last executing test programs: 27.320462076s ago: executing program 3 (id=2192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x4020940d, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, 0x0, 0x2000481c) sendmsg$sock(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000081) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES32], 0xffdd) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x81, 0x7}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee080", 0x52}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000004c0)=r0) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010840000000000000062000000005c294b"], 0x18}, 0x41) r10 = syz_clone(0x200000, &(0x7f00000001c0)="b004f84ef3c695e74655fff60e", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="ba9e973cc904e29ecc2a86bdbe2ee117e0769b54e977afceb9310b899a14f2b50cefce060bb7687586803c4b3e04700a9f46edb4bbf8df11e6") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r10, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9fff548600d698ceb5819570163", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x1}, 0xac) 26.841722408s ago: executing program 1 (id=2194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000540), 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 26.296569911s ago: executing program 0 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 26.141173465s ago: executing program 3 (id=2198): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x13, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) 26.017960058s ago: executing program 0 (id=2199): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @generic={0x2, 0x9, 0x2, 0x101, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001040)={r5, 0x0, 0x0}, 0x20) sendmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x1040}, 0x4044091) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r1}, 0x94) 25.90659028s ago: executing program 1 (id=2200): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r1, r2, 0x2f, 0x2038, 0x4, @void, @void, @value, @void, r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@ifindex, r0, 0x9, 0x1, r0, @void, @value=r0, @void, @void, r3}, 0x20) 25.835081013s ago: executing program 3 (id=2201): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000142800000003000000050000000000000c02000000000000090000000000000000000000000000b9bd3d75000000000000006100477baffee0ffae08ef56b5bf71b646cd56b7ec7b06bb93abf9767651ca0484c19e7e2ab894d1fff605ad07715caaa5efe4dd90f4e96880fbb5489e788a1dc17d9ec40be16a4507ca7c9c4576ad3aeddc6e2338aa79c118fe80758ec4884ff38ab52c185352b6db3d56969ed6de34731652c58e1a1bb477560e5df7321c5d23388c9f2d9b76395d1315e3fb2723dd96708c66f61173efdc2aea1532aa129df4ab"], 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffde}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x4, 0x79, 0x7, 0x0, 0xc, 0x11040, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x9}, 0x100400, 0x6, 0x0, 0x1, 0x9, 0x59231f13, 0x3, 0x0, 0x5, 0x0, 0x3}, r5, 0x6, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10) 25.806525973s ago: executing program 0 (id=2202): r0 = socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) (async) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) (async) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f00000001c0)=r4, 0xa1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ddaccee5c4f3b3983792a3a40900000000000000060000801859000003000000000000000000000018000000000000800000000007000000"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000ec0)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x2, 0x3, 0x8, 0x6}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94) (async) close(r5) 25.633685927s ago: executing program 1 (id=2204): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%-010d \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x2, 0x2, 0x7, 0xb20, r3, 0x9, '\x00', 0x0, r2, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000004000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000181b0000", @ANYRES32=r2, @ANYBLOB="00000002000000006092c0fffcffffff9500000000000000dd200000ffffffff18160000728ebd2d31a416dd121e1bb50ece4b3713c393ef98dedc885d7a6bf0b083def4ab43139310a38958e8c1bd63298a6afb0adba2f82f61b94470ee76af9fa05b8bbed44c9c1157966cb344f8a5be9f2d7633e45e7988c70f96ebb666c0dbd5413636ab2a9e05ce81b809f48fc524b50067c18249661c2103b58cc52fc1d9dbb36adf35384df2bd0e98b84c898ccc", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x8, 0xd6, &(0x7f0000000680)=""/214, 0x41100, 0x50, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000900)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r6, r2, r7, r2], &(0x7f0000000b40)=[{0x3, 0x1, 0xe, 0x3}, {0x4, 0x5, 0xe, 0x6}, {0x0, 0x4, 0xa, 0x4}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 25.632931537s ago: executing program 2 (id=2205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe0f02, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x40) r1 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000003480)=0x9, 0x12) (async) setsockopt$sock_attach_bpf(r1, 0x0, 0x18, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0xffffffffffffffff, r4, 0x0, 0x4, &(0x7f00000006c0)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r5}, 0x4) (async) close(r4) (async) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfe33) (async, rerun: 32) write$cgroup_pid(r4, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x6, 0xf8, &(0x7f0000000180)=""/248, 0xb6df4c32c1d5c814, 0x78, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x10, 0xc5b1}, 0x94) 25.459127211s ago: executing program 0 (id=2206): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7, 0x8, 0x81, 0xb, 0x0, 0x312, 0x8000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x9}, 0x10000, 0x3, 0xf, 0x8, 0x8000000000000000, 0x1000, 0x44, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x11, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) socket$kcm(0x10, 0x2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x101) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8000, 0x80000000000, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0xa) 25.447438332s ago: executing program 2 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 25.297901055s ago: executing program 2 (id=2208): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000756c6c250000000000202006000000ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009520000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x106) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 25.297612825s ago: executing program 3 (id=2209): bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0xfffffffe}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x231, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, &(0x7f0000008000), &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r0, 0x14, &(0x7f00000000c0)={0x6, 0x11}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, r2}, 0x94) 25.150427569s ago: executing program 2 (id=2210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) (async) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 24.633595991s ago: executing program 2 (id=2211): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x110, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x4, 0x13, 0x9, 0x0, 0x20080000001, 0x72180, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0xff}, 0x1b2a0, 0x100000000000003, 0xf, 0x3, 0x3, 0x9, 0x2, 0x0, 0x1003, 0x0, 0x100000001}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x0) (async) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x24, 0x0, 0x25) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000bc0700000000000081420000950000000000000007380700000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0xba, &(0x7f0000000180)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x5, 0xa3, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x1, 0x2, 0x6}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000480)={r3, r4}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x10) 24.569740093s ago: executing program 1 (id=2212): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r8) openat$cgroup_subtree(r9, &(0x7f00000000c0), 0x2, 0x0) r12 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r11}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000000900000000000007000000000000005f612e5f2106d110"], 0x0, 0x30, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r13}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000380)=r11, 0x4) close(r8) 24.540952984s ago: executing program 3 (id=2213): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(0x3) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e0000000400000018000062ea397000b1000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000090000000b704000000000000850000003300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc6, 0xc6, 0x7, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @datasec={0xb, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x80000001, 0x71}], "6512"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x26, 0x1}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @enum={0x9, 0x7, 0x0, 0x6, 0x4, [{0x6}, {0x9, 0x5}, {0x8, 0x2}, {0x3, 0xd}, {0xd, 0x7}, {0x1, 0x5}, {0x6, 0x1}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @struct={0x4, 0x1, 0x0, 0x4, 0x0, 0xff, [{0xa, 0x3, 0x3}]}]}, {0x0, [0x61, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000000500)=""/49, 0xe7, 0x31, 0x0, 0x1, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xd, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @printk={@llu}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x58, &(0x7f00000006c0)=""/88, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x8, 0x9, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r2, r3, r2], &(0x7f0000000800)=[{0x0, 0x5, 0xd, 0xb}], 0x10, 0x5}, 0x94) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r12, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r11, 0x24, 0x0, 0x10003, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYRES16=r10, @ANYRES8=r8, @ANYRES64=r8, @ANYRES64=r13, @ANYRES8=r9, @ANYRESHEX=r12], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@map=r3, r6, 0x33, 0x2, r4, @void, @value=r4, @void, @void, r13}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r5, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/116, 0x74, 0x0, &(0x7f0000000600)=""/45, 0x2d}}, 0x10) 22.572987821s ago: executing program 3 (id=2214): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x80000001, 0x9e4, 0x5, 0x40000000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x6d7c6c3eacb5c910, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000600)=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x116, 0x116, 0xa, [@datasec={0xb, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x9, 0x8}], '1y'}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @union={0x9, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x0, 0xbc}, {0x9, 0x3, 0xcf4e}, {0xd, 0x0, 0x81}, {0xe, 0x4, 0xfffffff8}, {0x9, 0x1, 0xa}, {0xc, 0x5, 0x2}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x7, 0x3}, {0x5, 0x5}, {0xe, 0x3}, {0x0, 0x1}, {0x10, 0x2}, {0x5, 0x3}, {0x8}, {0x10, 0x3}, {0x3, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x7}}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0xa}]}, {0x0, [0xd1, 0x2e, 0x0, 0x61, 0x30, 0x5f, 0x30, 0x61]}}, &(0x7f0000000940)=""/10, 0x13a, 0xa, 0x0, 0xffff0000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, r2, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r5}, &(0x7f0000001c40), &(0x7f0000001c80)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@exit, @generic={0x81, 0x0, 0x5, 0x7571, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0xd6, 0x14, &(0x7f00000001c0)=""/20, 0x41000, 0xa, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x4, 0x7, 0x7}, 0x10, 0x0, r0, 0x0, &(0x7f0000000700)=[r2, r3, r4, r5], 0x0, 0x10, 0x3}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r7, 0x0, 0x0, 0xdd, &(0x7f0000000a40), &(0x7f0000000a80)=""/221, 0x0, 0x0, 0xce, 0x1a, &(0x7f0000000b80)="e275f81c4fea8d2c8e29b15c870825ba9d5e4e92cc6e7b84cc1d8bbd086fe894f1b2ac5163c6fe2f200ce080594949b76ddca1099245e04c967be3bc49efc7bb842acd09dba33f007dfbab9941565520beefbd4e85f71951bd795bccbedb2baa174b76726c2c727f34318b26938f2438abe1758cc72f270d318329e416f575c58e8f18f1c0e5b626db5a750ab33ff69fc012698402c91c47938406e7910f6dd5d1decf4d6ee25931d8f7269228e8ddd3b92a332140133b71e36e39a67f29a9885ec5af87b8755d670179327a26cb", &(0x7f0000000c80)="d2bcd01562cf798a7da9d7768e60266b50794067ac824f8b3c5a", 0xd, 0x0, 0x80}, 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) r10 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x408000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r11, &(0x7f0000000a40)='blkio.bfq.time\x00', 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000040)='syzkaller\x00') sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b2", 0x41}], 0x1}, 0x0) 22.568203752s ago: executing program 0 (id=2222): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x85048400, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000580)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x36, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x1bd, 0x0, &(0x7f0000000780)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, 0x0) r11 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r11, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 22.24966858s ago: executing program 2 (id=2215): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040000002000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x24) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0xfd5c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x3ff, 0x3, 0x4, 0x4200, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x1, 0x3d, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 22.102357943s ago: executing program 1 (id=2216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 21.911884318s ago: executing program 1 (id=2217): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xc123, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0xa00, 0x10004, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1e, 0x8080f, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e21, @multicast2}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {0x0}], 0x3, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x38}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0xa158, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x66, 0x0, 0x1}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xf, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xee, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000000000800100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x94) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d2", 0xe}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21.374082841s ago: executing program 0 (id=2218): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r2, &(0x7f00000004c0)="1c04bb78381819a687d12e6092c8702a7b950f63df32661d57b5d41e107f649204bf636e3d5c8c19af2feeb202d98ec26d8bbd5983f1c81488e4636a1bacb25d3a2af85491478255fea70020189b1705932ff06b35776239061d5a647a084eab1b05a2dc9c799e60d7717c551283303e746dbb53296be99fbf1cdee0fbe9ee4ecaa0195616b7b9ca0a7c", 0x0, 0x4}, 0x20) (async) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 0s ago: executing program 32 (id=2218): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r2, &(0x7f00000004c0)="1c04bb78381819a687d12e6092c8702a7b950f63df32661d57b5d41e107f649204bf636e3d5c8c19af2feeb202d98ec26d8bbd5983f1c81488e4636a1bacb25d3a2af85491478255fea70020189b1705932ff06b35776239061d5a647a084eab1b05a2dc9c799e60d7717c551283303e746dbb53296be99fbf1cdee0fbe9ee4ecaa0195616b7b9ca0a7c", 0x0, 0x4}, 0x20) (async) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) kernel console output (not intermixed with test programs): attribute type 10 has an invalid length. [ 200.082709][ T7643] netlink: 2 bytes leftover after parsing attributes in process `syz.3.501'. [ 200.716708][ T7647] delete_channel: no stack [ 200.828614][ T7651] syzkaller0: entered promiscuous mode [ 200.834154][ T7651] syzkaller0: entered allmulticast mode [ 200.872833][ T7659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.916646][ T7662] netlink: 'syz.3.508': attribute type 21 has an invalid length. [ 200.957044][ T7664] sctp: [Deprecated]: syz.0.510 (pid 7664) Use of int in maxseg socket option. [ 200.957044][ T7664] Use struct sctp_assoc_value instead [ 201.243144][ T7676] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.513'. [ 201.968892][ T7670] delete_channel: no stack [ 203.522268][ T7690] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.518'. [ 203.705333][ T7690] netlink: 'syz.1.518': attribute type 21 has an invalid length. [ 203.729795][ T7690] netlink: 156 bytes leftover after parsing attributes in process `syz.1.518'. [ 204.019122][ T7713] netlink: 763 bytes leftover after parsing attributes in process `syz.0.525'. [ 204.049155][ T7703] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.522'. [ 204.082528][ T7703] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 205.842390][ T7745] netlink: 'syz.2.535': attribute type 4 has an invalid length. [ 205.870183][ T7745] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.535'. [ 205.909643][ T7746] netlink: 'syz.0.532': attribute type 3 has an invalid length. [ 205.917350][ T7746] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.532'. [ 207.356504][ T7806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.551'. [ 210.263268][ T7827] netlink: 'syz.1.557': attribute type 28 has an invalid length. [ 210.517203][ T7835] netlink: 'syz.1.559': attribute type 2 has an invalid length. [ 210.536533][ T7835] netlink: 'syz.1.559': attribute type 8 has an invalid length. [ 210.576734][ T7835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.559'. [ 211.895124][ T7847] netlink: 'syz.2.563': attribute type 6 has an invalid length. [ 211.928738][ T7847] netlink: 164 bytes leftover after parsing attributes in process `syz.2.563'. [ 212.267457][ T7856] netlink: 'syz.3.565': attribute type 2 has an invalid length. [ 212.285687][ T7856] netlink: 119 bytes leftover after parsing attributes in process `syz.3.565'. [ 212.388341][ T7858] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 212.396042][ T7858] netlink: 60179 bytes leftover after parsing attributes in process `syz.3.565'. [ 212.436323][ T7856] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 212.457058][ T7856] netlink: 60179 bytes leftover after parsing attributes in process `syz.3.565'. [ 212.516337][ T7860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.564'. [ 212.626781][ T5770] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 213.533220][ T7891] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.573'. [ 213.857557][ T7883] syzkaller0: entered promiscuous mode [ 213.866724][ T7883] syzkaller0: entered allmulticast mode [ 214.060937][ T7896] FAULT_INJECTION: forcing a failure. [ 214.060937][ T7896] name failslab, interval 1, probability 0, space 0, times 1 [ 214.074210][ T7896] CPU: 1 PID: 7896 Comm: syz.2.575 Not tainted syzkaller #0 [ 214.081529][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.091647][ T7896] Call Trace: [ 214.094944][ T7896] [ 214.097879][ T7896] dump_stack_lvl+0x18c/0x250 [ 214.102561][ T7896] ? show_regs_print_info+0x20/0x20 [ 214.107756][ T7896] ? load_image+0x420/0x420 [ 214.112257][ T7896] ? __might_sleep+0xe0/0xe0 [ 214.116847][ T7896] ? __lock_acquire+0x7d80/0x7d80 [ 214.121875][ T7896] should_fail_ex+0x394/0x4c0 [ 214.126557][ T7896] should_failslab+0x9/0x20 [ 214.131060][ T7896] slab_pre_alloc_hook+0x59/0x300 [ 214.136088][ T7896] ? page_pool_create+0x71/0x5c0 [ 214.141033][ T7896] __kmem_cache_alloc_node+0x53/0x250 [ 214.146410][ T7896] ? page_pool_create+0x71/0x5c0 [ 214.151350][ T7896] kmalloc_node_trace+0x26/0xe0 [ 214.156201][ T7896] page_pool_create+0x71/0x5c0 [ 214.160975][ T7896] bpf_test_run_xdp_live+0x203/0x1b30 [ 214.166353][ T7896] ? 0xffffffffa0004740 [ 214.170505][ T7896] ? 0xffffffffa0004740 [ 214.174660][ T7896] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 214.180552][ T7896] ? xdp_convert_md_to_buff+0x330/0x330 [ 214.186120][ T7896] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 214.192362][ T7896] ? xdp_convert_md_to_buff+0x27b/0x330 [ 214.197906][ T7896] ? xdp_convert_md_to_buff+0x5b/0x330 [ 214.203365][ T7896] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 214.208737][ T7896] ? __lock_acquire+0x7d80/0x7d80 [ 214.213764][ T7896] ? dev_put+0x80/0x80 [ 214.217840][ T7896] ? dev_put+0x80/0x80 [ 214.221905][ T7896] bpf_prog_test_run+0x31f/0x390 [ 214.226839][ T7896] __sys_bpf+0x49d/0x890 [ 214.231078][ T7896] ? bpf_link_show_fdinfo+0x390/0x390 [ 214.236453][ T7896] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.242650][ T7896] __x64_sys_bpf+0x7c/0x90 [ 214.247063][ T7896] do_syscall_64+0x55/0xb0 [ 214.251478][ T7896] ? clear_bhb_loop+0x40/0x90 [ 214.256148][ T7896] ? clear_bhb_loop+0x40/0x90 [ 214.260821][ T7896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.266707][ T7896] RIP: 0033:0x7ff2e999e0d9 [ 214.271118][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.290718][ T7896] RSP: 002b:00007ff2ea81c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.299126][ T7896] RAX: ffffffffffffffda RBX: 00007ff2e9c25fa0 RCX: 00007ff2e999e0d9 [ 214.307092][ T7896] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 214.315073][ T7896] RBP: 00007ff2ea81c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.323046][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.331029][ T7896] R13: 00007ff2e9c26038 R14: 00007ff2e9c25fa0 R15: 00007ffcbda69d18 [ 214.339031][ T7896] [ 215.902750][ T7908] netlink: 14 bytes leftover after parsing attributes in process `syz.1.577'. [ 215.919348][ T7908] hsr_slave_0: left promiscuous mode [ 215.931589][ T7908] hsr_slave_1: left promiscuous mode [ 216.023051][ T7908] bridge0: port 3(hsr0) entered disabled state [ 216.090079][ T7908] hsr0 (unregistering): left allmulticast mode [ 216.107500][ T7908] bridge0: port 3(hsr0) entered disabled state [ 216.826622][ T7923] netlink: 'syz.1.583': attribute type 27 has an invalid length. [ 217.362432][ T7929] FAULT_INJECTION: forcing a failure. [ 217.362432][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 217.400163][ T7929] CPU: 0 PID: 7929 Comm: syz.0.584 Not tainted syzkaller #0 [ 217.407514][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.417580][ T7929] Call Trace: [ 217.420877][ T7929] [ 217.423818][ T7929] dump_stack_lvl+0x18c/0x250 [ 217.428516][ T7929] ? show_regs_print_info+0x20/0x20 [ 217.433727][ T7929] ? load_image+0x420/0x420 [ 217.438243][ T7929] ? __might_sleep+0xe0/0xe0 [ 217.442856][ T7929] ? __lock_acquire+0x7d80/0x7d80 [ 217.447895][ T7929] should_fail_ex+0x394/0x4c0 [ 217.452594][ T7929] should_failslab+0x9/0x20 [ 217.457113][ T7929] slab_pre_alloc_hook+0x59/0x300 [ 217.462164][ T7929] ? kvmalloc_node+0x70/0x180 [ 217.466856][ T7929] ? kvmalloc_node+0x70/0x180 [ 217.471551][ T7929] __kmem_cache_alloc_node+0x53/0x250 [ 217.476945][ T7929] ? kvmalloc_node+0x70/0x180 [ 217.481637][ T7929] __kmalloc_node+0xa6/0x240 [ 217.486249][ T7929] kvmalloc_node+0x70/0x180 [ 217.490767][ T7929] page_pool_create+0x1eb/0x5c0 [ 217.495640][ T7929] bpf_test_run_xdp_live+0x203/0x1b30 [ 217.501036][ T7929] ? bpf_dispatcher_xdp+0x800/0x1000 [ 217.506335][ T7929] ? bpf_dispatcher_xdp+0x800/0x1000 [ 217.511630][ T7929] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 217.517542][ T7929] ? xdp_convert_md_to_buff+0x330/0x330 [ 217.523134][ T7929] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 217.529402][ T7929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 217.534879][ T7929] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 217.540265][ T7929] ? __lock_acquire+0x7d80/0x7d80 [ 217.545321][ T7929] ? dev_put+0x80/0x80 [ 217.549419][ T7929] ? dev_put+0x80/0x80 [ 217.553499][ T7929] bpf_prog_test_run+0x31f/0x390 [ 217.558456][ T7929] __sys_bpf+0x49d/0x890 [ 217.562716][ T7929] ? bpf_link_show_fdinfo+0x390/0x390 [ 217.568115][ T7929] ? lock_chain_count+0x20/0x20 [ 217.572993][ T7929] __x64_sys_bpf+0x7c/0x90 [ 217.577419][ T7929] do_syscall_64+0x55/0xb0 [ 217.581851][ T7929] ? clear_bhb_loop+0x40/0x90 [ 217.586540][ T7929] ? clear_bhb_loop+0x40/0x90 [ 217.591230][ T7929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.597149][ T7929] RIP: 0033:0x7fa69539e0d9 [ 217.601575][ T7929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.621194][ T7929] RSP: 002b:00007fa6962f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.629626][ T7929] RAX: ffffffffffffffda RBX: 00007fa695625fa0 RCX: 00007fa69539e0d9 [ 217.637604][ T7929] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 217.645585][ T7929] RBP: 00007fa6962f4090 R08: 0000000000000000 R09: 0000000000000000 [ 217.653569][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.661552][ T7929] R13: 00007fa695626038 R14: 00007fa695625fa0 R15: 00007fff058c3e08 [ 217.669548][ T7929] [ 217.702042][ T7929] page_pool_create() gave up with errno -12 [ 218.004432][ T7931] syzkaller0: entered promiscuous mode [ 218.047191][ T7931] syzkaller0: entered allmulticast mode [ 218.054845][ T7934] netlink: 'syz.0.586': attribute type 7 has an invalid length. [ 218.149676][ T7938] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 219.559282][ T7961] FAULT_INJECTION: forcing a failure. [ 219.559282][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 219.572495][ T7961] CPU: 0 PID: 7961 Comm: syz.0.595 Not tainted syzkaller #0 [ 219.579801][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.589867][ T7961] Call Trace: [ 219.593136][ T7961] [ 219.596055][ T7961] dump_stack_lvl+0x18c/0x250 [ 219.600749][ T7961] ? show_regs_print_info+0x20/0x20 [ 219.605940][ T7961] ? load_image+0x420/0x420 [ 219.610433][ T7961] ? __might_sleep+0xe0/0xe0 [ 219.615013][ T7961] ? __lock_acquire+0x7d80/0x7d80 [ 219.620029][ T7961] should_fail_ex+0x394/0x4c0 [ 219.624702][ T7961] should_failslab+0x9/0x20 [ 219.629206][ T7961] slab_pre_alloc_hook+0x59/0x300 [ 219.634249][ T7961] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 219.639542][ T7961] __kmem_cache_alloc_node+0x53/0x250 [ 219.644931][ T7961] ? __asan_memset+0x22/0x40 [ 219.649513][ T7961] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 219.654789][ T7961] kmalloc_trace+0x2a/0xe0 [ 219.659199][ T7961] __xdp_reg_mem_model+0x1e3/0x5a0 [ 219.664300][ T7961] ? kvmalloc_node+0x70/0x180 [ 219.668965][ T7961] ? kvmalloc_node+0x70/0x180 [ 219.673633][ T7961] ? xdp_reg_mem_model+0x40/0x40 [ 219.678571][ T7961] xdp_reg_mem_model+0x22/0x40 [ 219.683325][ T7961] bpf_test_run_xdp_live+0x262/0x1b30 [ 219.688690][ T7961] ? 0xffffffffa0004740 [ 219.692851][ T7961] ? 0xffffffffa0004740 [ 219.696991][ T7961] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 219.702892][ T7961] ? xdp_convert_md_to_buff+0x330/0x330 [ 219.708449][ T7961] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 219.714681][ T7961] ? xdp_convert_md_to_buff+0x5b/0x330 [ 219.720133][ T7961] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 219.725499][ T7961] ? __lock_acquire+0x7d80/0x7d80 [ 219.730516][ T7961] ? dev_put+0x80/0x80 [ 219.734604][ T7961] ? dev_put+0x80/0x80 [ 219.738666][ T7961] bpf_prog_test_run+0x31f/0x390 [ 219.743594][ T7961] __sys_bpf+0x49d/0x890 [ 219.747835][ T7961] ? bpf_link_show_fdinfo+0x390/0x390 [ 219.753224][ T7961] ? lock_chain_count+0x20/0x20 [ 219.758084][ T7961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 219.764058][ T7961] __x64_sys_bpf+0x7c/0x90 [ 219.768462][ T7961] do_syscall_64+0x55/0xb0 [ 219.772864][ T7961] ? clear_bhb_loop+0x40/0x90 [ 219.777531][ T7961] ? clear_bhb_loop+0x40/0x90 [ 219.782193][ T7961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.788076][ T7961] RIP: 0033:0x7fa69539e0d9 [ 219.792476][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.812085][ T7961] RSP: 002b:00007fa6962f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.820901][ T7961] RAX: ffffffffffffffda RBX: 00007fa695625fa0 RCX: 00007fa69539e0d9 [ 219.828872][ T7961] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 219.836837][ T7961] RBP: 00007fa6962f4090 R08: 0000000000000000 R09: 0000000000000000 [ 219.844812][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.852781][ T7961] R13: 00007fa695626038 R14: 00007fa695625fa0 R15: 00007fff058c3e08 [ 219.860759][ T7961] [ 221.071524][ T7969] sit0: left promiscuous mode [ 224.329274][ T7980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 224.345113][ T7977] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.601'. [ 224.398011][ T7981] sit0: entered promiscuous mode [ 227.585940][ T8006] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.610'. [ 230.915391][ T8035] netlink: 'syz.2.618': attribute type 2 has an invalid length. [ 230.948452][ T8035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.618'. [ 231.103853][ T8037] syzkaller0: entered promiscuous mode [ 231.137881][ T8037] syzkaller0: entered allmulticast mode [ 236.895208][ T8083] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 236.918411][ T8083] netlink: 55 bytes leftover after parsing attributes in process `syz.1.633'. [ 237.175710][ T8093] syzkaller0: entered promiscuous mode [ 237.181596][ T8093] syzkaller0: entered allmulticast mode [ 237.189930][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.638'. [ 237.199094][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.638'. [ 238.644863][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.638'. [ 238.879041][ T8119] syzkaller0: entered promiscuous mode [ 238.884607][ T8119] syzkaller0: entered allmulticast mode [ 238.923098][ T8115] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.645'. [ 239.146343][ T8132] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.162157][ T8131] netlink: 'syz.0.647': attribute type 3 has an invalid length. [ 239.170141][ T8131] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.647'. [ 241.206501][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'. [ 241.268462][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'. [ 241.358053][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'. [ 241.439618][ T8171] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.657'. [ 241.608295][ T8174] team0: Port device team_slave_0 removed [ 241.631173][ T8174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 242.166377][ T8197] syzkaller0: entered promiscuous mode [ 242.172153][ T8197] syzkaller0: entered allmulticast mode [ 242.243108][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.250865][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.259800][ T8200] bridge0: entered allmulticast mode [ 242.295695][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.302953][ T8200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.310596][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.317860][ T8200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.327343][ T8200] bridge0: entered promiscuous mode [ 242.986449][ T8208] __nla_validate_parse: 3 callbacks suppressed [ 242.986466][ T8208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.667'. [ 243.877670][ T8208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.667'. [ 244.112350][ T8219] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.669'. [ 244.147090][ T8214] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.669'. [ 244.180728][ T8224] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.673'. [ 244.313832][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.321578][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.330238][ T8233] bridge0: entered allmulticast mode [ 244.380157][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.387344][ T8234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.395534][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.402773][ T8234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.430166][ T8234] bridge0: entered promiscuous mode [ 244.681498][ T8240] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.679'. [ 244.843263][ T8244] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 244.851093][ T8244] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.680'. [ 245.649227][ T8275] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 245.656986][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.688'. [ 245.685895][ T8275] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 245.693940][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.688'. [ 246.020802][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.028627][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.037147][ T8287] bridge0: entered allmulticast mode [ 246.085562][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.092843][ T8281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.100427][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.107596][ T8281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.126229][ T8281] bridge0: entered promiscuous mode [ 246.146930][ T8293] netlink: 21 bytes leftover after parsing attributes in process `syz.2.694'. [ 246.166287][ T8293] ksmbd: Unknown IPC event: 0, ignore. [ 246.910674][ T8307] netlink: 'syz.2.700': attribute type 33 has an invalid length. [ 247.110702][ T8315] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 247.135889][ T8315] CPU: 0 PID: 8315 Comm: syz.0.702 Not tainted syzkaller #0 [ 247.143240][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.153319][ T8315] Call Trace: [ 247.156621][ T8315] [ 247.159576][ T8315] dump_stack_lvl+0x18c/0x250 [ 247.164292][ T8315] ? show_regs_print_info+0x20/0x20 [ 247.169528][ T8315] ? load_image+0x420/0x420 [ 247.174084][ T8315] sysfs_warn_dup+0x8e/0xa0 [ 247.178618][ T8315] sysfs_do_create_link_sd+0xc0/0x110 [ 247.184017][ T8315] device_add_class_symlinks+0x1cf/0x240 [ 247.189680][ T8315] device_add+0x4f9/0xc40 [ 247.194033][ T8315] wiphy_register+0x1d99/0x2ac0 [ 247.198928][ T8315] ? cfg80211_event_work+0x40/0x40 [ 247.204062][ T8315] ? minstrel_ht_alloc+0x88a/0x990 [ 247.209198][ T8315] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 247.215291][ T8315] ieee80211_register_hw+0x2dd8/0x3b30 [ 247.220784][ T8315] ? ieee80211_register_hw+0xf71/0x3b30 [ 247.226359][ T8315] ? ieee80211_tasklet_handler+0x20/0x20 [ 247.232010][ T8315] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 247.237919][ T8315] ? __debug_object_init+0xec/0x450 [ 247.243141][ T8315] ? __asan_memset+0x22/0x40 [ 247.247748][ T8315] ? __hrtimer_init+0x189/0x270 [ 247.252621][ T8315] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 247.258381][ T8315] ? mac80211_hwsim_free+0x220/0x220 [ 247.263675][ T8315] ? rcu_is_watching+0x15/0xb0 [ 247.268457][ T8315] ? kstrndup+0xbd/0x140 [ 247.272730][ T8315] hwsim_new_radio_nl+0xdad/0x1a70 [ 247.277862][ T8315] ? __nla_validate+0x50/0x50 [ 247.282572][ T8315] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 247.288928][ T8315] ? __nla_parse+0x40/0x50 [ 247.293367][ T8315] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 247.299716][ T8315] genl_family_rcv_msg_doit+0x21a/0x310 [ 247.305283][ T8315] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 247.311202][ T8315] ? bpf_lsm_capable+0x9/0x10 [ 247.315900][ T8315] ? security_capable+0x89/0xb0 [ 247.320779][ T8315] genl_rcv_msg+0x611/0x7a0 [ 247.325305][ T8315] ? genl_bind+0x360/0x360 [ 247.329732][ T8315] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 247.336071][ T8315] ? ref_tracker_free+0x686/0x830 [ 247.341108][ T8315] ? __kasan_kmalloc_large+0x8b/0xa0 [ 247.346416][ T8315] netlink_rcv_skb+0x235/0x4c0 [ 247.351193][ T8315] ? genl_bind+0x360/0x360 [ 247.355620][ T8315] ? netlink_ack+0x1160/0x1160 [ 247.360408][ T8315] ? __lock_acquire+0x7d80/0x7d80 [ 247.365453][ T8315] ? down_read+0x1ac/0x2e0 [ 247.369888][ T8315] genl_rcv+0x28/0x40 [ 247.373880][ T8315] netlink_unicast+0x7b1/0x930 [ 247.378664][ T8315] netlink_sendmsg+0x8d0/0xbf0 [ 247.383452][ T8315] ? netlink_getsockopt+0x590/0x590 [ 247.388667][ T8315] ? apparmor_socket_sendmsg+0x8e/0x330 [ 247.394236][ T8315] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 247.399537][ T8315] ? security_socket_sendmsg+0x80/0xa0 [ 247.405008][ T8315] ? netlink_getsockopt+0x590/0x590 [ 247.410219][ T8315] ____sys_sendmsg+0x61b/0x980 [ 247.415007][ T8315] ? __asan_memset+0x22/0x40 [ 247.419611][ T8315] ? __sys_sendmsg_sock+0x30/0x30 [ 247.424645][ T8315] ? __import_iovec+0x5f2/0x850 [ 247.429522][ T8315] ? import_iovec+0x73/0xa0 [ 247.434051][ T8315] ___sys_sendmsg+0x2a6/0x360 [ 247.438751][ T8315] ? __sys_sendmsg+0x2b0/0x2b0 [ 247.443584][ T8315] __se_sys_sendmsg+0x1d0/0x2c0 [ 247.448446][ T8315] ? __x64_sys_sendmsg+0x80/0x80 [ 247.453410][ T8315] ? lockdep_hardirqs_on+0x98/0x150 [ 247.458628][ T8315] do_syscall_64+0x55/0xb0 [ 247.463055][ T8315] ? clear_bhb_loop+0x40/0x90 [ 247.467743][ T8315] ? clear_bhb_loop+0x40/0x90 [ 247.472440][ T8315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.478343][ T8315] RIP: 0033:0x7fa69539e0d9 [ 247.482769][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.502381][ T8315] RSP: 002b:00007fa6962f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.510808][ T8315] RAX: ffffffffffffffda RBX: 00007fa695625fa0 RCX: 00007fa69539e0d9 [ 247.518788][ T8315] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 247.526772][ T8315] RBP: 00007fa695435024 R08: 0000000000000000 R09: 0000000000000000 [ 247.534746][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.542721][ T8315] R13: 00007fa695626038 R14: 00007fa695625fa0 R15: 00007fff058c3e08 [ 247.550719][ T8315] [ 247.989912][ T8333] __nla_validate_parse: 2 callbacks suppressed [ 247.989928][ T8333] netlink: 26 bytes leftover after parsing attributes in process `syz.1.708'. [ 248.090272][ T8335] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 248.115613][ T8335] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 248.321337][ T8347] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.710'. [ 248.338029][ T8347] openvswitch: netlink: Duplicate key (type 0). [ 248.648555][ T8363] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 248.828680][ T8378] netlink: 'syz.1.721': attribute type 6 has an invalid length. [ 248.848157][ T8378] netlink: 164 bytes leftover after parsing attributes in process `syz.1.721'. [ 249.220440][ T8392] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 252.339745][ T8402] netlink: 'syz.3.726': attribute type 28 has an invalid length. [ 252.567154][ T8415] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.730'. [ 252.785226][ T8423] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.731'. [ 253.427611][ T8449] netlink: 'syz.0.742': attribute type 10 has an invalid length. [ 254.355232][ T8452] netlink: 'syz.2.741': attribute type 13 has an invalid length. [ 254.368473][ T8452] netlink: 'syz.2.741': attribute type 58 has an invalid length. [ 254.376241][ T8452] netlink: 152 bytes leftover after parsing attributes in process `syz.2.741'. [ 254.779113][ T8471] syzkaller0: entered promiscuous mode [ 254.784655][ T8471] syzkaller0: entered allmulticast mode [ 255.198966][ T8489] syzkaller0: entered promiscuous mode [ 255.204661][ T8489] syzkaller0: entered allmulticast mode [ 255.311207][ T5770] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 255.885177][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.904903][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.397917][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 257.855683][ T8506] netlink: 'syz.0.754': attribute type 2 has an invalid length. [ 257.863456][ T8506] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.754'. [ 257.883222][ T8510] : renamed from vlan0 (while UP) [ 257.983693][ T8521] delete_channel: no stack [ 257.988466][ T8521] delete_channel: no stack [ 258.179370][ T8532] netlink: 'syz.0.762': attribute type 29 has an invalid length. [ 258.187146][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 258.358632][ T8532] netlink: 'syz.0.762': attribute type 29 has an invalid length. [ 258.377973][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 258.468100][ T8547] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.765'. [ 259.030470][ T8563] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.769'. [ 262.828916][ T8628] netlink: 'syz.2.790': attribute type 11 has an invalid length. [ 262.836856][ T8628] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.790'. [ 264.171193][ T8628] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 264.180876][ T8628] CPU: 1 PID: 8628 Comm: syz.2.790 Not tainted syzkaller #0 [ 264.188194][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.198259][ T8628] Call Trace: [ 264.201528][ T8628] [ 264.204458][ T8628] dump_stack_lvl+0x18c/0x250 [ 264.209128][ T8628] ? show_regs_print_info+0x20/0x20 [ 264.214320][ T8628] ? load_image+0x420/0x420 [ 264.218819][ T8628] sysfs_warn_dup+0x8e/0xa0 [ 264.223334][ T8628] sysfs_do_create_link_sd+0xc0/0x110 [ 264.228693][ T8628] device_add_class_symlinks+0x1cf/0x240 [ 264.234338][ T8628] device_add+0x4f9/0xc40 [ 264.238694][ T8628] wiphy_register+0x1d99/0x2ac0 [ 264.243585][ T8628] ? cfg80211_event_work+0x40/0x40 [ 264.248716][ T8628] ? minstrel_ht_alloc+0x88a/0x990 [ 264.253856][ T8628] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 264.259941][ T8628] ieee80211_register_hw+0x2dd8/0x3b30 [ 264.265400][ T8628] ? ieee80211_register_hw+0xf71/0x3b30 [ 264.270938][ T8628] ? ieee80211_tasklet_handler+0x20/0x20 [ 264.276563][ T8628] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 264.282446][ T8628] ? __debug_object_init+0xec/0x450 [ 264.287631][ T8628] ? __asan_memset+0x22/0x40 [ 264.292211][ T8628] ? __hrtimer_init+0x189/0x270 [ 264.297049][ T8628] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 264.302771][ T8628] ? mac80211_hwsim_free+0x220/0x220 [ 264.308049][ T8628] ? rcu_is_watching+0x15/0xb0 [ 264.312814][ T8628] ? kstrndup+0xbd/0x140 [ 264.317053][ T8628] hwsim_new_radio_nl+0xdad/0x1a70 [ 264.322154][ T8628] ? __nla_validate+0x50/0x50 [ 264.326829][ T8628] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 264.333237][ T8628] ? __nla_parse+0x40/0x50 [ 264.337644][ T8628] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 264.343979][ T8628] genl_family_rcv_msg_doit+0x21a/0x310 [ 264.349541][ T8628] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 264.355443][ T8628] ? bpf_lsm_capable+0x9/0x10 [ 264.360125][ T8628] ? security_capable+0x89/0xb0 [ 264.364970][ T8628] genl_rcv_msg+0x611/0x7a0 [ 264.369464][ T8628] ? genl_bind+0x360/0x360 [ 264.373866][ T8628] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 264.380198][ T8628] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 264.386770][ T8628] ? ref_tracker_free+0x686/0x830 [ 264.391790][ T8628] netlink_rcv_skb+0x235/0x4c0 [ 264.396541][ T8628] ? genl_bind+0x360/0x360 [ 264.400943][ T8628] ? netlink_ack+0x1160/0x1160 [ 264.405697][ T8628] ? __lock_acquire+0x7d80/0x7d80 [ 264.410713][ T8628] ? down_read+0x1ac/0x2e0 [ 264.415118][ T8628] genl_rcv+0x28/0x40 [ 264.419087][ T8628] netlink_unicast+0x7b1/0x930 [ 264.423846][ T8628] netlink_sendmsg+0x8d0/0xbf0 [ 264.428614][ T8628] ? netlink_getsockopt+0x590/0x590 [ 264.433798][ T8628] ? apparmor_socket_sendmsg+0x8e/0x330 [ 264.439335][ T8628] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 264.444611][ T8628] ? security_socket_sendmsg+0x80/0xa0 [ 264.450054][ T8628] ? netlink_getsockopt+0x590/0x590 [ 264.455242][ T8628] ____sys_sendmsg+0x61b/0x980 [ 264.460004][ T8628] ? __asan_memset+0x22/0x40 [ 264.464582][ T8628] ? __sys_sendmsg_sock+0x30/0x30 [ 264.469596][ T8628] ? __import_iovec+0x5f2/0x850 [ 264.474440][ T8628] ? import_iovec+0x73/0xa0 [ 264.478934][ T8628] ___sys_sendmsg+0x2a6/0x360 [ 264.483603][ T8628] ? __sys_sendmsg+0x2b0/0x2b0 [ 264.488384][ T8628] __se_sys_sendmsg+0x1d0/0x2c0 [ 264.493222][ T8628] ? perf_trace_preemptirq_template+0x269/0x330 [ 264.499451][ T8628] ? __x64_sys_sendmsg+0x80/0x80 [ 264.504388][ T8628] ? lockdep_hardirqs_on+0x98/0x150 [ 264.509575][ T8628] do_syscall_64+0x55/0xb0 [ 264.513977][ T8628] ? clear_bhb_loop+0x40/0x90 [ 264.518639][ T8628] ? clear_bhb_loop+0x40/0x90 [ 264.523304][ T8628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.529187][ T8628] RIP: 0033:0x7ff2e999e0d9 [ 264.533595][ T8628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.553198][ T8628] RSP: 002b:00007ff2ea81c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.561608][ T8628] RAX: ffffffffffffffda RBX: 00007ff2e9c25fa0 RCX: 00007ff2e999e0d9 [ 264.569575][ T8628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 264.577536][ T8628] RBP: 00007ff2e9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 264.585501][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.593466][ T8628] R13: 00007ff2e9c26038 R14: 00007ff2e9c25fa0 R15: 00007ffcbda69d18 [ 264.601444][ T8628] [ 264.638225][ T8638] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.789'. [ 264.820634][ T8650] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 265.013066][ T8670] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 265.023080][ T8670] netlink: 'syz.3.801': attribute type 4 has an invalid length. [ 265.031011][ T8670] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.801'. [ 265.039287][ T8671] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.800'. [ 265.054500][ T8671] openvswitch: netlink: Key type 29 is not supported [ 265.274063][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 265.297957][ T8691] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 265.330140][ T8691] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 265.360403][ T8690] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 265.371798][ T8697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.807'. [ 265.800189][ T8717] syzkaller0: entered promiscuous mode [ 265.818501][ T8717] syzkaller0: entered allmulticast mode [ 265.878314][ T8724] netlink: 10 bytes leftover after parsing attributes in process `syz.1.813'. [ 265.896204][ T8726] tap0: tun_chr_ioctl cmd 1074025677 [ 265.902500][ T8726] tap0: linktype set to 774 [ 266.249030][ T8742] netlink: 'syz.1.818': attribute type 10 has an invalid length. [ 266.285731][ T8742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'. [ 266.332191][ T8742] ipvlan1: entered promiscuous mode [ 266.359821][ T8742] ipvlan1: entered allmulticast mode [ 266.386789][ T8742] bridge0: port 3(ipvlan1) entered blocking state [ 266.409169][ T8742] bridge0: port 3(ipvlan1) entered disabled state [ 266.453056][ T8742] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 266.694400][ T8746] syzkaller0: entered promiscuous mode [ 273.236590][ T8824] netlink: 'syz.2.839': attribute type 5 has an invalid length. [ 273.248809][ T8823] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.839'. [ 273.258473][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 273.267611][ T8823] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 273.279484][ T8824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.839'. [ 273.300800][ T8827] netlink: 'syz.1.842': attribute type 21 has an invalid length. [ 273.309337][ T8829] sctp: [Deprecated]: syz.3.841 (pid 8829) Use of int in maxseg socket option. [ 273.309337][ T8829] Use struct sctp_assoc_value instead [ 273.325300][ T8827] netlink: 164 bytes leftover after parsing attributes in process `syz.1.842'. [ 273.471184][ T8834] netlink: 'syz.2.843': attribute type 21 has an invalid length. [ 273.480761][ T8834] netlink: 156 bytes leftover after parsing attributes in process `syz.2.843'. [ 273.544062][ T8834] sit0: left promiscuous mode [ 273.745359][ T8838] sit0: entered promiscuous mode [ 273.996735][ T8852] netlink: 'syz.2.848': attribute type 6 has an invalid length. [ 274.020300][ T8852] netlink: 164 bytes leftover after parsing attributes in process `syz.2.848'. [ 274.113687][ T8849] netlink: 156 bytes leftover after parsing attributes in process `syz.1.847'. [ 274.180146][ T8860] netlink: 'syz.2.851': attribute type 9 has an invalid length. [ 274.208376][ T8860] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.851'. [ 274.255710][ T8862] netlink: 'syz.3.852': attribute type 9 has an invalid length. [ 274.264120][ T8862] netlink: 399 bytes leftover after parsing attributes in process `syz.3.852'. [ 275.538320][ T8864] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 275.546355][ T8864] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.853'. [ 275.623455][ T8870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.630993][ T8870] IPv6: NLM_F_CREATE should be set when creating new route [ 275.661316][ T8871] netlink: 'syz.0.853': attribute type 10 has an invalid length. [ 275.669369][ T8871] dummy0: entered promiscuous mode [ 275.688202][ T8871] dummy0: entered allmulticast mode [ 275.694221][ T8871] bridge0: port 3(dummy0) entered blocking state [ 275.718164][ T8871] bridge0: port 3(dummy0) entered disabled state [ 275.734940][ T8871] bridge0: port 3(dummy0) entered blocking state [ 275.741627][ T8871] bridge0: port 3(dummy0) entered forwarding state [ 275.750479][ T8873] netlink: 'syz.1.857': attribute type 21 has an invalid length. [ 275.791107][ T8875] C: renamed from team_slave_0 (while UP) [ 275.892545][ T8878] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 275.918081][ T8878] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.944003][ T8878] netlink: 'syz.2.859': attribute type 17 has an invalid length. [ 275.958457][ T8878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.793959][ T8901] syz.3.867 (8901) used obsolete PPPIOCDETACH ioctl [ 277.627371][ T8923] sock: sock_timestamping_bind_phc: sock not bind to device [ 278.239728][ T8962] netlink: zone id is out of range [ 278.245142][ T8962] netlink: set zone limit has 8 unknown bytes [ 278.650067][ T8978] validate_nla: 4 callbacks suppressed [ 278.650083][ T8978] netlink: 'syz.1.888': attribute type 21 has an invalid length. [ 281.679499][ T8995] __nla_validate_parse: 11 callbacks suppressed [ 281.679519][ T8995] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.891'. [ 281.728012][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 281.759284][ T9000] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.892'. [ 282.678585][ T9024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.898'. [ 282.686195][ T9025] netlink: 'syz.2.897': attribute type 29 has an invalid length. [ 282.738081][ T9025] netlink: 'syz.2.897': attribute type 29 has an invalid length. [ 282.760202][ T9019] netlink: 'syz.2.897': attribute type 29 has an invalid length. [ 282.817295][ T9019] netlink: 'syz.2.897': attribute type 29 has an invalid length. [ 285.855257][ T9038] netlink: 14 bytes leftover after parsing attributes in process `syz.3.903'. [ 287.086762][ T9062] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.908'. [ 287.463099][ T9076] syzkaller0: entered promiscuous mode [ 287.468733][ T9076] syzkaller0: entered allmulticast mode [ 287.620975][ T9083] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.913'. [ 289.586912][ T9101] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 289.636574][ T9101] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 289.661451][ T9102] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 289.887646][ T9101] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 290.594230][ T9126] syzkaller0: entered promiscuous mode [ 290.600954][ T9126] syzkaller0: entered allmulticast mode [ 290.619232][ T9132] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 290.627251][ T9132] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.929'. [ 291.057938][ T9147] netlink: 'syz.1.932': attribute type 29 has an invalid length. [ 291.737452][ T9165] netlink: 'syz.3.937': attribute type 3 has an invalid length. [ 291.745558][ T9165] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.937'. [ 292.419950][ T9147] netlink: 'syz.1.932': attribute type 29 has an invalid length. [ 292.641902][ T9177] netlink: 'syz.2.941': attribute type 4 has an invalid length. [ 292.672972][ T9177] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.941'. [ 292.710644][ T9175] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.940'. [ 293.013126][ T9187] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 293.035195][ T9187] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.943'. [ 293.461875][ T9204] netlink: 14 bytes leftover after parsing attributes in process `syz.2.948'. [ 293.544063][ T9204] team0: Port device team_slave_0 removed [ 293.637391][ T9208] syzkaller0: entered promiscuous mode [ 293.645187][ T9208] syzkaller0: entered allmulticast mode [ 295.345119][ T9229] netlink: 'syz.0.954': attribute type 10 has an invalid length. [ 295.353335][ T9229] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.954'. [ 295.670118][ T9240] netlink: 164 bytes leftover after parsing attributes in process `syz.2.956'. [ 295.949617][ T9259] netlink: 'syz.1.962': attribute type 21 has an invalid length. [ 295.960845][ T9259] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.962'. [ 296.159480][ T9261] syzkaller0: entered promiscuous mode [ 296.169727][ T9261] syzkaller0: entered allmulticast mode [ 298.094285][ T9277] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.966'. [ 298.552351][ T9297] can: request_module (can-proto-5) failed. [ 300.057092][ T9321] netlink: 'syz.3.980': attribute type 3 has an invalid length. [ 300.072492][ T9319] netlink: 'syz.3.980': attribute type 3 has an invalid length. [ 300.082906][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.980'. [ 300.087869][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.980'. [ 300.134986][ T9324] netlink: 'syz.0.981': attribute type 21 has an invalid length. [ 300.245542][ T9315] syzkaller0: entered promiscuous mode [ 300.259565][ T9315] syzkaller0: entered allmulticast mode [ 300.292849][ T9328] netlink: 'syz.3.982': attribute type 10 has an invalid length. [ 300.303354][ T9328] netlink: 55 bytes leftover after parsing attributes in process `syz.3.982'. [ 300.422364][ T9328] vlan0 (unregistering): left allmulticast mode [ 300.429244][ T9328] veth0_vlan: left allmulticast mode [ 300.435006][ T9328] vlan0 (unregistering): left promiscuous mode [ 300.449510][ T9328] : port 1(vlan0) entered disabled state [ 302.352508][ T9375] netlink: 'syz.3.993': attribute type 39 has an invalid length. [ 302.719130][ T9388] netlink: 'syz.2.999': attribute type 7 has an invalid length. [ 303.469531][ T9413] syzkaller0: entered promiscuous mode [ 303.475081][ T9413] syzkaller0: entered allmulticast mode [ 303.540851][ T9422] netlink: 'syz.2.1007': attribute type 12 has an invalid length. [ 303.549534][ T9422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1007'. [ 304.824173][ T9423] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 304.832598][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1007'. [ 304.843853][ T9423] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.964417][ T9432] netlink: 'syz.0.1012': attribute type 2 has an invalid length. [ 304.977051][ T9432] netlink: 'syz.0.1012': attribute type 8 has an invalid length. [ 304.994960][ T9432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1012'. [ 305.096744][ T9434] netlink: 'syz.2.1010': attribute type 39 has an invalid length. [ 305.788549][ T9475] netlink: 'syz.0.1021': attribute type 10 has an invalid length. [ 305.798766][ T9475] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1021'. [ 305.928661][ T9469] syzkaller0: entered promiscuous mode [ 305.937845][ T9469] syzkaller0: entered allmulticast mode [ 307.535358][ T9500] netlink: 'syz.1.1027': attribute type 39 has an invalid length. [ 307.669452][ T9504] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 307.682712][ T9504] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1029'. [ 307.693288][ T9506] FAULT_INJECTION: forcing a failure. [ 307.693288][ T9506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.717616][ T9506] CPU: 0 PID: 9506 Comm: syz.2.1030 Not tainted syzkaller #0 [ 307.725027][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.735083][ T9506] Call Trace: [ 307.738354][ T9506] [ 307.741274][ T9506] dump_stack_lvl+0x18c/0x250 [ 307.745946][ T9506] ? show_regs_print_info+0x20/0x20 [ 307.751139][ T9506] ? load_image+0x420/0x420 [ 307.755659][ T9506] ? __might_fault+0xaa/0x120 [ 307.760336][ T9506] ? __lock_acquire+0x7d80/0x7d80 [ 307.765360][ T9506] ? __virt_addr_valid+0x10c/0x380 [ 307.770468][ T9506] should_fail_ex+0x394/0x4c0 [ 307.775145][ T9506] _copy_from_user+0x2f/0xe0 [ 307.779734][ T9506] ____sys_sendmsg+0x329/0x980 [ 307.784497][ T9506] ? __sys_sendmsg_sock+0x30/0x30 [ 307.789509][ T9506] ? __import_iovec+0x3fa/0x850 [ 307.795928][ T9506] ? import_iovec+0x73/0xa0 [ 307.800429][ T9506] ___sys_sendmsg+0x2a6/0x360 [ 307.805100][ T9506] ? get_pid_task+0x20/0x1e0 [ 307.809690][ T9506] ? __sys_sendmsg+0x2b0/0x2b0 [ 307.814466][ T9506] ? __lock_acquire+0x7d80/0x7d80 [ 307.819501][ T9506] __se_sys_sendmsg+0x1d0/0x2c0 [ 307.824345][ T9506] ? __x64_sys_sendmsg+0x80/0x80 [ 307.829289][ T9506] ? lockdep_hardirqs_on+0x98/0x150 [ 307.834483][ T9506] do_syscall_64+0x55/0xb0 [ 307.838893][ T9506] ? clear_bhb_loop+0x40/0x90 [ 307.843561][ T9506] ? clear_bhb_loop+0x40/0x90 [ 307.848252][ T9506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.854136][ T9506] RIP: 0033:0x7ff2e999e0d9 [ 307.858549][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.878145][ T9506] RSP: 002b:00007ff2ea81c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.886558][ T9506] RAX: ffffffffffffffda RBX: 00007ff2e9c25fa0 RCX: 00007ff2e999e0d9 [ 307.894523][ T9506] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 307.902485][ T9506] RBP: 00007ff2ea81c090 R08: 0000000000000000 R09: 0000000000000000 [ 307.910446][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.918408][ T9506] R13: 00007ff2e9c26038 R14: 00007ff2e9c25fa0 R15: 00007ffcbda69d18 [ 307.926380][ T9506] [ 308.120225][ T9520] netlink: 'syz.2.1033': attribute type 21 has an invalid length. [ 308.128220][ T9520] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1033'. [ 308.314265][ T9526] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1037'. [ 308.339074][ T9524] netlink: 'syz.0.1043': attribute type 39 has an invalid length. [ 308.540829][ T9534] FAULT_INJECTION: forcing a failure. [ 308.540829][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 308.567850][ T9534] CPU: 1 PID: 9534 Comm: syz.3.1040 Not tainted syzkaller #0 [ 308.575282][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.585359][ T9534] Call Trace: [ 308.588656][ T9534] [ 308.591610][ T9534] dump_stack_lvl+0x18c/0x250 [ 308.596312][ T9534] ? show_regs_print_info+0x20/0x20 [ 308.601535][ T9534] ? load_image+0x420/0x420 [ 308.606065][ T9534] ? __lock_acquire+0x7d80/0x7d80 [ 308.611123][ T9534] ? mark_lock+0x94/0x320 [ 308.615489][ T9534] should_fail_ex+0x394/0x4c0 [ 308.620205][ T9534] should_failslab+0x9/0x20 [ 308.624733][ T9534] slab_pre_alloc_hook+0x59/0x300 [ 308.629786][ T9534] ? ip_options_get+0x50/0x560 [ 308.634580][ T9534] ? ip_options_get+0x50/0x560 [ 308.639363][ T9534] __kmem_cache_alloc_node+0x53/0x250 [ 308.644775][ T9534] ? ip_options_get+0x50/0x560 [ 308.649562][ T9534] __kmalloc+0xa7/0x240 [ 308.653751][ T9534] ? __lock_acquire+0x1336/0x7d80 [ 308.658803][ T9534] ip_options_get+0x50/0x560 [ 308.663426][ T9534] ip_cmsg_send+0x591/0xa70 [ 308.667963][ T9534] udp_sendmsg+0xc6f/0x23d0 [ 308.672493][ T9534] ? release_sock+0x2f/0x1c0 [ 308.677114][ T9534] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 308.681984][ T9534] ? print_unlock_imbalance_bug+0x160/0x160 [ 308.687907][ T9534] ? udp_cmsg_send+0x350/0x350 [ 308.692700][ T9534] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 308.698710][ T9534] ? lock_chain_count+0x20/0x20 [ 308.703582][ T9534] ? inet_sendmsg+0x10d/0x2a0 [ 308.708284][ T9534] ? __local_bh_enable_ip+0x13a/0x1c0 [ 308.713677][ T9534] ? _local_bh_enable+0xa0/0xa0 [ 308.718548][ T9534] ? do_raw_spin_unlock+0x121/0x230 [ 308.722842][ T9533] syzkaller0: entered promiscuous mode [ 308.723757][ T9534] ? inet_sendmsg+0x10d/0x2a0 [ 308.723785][ T9534] ? inet_sendmsg+0x10d/0x2a0 [ 308.729426][ T9533] syzkaller0: entered allmulticast mode [ 308.733887][ T9534] ? inet_send_prepare+0x250/0x250 [ 308.733915][ T9534] ____sys_sendmsg+0x61b/0x980 [ 308.753981][ T9534] ? __sys_sendmsg_sock+0x30/0x30 [ 308.759010][ T9534] ? __import_iovec+0x3fa/0x850 [ 308.763889][ T9534] ? import_iovec+0x73/0xa0 [ 308.768410][ T9534] ___sys_sendmsg+0x2a6/0x360 [ 308.773077][ T9534] ? get_pid_task+0x20/0x1e0 [ 308.777655][ T9534] ? __sys_sendmsg+0x2b0/0x2b0 [ 308.782433][ T9534] ? __lock_acquire+0x7d80/0x7d80 [ 308.787493][ T9534] __se_sys_sendmsg+0x1d0/0x2c0 [ 308.792346][ T9534] ? __x64_sys_sendmsg+0x80/0x80 [ 308.797278][ T9534] ? lockdep_hardirqs_on+0x98/0x150 [ 308.802469][ T9534] do_syscall_64+0x55/0xb0 [ 308.806873][ T9534] ? clear_bhb_loop+0x40/0x90 [ 308.811537][ T9534] ? clear_bhb_loop+0x40/0x90 [ 308.816228][ T9534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.822144][ T9534] RIP: 0033:0x7fc80b39e0d9 [ 308.826552][ T9534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.846153][ T9534] RSP: 002b:00007fc80c19b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.854559][ T9534] RAX: ffffffffffffffda RBX: 00007fc80b625fa0 RCX: 00007fc80b39e0d9 [ 308.862515][ T9534] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 308.870475][ T9534] RBP: 00007fc80c19b090 R08: 0000000000000000 R09: 0000000000000000 [ 308.878431][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.886393][ T9534] R13: 00007fc80b626038 R14: 00007fc80b625fa0 R15: 00007fff27fa05e8 [ 308.894366][ T9534] [ 309.001959][ T9541] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 309.011862][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1042'. [ 309.024313][ T9541] team0: entered promiscuous mode [ 309.030154][ T9541] team_slave_1: entered promiscuous mode [ 309.046420][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1045'. [ 309.048915][ T9541] team0: entered allmulticast mode [ 309.069121][ T9541] team_slave_1: entered allmulticast mode [ 309.075721][ T9541] bridge0: port 3(team0) entered blocking state [ 309.082785][ T9541] bridge0: port 3(team0) entered disabled state [ 309.092121][ T9541] bridge0: port 3(team0) entered blocking state [ 309.098543][ T9541] bridge0: port 3(team0) entered forwarding state [ 311.046927][ T9576] FAULT_INJECTION: forcing a failure. [ 311.046927][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 311.068788][ T9576] CPU: 1 PID: 9576 Comm: syz.1.1052 Not tainted syzkaller #0 [ 311.076225][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.086306][ T9576] Call Trace: [ 311.089605][ T9576] [ 311.092560][ T9576] dump_stack_lvl+0x18c/0x250 [ 311.097267][ T9576] ? show_regs_print_info+0x20/0x20 [ 311.102500][ T9576] ? load_image+0x420/0x420 [ 311.107031][ T9576] ? __lock_acquire+0x7d80/0x7d80 [ 311.112080][ T9576] ? __ip_options_compile+0x160e/0x19e0 [ 311.117661][ T9576] should_fail_ex+0x394/0x4c0 [ 311.122372][ T9576] should_failslab+0x9/0x20 [ 311.126901][ T9576] slab_pre_alloc_hook+0x59/0x300 [ 311.131955][ T9576] ? ip_options_get+0x50/0x560 [ 311.136738][ T9576] ? ip_options_get+0x50/0x560 [ 311.141516][ T9576] __kmem_cache_alloc_node+0x53/0x250 [ 311.146919][ T9576] ? ip_options_get+0x50/0x560 [ 311.151696][ T9576] __kmalloc+0xa7/0x240 [ 311.155873][ T9576] ? rcu_is_watching+0x15/0xb0 [ 311.160658][ T9576] ip_options_get+0x50/0x560 [ 311.165275][ T9576] ip_cmsg_send+0x591/0xa70 [ 311.169797][ T9576] udp_sendmsg+0xc6f/0x23d0 [ 311.174311][ T9576] ? release_sock+0x2f/0x1c0 [ 311.178911][ T9576] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 311.183757][ T9576] ? print_unlock_imbalance_bug+0x160/0x160 [ 311.189648][ T9576] ? udp_cmsg_send+0x350/0x350 [ 311.194414][ T9576] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 311.200390][ T9576] ? lock_chain_count+0x20/0x20 [ 311.205234][ T9576] ? inet_sendmsg+0x10d/0x2a0 [ 311.209918][ T9576] ? __local_bh_enable_ip+0x13a/0x1c0 [ 311.215285][ T9576] ? _local_bh_enable+0xa0/0xa0 [ 311.220132][ T9576] ? do_raw_spin_unlock+0x121/0x230 [ 311.225327][ T9576] ? inet_sendmsg+0x10d/0x2a0 [ 311.230011][ T9576] ? inet_sendmsg+0x10d/0x2a0 [ 311.234685][ T9576] ? inet_send_prepare+0x250/0x250 [ 311.239800][ T9576] ____sys_sendmsg+0x61b/0x980 [ 311.244567][ T9576] ? __sys_sendmsg_sock+0x30/0x30 [ 311.249583][ T9576] ? __import_iovec+0x3fa/0x850 [ 311.254436][ T9576] ? import_iovec+0x73/0xa0 [ 311.258940][ T9576] ___sys_sendmsg+0x2a6/0x360 [ 311.263611][ T9576] ? get_pid_task+0x20/0x1e0 [ 311.268202][ T9576] ? __sys_sendmsg+0x2b0/0x2b0 [ 311.272981][ T9576] ? __lock_acquire+0x7d80/0x7d80 [ 311.278018][ T9576] __se_sys_sendmsg+0x1d0/0x2c0 [ 311.282867][ T9576] ? __x64_sys_sendmsg+0x80/0x80 [ 311.287814][ T9576] ? lockdep_hardirqs_on+0x98/0x150 [ 311.293021][ T9576] do_syscall_64+0x55/0xb0 [ 311.297430][ T9576] ? clear_bhb_loop+0x40/0x90 [ 311.302106][ T9576] ? clear_bhb_loop+0x40/0x90 [ 311.306780][ T9576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.312671][ T9576] RIP: 0033:0x7fc43a19e0d9 [ 311.317085][ T9576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.336681][ T9576] RSP: 002b:00007fc43b08a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.345090][ T9576] RAX: ffffffffffffffda RBX: 00007fc43a425fa0 RCX: 00007fc43a19e0d9 [ 311.353056][ T9576] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 311.361023][ T9576] RBP: 00007fc43b08a090 R08: 0000000000000000 R09: 0000000000000000 [ 311.368987][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.376953][ T9576] R13: 00007fc43a426038 R14: 00007fc43a425fa0 R15: 00007ffecef9d1e8 [ 311.384932][ T9576] [ 312.805093][ T9615] syz.2.1063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 312.822444][ T9615] CPU: 1 PID: 9615 Comm: syz.2.1063 Not tainted syzkaller #0 [ 312.829858][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.839935][ T9615] Call Trace: [ 312.843230][ T9615] [ 312.846156][ T9615] dump_stack_lvl+0x18c/0x250 [ 312.850844][ T9615] ? show_regs_print_info+0x20/0x20 [ 312.856069][ T9615] ? load_image+0x420/0x420 [ 312.860605][ T9615] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 312.867025][ T9615] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 312.873531][ T9615] warn_alloc+0x246/0x340 [ 312.877873][ T9615] ? stack_trace_save+0xaa/0x100 [ 312.882865][ T9615] ? zone_watermark_ok_safe+0x230/0x230 [ 312.888474][ T9615] ? kasan_set_track+0x5f/0x70 [ 312.893243][ T9615] ? kasan_set_track+0x4e/0x70 [ 312.898018][ T9615] ? __kasan_kmalloc+0x8f/0xa0 [ 312.902784][ T9615] ? xsk_init_queue+0xad/0x100 [ 312.907538][ T9615] ? xsk_setsockopt+0x4c9/0x750 [ 312.912394][ T9615] ? do_sock_setsockopt+0x175/0x1a0 [ 312.917605][ T9615] ? __x64_sys_setsockopt+0x182/0x200 [ 312.922982][ T9615] __vmalloc_node_range+0x129/0x1320 [ 312.928291][ T9615] ? free_vm_area+0x50/0x50 [ 312.932799][ T9615] vmalloc_user+0x74/0x80 [ 312.937135][ T9615] ? xskq_create+0xbf/0x170 [ 312.941656][ T9615] xskq_create+0xbf/0x170 [ 312.945995][ T9615] xsk_init_queue+0xad/0x100 [ 312.950590][ T9615] xsk_setsockopt+0x4c9/0x750 [ 312.955283][ T9615] ? xsk_poll+0x670/0x670 [ 312.959605][ T9615] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.965790][ T9615] ? lockdep_hardirqs_on+0x98/0x150 [ 312.970984][ T9615] ? aa_sock_opt_perm+0x74/0x100 [ 312.975913][ T9615] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 312.981451][ T9615] ? security_socket_setsockopt+0x7e/0xa0 [ 312.987164][ T9615] ? xsk_poll+0x670/0x670 [ 312.991485][ T9615] do_sock_setsockopt+0x175/0x1a0 [ 312.996512][ T9615] __x64_sys_setsockopt+0x182/0x200 [ 313.001717][ T9615] do_syscall_64+0x55/0xb0 [ 313.006125][ T9615] ? clear_bhb_loop+0x40/0x90 [ 313.010804][ T9615] ? clear_bhb_loop+0x40/0x90 [ 313.015500][ T9615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.021384][ T9615] RIP: 0033:0x7ff2e999e0d9 [ 313.025794][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.045392][ T9615] RSP: 002b:00007ff2ea81c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.053831][ T9615] RAX: ffffffffffffffda RBX: 00007ff2e9c25fa0 RCX: 00007ff2e999e0d9 [ 313.061817][ T9615] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 313.069784][ T9615] RBP: 00007ff2e9a35024 R08: 0000000000000004 R09: 0000000000000000 [ 313.077754][ T9615] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 313.085730][ T9615] R13: 00007ff2e9c26038 R14: 00007ff2e9c25fa0 R15: 00007ffcbda69d18 [ 313.093703][ T9615] [ 313.115061][ T9615] Mem-Info: [ 313.119487][ T9615] active_anon:5543 inactive_anon:0 isolated_anon:0 [ 313.119487][ T9615] active_file:18377 inactive_file:40042 isolated_file:0 [ 313.119487][ T9615] unevictable:768 dirty:222 writeback:0 [ 313.119487][ T9615] slab_reclaimable:10304 slab_unreclaimable:94022 [ 313.119487][ T9615] mapped:26537 shmem:1361 pagetables:557 [ 313.119487][ T9615] sec_pagetables:0 bounce:0 [ 313.119487][ T9615] kernel_misc_reclaimable:0 [ 313.119487][ T9615] free:1346682 free_pcp:6104 free_cma:0 [ 313.197897][ T9615] Node 0 active_anon:22172kB inactive_anon:0kB active_file:73508kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98048kB dirty:888kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11328kB pagetables:2228kB sec_pagetables:0kB all_unreclaimable? no [ 313.276374][ T9615] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 313.347283][ T9615] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.382899][ T9615] lowmem_reserve[]: [ 313.382942][ T9620] FAULT_INJECTION: forcing a failure. [ 313.382942][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.389215][ T9615] 0 [ 313.400289][ T9620] CPU: 1 PID: 9620 Comm: syz.3.1064 Not tainted syzkaller #0 [ 313.400310][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.400320][ T9620] Call Trace: [ 313.400328][ T9620] [ 313.400336][ T9620] dump_stack_lvl+0x18c/0x250 [ 313.424926][ T9615] 2521 [ 313.426495][ T9620] ? show_regs_print_info+0x20/0x20 [ 313.426522][ T9620] ? load_image+0x420/0x420 [ 313.426543][ T9620] ? __lock_acquire+0x7d80/0x7d80 [ 313.426571][ T9620] ? snprintf+0xe9/0x140 [ 313.426599][ T9620] should_fail_ex+0x394/0x4c0 [ 313.426627][ T9620] _copy_to_user+0x2f/0xa0 [ 313.433164][ T9615] 2522 [ 313.434029][ T9620] simple_read_from_buffer+0xe7/0x150 [ 313.434059][ T9620] proc_fail_nth_read+0x1e8/0x260 [ 313.434086][ T9620] ? proc_fault_inject_write+0x360/0x360 [ 313.439737][ T9615] 2522 [ 313.443749][ T9620] ? fsnotify_perm+0x271/0x5e0 [ 313.443774][ T9620] ? proc_fault_inject_write+0x360/0x360 [ 313.443799][ T9620] vfs_read+0x298/0x990 [ 313.498086][ T9620] ? kernel_read+0x1e0/0x1e0 [ 313.502688][ T9620] ? __fget_files+0x28/0x460 [ 313.507278][ T9620] ? __fget_files+0x3fc/0x460 [ 313.511958][ T9620] ? __fdget_pos+0x2a3/0x330 [ 313.516546][ T9620] ? ksys_read+0x74/0x260 [ 313.520879][ T9620] ksys_read+0x151/0x260 [ 313.525123][ T9620] ? vfs_write+0x9a0/0x9a0 [ 313.529549][ T9620] ? lockdep_hardirqs_on+0x98/0x150 [ 313.534754][ T9620] do_syscall_64+0x55/0xb0 [ 313.539167][ T9620] ? clear_bhb_loop+0x40/0x90 [ 313.543839][ T9620] ? clear_bhb_loop+0x40/0x90 [ 313.548511][ T9620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.554402][ T9620] RIP: 0033:0x7fc80b35e90e [ 313.558821][ T9620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.578420][ T9620] RSP: 002b:00007fc80c19afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.586827][ T9620] RAX: ffffffffffffffda RBX: 00007fc80c19b6c0 RCX: 00007fc80b35e90e [ 313.594795][ T9620] RDX: 000000000000000f RSI: 00007fc80c19b0a0 RDI: 0000000000000004 [ 313.602757][ T9620] RBP: 00007fc80c19b090 R08: 0000000000000000 R09: 0000000000000000 [ 313.610721][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.618685][ T9620] R13: 00007fc80b626038 R14: 00007fc80b625fa0 R15: 00007fff27fa05e8 [ 313.626661][ T9620] [ 313.638817][ T9615] 2522 [ 313.641834][ T9615] Node 0 DMA32 free:1464876kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22036kB inactive_anon:0kB active_file:73508kB inactive_file:159136kB unevictable:1536kB writepending:688kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:14580kB local_pcp:12840kB free_cma:0kB [ 313.707925][ T9615] lowmem_reserve[]: 0 0 0 0 0 [ 313.713277][ T9615] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.743331][ T9615] lowmem_reserve[]: 0 0 0 0 0 [ 313.751592][ T9615] Node 1 Normal free:3906232kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11740kB local_pcp:2784kB free_cma:0kB [ 313.784985][ T9615] lowmem_reserve[]: 0 0 0 0 0 [ 313.791172][ T9615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 313.823197][ T9615] Node 0 DMA32: 2225*4kB (UME) 1353*8kB (UME) 1288*16kB (UME) 1131*32kB (UME) 283*64kB (UME) 15*128kB (UME) 31*256kB (UM) 23*512kB (ME) 19*1024kB (UM) 5*2048kB (ME) 322*4096kB (UM) = 1464876kB [ 313.866288][ T9615] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 313.898321][ T9615] Node 1 Normal: 138*4kB (UME) 42*8kB (UME) 32*16kB (UME) 100*32kB (UME) 33*64kB (UME) 11*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 950*4096kB (M) = 3906232kB [ 313.923215][ T9615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.937828][ T9615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 313.947578][ T9615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.961293][ T9615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 313.978564][ T9615] 59780 total pagecache pages [ 313.983608][ T9615] 0 pages in swap cache [ 314.013329][ T9615] Free swap = 124996kB [ 314.023061][ T9615] Total swap = 124996kB [ 314.028664][ T9615] 2097051 pages RAM [ 314.032640][ T9615] 0 pages HighMem/MovableOnly [ 314.039136][ T9615] 416959 pages reserved [ 314.043413][ T9615] 0 pages cma reserved [ 315.833295][ T9610] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 315.840369][ T9610] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 316.443755][ T9656] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 316.467943][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1075'. [ 316.519604][ T9656] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.552491][ T9660] sit0: left promiscuous mode [ 316.634073][ T9661] sit0: entered promiscuous mode [ 317.313050][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.323651][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.749094][ T9690] netlink: 'syz.0.1081': attribute type 11 has an invalid length. [ 317.795396][ T9690] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.1081'. [ 318.257675][ T9709] sctp: [Deprecated]: syz.3.1088 (pid 9709) Use of int in max_burst socket option deprecated. [ 318.257675][ T9709] Use struct sctp_assoc_value instead [ 319.009102][ T9730] syzkaller0: entered promiscuous mode [ 319.027687][ T9730] syzkaller0: entered allmulticast mode [ 320.840742][ T9743] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1100'. [ 320.850053][ T9749] netlink: 'syz.0.1103': attribute type 12 has an invalid length. [ 320.861219][ T9749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1103'. [ 320.872122][ T9751] netlink: 'syz.0.1103': attribute type 10 has an invalid length. [ 320.880638][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1103'. [ 320.892506][ T9751] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 320.991186][ T9769] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1110'. [ 321.515817][ T9783] delete_channel: no stack [ 321.775043][ T9797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1118'. [ 321.844281][ T9795] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1119'. [ 321.879480][ T9797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1118'. [ 323.014541][ T9820] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.1124'. [ 323.024399][ T9820] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 325.650184][ T5770] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 325.686693][ T9869] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 325.753462][ T9869] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1129'. [ 325.928663][ T9821] delete_channel: no stack [ 326.492876][ T9883] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 327.841049][ T9895] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 327.868535][ T9895] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1139'. [ 328.320372][ T9909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1140'. [ 328.359016][ T9909] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 331.978589][ T9908] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1141'. [ 332.071044][ T9917] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1144'. [ 332.296348][ T9924] syzkaller0: entered promiscuous mode [ 332.302275][ T9924] syzkaller0: entered allmulticast mode [ 332.330564][ T9931] netlink: 'syz.3.1149': attribute type 2 has an invalid length. [ 333.441168][ T9951] delete_channel: no stack [ 335.906458][ T9995] delete_channel: no stack [ 336.816197][ T9996] netlink: 'syz.3.1166': attribute type 27 has an invalid length. [ 336.824165][ T9996] netlink: 'syz.3.1166': attribute type 28 has an invalid length. [ 336.832886][ T9996] netlink: 'syz.3.1166': attribute type 29 has an invalid length. [ 336.840973][ T9996] netlink: 'syz.3.1166': attribute type 30 has an invalid length. [ 336.849813][ T9996] netlink: 'syz.3.1166': attribute type 31 has an invalid length. [ 336.857621][ T9996] netlink: 'syz.3.1166': attribute type 32 has an invalid length. [ 336.865503][ T9996] netlink: 'syz.3.1166': attribute type 33 has an invalid length. [ 336.873524][ T9996] netlink: 'syz.3.1166': attribute type 35 has an invalid length. [ 336.881407][ T9996] netlink: 'syz.3.1166': attribute type 37 has an invalid length. [ 337.123608][T10024] netlink: set zone limit has 8 unknown bytes [ 338.502694][T10031] validate_nla: 10 callbacks suppressed [ 338.502709][T10031] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 338.544223][T10031] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1169'. [ 338.740735][T10043] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1176'. [ 338.785439][T10046] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1176'. [ 339.011758][T10051] netlink: 'syz.1.1179': attribute type 1 has an invalid length. [ 339.055052][T10051] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1179'. [ 339.321892][T10068] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 339.341297][T10072] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1184'. [ 339.341332][T10068] bridge0: port 3(team0) entered disabled state [ 339.358376][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.366679][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.390324][T10068] bridge0: left promiscuous mode [ 339.398050][T10068] bridge0: left allmulticast mode [ 339.450261][T10068] bridge0: port 3(team0) entered blocking state [ 339.457268][T10068] bridge0: port 3(team0) entered forwarding state [ 339.464814][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.472636][T10068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.481894][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.489867][T10068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.527712][T10068] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 340.092653][T10091] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1191'. [ 340.156091][T10091] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 342.386097][T10111] netlink: 'syz.3.1196': attribute type 46 has an invalid length. [ 342.407119][T10115] netlink: 'syz.2.1197': attribute type 27 has an invalid length. [ 342.451724][T10115] netlink: 'syz.2.1197': attribute type 4 has an invalid length. [ 342.469428][T10115] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1197'. [ 342.494164][T10111] netlink: 'syz.3.1196': attribute type 46 has an invalid length. [ 342.746779][T10119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1198'. [ 342.775135][T10119] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 343.751821][T10154] delete_channel: no stack [ 343.764685][T10151] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1207'. [ 343.776502][T10150] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1207'. [ 343.785014][T10154] delete_channel: no stack [ 343.899919][T10151] netlink: del zone limit has 8 unknown bytes [ 343.920416][T10150] netlink: del zone limit has 8 unknown bytes [ 344.121460][T10162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1211'. [ 344.423769][T10172] netlink: 'syz.1.1214': attribute type 9 has an invalid length. [ 344.456168][T10172] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1214'. [ 345.037613][T10200] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1222'. [ 345.053711][T10200] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 345.062325][T10200] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1222'. [ 345.079908][T10200] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 345.816421][T10215] netlink: 'syz.2.1224': attribute type 10 has an invalid length. [ 347.613880][T10258] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 347.628986][T10258] team0: Device ipvlan1 failed to register rx_handler [ 347.986801][T10276] bridge0: port 3(dummy0) entered disabled state [ 347.993390][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.000672][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.010553][T10276] bridge0: left promiscuous mode [ 348.062321][T10276] bridge0: port 3(dummy0) entered disabled state [ 348.085084][T10276] bridge_slave_1: left allmulticast mode [ 348.092105][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.138356][T10276] bridge_slave_0: left allmulticast mode [ 348.157934][T10276] bridge_slave_0: left promiscuous mode [ 348.179562][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.700455][T10317] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 351.713122][T10317] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1255'. [ 351.734711][T10319] netlink: 'syz.1.1256': attribute type 21 has an invalid length. [ 351.935688][T10324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.066577][T10329] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.1259'. [ 352.257309][T10334] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 352.265826][T10334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1261'. [ 352.275817][T10334] team0: entered promiscuous mode [ 352.287803][T10334] C: entered promiscuous mode [ 352.292946][T10334] team_slave_1: entered promiscuous mode [ 352.298972][T10334] team0: entered allmulticast mode [ 352.304292][T10334] C: entered allmulticast mode [ 352.321156][T10334] team_slave_1: entered allmulticast mode [ 352.328133][T10334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 352.732795][T10353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.740383][T10353] IPv6: NLM_F_CREATE should be set when creating new route [ 352.747999][T10353] IPv6: NLM_F_CREATE should be set when creating new route [ 352.755536][T10353] IPv6: NLM_F_CREATE should be set when creating new route [ 353.069642][T10366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.856207][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 354.552584][T10413] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1284'. [ 354.578069][T10413] bridge_slave_1: left promiscuous mode [ 354.943858][T10424] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1289'. [ 355.010740][T10424] netlink: zone id is out of range [ 355.015959][T10424] netlink: zone id is out of range [ 355.032976][T10425] netlink: 'syz.0.1289': attribute type 2 has an invalid length. [ 355.041324][T10424] netlink: zone id is out of range [ 355.046474][T10424] netlink: zone id is out of range [ 355.120642][T10424] netlink: zone id is out of range [ 355.149022][T10424] netlink: zone id is out of range [ 355.188808][T10424] netlink: zone id is out of range [ 355.193994][T10424] netlink: zone id is out of range [ 355.252110][T10424] netlink: zone id is out of range [ 355.357543][T10423] delete_channel: no stack [ 355.805582][T10445] netlink: 'syz.3.1295': attribute type 11 has an invalid length. [ 355.842791][T10445] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1295'. [ 356.326172][T10465] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1301'. [ 357.360319][T10483] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1306'. [ 357.633672][T10496] netlink: 'syz.0.1309': attribute type 13 has an invalid length. [ 357.656101][T10496] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1309'. [ 357.669216][T10496] erspan0: refused to change device tx_queue_len [ 358.957207][T10529] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1321'. [ 358.980797][T10533] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1322'. [ 359.141991][T10541] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1326'. [ 359.758694][T10563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.774093][T10565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.782791][T10565] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1331'. [ 359.794959][T10565] netlink: 'syz.0.1331': attribute type 9 has an invalid length. [ 359.817258][T10565] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1331'. [ 359.890272][T10563] netlink: 'syz.0.1331': attribute type 9 has an invalid length. [ 359.902574][T10563] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1331'. [ 360.071782][T10566] netlink: 'syz.0.1331': attribute type 9 has an invalid length. [ 360.117891][T10566] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1331'. [ 360.705204][T10581] netlink: 'syz.1.1338': attribute type 6 has an invalid length. [ 360.773484][T10581] netlink: 187932 bytes leftover after parsing attributes in process `syz.1.1338'. [ 361.214095][T10606] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 361.238518][T10606] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.245994][T10606] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.260269][T10606] bridge0: left promiscuous mode [ 361.265252][T10606] bridge0: left allmulticast mode [ 361.496127][T10620] netlink: 'syz.2.1349': attribute type 2 has an invalid length. [ 361.504479][T10620] netlink: 'syz.2.1349': attribute type 8 has an invalid length. [ 362.037975][T10639] syzkaller0: entered promiscuous mode [ 362.046111][T10639] syzkaller0: entered allmulticast mode [ 364.595165][T10665] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 364.603462][T10665] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 364.611359][T10665] __nla_validate_parse: 2 callbacks suppressed [ 364.611396][T10665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1362'. [ 365.902210][T10715] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1374'. [ 366.050829][T10721] netlink: 'syz.0.1377': attribute type 27 has an invalid length. [ 366.060674][T10721] netlink: 'syz.0.1377': attribute type 28 has an invalid length. [ 366.068627][T10721] netlink: 'syz.0.1377': attribute type 29 has an invalid length. [ 366.076645][T10721] netlink: 'syz.0.1377': attribute type 30 has an invalid length. [ 366.086290][T10721] netlink: 'syz.0.1377': attribute type 31 has an invalid length. [ 366.106337][T10721] netlink: 'syz.0.1377': attribute type 32 has an invalid length. [ 366.125412][T10722] netlink: 'syz.0.1377': attribute type 29 has an invalid length. [ 366.153494][T10721] netlink: 'syz.0.1377': attribute type 33 has an invalid length. [ 366.551623][T10746] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1382'. [ 366.593841][T10746] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 366.606027][T10746] CPU: 0 PID: 10746 Comm: syz.2.1382 Not tainted syzkaller #0 [ 366.613541][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.623609][T10746] Call Trace: [ 366.626896][T10746] [ 366.629846][T10746] dump_stack_lvl+0x18c/0x250 [ 366.634662][T10746] ? show_regs_print_info+0x20/0x20 [ 366.639926][T10746] ? load_image+0x420/0x420 [ 366.644473][T10746] sysfs_warn_dup+0x8e/0xa0 [ 366.649037][T10746] sysfs_do_create_link_sd+0xc0/0x110 [ 366.654421][T10746] device_add_class_symlinks+0x1cf/0x240 [ 366.660093][T10746] device_add+0x4f9/0xc40 [ 366.664424][T10746] wiphy_register+0x1d99/0x2ac0 [ 366.669369][T10746] ? cfg80211_event_work+0x40/0x40 [ 366.674479][T10746] ? minstrel_ht_alloc+0x88a/0x990 [ 366.679686][T10746] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 366.685812][T10746] ieee80211_register_hw+0x2dd8/0x3b30 [ 366.691319][T10746] ? ieee80211_register_hw+0xf71/0x3b30 [ 366.696870][T10746] ? ieee80211_tasklet_handler+0x20/0x20 [ 366.702505][T10746] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 366.708478][T10746] ? __debug_object_init+0xec/0x450 [ 366.713711][T10746] ? __asan_memset+0x22/0x40 [ 366.718320][T10746] ? __hrtimer_init+0x189/0x270 [ 366.723192][T10746] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 366.728947][T10746] ? mac80211_hwsim_free+0x220/0x220 [ 366.734225][T10746] ? rcu_is_watching+0x15/0xb0 [ 366.738991][T10746] ? kstrndup+0xbd/0x140 [ 366.743263][T10746] hwsim_new_radio_nl+0xdad/0x1a70 [ 366.748397][T10746] ? __nla_validate+0x50/0x50 [ 366.753109][T10746] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 366.759467][T10746] ? __nla_parse+0x40/0x50 [ 366.763898][T10746] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 366.770353][T10746] genl_family_rcv_msg_doit+0x21a/0x310 [ 366.775919][T10746] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 366.781820][T10746] ? bpf_lsm_capable+0x9/0x10 [ 366.786537][T10746] ? security_capable+0x89/0xb0 [ 366.791431][T10746] genl_rcv_msg+0x611/0x7a0 [ 366.795946][T10746] ? genl_bind+0x360/0x360 [ 366.800366][T10746] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 366.806702][T10746] ? ref_tracker_free+0x686/0x830 [ 366.811728][T10746] ? __kasan_kmalloc_large+0x8b/0xa0 [ 366.817030][T10746] netlink_rcv_skb+0x235/0x4c0 [ 366.821805][T10746] ? genl_bind+0x360/0x360 [ 366.826231][T10746] ? netlink_ack+0x1160/0x1160 [ 366.831004][T10746] ? __lock_acquire+0x7d80/0x7d80 [ 366.836033][T10746] ? down_read+0x1ac/0x2e0 [ 366.840455][T10746] genl_rcv+0x28/0x40 [ 366.844437][T10746] netlink_unicast+0x7b1/0x930 [ 366.849213][T10746] netlink_sendmsg+0x8d0/0xbf0 [ 366.853987][T10746] ? netlink_getsockopt+0x590/0x590 [ 366.859184][T10746] ? apparmor_socket_sendmsg+0x8e/0x330 [ 366.864757][T10746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 366.870048][T10746] ? security_socket_sendmsg+0x80/0xa0 [ 366.875860][T10746] ? netlink_getsockopt+0x590/0x590 [ 366.881068][T10746] ____sys_sendmsg+0x61b/0x980 [ 366.885929][T10746] ? __asan_memset+0x22/0x40 [ 366.890560][T10746] ? __sys_sendmsg_sock+0x30/0x30 [ 366.895600][T10746] ? __import_iovec+0x5f2/0x850 [ 366.900476][T10746] ? import_iovec+0x73/0xa0 [ 366.904995][T10746] ___sys_sendmsg+0x2a6/0x360 [ 366.909692][T10746] ? __sys_sendmsg+0x2b0/0x2b0 [ 366.914505][T10746] __se_sys_sendmsg+0x1d0/0x2c0 [ 366.919367][T10746] ? __x64_sys_sendmsg+0x80/0x80 [ 366.924326][T10746] ? lockdep_hardirqs_on+0x98/0x150 [ 366.929537][T10746] do_syscall_64+0x55/0xb0 [ 366.933951][T10746] ? clear_bhb_loop+0x40/0x90 [ 366.938741][T10746] ? clear_bhb_loop+0x40/0x90 [ 366.943419][T10746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.949318][T10746] RIP: 0033:0x7ff2e999e0d9 [ 366.953737][T10746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.973343][T10746] RSP: 002b:00007ff2ea7fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.981825][T10746] RAX: ffffffffffffffda RBX: 00007ff2e9c26090 RCX: 00007ff2e999e0d9 [ 366.989796][T10746] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 366.997767][T10746] RBP: 00007ff2e9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 367.005739][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.013704][T10746] R13: 00007ff2e9c26128 R14: 00007ff2e9c26090 R15: 00007ffcbda69d18 [ 367.021689][T10746] [ 367.115919][T10750] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.1385'. [ 367.453557][T10758] syz.2.1389[10758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.453703][T10758] syz.2.1389[10758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.293209][T10773] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1393'. [ 369.101636][T10805] : renamed from tunl0 (while UP) [ 369.210187][T10806] syzkaller0: entered promiscuous mode [ 369.215726][T10806] syzkaller0: entered allmulticast mode [ 369.306558][T10813] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1406'. [ 372.864453][T10880] validate_nla: 23 callbacks suppressed [ 372.864471][T10880] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 373.534879][T10906] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1433'. [ 373.544829][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 373.625159][T10908] lo: entered allmulticast mode [ 373.674631][T10908] lo: entered promiscuous mode [ 373.703517][T10908] lo: left allmulticast mode [ 374.094665][T10929] netlink: 'syz.3.1441': attribute type 41 has an invalid length. [ 374.108020][T10933] netlink: 'syz.2.1440': attribute type 2 has an invalid length. [ 374.461075][T10940] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 374.474168][T10940] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1443'. [ 374.492439][T10943] netlink: 'syz.3.1443': attribute type 6 has an invalid length. [ 374.521764][T10945] netlink: 'syz.0.1446': attribute type 3 has an invalid length. [ 374.530743][T10945] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 374.539684][T10945] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1446'. [ 374.764267][T10956] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 374.795846][T10956] vxcan1: entered promiscuous mode [ 374.803821][T10956] vxcan1: entered allmulticast mode [ 374.809178][T10956] team0: Device vxcan1 is of different type [ 375.037284][T10963] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1452'. [ 375.129248][T10965] IPv6: Can't replace route, no match found [ 375.513876][T10976] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 375.522094][T10976] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1457'. [ 375.729888][T10983] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 375.767653][T10983] team0: Port device netdevsim0 added [ 375.803635][T10983] team0: Port device netdevsim0 removed [ 375.872033][T10987] syzkaller0: entered promiscuous mode [ 375.877573][T10987] syzkaller0: entered allmulticast mode [ 377.450204][T10997] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 377.465669][T11002] veth1_macvtap: left promiscuous mode [ 377.539450][T11008] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1466'. [ 377.542022][T11006] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1466'. [ 377.550778][T11008] net_ratelimit: 217 callbacks suppressed [ 377.550790][T11008] openvswitch: netlink: Key type 4112 is out of range max 32 [ 377.596792][T11006] openvswitch: netlink: Key type 4112 is out of range max 32 [ 378.335094][T11035] validate_nla: 3 callbacks suppressed [ 378.335110][T11035] netlink: 'syz.3.1473': attribute type 33 has an invalid length. [ 378.431547][T11035] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1473'. [ 378.753049][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.759520][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.059049][T11046] syzkaller0: entered promiscuous mode [ 379.064714][T11046] syzkaller0: entered allmulticast mode [ 380.986653][T11064] : port 1(gretap0) entered blocking state [ 380.996572][T11064] : port 1(gretap0) entered disabled state [ 381.004536][T11064] gretap0: entered allmulticast mode [ 381.017329][T11064] gretap0: entered promiscuous mode [ 382.339587][T11081] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 382.356477][T11081] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 382.507280][T11094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.514771][T11094] IPv6: NLM_F_CREATE should be set when creating new route [ 382.522336][T11094] IPv6: NLM_F_CREATE should be set when creating new route [ 382.529802][T11094] IPv6: NLM_F_CREATE should be set when creating new route [ 382.592934][T11094] netlink: 'syz.2.1493': attribute type 9 has an invalid length. [ 382.617873][T11094] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1493'. [ 382.806921][T11103] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 382.827310][T11099] netlink: 'syz.2.1493': attribute type 9 has an invalid length. [ 382.842919][T11099] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1493'. [ 383.206473][T11122] netlink: 'syz.1.1501': attribute type 3 has an invalid length. [ 383.215135][T11122] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1501'. [ 383.434534][T11133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.500100][T11133] netlink: 'syz.0.1512': attribute type 9 has an invalid length. [ 383.527970][T11133] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1512'. [ 383.804370][T11140] netlink: 'syz.0.1512': attribute type 9 has an invalid length. [ 383.819281][T11140] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1512'. [ 384.880441][T11169] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1517'. [ 386.039292][T11184] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 390.698990][T11223] syzkaller0: entered promiscuous mode [ 390.704862][T11223] syzkaller0: entered allmulticast mode [ 392.326657][T11239] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1538'. [ 392.479825][T11248] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1540'. [ 392.649269][T11255] netlink: 'syz.0.1541': attribute type 21 has an invalid length. [ 392.658030][T11255] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1541'. [ 392.705727][T11252] netlink: 'syz.0.1541': attribute type 3 has an invalid length. [ 392.716513][T11252] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1541'. [ 392.962687][T11267] netlink: 'syz.2.1546': attribute type 39 has an invalid length. [ 393.302566][T11279] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1549'. [ 393.389726][T11283] syzkaller0: entered promiscuous mode [ 393.395298][T11283] syzkaller0: entered allmulticast mode [ 395.123922][T11289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1551'. [ 395.180441][T11300] netlink: 'syz.2.1549': attribute type 39 has an invalid length. [ 395.272674][T11311] netlink: 'syz.3.1555': attribute type 9 has an invalid length. [ 395.283027][T11311] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1555'. [ 395.594727][T11316] netlink: 'syz.3.1557': attribute type 39 has an invalid length. [ 395.829871][T11330] FAULT_INJECTION: forcing a failure. [ 395.829871][T11330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.846117][T11330] CPU: 1 PID: 11330 Comm: syz.3.1562 Not tainted syzkaller #0 [ 395.853621][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.863699][T11330] Call Trace: [ 395.866992][T11330] [ 395.869930][T11330] dump_stack_lvl+0x18c/0x250 [ 395.874637][T11330] ? show_regs_print_info+0x20/0x20 [ 395.879855][T11330] ? load_image+0x420/0x420 [ 395.884357][T11330] ? __might_fault+0xaa/0x120 [ 395.889032][T11330] ? __lock_acquire+0x7d80/0x7d80 [ 395.894069][T11330] should_fail_ex+0x394/0x4c0 [ 395.898746][T11330] _copy_from_user+0x2f/0xe0 [ 395.903328][T11330] __sys_bpf+0x23e/0x890 [ 395.907580][T11330] ? bpf_link_show_fdinfo+0x390/0x390 [ 395.912956][T11330] ? lock_chain_count+0x20/0x20 [ 395.917817][T11330] __x64_sys_bpf+0x7c/0x90 [ 395.922223][T11330] do_syscall_64+0x55/0xb0 [ 395.926621][T11330] ? clear_bhb_loop+0x40/0x90 [ 395.931283][T11330] ? clear_bhb_loop+0x40/0x90 [ 395.935987][T11330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.941871][T11330] RIP: 0033:0x7fc80b39e0d9 [ 395.946281][T11330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.965880][T11330] RSP: 002b:00007fc80c19b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.974285][T11330] RAX: ffffffffffffffda RBX: 00007fc80b625fa0 RCX: 00007fc80b39e0d9 [ 395.982247][T11330] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 395.990208][T11330] RBP: 00007fc80c19b090 R08: 0000000000000000 R09: 0000000000000000 [ 395.998181][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.006149][T11330] R13: 00007fc80b626038 R14: 00007fc80b625fa0 R15: 00007fff27fa05e8 [ 396.014115][T11330] [ 396.605330][T11359] netlink: 'syz.0.1571': attribute type 27 has an invalid length. [ 396.615547][T11359] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1571'. [ 396.681111][T11361] FAULT_INJECTION: forcing a failure. [ 396.681111][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.706808][T11361] CPU: 0 PID: 11361 Comm: syz.1.1572 Not tainted syzkaller #0 [ 396.714323][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.724374][T11361] Call Trace: [ 396.727647][T11361] [ 396.730568][T11361] dump_stack_lvl+0x18c/0x250 [ 396.735245][T11361] ? show_regs_print_info+0x20/0x20 [ 396.740449][T11361] ? load_image+0x420/0x420 [ 396.744938][T11361] ? __might_fault+0xaa/0x120 [ 396.749606][T11361] ? __lock_acquire+0x7d80/0x7d80 [ 396.754622][T11361] should_fail_ex+0x394/0x4c0 [ 396.759291][T11361] _copy_to_user+0x2f/0xa0 [ 396.763694][T11361] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 396.769318][T11361] ? sock_gen_cookie+0x60/0x60 [ 396.774074][T11361] ? sock_gen_cookie+0x60/0x60 [ 396.778824][T11361] bpf_prog_test_run+0x31f/0x390 [ 396.783749][T11361] __sys_bpf+0x49d/0x890 [ 396.787978][T11361] ? bpf_link_show_fdinfo+0x390/0x390 [ 396.793348][T11361] ? lock_chain_count+0x20/0x20 [ 396.798190][T11361] __x64_sys_bpf+0x7c/0x90 [ 396.802593][T11361] do_syscall_64+0x55/0xb0 [ 396.806995][T11361] ? clear_bhb_loop+0x40/0x90 [ 396.811657][T11361] ? clear_bhb_loop+0x40/0x90 [ 396.816334][T11361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.822230][T11361] RIP: 0033:0x7fc43a19e0d9 [ 396.826631][T11361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.846224][T11361] RSP: 002b:00007fc43b08a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.854629][T11361] RAX: ffffffffffffffda RBX: 00007fc43a425fa0 RCX: 00007fc43a19e0d9 [ 396.862607][T11361] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 396.870566][T11361] RBP: 00007fc43b08a090 R08: 0000000000000000 R09: 0000000000000000 [ 396.878528][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.886495][T11361] R13: 00007fc43a426038 R14: 00007fc43a425fa0 R15: 00007ffecef9d1e8 [ 396.894489][T11361] [ 398.539278][T11359] netlink: 'syz.0.1571': attribute type 5 has an invalid length. [ 398.809865][T11383] syzkaller0: entered promiscuous mode [ 398.815517][T11383] syzkaller0: entered allmulticast mode [ 399.170814][T11399] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1582'. [ 399.221297][T11401] netlink: 'syz.3.1583': attribute type 21 has an invalid length. [ 399.292897][T11401] netlink: 'syz.3.1583': attribute type 6 has an invalid length. [ 399.770357][T11417] netlink: 'syz.2.1588': attribute type 10 has an invalid length. [ 399.803758][T11417] wg1: entered promiscuous mode [ 399.809799][T11417] wg1: entered allmulticast mode [ 399.814777][T11417] team0: Device wg1 is of different type [ 399.924382][T11421] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1590'. [ 399.966319][T11425] netlink: 'syz.2.1592': attribute type 21 has an invalid length. [ 400.700783][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 400.767979][T11440] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1596'. [ 400.959985][T11442] syzkaller0: entered promiscuous mode [ 400.977858][T11442] syzkaller0: entered allmulticast mode [ 402.694652][T11452] Q6`Ҙ: renamed from lo (while UP) [ 402.702132][T11454] netlink: 'syz.3.1600': attribute type 39 has an invalid length. [ 403.064263][T11483] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1607'. [ 403.377018][T11496] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1613'. [ 403.952941][T11511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1618'. [ 404.335821][T11524] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 404.349662][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1623'. [ 404.385927][T11526] syzkaller0: entered promiscuous mode [ 404.391589][T11526] syzkaller0: entered allmulticast mode [ 404.414728][T11524] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 404.422860][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1623'. [ 404.535040][T11532] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1625'. [ 404.558139][T11532] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1625'. [ 404.567406][T11532] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1625'. [ 404.730761][T11540] netlink: 'syz.3.1627': attribute type 41 has an invalid length. [ 406.411177][T11540] netlink: 'syz.3.1627': attribute type 41 has an invalid length. [ 406.419788][T11541] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1627'. [ 406.430010][T11546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1629'. [ 406.824215][T11563] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1636'. [ 407.279889][T11580] netlink: 'syz.3.1640': attribute type 21 has an invalid length. [ 407.287900][T11580] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1640'. [ 407.304151][T11580] netlink: 'syz.3.1640': attribute type 2 has an invalid length. [ 407.313593][T11580] netlink: 'syz.3.1640': attribute type 8 has an invalid length. [ 407.321891][T11580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1640'. [ 407.339107][T11580] netlink: 'syz.3.1640': attribute type 2 has an invalid length. [ 407.347014][T11580] netlink: 'syz.3.1640': attribute type 8 has an invalid length. [ 408.866241][T11629] bridge_slave_0 (unregistering): left allmulticast mode [ 408.873363][T11629] bridge_slave_0 (unregistering): left promiscuous mode [ 408.881215][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.077025][T11631] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 409.092690][T11631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.738924][T11665] __nla_validate_parse: 4 callbacks suppressed [ 409.738944][T11665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1667'. [ 409.780898][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.823769][T11668] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1669'. [ 409.861717][T11665] bridge_slave_0 (unregistering): left allmulticast mode [ 409.869086][T11665] bridge_slave_0 (unregistering): left promiscuous mode [ 409.876209][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.924521][T11668] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1669'. [ 410.351239][T11686] netlink: 'syz.0.1672': attribute type 3 has an invalid length. [ 410.363634][T11686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1672'. [ 410.531809][T11682] netlink: 'syz.0.1672': attribute type 12 has an invalid length. [ 410.553976][T11682] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1672'. [ 415.314998][T11720] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1683'. [ 415.373933][T11728] netlink: 'syz.1.1685': attribute type 2 has an invalid length. [ 415.381910][T11728] netlink: 'syz.1.1685': attribute type 8 has an invalid length. [ 415.390796][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1685'. [ 415.702931][T11737] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 415.713487][T11737] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1689'. [ 415.951083][T11743] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1690'. [ 415.985947][T11743] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 416.018070][T11743] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.129526][T11759] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1691'. [ 419.029752][T11761] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1695'. [ 419.633037][T11776] tun0: tun_chr_ioctl cmd 1074812117 [ 420.068134][T11802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.099144][T11799] bridge0: entered allmulticast mode [ 420.354704][T11817] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1711'. [ 422.235913][T11892] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1734'. [ 424.209963][T11943] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 425.122207][ T5770] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 425.559516][T12003] netlink: 'syz.3.1767': attribute type 10 has an invalid length. [ 425.615777][T12003] wg1: entered promiscuous mode [ 425.632953][T12003] wg1: entered allmulticast mode [ 425.648038][T12003] team0: Device wg1 is of different type [ 425.825631][T12007] netlink: 'syz.3.1769': attribute type 2 has an invalid length. [ 425.834346][T12007] netlink: 'syz.3.1769': attribute type 8 has an invalid length. [ 425.843036][T12007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1769'. [ 425.880989][T12009] C: renamed from team_slave_0 [ 425.889804][T12009] netlink: 'syz.1.1770': attribute type 4 has an invalid length. [ 425.897570][T12009] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1770'. [ 425.907851][T12009] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 425.927523][T12010] netlink: 'syz.1.1770': attribute type 4 has an invalid length. [ 425.935876][T12010] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1770'. [ 425.946377][T12010] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 426.105556][T12013] netlink: 'syz.1.1772': attribute type 2 has an invalid length. [ 426.128504][T12013] netlink: 'syz.1.1772': attribute type 9 has an invalid length. [ 426.148979][T12013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1772'. [ 426.230106][T12013] netlink: 'syz.1.1772': attribute type 21 has an invalid length. [ 426.301317][T12013] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 427.225408][T12020] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1773'. [ 427.271473][T12039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1779'. [ 427.288091][T12039] : renamed from caif0 [ 427.354364][T12039] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 430.389592][T12104] validate_nla: 2 callbacks suppressed [ 430.389610][T12104] netlink: 'syz.2.1797': attribute type 3 has an invalid length. [ 430.437812][T12104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1797'. [ 431.444796][T12151] netlink: 'syz.1.1811': attribute type 11 has an invalid length. [ 431.451893][T12138] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 431.485256][T12151] netlink: 'syz.1.1811': attribute type 2 has an invalid length. [ 431.501917][T12151] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1811'. [ 431.816443][T12163] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 432.300475][T12179] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 432.319078][T12179] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1820'. [ 432.444905][T12184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'. [ 432.469151][T12184] : renamed from caif0 [ 432.502290][T12184] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 432.504280][T12188] syz.2.1823[12188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.520005][T12188] syz.2.1823[12188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.706518][T12214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1831'. [ 433.860218][T12218] netlink: 'syz.0.1833': attribute type 10 has an invalid length. [ 433.871068][T12218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1833'. [ 434.663418][T12241] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1843'. [ 434.684925][T12241] bridge_slave_1: default FDB implementation only supports local addresses [ 434.930882][T12258] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 434.951689][T12258] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1848'. [ 435.169521][T12272] netlink: 'syz.3.1852': attribute type 27 has an invalid length. [ 435.178336][T12272] netlink: 'syz.3.1852': attribute type 28 has an invalid length. [ 435.201686][T12272] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1852'. [ 435.697601][T12287] validate_nla: 18 callbacks suppressed [ 435.697630][T12287] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 435.713591][T12287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1858'. [ 435.725590][T12287] team0: entered promiscuous mode [ 435.731267][T12287] team_slave_1: entered promiscuous mode [ 435.737519][T12287] team0: entered allmulticast mode [ 435.742921][T12287] team_slave_1: entered allmulticast mode [ 435.756074][T12287] bridge0: port 1(team0) entered blocking state [ 435.767464][T12287] bridge0: port 1(team0) entered disabled state [ 436.181834][T12296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1860'. [ 439.597886][T12331] syzkaller0: entered promiscuous mode [ 439.603951][T12331] syzkaller0: entered allmulticast mode [ 439.769006][T12334] netlink: 'syz.0.1871': attribute type 10 has an invalid length. [ 440.201535][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.208250][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.258788][T12370] netlink: 'syz.1.1881': attribute type 19 has an invalid length. [ 442.286814][T12368] __nla_validate_parse: 2 callbacks suppressed [ 442.286831][T12368] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1882'. [ 442.365697][T12373] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1881'. [ 442.395596][T12367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.735736][T12388] syzkaller0: entered promiscuous mode [ 442.749158][T12388] syzkaller0: entered allmulticast mode [ 442.966760][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 442.993624][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.026505][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.058605][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.079036][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.098830][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.120434][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.140695][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.179601][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.209822][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.256853][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.267686][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.286199][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.294558][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.304226][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.314763][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 443.324534][T12402] netlink: 'syz.1.1893': attribute type 22 has an invalid length. [ 443.773328][T12417] syzkaller0: entered promiscuous mode [ 443.779173][T12417] syzkaller0: entered allmulticast mode [ 447.336230][T12454] __nla_validate_parse: 27 callbacks suppressed [ 447.336248][T12454] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1909'. [ 447.455042][T12459] validate_nla: 25 callbacks suppressed [ 447.455082][T12459] netlink: 'syz.0.1911': attribute type 153 has an invalid length. [ 447.478983][T12459] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1911'. [ 447.489862][T12467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1912'. [ 447.499282][T12467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1912'. [ 447.513569][T12463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1912'. [ 447.644744][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 447.782578][T12474] syzkaller0: entered promiscuous mode [ 447.796830][T12474] syzkaller0: entered allmulticast mode [ 447.805455][T12477] netlink: 'syz.0.1914': attribute type 39 has an invalid length. [ 447.885932][T12482] sctp: [Deprecated]: syz.3.1917 (pid 12482) Use of int in max_burst socket option deprecated. [ 447.885932][T12482] Use struct sctp_assoc_value instead [ 448.461818][T12496] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1921'. [ 449.460608][T12496] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 449.469235][T12496] CPU: 1 PID: 12496 Comm: syz.2.1921 Not tainted syzkaller #0 [ 449.476727][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.486788][T12496] Call Trace: [ 449.490069][T12496] [ 449.492997][T12496] dump_stack_lvl+0x18c/0x250 [ 449.497686][T12496] ? show_regs_print_info+0x20/0x20 [ 449.502888][T12496] ? load_image+0x420/0x420 [ 449.507434][T12496] sysfs_warn_dup+0x8e/0xa0 [ 449.511945][T12496] sysfs_do_create_link_sd+0xc0/0x110 [ 449.517317][T12496] device_add_class_symlinks+0x1cf/0x240 [ 449.522961][T12496] device_add+0x4f9/0xc40 [ 449.527289][T12496] wiphy_register+0x1d99/0x2ac0 [ 449.532166][T12496] ? cfg80211_event_work+0x40/0x40 [ 449.537274][T12496] ? minstrel_ht_alloc+0x88a/0x990 [ 449.542391][T12496] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 449.548466][T12496] ieee80211_register_hw+0x2dd8/0x3b30 [ 449.553935][T12496] ? ieee80211_register_hw+0xf71/0x3b30 [ 449.559485][T12496] ? ieee80211_tasklet_handler+0x20/0x20 [ 449.565115][T12496] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 449.571007][T12496] ? __debug_object_init+0xec/0x450 [ 449.576211][T12496] ? __asan_memset+0x22/0x40 [ 449.580802][T12496] ? __hrtimer_init+0x189/0x270 [ 449.585653][T12496] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 449.591388][T12496] ? mac80211_hwsim_free+0x220/0x220 [ 449.596669][T12496] ? rcu_is_watching+0x15/0xb0 [ 449.601433][T12496] ? kstrndup+0xbd/0x140 [ 449.605685][T12496] hwsim_new_radio_nl+0xdad/0x1a70 [ 449.610798][T12496] ? __nla_validate+0x50/0x50 [ 449.615487][T12496] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 449.621822][T12496] ? __nla_parse+0x40/0x50 [ 449.626241][T12496] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 449.632577][T12496] genl_family_rcv_msg_doit+0x21a/0x310 [ 449.638128][T12496] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 449.644027][T12496] ? bpf_lsm_capable+0x9/0x10 [ 449.648714][T12496] ? security_capable+0x89/0xb0 [ 449.653571][T12496] genl_rcv_msg+0x611/0x7a0 [ 449.658079][T12496] ? genl_bind+0x360/0x360 [ 449.662492][T12496] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 449.668819][T12496] ? ref_tracker_free+0x686/0x830 [ 449.673842][T12496] ? __kasan_kmalloc_large+0x8b/0xa0 [ 449.679133][T12496] netlink_rcv_skb+0x235/0x4c0 [ 449.683921][T12496] ? genl_bind+0x360/0x360 [ 449.688355][T12496] ? netlink_ack+0x1160/0x1160 [ 449.693136][T12496] ? __lock_acquire+0x7d80/0x7d80 [ 449.698169][T12496] ? down_read+0x1ac/0x2e0 [ 449.702595][T12496] genl_rcv+0x28/0x40 [ 449.706577][T12496] netlink_unicast+0x7b1/0x930 [ 449.711350][T12496] netlink_sendmsg+0x8d0/0xbf0 [ 449.716122][T12496] ? netlink_getsockopt+0x590/0x590 [ 449.721319][T12496] ? apparmor_socket_sendmsg+0x8e/0x330 [ 449.726867][T12496] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 449.732153][T12496] ? security_socket_sendmsg+0x80/0xa0 [ 449.737607][T12496] ? netlink_getsockopt+0x590/0x590 [ 449.742805][T12496] ____sys_sendmsg+0x61b/0x980 [ 449.747576][T12496] ? __asan_memset+0x22/0x40 [ 449.752167][T12496] ? __sys_sendmsg_sock+0x30/0x30 [ 449.757189][T12496] ? __import_iovec+0x5f2/0x850 [ 449.762053][T12496] ? import_iovec+0x73/0xa0 [ 449.766559][T12496] ___sys_sendmsg+0x2a6/0x360 [ 449.771239][T12496] ? __sys_sendmsg+0x2b0/0x2b0 [ 449.776041][T12496] __se_sys_sendmsg+0x1d0/0x2c0 [ 449.780890][T12496] ? __x64_sys_sendmsg+0x80/0x80 [ 449.785840][T12496] ? lockdep_hardirqs_on+0x98/0x150 [ 449.791043][T12496] do_syscall_64+0x55/0xb0 [ 449.795457][T12496] ? clear_bhb_loop+0x40/0x90 [ 449.800132][T12496] ? clear_bhb_loop+0x40/0x90 [ 449.804810][T12496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.810722][T12496] RIP: 0033:0x7ff2e999e0d9 [ 449.815138][T12496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.834736][T12496] RSP: 002b:00007ff2ea7fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.843152][T12496] RAX: ffffffffffffffda RBX: 00007ff2e9c26090 RCX: 00007ff2e999e0d9 [ 449.851123][T12496] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 449.859090][T12496] RBP: 00007ff2e9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 449.867056][T12496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.875040][T12496] R13: 00007ff2e9c26128 R14: 00007ff2e9c26090 R15: 00007ffcbda69d18 [ 449.883047][T12496] [ 450.143339][T12504] netlink: 'syz.0.1924': attribute type 17 has an invalid length. [ 450.158373][T12504] netlink: 'syz.0.1924': attribute type 16 has an invalid length. [ 450.176475][T12504] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1924'. [ 450.243332][T12510] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 450.273691][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 450.285341][T12510] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1925'. [ 450.302915][T12510] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 450.311620][T12510] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.114786][T12572] sctp: [Deprecated]: syz.1.1947 (pid 12572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.114786][T12572] Use struct sctp_sack_info instead [ 452.285114][T12582] netlink: 'syz.1.1950': attribute type 21 has an invalid length. [ 452.299821][T12582] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 453.150300][T12608] netlink: 'syz.0.1956': attribute type 3 has an invalid length. [ 453.168036][T12608] __nla_validate_parse: 4 callbacks suppressed [ 453.168052][T12608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1956'. [ 453.379209][T12615] netlink: 'syz.0.1959': attribute type 4 has an invalid length. [ 453.610059][T12618] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1960'. [ 453.953752][T12629] netlink: 'syz.3.1963': attribute type 3 has an invalid length. [ 454.007906][T12629] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 454.043349][T12629] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.1963'. [ 454.522854][T12637] delete_channel: no stack [ 455.393501][T12667] syzkaller0: entered promiscuous mode [ 455.428040][T12667] syzkaller0: entered allmulticast mode [ 459.890503][T12714] syzkaller0: entered promiscuous mode [ 459.896133][T12714] syzkaller0: entered allmulticast mode [ 461.772138][T12728] syzkaller0: entered promiscuous mode [ 461.777652][T12728] syzkaller0: entered allmulticast mode [ 463.419353][T12746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1996'. [ 463.648793][T12765] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 463.696582][T12767] netlink: 'syz.2.2001': attribute type 39 has an invalid length. [ 465.670970][T12801] netlink: 'syz.0.2010': attribute type 2 has an invalid length. [ 465.685614][T12801] netlink: 'syz.0.2010': attribute type 8 has an invalid length. [ 465.696362][T12801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2010'. [ 465.859984][T12799] delete_channel: no stack [ 465.873791][T12815] syzkaller0: entered promiscuous mode [ 465.879471][T12815] syzkaller0: entered allmulticast mode [ 465.887238][T12812] netlink: 'syz.3.2014': attribute type 39 has an invalid length. [ 466.005632][T12826] netlink: 'syz.0.2017': attribute type 9 has an invalid length. [ 466.053516][T12826] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2017'. [ 466.115254][T12826] syzkaller0: mtu greater than device maximum [ 466.154631][T12829] syzkaller0: entered promiscuous mode [ 466.161027][T12829] syzkaller0: entered allmulticast mode [ 466.176089][T12826] netlink: 'syz.0.2017': attribute type 16 has an invalid length. [ 466.198009][T12826] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2017'. [ 467.687994][T12833] syzkaller0: entered promiscuous mode [ 467.693512][T12833] syzkaller0: entered allmulticast mode [ 469.307165][T12857] netlink: 'syz.0.2027': attribute type 39 has an invalid length. [ 470.273982][T12875] syzkaller0: entered promiscuous mode [ 470.283472][T12875] syzkaller0: entered allmulticast mode [ 472.764613][T12942] syzkaller0: entered promiscuous mode [ 472.772833][T12942] syzkaller0: entered allmulticast mode [ 473.014256][ T5770] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 475.366268][T12985] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2062'. [ 475.424631][T12985] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2062'. [ 475.734252][T13007] netlink: 'syz.1.2069': attribute type 9 has an invalid length. [ 475.764178][T13007] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2069'. [ 475.786472][T13006] netlink: 'syz.1.2069': attribute type 9 has an invalid length. [ 475.827772][T13006] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2069'. [ 475.830245][T13009] syzkaller0: entered promiscuous mode [ 475.903420][T13009] syzkaller0: entered allmulticast mode [ 478.222373][T13018] netlink: 'syz.3.2071': attribute type 15 has an invalid length. [ 478.230278][T13018] netlink: 'syz.3.2071': attribute type 7 has an invalid length. [ 478.238081][T13018] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2071'. [ 478.247146][T13026] netlink: 'syz.0.2074': attribute type 41 has an invalid length. [ 478.255820][T13027] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2074'. [ 478.615514][T13043] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2080'. [ 478.647998][T13043] netlink: get zone limit has 4 unknown bytes [ 479.299236][T13058] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2083'. [ 479.582859][T13068] syzkaller0: entered promiscuous mode [ 479.597659][T13068] syzkaller0: entered allmulticast mode [ 479.643267][T13078] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2089'. [ 479.654715][T13078] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 481.331815][T13084] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 481.340772][T13084] hsr_slave_0: entered promiscuous mode [ 481.346419][T13084] hsr_slave_0: entered allmulticast mode [ 481.352900][T13084] team0: Port device hsr_slave_0 added [ 481.358837][T13086] netlink: 'syz.0.2093': attribute type 10 has an invalid length. [ 481.366701][T13086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2093'. [ 481.390708][T13086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.455587][T13087] netlink: 'syz.0.2093': attribute type 2 has an invalid length. [ 481.474317][T13098] sctp: [Deprecated]: syz.3.2096 (pid 13098) Use of int in max_burst socket option deprecated. [ 481.474317][T13098] Use struct sctp_assoc_value instead [ 481.490251][T13087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2093'. [ 481.515533][T13090] netlink: 'syz.0.2093': attribute type 2 has an invalid length. [ 481.526594][T13090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2093'. [ 481.537247][T13091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2094'. [ 481.611816][T13098] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2096'. [ 481.962769][T13121] syzkaller0: entered promiscuous mode [ 481.969134][T13121] syzkaller0: entered allmulticast mode [ 484.071686][T13163] netlink: 182156 bytes leftover after parsing attributes in process `syz.1.2119'. [ 484.351344][T13179] syzkaller0: entered promiscuous mode [ 484.356975][T13179] syzkaller0: entered allmulticast mode [ 486.337319][T13197] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2129'. [ 486.555935][T13223] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2136'. [ 486.693353][T13228] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2138'. [ 486.703064][T13228] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 486.833919][T13228] syzkaller0: left promiscuous mode [ 486.849084][T13228] syzkaller0: left allmulticast mode [ 487.223646][T13233] netlink: 'syz.3.2139': attribute type 9 has an invalid length. [ 487.382423][T13233] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2139'. [ 488.077049][T13255] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2144'. [ 488.131059][T13255] bridge_slave_0: entered allmulticast mode [ 488.271974][T13263] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 488.330245][T13263] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 488.389266][T13267] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 488.428000][T13263] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 488.441066][T13263] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 488.573226][T13278] netlink: 'syz.1.2149': attribute type 10 has an invalid length. [ 488.581956][T13278] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2149'. [ 488.654426][T13267] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 488.721363][T13280] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2152'. [ 488.823688][T13282] IPv6: Can't replace route, no match found [ 489.711443][T13294] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2154'. [ 490.282853][T13323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2163'. [ 490.810157][T13344] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2170'. [ 490.823154][T13344] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 494.381026][ T5770] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 494.679279][T13386] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 494.718254][T13386] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 494.768396][T13386] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 494.800727][T13386] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 494.833359][T13386] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 495.163812][T13400] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.2177'. [ 495.237421][T13407] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2185'. [ 495.257106][T13407] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 495.451983][T13402] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 495.477470][T13410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2177'. [ 497.132052][T13448] netlink: 'syz.2.2195': attribute type 29 has an invalid length. [ 497.158931][T13448] netlink: 'syz.2.2195': attribute type 29 has an invalid length. [ 497.196642][T13448] netlink: 'syz.2.2195': attribute type 29 has an invalid length. [ 497.224779][T13448] netlink: 'syz.2.2195': attribute type 29 has an invalid length. [ 498.379467][T13479] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2204'. [ 498.505565][T13479] sit0: left promiscuous mode [ 498.891152][T13481] sit0: entered promiscuous mode [ 501.234416][T13505] validate_nla: 5 callbacks suppressed [ 501.234465][T13505] netlink: 'syz.1.2212': attribute type 22 has an invalid length. [ 501.309425][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 501.643450][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.657780][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.953204][ T5779] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 502.122867][T13532] netlink: 'syz.1.2217': attribute type 9 has an invalid length. [ 502.159995][T13532] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2217'. [ 563.074906][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.081297][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 609.797767][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 609.804483][ C1] rcu: 1-....: (1 GPs behind) idle=a094/1/0x4000000000000000 softirq=46490/46491 fqs=1797 [ 609.815292][ C1] rcu: hardirqs softirqs csw/system [ 609.821690][ C1] rcu: number: 1560094 0 0 [ 609.828115][ C1] rcu: cputime: 13075 35479 40 ==> 48560(ms) [ 609.835896][ C1] rcu: (t=10500 jiffies g=64929 q=1403 ncpus=2) [ 609.842204][ C1] CPU: 1 PID: 13529 Comm: syz.1.2217 Not tainted syzkaller #0 [ 609.849641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.859696][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x27/0x60 [ 609.865905][ C1] Code: cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d c0 45 7c 7e 65 8b 15 c1 45 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 <83> b9 24 16 00 00 00 74 2c 8b 91 00 16 00 00 83 fa 02 75 21 48 8b [ 609.885505][ C1] RSP: 0018:ffffc900001eee40 EFLAGS: 00000246 [ 609.891575][ C1] RAX: ffffffff813bd989 RBX: ffffc900001f0f58 RCX: ffff888027a49e00 [ 609.899541][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: ffffc900001f0f58 [ 609.907508][ C1] RBP: ffffc900001eef78 R08: ffff888027a49e00 R09: 0000000000000003 [ 609.915470][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f0e40 [ 609.923433][ C1] R13: ffffc900001eef28 R14: ffffc900001eef38 R15: dffffc0000000000 [ 609.931420][ C1] FS: 00007fc43b08a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 609.940341][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.946915][ C1] CR2: 0000000100000000 CR3: 0000000023e3a000 CR4: 00000000003506e0 [ 609.954878][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 609.962839][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 609.970805][ C1] Call Trace: [ 609.974077][ C1] [ 609.976912][ C1] __read_once_word_nocheck+0x9/0x10 [ 609.982232][ C1] unwind_next_frame+0x15d9/0x2990 [ 609.987372][ C1] ? handle_softirqs+0x27d/0x820 [ 609.992313][ C1] ? handle_softirqs+0x27d/0x820 [ 609.997241][ C1] ? stack_trace_save+0x100/0x100 [ 610.002261][ C1] arch_stack_walk+0x144/0x190 [ 610.007027][ C1] ? handle_softirqs+0x27d/0x820 [ 610.011963][ C1] stack_trace_save+0xaa/0x100 [ 610.016722][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 610.021829][ C1] ? mark_lock+0x94/0x320 [ 610.026154][ C1] kasan_set_track+0x4e/0x70 [ 610.030738][ C1] ? kasan_set_track+0x4e/0x70 [ 610.035491][ C1] ? kasan_save_free_info+0x28/0x40 [ 610.040683][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 610.045958][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 610.051579][ C1] ? kmem_cache_free+0xf8/0x290 [ 610.056423][ C1] ? dev_kfree_skb_any_reason+0x120/0x130 [ 610.062231][ C1] ? free_old_xmit_skbs+0x11a/0x3b0 [ 610.067432][ C1] ? start_xmit+0x16d/0x1470 [ 610.072012][ C1] ? dev_hard_start_xmit+0x269/0x790 [ 610.077377][ C1] ? sch_direct_xmit+0x251/0x4a0 [ 610.082384][ C1] ? __dev_queue_xmit+0x162a/0x3630 [ 610.087575][ C1] ? ip_finish_output2+0xd97/0x1260 [ 610.092783][ C1] ? ip_output+0x2a5/0x3a0 [ 610.097189][ C1] ? __ip_queue_xmit+0x1056/0x1960 [ 610.102292][ C1] ? __tcp_transmit_skb+0x1dd6/0x3470 [ 610.107668][ C1] ? tcp_validate_incoming+0xf37/0x22b0 [ 610.113206][ C1] ? tcp_rcv_established+0x7e1/0x1d70 [ 610.118571][ C1] ? tcp_v4_do_rcv+0x6d3/0xba0 [ 610.123324][ C1] ? tcp_v4_rcv+0x2358/0x2a60 [ 610.127992][ C1] ? ip_protocol_deliver_rcu+0x20a/0x3f0 [ 610.133614][ C1] ? ip_local_deliver_finish+0x2c3/0x510 [ 610.139236][ C1] ? NF_HOOK+0x32d/0x3b0 [ 610.143491][ C1] ? ip_sublist_rcv+0xa36/0xd60 [ 610.148337][ C1] ? ip_list_rcv+0x3ed/0x440 [ 610.152916][ C1] ? __netif_receive_skb_list_core+0x2d9/0x770 [ 610.159062][ C1] ? netif_receive_skb_list_internal+0x943/0xca0 [ 610.165387][ C1] ? napi_gro_receive+0x553/0xaf0 [ 610.170469][ C1] ? receive_buf+0x20ab/0x3660 [ 610.175227][ C1] ? virtnet_poll+0x69e/0x1300 [ 610.179983][ C1] ? __napi_poll+0xbb/0x460 [ 610.184476][ C1] ? net_rx_action+0x65f/0xcc0 [ 610.189230][ C1] ? handle_softirqs+0x27d/0x820 [ 610.194187][ C1] ? kfence_guarded_free+0x38d/0x4b0 [ 610.199472][ C1] ? kmem_cache_free+0xf8/0x290 [ 610.204316][ C1] kasan_save_free_info+0x28/0x40 [ 610.209337][ C1] ____kasan_slab_free+0x126/0x1f0 [ 610.214445][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 610.219898][ C1] ? dev_kfree_skb_any_reason+0x120/0x130 [ 610.225612][ C1] kmem_cache_free+0xf8/0x290 [ 610.230288][ C1] dev_kfree_skb_any_reason+0x120/0x130 [ 610.236262][ C1] ? refcount_dec_and_test+0x70/0x70 [ 610.241550][ C1] free_old_xmit_skbs+0x11a/0x3b0 [ 610.246569][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 610.253761][ C1] ? virtqueue_napi_schedule+0x40/0x40 [ 610.259218][ C1] start_xmit+0x16d/0x1470 [ 610.263626][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.269788][ C1] dev_hard_start_xmit+0x269/0x790 [ 610.274905][ C1] sch_direct_xmit+0x251/0x4a0 [ 610.279664][ C1] ? do_raw_spin_lock+0x2b0/0x2b0 [ 610.284684][ C1] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 610.290667][ C1] __dev_queue_xmit+0x162a/0x3630 [ 610.295690][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 610.300796][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.306945][ C1] ? skb_push+0x8e/0xe0 [ 610.311101][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 610.316381][ C1] ? __asan_memcpy+0x40/0x70 [ 610.320968][ C1] ? eth_header+0x11b/0x200 [ 610.325463][ C1] ? llc_sysctl_exit+0x70/0x70 [ 610.330223][ C1] ? neigh_resolve_output+0x5f5/0x710 [ 610.335676][ C1] ? ip_finish_output2+0x45a/0x1260 [ 610.340867][ C1] ip_finish_output2+0xd97/0x1260 [ 610.345890][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.352037][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 610.357234][ C1] ? ip_fragment+0x210/0x210 [ 610.361829][ C1] ? ip_finish_output+0x3ec/0x4c0 [ 610.366847][ C1] ? ip_finish_output2+0x5/0x1260 [ 610.371865][ C1] ip_output+0x2a5/0x3a0 [ 610.376100][ C1] ? ip_output+0x5a/0x3a0 [ 610.380427][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 610.385358][ C1] __ip_queue_xmit+0x1056/0x1960 [ 610.390292][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 610.395221][ C1] __tcp_transmit_skb+0x1dd6/0x3470 [ 610.400432][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 610.405281][ C1] ? __alloc_skb+0x1b2/0x2c0 [ 610.409868][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 610.414716][ C1] tcp_validate_incoming+0xf37/0x22b0 [ 610.420095][ C1] tcp_rcv_established+0x7e1/0x1d70 [ 610.425291][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 610.430313][ C1] ? tcp_check_space+0xa80/0xa80 [ 610.435245][ C1] ? rt_is_expired+0x1c/0x2d0 [ 610.439990][ C1] ? rt_is_expired+0x250/0x2d0 [ 610.444842][ C1] tcp_v4_do_rcv+0x6d3/0xba0 [ 610.449435][ C1] tcp_v4_rcv+0x2358/0x2a60 [ 610.453954][ C1] ? tcp_filter+0x90/0x90 [ 610.458282][ C1] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 610.463736][ C1] ? ip_local_deliver_finish+0x1c2/0x510 [ 610.469367][ C1] ip_local_deliver_finish+0x2c3/0x510 [ 610.474823][ C1] NF_HOOK+0x32d/0x3b0 [ 610.478886][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 610.483120][ C1] ? NF_HOOK+0x9f/0x3b0 [ 610.487262][ C1] ? ip_local_deliver+0x180/0x180 [ 610.492281][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 610.496522][ C1] ? ip_local_deliver+0x10b/0x180 [ 610.501541][ C1] ip_sublist_rcv+0xa36/0xd60 [ 610.506211][ C1] ? packet_rcv+0x15b/0x1410 [ 610.510842][ C1] ? ip_list_rcv+0x440/0x440 [ 610.515421][ C1] ? __netif_receive_skb_core+0x3326/0x3ab0 [ 610.521313][ C1] ? ip_rcv_core+0xd80/0xd80 [ 610.525893][ C1] ? ip_rcv_core+0x898/0xd80 [ 610.530489][ C1] ip_list_rcv+0x3ed/0x440 [ 610.534906][ C1] ? ip_rcv_finish+0x250/0x250 [ 610.539665][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 610.545639][ C1] ? ip_rcv_finish+0x250/0x250 [ 610.550394][ C1] __netif_receive_skb_list_core+0x2d9/0x770 [ 610.556377][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 610.560971][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 610.567128][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 610.573456][ C1] ? netif_receive_skb_core+0x230/0x230 [ 610.579002][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.585157][ C1] ? napi_gro_receive+0x546/0xaf0 [ 610.590177][ C1] napi_gro_receive+0x553/0xaf0 [ 610.595024][ C1] receive_buf+0x20ab/0x3660 [ 610.599610][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 610.604810][ C1] ? virtnet_poll_tx+0x530/0x530 [ 610.609751][ C1] virtnet_poll+0x69e/0x1300 [ 610.614339][ C1] ? refill_work+0x220/0x220 [ 610.618919][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 610.624115][ C1] ? free_unref_page+0x190/0x2e0 [ 610.629049][ C1] ? skb_release_data+0x665/0x7f0 [ 610.634070][ C1] __napi_poll+0xbb/0x460 [ 610.638393][ C1] net_rx_action+0x65f/0xcc0 [ 610.643074][ C1] ? net_tx_action+0x950/0x950 [ 610.647829][ C1] ? detach_timer+0x2b0/0x2b0 [ 610.652494][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 610.658465][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 610.663748][ C1] ? lock_chain_count+0x20/0x20 [ 610.668601][ C1] handle_softirqs+0x27d/0x820 [ 610.673354][ C1] ? read_tsc+0x9/0x20 [ 610.677413][ C1] ? ktime_get+0x24b/0x280 [ 610.681831][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 610.686588][ C1] ? do_softirq+0x1a0/0x1a0 [ 610.691087][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 610.696286][ C1] __irq_exit_rcu+0xd3/0x190 [ 610.700869][ C1] ? irq_exit_rcu+0x20/0x20 [ 610.705375][ C1] irq_exit_rcu+0x9/0x20 [ 610.709607][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 610.715234][ C1] [ 610.718158][ C1] [ 610.721081][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.727053][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 610.732937][ C1] Code: 75 11 e8 0c 10 0b 00 48 85 db 75 16 e8 02 10 0b 00 eb 15 e8 fb 0f 0b 00 e8 06 f8 12 09 48 85 db 74 ea e8 ec 0f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 610.752536][ C1] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00000246 [ 610.758598][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 610.766563][ C1] RDX: ffffc9000ba81000 RSI: 00000000000030bf RDI: 00000000000030c0 [ 610.774523][ C1] RBP: ffffc90000bbfad0 R08: ffffffff911ee5ff R09: 1ffffffff223dcbf [ 610.782483][ C1] R10: dffffc0000000000 R11: fffffbfff223dcc0 R12: 1ffff92000177f44 [ 610.790446][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000177f65 [ 610.798426][ C1] ? event_function+0x300/0x300 [ 610.803279][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 610.808995][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 610.814721][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 610.819915][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 610.825630][ C1] smp_call_function_single+0x36d/0x5a0 [ 610.831172][ C1] ? event_function+0x300/0x300 [ 610.836015][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 610.842159][ C1] ? event_function+0x300/0x300 [ 610.847009][ C1] perf_install_in_context+0x5bb/0x920 [ 610.852467][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 610.857570][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 610.863544][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 610.868746][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 610.873966][ C1] ? perf_event__header_size+0x165/0x220 [ 610.879619][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 610.885365][ C1] ? bpf_prog_test_run+0x2f/0x390 [ 610.890413][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 610.896052][ C1] ? lock_chain_count+0x20/0x20 [ 610.900905][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 610.906104][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 610.911733][ C1] do_syscall_64+0x55/0xb0 [ 610.916142][ C1] ? clear_bhb_loop+0x40/0x90 [ 610.920811][ C1] ? clear_bhb_loop+0x40/0x90 [ 610.925483][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.931368][ C1] RIP: 0033:0x7fc43a19e0d9 [ 610.935777][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.955380][ C1] RSP: 002b:00007fc43b08a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 610.963794][ C1] RAX: ffffffffffffffda RBX: 00007fc43a425fa0 RCX: 00007fc43a19e0d9 [ 610.971757][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 610.979718][ C1] RBP: 00007fc43a235024 R08: 0000000000000000 R09: 0000000000000000 [ 610.987681][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 610.995648][ C1] R13: 00007fc43a426038 R14: 00007fc43a425fa0 R15: 00007ffecef9d1e8 [ 611.003628][ C1]