0xa0 [ 363.273706][ T8921] ? bpf_test_timer_continue+0x135/0x380 [ 363.279388][ T8921] ? bpf_test_run+0x174/0x870 [ 363.284215][ T8921] bpf_test_run+0x2df/0x870 [ 363.288773][ T8921] ? bpf_test_run+0x174/0x870 [ 363.293474][ T8921] ? dst_hold+0x70/0x70 [ 363.297652][ T8921] ? eth_get_headlen+0x210/0x210 [ 363.302610][ T8921] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 363.308110][ T8921] ? cpu_online+0x60/0x60 [ 363.312515][ T8921] bpf_prog_test_run+0x31f/0x390 [ 363.317471][ T8921] __sys_bpf+0x49d/0x890 [ 363.321821][ T8921] ? bpf_link_show_fdinfo+0x390/0x390 [ 363.327223][ T8921] ? lock_chain_count+0x20/0x20 [ 363.332188][ T8921] __x64_sys_bpf+0x7c/0x90 [ 363.336711][ T8921] do_syscall_64+0x55/0xb0 [ 363.341139][ T8921] ? clear_bhb_loop+0x40/0x90 [ 363.345828][ T8921] ? clear_bhb_loop+0x40/0x90 [ 363.350517][ T8921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.356533][ T8921] RIP: 0033:0x7f366ff9e0d9 [ 363.360971][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.380590][ T8921] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.389019][ T8921] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 363.397021][ T8921] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 363.405014][ T8921] RBP: 00007f3670dac090 R08: 0000000000000000 R09: 0000000000000000 [ 363.413185][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.421266][ T8921] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 363.429286][ T8921] [ 363.559626][ T8913] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1024'. [ 364.379323][ T8937] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1032'. [ 364.402835][ T8937] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 364.428400][ T8937] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1032'. [ 365.490912][ T8955] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1038'. [ 365.972644][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1042'. [ 366.921008][ T8971] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1044'. [ 367.042077][ T8971] netlink: 'syz.2.1044': attribute type 4 has an invalid length. [ 367.116575][ T8971] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1044'. [ 369.471246][ T9002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1053'. [ 370.273148][ T9011] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1055'. [ 370.294676][ T9015] netlink: 'syz.3.1057': attribute type 3 has an invalid length. [ 370.334174][ T9015] netlink: 'syz.3.1057': attribute type 4 has an invalid length. [ 370.384272][ T9015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1057'. [ 370.520248][ T9011] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 370.528273][ T9011] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1055'. [ 370.677929][ T9011] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 371.451154][ T9029] macsec0: entered promiscuous mode [ 371.475361][ T9029] macsec0: entered allmulticast mode [ 371.495592][ T9029] veth1_macvtap: entered allmulticast mode [ 373.223906][ T9045] netlink: 'syz.2.1067': attribute type 3 has an invalid length. [ 373.310337][ T9045] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1067'. [ 373.771384][ T9057] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1070'. [ 373.950608][ T9059] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 373.959264][ T9059] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1070'. [ 374.104196][ T9059] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 375.582316][ T9080] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1085'. [ 375.689088][ T9080] netlink: 'syz.0.1085': attribute type 4 has an invalid length. [ 375.755093][ T9080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1085'. [ 375.979360][ T9080] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 376.115891][ T9088] netlink: 'syz.3.1080': attribute type 21 has an invalid length. [ 376.169257][ T9088] IPv6: Can't replace route, no match found [ 376.249248][ T9089] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 376.832719][ T9089] wg1: entered promiscuous mode [ 376.837951][ T9089] wg1: entered allmulticast mode [ 376.917819][ T9089] team0: Device wg1 is of different type [ 377.882184][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1086'. [ 377.922416][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1086'. [ 377.965120][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1086'. [ 378.011498][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1086'. [ 379.015627][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.022430][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.346483][ T9119] netlink: 'syz.0.1092': attribute type 4 has an invalid length. [ 379.469755][ T9119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1092'. [ 379.530718][ T9119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 379.658062][ T9118] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1092'. [ 380.374772][ T9133] netlink: 'syz.0.1097': attribute type 3 has an invalid length. [ 380.414392][ T9133] netlink: 'syz.0.1097': attribute type 4 has an invalid length. [ 380.443244][ T9133] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.1097'. [ 380.625126][ T9130] lo: entered promiscuous mode [ 382.484866][ T9141] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1099'. [ 382.613497][ T9151] netlink: 'syz.2.1099': attribute type 4 has an invalid length. [ 382.681117][ T9151] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1099'. [ 383.162383][ T9163] netlink: 'syz.1.1103': attribute type 21 has an invalid length. [ 383.230869][ T9163] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.238846][ T9163] IPv6: Can't replace route, no match found [ 383.410200][ T9162] netlink: 'syz.1.1103': attribute type 10 has an invalid length. [ 383.813546][ T9162] wg1: entered promiscuous mode [ 383.818762][ T9162] wg1: entered allmulticast mode [ 383.932480][ T9162] team0: Device wg1 is of different type [ 384.675900][ T9169] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1105'. [ 384.846897][ T9176] netlink: 'syz.2.1105': attribute type 4 has an invalid length. [ 384.933876][ T9176] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1105'. [ 385.551778][ T9183] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 385.625710][ T9187] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1109'. [ 385.686902][ T9183] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1109'. [ 385.748214][ T9183] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.135711][ T9207] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1117'. [ 387.269627][ T9207] netlink: 'syz.2.1117': attribute type 4 has an invalid length. [ 387.355726][ T9207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1117'. [ 388.537183][ T9213] lo: entered promiscuous mode [ 388.646595][ T9224] FAULT_INJECTION: forcing a failure. [ 388.646595][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 388.727377][ T9224] CPU: 0 PID: 9224 Comm: syz.0.1123 Not tainted syzkaller #0 [ 388.734843][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.745299][ T9224] Call Trace: [ 388.748636][ T9224] [ 388.751611][ T9224] dump_stack_lvl+0x18c/0x250 [ 388.756349][ T9224] ? show_regs_print_info+0x20/0x20 [ 388.761703][ T9224] ? load_image+0x420/0x420 [ 388.766264][ T9224] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 388.772306][ T9224] ? lock_chain_count+0x20/0x20 [ 388.777483][ T9224] should_fail_ex+0x394/0x4c0 [ 388.782311][ T9224] should_failslab+0x9/0x20 [ 388.786875][ T9224] slab_pre_alloc_hook+0x59/0x300 [ 388.791960][ T9224] ? sctp_add_bind_addr+0x8c/0x360 [ 388.797457][ T9224] __kmem_cache_alloc_node+0x53/0x250 [ 388.802885][ T9224] ? sctp_add_bind_addr+0x8c/0x360 [ 388.808035][ T9224] kmalloc_trace+0x2a/0xe0 [ 388.812607][ T9224] sctp_add_bind_addr+0x8c/0x360 [ 388.817679][ T9224] sctp_copy_local_addr_list+0x31b/0x4e0 [ 388.823516][ T9224] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 388.829389][ T9224] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 388.835510][ T9224] ? sctp_v6_is_any+0x64/0x70 [ 388.840292][ T9224] ? sctp_copy_one_addr+0x8c/0x350 [ 388.845466][ T9224] sctp_bind_addr_copy+0xb3/0x3c0 [ 388.850541][ T9224] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 388.856927][ T9224] sctp_connect_new_asoc+0x2f9/0x6a0 [ 388.862319][ T9224] ? __sctp_connect+0xd80/0xd80 [ 388.867749][ T9224] ? security_sctp_bind_connect+0x82/0xb0 [ 388.873572][ T9224] ? __sanitizer_cov_trace_pc+0x5c/0x60 [ 388.879210][ T9224] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 388.884892][ T9224] ? security_sctp_bind_connect+0x89/0xb0 [ 388.890924][ T9224] sctp_sendmsg+0x1519/0x27b0 [ 388.895677][ T9224] ? sctp_getsockopt+0xb60/0xb60 [ 388.900666][ T9224] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.906954][ T9224] ? lockdep_hardirqs_on+0x98/0x150 [ 388.912250][ T9224] ? inet_sendmsg+0x147/0x2a0 [ 388.917165][ T9224] ? inet_sendmsg+0xce/0x2a0 [ 388.921805][ T9224] ? inet_send_prepare+0x250/0x250 [ 388.926965][ T9224] ____sys_sendmsg+0x61b/0x980 [ 388.931843][ T9224] ? __sys_sendmsg_sock+0x30/0x30 [ 388.937000][ T9224] ? __import_iovec+0x5f2/0x850 [ 388.942002][ T9224] ? import_iovec+0x73/0xa0 [ 388.946555][ T9224] ___sys_sendmsg+0x2a6/0x360 [ 388.951461][ T9224] ? __sys_sendmsg+0x2b0/0x2b0 [ 388.956291][ T9224] ? perf_trace_preemptirq_template+0x269/0x330 [ 388.963254][ T9224] __se_sys_sendmsg+0x1d0/0x2c0 [ 388.968154][ T9224] ? __x64_sys_sendmsg+0x80/0x80 [ 388.973370][ T9224] ? syscall_enter_from_user_mode+0x2e/0x80 [ 388.979414][ T9224] do_syscall_64+0x55/0xb0 [ 388.983976][ T9224] ? clear_bhb_loop+0x40/0x90 [ 388.988807][ T9224] ? clear_bhb_loop+0x40/0x90 [ 388.993958][ T9224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.000001][ T9224] RIP: 0033:0x7f985459e0d9 [ 389.004575][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.024262][ T9224] RSP: 002b:00007f98553b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.032728][ T9224] RAX: ffffffffffffffda RBX: 00007f9854825fa0 RCX: 00007f985459e0d9 [ 389.040745][ T9224] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000005 [ 389.048955][ T9224] RBP: 00007f98553b7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.057001][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.065189][ T9224] R13: 00007f9854826038 R14: 00007f9854825fa0 R15: 00007ffd72a86638 [ 389.073308][ T9224] [ 390.227929][ T9241] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1129'. [ 390.466379][ T9240] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 390.561352][ T9240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1129'. [ 390.745494][ T9240] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 391.314020][ T9255] FAULT_INJECTION: forcing a failure. [ 391.314020][ T9255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.345251][ T9255] CPU: 1 PID: 9255 Comm: syz.2.1135 Not tainted syzkaller #0 [ 391.352794][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.362897][ T9255] Call Trace: [ 391.366206][ T9255] [ 391.369169][ T9255] dump_stack_lvl+0x18c/0x250 [ 391.373898][ T9255] ? show_regs_print_info+0x20/0x20 [ 391.379413][ T9255] ? load_image+0x420/0x420 [ 391.383972][ T9255] ? __lock_acquire+0x7d80/0x7d80 [ 391.389061][ T9255] should_fail_ex+0x394/0x4c0 [ 391.393789][ T9255] prepare_alloc_pages+0x1e1/0x5b0 [ 391.399095][ T9255] __alloc_pages+0x134/0x460 [ 391.403734][ T9255] ? zone_statistics+0x170/0x170 [ 391.408725][ T9255] ? alloc_pages+0x4e1/0x740 [ 391.413353][ T9255] ? do_raw_spin_unlock+0x121/0x230 [ 391.418693][ T9255] __get_free_pages+0xc/0x30 [ 391.423418][ T9255] kasan_populate_vmalloc_pte+0x35/0x100 [ 391.429286][ T9255] __apply_to_page_range+0x860/0xdd0 [ 391.434720][ T9255] ? kasan_populate_vmalloc+0x70/0x70 [ 391.440234][ T9255] ? apply_to_page_range+0x50/0x50 [ 391.445387][ T9255] ? do_raw_spin_unlock+0x121/0x230 [ 391.450638][ T9255] alloc_vmap_area+0x1d26/0x1e50 [ 391.455673][ T9255] ? vm_map_ram+0xcf0/0xcf0 [ 391.460312][ T9255] ? rcu_is_watching+0x15/0xb0 [ 391.465310][ T9255] __get_vm_area_node+0x162/0x370 [ 391.470388][ T9255] __vmalloc_node_range+0x36f/0x1320 [ 391.475720][ T9255] ? reuseport_array_alloc+0x98/0x120 [ 391.481155][ T9255] ? aa_get_newest_label+0xfd/0x5c0 [ 391.486439][ T9255] ? end_current_label_crit_section+0x170/0x170 [ 391.492732][ T9255] ? free_vm_area+0x50/0x50 [ 391.497316][ T9255] ? apparmor_capable+0x137/0x1a0 [ 391.502386][ T9255] bpf_map_area_alloc+0xf1/0x110 [ 391.507375][ T9255] ? reuseport_array_alloc+0x98/0x120 [ 391.512882][ T9255] reuseport_array_alloc+0x98/0x120 [ 391.518228][ T9255] map_create+0x877/0x12f0 [ 391.522694][ T9255] __sys_bpf+0x651/0x890 [ 391.526983][ T9255] ? bpf_link_show_fdinfo+0x390/0x390 [ 391.532423][ T9255] ? lock_chain_count+0x20/0x20 [ 391.537329][ T9255] __x64_sys_bpf+0x7c/0x90 [ 391.541786][ T9255] do_syscall_64+0x55/0xb0 [ 391.546496][ T9255] ? clear_bhb_loop+0x40/0x90 [ 391.551300][ T9255] ? clear_bhb_loop+0x40/0x90 [ 391.556202][ T9255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.562223][ T9255] RIP: 0033:0x7fac9cd9e0d9 [ 391.566763][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.586501][ T9255] RSP: 002b:00007fac9dcab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.594966][ T9255] RAX: ffffffffffffffda RBX: 00007fac9d025fa0 RCX: 00007fac9cd9e0d9 [ 391.603261][ T9255] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 391.611374][ T9255] RBP: 00007fac9dcab090 R08: 0000000000000000 R09: 0000000000000000 [ 391.619838][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.628243][ T9255] R13: 00007fac9d026038 R14: 00007fac9d025fa0 R15: 00007ffe988a5de8 [ 391.636309][ T9255] [ 392.802001][ T9271] netlink: 'syz.2.1140': attribute type 3 has an invalid length. [ 392.860266][ T9271] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1140'. [ 393.033108][ T9265] lo: entered promiscuous mode [ 395.686399][ T9314] netlink: 'syz.0.1154': attribute type 3 has an invalid length. [ 395.779921][ T9314] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1154'. [ 395.792194][ T9315] bridge0: port 2(batadv0) entered blocking state [ 395.832833][ T9315] bridge0: port 2(batadv0) entered disabled state [ 395.867543][ T9315] batadv0: entered allmulticast mode [ 395.913981][ T9315] batadv0: entered promiscuous mode [ 395.927814][ T9315] bridge0: port 2(batadv0) entered blocking state [ 395.935318][ T9315] bridge0: port 2(batadv0) entered forwarding state [ 396.317940][ T1079] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 396.327588][ T1079] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 398.391926][ T9327] syzkaller0: entered promiscuous mode [ 398.397480][ T9327] syzkaller0: entered allmulticast mode [ 401.616626][ T9350] netlink: 'syz.3.1166': attribute type 17 has an invalid length. [ 402.845815][ T9409] netlink: 'syz.2.1190': attribute type 2 has an invalid length. [ 402.860133][ T9409] netlink: 'syz.2.1190': attribute type 8 has an invalid length. [ 402.880188][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1190'. [ 402.921449][ T9407] netlink: 'syz.3.1189': attribute type 17 has an invalid length. [ 403.065817][ T9408] delete_channel: no stack [ 404.064767][ T9412] syzkaller0: entered promiscuous mode [ 404.093891][ T9412] syzkaller0: entered allmulticast mode [ 406.771158][ T9434] syzkaller0: entered promiscuous mode [ 406.776688][ T9434] syzkaller0: entered allmulticast mode [ 406.783193][ T9444] netlink: 'syz.3.1201': attribute type 17 has an invalid length. [ 406.934339][ T9447] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 406.965862][ T9447] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1202'. [ 407.374856][ T9452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1204'. [ 407.435576][ T9453] netlink: 'syz.3.1204': attribute type 11 has an invalid length. [ 407.444030][ T9453] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1204'. [ 409.248371][ T9452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1204'. [ 410.244118][ T9472] netlink: 'syz.2.1211': attribute type 17 has an invalid length. [ 410.662985][ T9481] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1205'. [ 410.715426][ T9481] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 410.726450][ T9481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1205'. [ 410.816426][ T9481] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 410.999601][ T9493] netlink: 'syz.1.1219': attribute type 21 has an invalid length. [ 411.018816][ T9493] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1219'. [ 411.071436][ T9493] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 411.079594][ T9493] netlink: 'syz.1.1219': attribute type 5 has an invalid length. [ 411.121122][ T9493] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1219'. [ 411.266587][ T9494] sctp: [Deprecated]: syz.1.1219 (pid 9494) Use of int in maxseg socket option. [ 411.266587][ T9494] Use struct sctp_assoc_value instead [ 411.286721][ T9493] ================================================================== [ 411.294926][ T9493] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 411.302850][ T9493] Write of size 72 at addr ffff8880757d9a90 by task syz.1.1219/9493 [ 411.310865][ T9493] [ 411.313284][ T9493] CPU: 1 PID: 9493 Comm: syz.1.1219 Not tainted syzkaller #0 [ 411.320727][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.331014][ T9493] Call Trace: [ 411.334310][ T9493] [ 411.337273][ T9493] dump_stack_lvl+0x18c/0x250 [ 411.341994][ T9493] ? read_lock_is_recursive+0x20/0x20 [ 411.347389][ T9493] ? show_regs_print_info+0x20/0x20 [ 411.352599][ T9493] ? load_image+0x420/0x420 [ 411.357123][ T9493] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 411.362680][ T9493] ? __virt_addr_valid+0x10c/0x380 [ 411.367859][ T9493] ? __virt_addr_valid+0x10c/0x380 [ 411.372984][ T9493] ? __virt_addr_valid+0x10c/0x380 [ 411.378126][ T9493] print_report+0xa8/0x210 [ 411.382820][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 411.388043][ T9493] kasan_report+0x117/0x150 [ 411.392562][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 411.397900][ T9493] kasan_check_range+0x241/0x290 [ 411.402860][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 411.408003][ T9493] __asan_memcpy+0x40/0x70 [ 411.412450][ T9493] __bpf_get_stackid+0x6c7/0x900 [ 411.417408][ T9493] bpf_get_stackid_pe+0x343/0x410 [ 411.422629][ T9493] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 411.428099][ T9493] bpf_overflow_handler+0x1fc/0x510 [ 411.433495][ T9493] ? bpf_overflow_handler+0xde/0x510 [ 411.439095][ T9493] ? tp_perf_event_destroy+0x20/0x20 [ 411.444390][ T9493] ? perf_trace_preemptirq_template+0x144/0x330 [ 411.450939][ T9493] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 411.458239][ T9493] ? __perf_event_account_interrupt+0x187/0x280 [ 411.464494][ T9493] __perf_event_overflow+0x461/0x660 [ 411.469884][ T9493] perf_swevent_event+0x319/0x570 [ 411.474923][ T9493] ? perf_tp_event+0x1550/0x1550 [ 411.479960][ T9493] ? perf_tp_event+0x13f5/0x1550 [ 411.484942][ T9493] ___perf_sw_event+0x4ab/0x730 [ 411.489814][ T9493] ? ___perf_sw_event+0x19e/0x730 [ 411.494857][ T9493] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 411.501465][ T9493] ? rep_movs_alternative+0x4a/0x90 [ 411.506769][ T9493] ? verify_lock_unused+0x140/0x140 [ 411.511984][ T9493] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 411.518071][ T9493] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 411.523804][ T9493] ? lock_chain_count+0x20/0x20 [ 411.528672][ T9493] __perf_sw_event+0x139/0x270 [ 411.533471][ T9493] do_user_addr_fault+0x1242/0x12d0 [ 411.538775][ T9493] ? rcu_is_watching+0x15/0xb0 [ 411.543646][ T9493] exc_page_fault+0x64/0x100 [ 411.548537][ T9493] asm_exc_page_fault+0x26/0x30 [ 411.553576][ T9493] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 411.559483][ T9493] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 411.579739][ T9493] RSP: 0018:ffffc9000ccd7bd0 EFLAGS: 00050206 [ 411.585915][ T9493] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 00000000000003f3 [ 411.593897][ T9493] RDX: 0000000000000001 RSI: 00002000001d4000 RDI: ffff88805bf5a17a [ 411.601964][ T9493] RBP: ffffc9000ccd7d20 R08: 0000000000000004 R09: 0000000000000005 [ 411.609958][ T9493] R10: dffffc0000000000 R11: ffffed100b7eb4ad R12: 00002000001d43f3 [ 411.617939][ T9493] R13: 1ffff9200199afbd R14: ffff88805bf5a000 R15: 00002000001d3e86 [ 411.625927][ T9493] ? rcuref_put_slowpath+0x101/0x150 [ 411.631243][ T9493] _copy_from_user+0x8b/0xe0 [ 411.636025][ T9493] generic_map_update_batch+0x58c/0x800 [ 411.641621][ T9493] ? rcu_read_unlock+0xa0/0xa0 [ 411.646720][ T9493] ? __fdget+0x180/0x210 [ 411.651023][ T9493] ? rcu_read_unlock+0xa0/0xa0 [ 411.655803][ T9493] bpf_map_do_batch+0x3f2/0x600 [ 411.660711][ T9493] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 411.667256][ T9493] __sys_bpf+0x381/0x890 [ 411.671546][ T9493] ? bpf_link_show_fdinfo+0x390/0x390 [ 411.677315][ T9493] ? lock_chain_count+0x20/0x20 [ 411.682206][ T9493] __x64_sys_bpf+0x7c/0x90 [ 411.686827][ T9493] do_syscall_64+0x55/0xb0 [ 411.691602][ T9493] ? clear_bhb_loop+0x40/0x90 [ 411.696318][ T9493] ? clear_bhb_loop+0x40/0x90 [ 411.701039][ T9493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.706959][ T9493] RIP: 0033:0x7f366ff9e0d9 [ 411.711577][ T9493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.731214][ T9493] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.739661][ T9493] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 411.747747][ T9493] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 411.755741][ T9493] RBP: 00007f3670035024 R08: 0000000000000000 R09: 0000000000000000 [ 411.763931][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.772161][ T9493] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 411.780191][ T9493] [ 411.783417][ T9493] [ 411.785753][ T9493] Allocated by task 9494: [ 411.790269][ T9493] kasan_set_track+0x4e/0x70 [ 411.795094][ T9493] __kasan_kmalloc+0x8f/0xa0 [ 411.799877][ T9493] __kmalloc_node+0xb6/0x240 [ 411.804829][ T9493] bpf_map_area_alloc+0x5e/0x110 [ 411.809870][ T9493] prealloc_elems_and_freelist+0x86/0x1c0 [ 411.815696][ T9493] stack_map_alloc+0x32b/0x4b0 [ 411.820477][ T9493] map_create+0x877/0x12f0 [ 411.824906][ T9493] __sys_bpf+0x651/0x890 [ 411.829274][ T9493] __x64_sys_bpf+0x7c/0x90 [ 411.833791][ T9493] do_syscall_64+0x55/0xb0 [ 411.838213][ T9493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.844205][ T9493] [ 411.846553][ T9493] The buggy address belongs to the object at ffff8880757d9a80 [ 411.846553][ T9493] which belongs to the cache kmalloc-cg-64 of size 64 [ 411.861408][ T9493] The buggy address is located 16 bytes inside of [ 411.861408][ T9493] allocated 40-byte region [ffff8880757d9a80, ffff8880757d9aa8) [ 411.876323][ T9493] [ 411.878914][ T9493] The buggy address belongs to the physical page: [ 411.885392][ T9493] page:ffffea0001d5f640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x757d9 [ 411.895894][ T9493] memcg:ffff888024984e01 [ 411.900675][ T9493] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 411.910254][ T9493] page_type: 0xffffffff() [ 411.914598][ T9493] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c45a80 0000000000000003 [ 411.923301][ T9493] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888024984e01 [ 411.931901][ T9493] page dumped because: kasan: bad access detected [ 411.938863][ T9493] page_owner tracks the page as allocated [ 411.944707][ T9493] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5782, tgid 5782 (syz-executor), ts 153757236966, free_ts 153753112414 [ 411.963829][ T9493] post_alloc_hook+0x1c1/0x200 [ 411.968628][ T9493] get_page_from_freelist+0x2181/0x22a0 [ 411.974374][ T9493] __alloc_pages+0x1f0/0x460 [ 411.978969][ T9493] alloc_slab_page+0x5d/0x180 [ 411.983742][ T9493] new_slab+0x87/0x2d0 [ 411.987868][ T9493] ___slab_alloc+0xc5c/0x12f0 [ 411.992554][ T9493] __kmem_cache_alloc_node+0x11f/0x250 [ 411.998057][ T9493] kmalloc_trace+0x2a/0xe0 [ 412.002865][ T9493] alloc_fdtable+0xca/0x2c0 [ 412.007561][ T9493] dup_fd+0x747/0xa20 [ 412.011574][ T9493] copy_files+0xaf/0x110 [ 412.015834][ T9493] copy_process+0x157d/0x3da0 [ 412.020518][ T9493] kernel_clone+0x24b/0x8a0 [ 412.025030][ T9493] __x64_sys_clone+0x1b7/0x230 [ 412.029803][ T9493] do_syscall_64+0x55/0xb0 [ 412.034314][ T9493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.040219][ T9493] page last free stack trace: [ 412.044982][ T9493] free_unref_page_prepare+0x7d7/0x8f0 [ 412.050537][ T9493] free_unref_page+0x32/0x2e0 [ 412.055228][ T9493] vfree+0x1a7/0x340 [ 412.059220][ T9493] delayed_vfree_work+0x55/0x80 [ 412.064170][ T9493] process_scheduled_works+0xa60/0x1600 [ 412.069740][ T9493] worker_thread+0xa5e/0xfe0 [ 412.074341][ T9493] kthread+0x2fa/0x390 [ 412.078416][ T9493] ret_from_fork+0x48/0x80 [ 412.082841][ T9493] ret_from_fork_asm+0x11/0x20 [ 412.087656][ T9493] [ 412.089986][ T9493] Memory state around the buggy address: [ 412.095674][ T9493] ffff8880757d9980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 412.103750][ T9493] ffff8880757d9a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 412.111823][ T9493] >ffff8880757d9a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 412.119890][ T9493] ^ [ 412.125274][ T9493] ffff8880757d9b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 412.133522][ T9493] ffff8880757d9b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 412.141805][ T9493] ================================================================== [ 412.150167][ T9493] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 412.157385][ T9493] CPU: 1 PID: 9493 Comm: syz.1.1219 Not tainted syzkaller #0 [ 412.165281][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.175714][ T9493] Call Trace: [ 412.178999][ T9493] [ 412.182028][ T9493] dump_stack_lvl+0x18c/0x250 [ 412.186814][ T9493] ? show_regs_print_info+0x20/0x20 [ 412.192162][ T9493] ? load_image+0x420/0x420 [ 412.196772][ T9493] panic+0x2ca/0x720 [ 412.200713][ T9493] ? __lock_acquire+0x7d80/0x7d80 [ 412.205841][ T9493] ? bpf_jit_dump+0xd0/0xd0 [ 412.210358][ T9493] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 412.216546][ T9493] ? _raw_spin_unlock+0x40/0x40 [ 412.221413][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 412.226539][ T9493] check_panic_on_warn+0x84/0xa0 [ 412.231506][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 412.236629][ T9493] end_report+0x6f/0x130 [ 412.241060][ T9493] kasan_report+0x128/0x150 [ 412.245836][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 412.251002][ T9493] kasan_check_range+0x241/0x290 [ 412.256057][ T9493] ? __bpf_get_stackid+0x6c7/0x900 [ 412.261192][ T9493] __asan_memcpy+0x40/0x70 [ 412.265632][ T9493] __bpf_get_stackid+0x6c7/0x900 [ 412.270677][ T9493] bpf_get_stackid_pe+0x343/0x410 [ 412.275894][ T9493] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 412.281369][ T9493] bpf_overflow_handler+0x1fc/0x510 [ 412.286698][ T9493] ? bpf_overflow_handler+0xde/0x510 [ 412.292437][ T9493] ? tp_perf_event_destroy+0x20/0x20 [ 412.298017][ T9493] ? perf_trace_preemptirq_template+0x144/0x330 [ 412.304564][ T9493] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 412.312439][ T9493] ? __perf_event_account_interrupt+0x187/0x280 [ 412.318798][ T9493] __perf_event_overflow+0x461/0x660 [ 412.324309][ T9493] perf_swevent_event+0x319/0x570 [ 412.329350][ T9493] ? perf_tp_event+0x1550/0x1550 [ 412.334562][ T9493] ? perf_tp_event+0x13f5/0x1550 [ 412.339526][ T9493] ___perf_sw_event+0x4ab/0x730 [ 412.344428][ T9493] ? ___perf_sw_event+0x19e/0x730 [ 412.349551][ T9493] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 412.356108][ T9493] ? rep_movs_alternative+0x4a/0x90 [ 412.361353][ T9493] ? verify_lock_unused+0x140/0x140 [ 412.366570][ T9493] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 412.372572][ T9493] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 412.378312][ T9493] ? lock_chain_count+0x20/0x20 [ 412.383193][ T9493] __perf_sw_event+0x139/0x270 [ 412.387974][ T9493] do_user_addr_fault+0x1242/0x12d0 [ 412.393191][ T9493] ? rcu_is_watching+0x15/0xb0 [ 412.398318][ T9493] exc_page_fault+0x64/0x100 [ 412.402931][ T9493] asm_exc_page_fault+0x26/0x30 [ 412.407796][ T9493] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 412.413638][ T9493] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 412.433340][ T9493] RSP: 0018:ffffc9000ccd7bd0 EFLAGS: 00050206 [ 412.439418][ T9493] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 00000000000003f3 [ 412.447401][ T9493] RDX: 0000000000000001 RSI: 00002000001d4000 RDI: ffff88805bf5a17a [ 412.455391][ T9493] RBP: ffffc9000ccd7d20 R08: 0000000000000004 R09: 0000000000000005 [ 412.463369][ T9493] R10: dffffc0000000000 R11: ffffed100b7eb4ad R12: 00002000001d43f3 [ 412.471349][ T9493] R13: 1ffff9200199afbd R14: ffff88805bf5a000 R15: 00002000001d3e86 [ 412.479369][ T9493] ? rcuref_put_slowpath+0x101/0x150 [ 412.484776][ T9493] _copy_from_user+0x8b/0xe0 [ 412.489385][ T9493] generic_map_update_batch+0x58c/0x800 [ 412.495051][ T9493] ? rcu_read_unlock+0xa0/0xa0 [ 412.499829][ T9493] ? __fdget+0x180/0x210 [ 412.504093][ T9493] ? rcu_read_unlock+0xa0/0xa0 [ 412.508860][ T9493] bpf_map_do_batch+0x3f2/0x600 [ 412.513725][ T9493] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 412.520244][ T9493] __sys_bpf+0x381/0x890 [ 412.524522][ T9493] ? bpf_link_show_fdinfo+0x390/0x390 [ 412.530439][ T9493] ? lock_chain_count+0x20/0x20 [ 412.535306][ T9493] __x64_sys_bpf+0x7c/0x90 [ 412.539759][ T9493] do_syscall_64+0x55/0xb0 [ 412.544275][ T9493] ? clear_bhb_loop+0x40/0x90 [ 412.549066][ T9493] ? clear_bhb_loop+0x40/0x90 [ 412.553752][ T9493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.559658][ T9493] RIP: 0033:0x7f366ff9e0d9 [ 412.564103][ T9493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.584101][ T9493] RSP: 002b:00007f3670dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.592554][ T9493] RAX: ffffffffffffffda RBX: 00007f3670225fa0 RCX: 00007f366ff9e0d9 [ 412.600735][ T9493] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 412.609067][ T9493] RBP: 00007f3670035024 R08: 0000000000000000 R09: 0000000000000000 [ 412.617149][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.625124][ T9493] R13: 00007f3670226038 R14: 00007f3670225fa0 R15: 00007fff776c8658 [ 412.633202][ T9493] [ 412.636921][ T9493] Kernel Offset: disabled [ 412.641344][ T9493] Rebooting in 86400 seconds..