last executing test programs: 29.208018391s ago: executing program 2 (id=1845): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) close(r1) r7 = gettid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, r7, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) 29.092118914s ago: executing program 1 (id=1847): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a094, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, 0x0, 0x1, 0x71, &(0x7f0000000200)=""/113, 0x41000, 0x49, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xe, 0x3}, 0x10, 0x15aa3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1600000000000000040000007fffffff00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002400000000000000000063393294ebfa5ebda27d1813fad0477b5648e1016e4756f8dc0a7b598511313dac04365af0df62d162397e787c1c95ea953e6790f7b92d0dfe9e2bca4c57e6cc8e047b358c51c72c04eaacafe91dadd6fed87bb66ffd1bfcaed6677e2fabee921f7633a8172dabe11dd112dac12ca49290e3376ff8dd98d87f6c1dd2d5a8d2315e26e466876ba2c687d9daa7c144524bb2d7384ba97001036ee293c924eea7ee2fbd"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r3) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x20000880) socket$kcm(0x11, 0x3, 0x0) 28.958262258s ago: executing program 0 (id=1849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xf1, 0x71, 0x10, 0x1d, 0x6c000000}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 28.956997208s ago: executing program 2 (id=1851): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10001, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) (fail_nth: 94) 28.839129942s ago: executing program 0 (id=1852): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x48000) sendmsg$kcm(r0, 0x0, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000002380)={&(0x7f0000001e40)=@abs={0x1, 0x0, 0x3ff}, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x4004810}, 0x20000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080000000000000007040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:* {'], 0xa) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0, 0xffff934c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xbdc}, 0x94) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x8000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 28.821373222s ago: executing program 2 (id=1853): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000003ac0)=""/4108, 0x100c}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x7}, 0x20) write$cgroup_subtree(r5, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) r8 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x9) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r11 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r11, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000c00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 28.740773785s ago: executing program 1 (id=1854): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xb, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x8428, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110a8d5550860010000000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/200, 0x43, 0xc8, 0x1, 0x1c0}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305828, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x8, 0xe, 0x4, 0x10008, r2, 0x3, '\x00', 0x0, r5, 0x1, 0x4, 0x3, 0x0, @void, @value, @value=r6}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000000c0), &(0x7f00000002c0)=r3}, 0x20) close(r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20) socketpair(0x8, 0x800, 0x2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)}, 0x26002090) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x8, 0x1, 0x7, 0x2095, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0xc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000640), 0x1003, r9}, 0x38) 28.649807757s ago: executing program 0 (id=1855): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020200f00000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b30, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @multicast2}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="cca39bcffb44e1dd9b2851110d010000a6dbc3a937", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES32=r3], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.970578068s ago: executing program 3 (id=1857): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x17, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 27.764130554s ago: executing program 2 (id=1858): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) (fail_nth: 42) 27.684537307s ago: executing program 1 (id=1859): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000012080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 27.684065557s ago: executing program 3 (id=1860): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) close(r1) r7 = gettid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, r7, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) 27.668013347s ago: executing program 0 (id=1861): r0 = gettid() r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x8b, 0x43, 0x0, 0x1, 0x441, 0x9a5b394a48e718, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x1, 0x0, 0x1, 0x5, 0xffffffc0, 0x3, 0x0, 0x75, 0x0, 0x8}, r0, 0x10, r1, 0x0) r3 = gettid() r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x6, 0x54, &(0x7f0000000200)=""/84, 0x0, 0xc, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)="f4fa7b3e769ae8e5d39745685b6d82c04d7197ed82427ba26deac20fcba59e19a9e1b255240122593001513ebe32a314611feaed6090cb496c88446978c8a070c78b5e43dc14a619bc6782ff3e34c16af1b53d046e09b859a33207c888a10744655d8c50cdfc266e87f5a88924dfa8353448cc509cdae0eb76ed97b73403be207cf09d489ecd01a08021c7cd", 0x8c}, {&(0x7f00000005c0)="7bf1d336422f4ddacd5fae4c4fbf19635ae41d150b78224644f8f3f69c12818182f89f4349ab65fa422f0ca3c4bd25e9e5c7ea217831a4947123f7dc2b2acee3b5ed353149918b7e4e83bb69b512abdc7e13dce8e609b9eeec", 0x59}], 0x2, 0x0, 0x0, 0x40}, 0x20000000) r7 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x4e, 0xff, 0x2, 0x3, 0x0, 0x9, 0x8001, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8816, 0x4, 0x9, 0x1, 0x7, 0x3, 0x6, 0x0, 0x421, 0x0, 0x1}, r3, 0xe, r2, 0xa) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000780)={r8}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x6, 0xe, 0x3, 0x18208, r1, 0xc65, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x8, @value=r10, @void, @value=r11}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x20, &(0x7f00000009c0)={&(0x7f00000008c0)=""/146, 0x92, 0x0, &(0x7f0000000980)=""/44, 0x2c}}, 0x10) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x1ff, 0xa3, &(0x7f0000000b40)=""/163, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x4, 0x2, 0x2, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000dc0)={r13, r1}, 0xc) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x50001, 0x0) ioctl$TUNGETVNETLE(r14, 0x800454dd, &(0x7f0000000e40)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000e80)={'veth0_vlan\x00', 0x1000}) perf_event_open$cgroup(&(0x7f0000000f00)={0x1, 0x80, 0x92, 0x5, 0x10, 0x2, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000ec0), 0x5}, 0x10000, 0x5, 0x6, 0xc, 0x2, 0x2, 0x2, 0x0, 0x105, 0x0, 0x96}, r1, 0x5, r7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000012c0)={'rose0\x00', 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r13, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001580)=[0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0], 0x0, 0xf3, &(0x7f0000001600)=[{}], 0x8, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0xa4, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001880)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r5, r10, 0x3, 0x2}, 0x50) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x1d, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x3, 0x3, 0x8, 0x2, 0xc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x0, 0x3, 0x6, 0x2, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000001400)='syzkaller\x00', 0x5, 0xc7, &(0x7f0000001440)=""/199, 0x41100, 0x18, '\x00', r15, 0x0, r10, 0x8, &(0x7f0000001840)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001900)=[r12, r4, r16, r4, r1, r8, r4, r12], &(0x7f0000001940)=[{0x1, 0x4, 0xa, 0x4}, {0x2, 0x0, 0xe, 0x3}], 0x10, 0x3}, 0x94) r18 = openat$cgroup_type(r17, &(0x7f0000001bc0), 0x2, 0x0) sendmsg$unix(r9, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)="8ddd46d80e91fa51a1497b509bfa5751833a", 0x12}, {&(0x7f0000001a80)="5106211d6f38f3860858c2c9126204dd7be4e602135f61184572babb4c5b38604bc4fdb526f070e095d620b6ad49717b0706c009803aec9b6b2f6bf7ac5913b72d4e0ace19e58c6742c75ac4983de36b41a451beabf1d33ecdc3f5c62be94fc224c04e76c95da40609e5c674cc4a66761a02a7b72b43cea58687649c2b3282df82996b16232d1dc31f8e387c28d9f1cac9cf34564bdd6e0a64886b7303277c2a3a3fc21857f7fdd1fc6dedbddb1edde5d71def840fe007dc86caacacdd456e934c96df486a8fee7cc6d3d37d72b451d38471c3fc9da2bd1432fdf0e3c1ac8b8b8c360605a3b1ed94768c58", 0xeb}], 0x2, &(0x7f0000001d40)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x1c, 0x1, 0x1, [r18, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x24044001}, 0x20000050) 27.615643159s ago: executing program 2 (id=1862): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000f00000e000a001000000002900000121f", 0x2e}], 0x1}, 0x2000c084) 27.539337431s ago: executing program 1 (id=1863): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x48000) sendmsg$kcm(r0, 0x0, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000002380)={&(0x7f0000001e40)=@abs={0x1, 0x0, 0x3ff}, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x4004810}, 0x20000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080000000000000007040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:* {'], 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0, 0xffff934c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xbdc}, 0x94) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r9) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x8000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 27.538004371s ago: executing program 3 (id=1864): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x6, 0x12}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000700)) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r7) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d009c2d422dd25d930e00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="ac0f9d", 0x3}], 0x1}, 0x4000810) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) 27.443537864s ago: executing program 0 (id=1865): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf1, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x50) 27.418054795s ago: executing program 2 (id=1866): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000000085000000c4000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000003ac0)=""/4108, 0x100c}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x7}, 0x20) write$cgroup_subtree(r5, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) r8 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x9) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r11 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r11, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000c00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 27.299643219s ago: executing program 1 (id=1867): socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYBLOB, @ANYBLOB='\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xa0}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 27.189455452s ago: executing program 3 (id=1868): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0xc00000000000000) 27.189057082s ago: executing program 0 (id=1869): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf15b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x3}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}], &(0x7f0000000100)='GPL\x00', 0x5, 0x11, &(0x7f00000001c0)=""/17, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xe, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x3, 0x4, 0x4, 0x5}, {0x3, 0x3, 0xa, 0xb}, {0x0, 0x5, 0x3, 0xa}, {0x1, 0x2, 0x5, 0x6}], 0x10, 0x1c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x1e, 0x1, 0x35, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000002a0d17dc0260000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002140)=r6, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r6, 0xffffffffffffffff, 0x1e, 0x1, r1, @void, @value, @void, @void, r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a131, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x2, @perf_config_ext={0x5, 0x54}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x3, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYBLOB="3e0002"], 0x9a) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) recvmsg$unix(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000840)=""/21, 0x15}, {&(0x7f0000000980)=""/94, 0x5e}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/95, 0x5f}], 0x6, &(0x7f0000001bc0)=[@cred={{0x1c}}], 0x20}, 0x100) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002100)={r3, 0x20, &(0x7f00000020c0)={&(0x7f0000000900)=""/62, 0x3e, 0x0, &(0x7f0000002040)=""/114, 0x72}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x1f, 0x18, &(0x7f0000001c40)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000b300000095", @ANYRES32=r12, @ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000e4ffffffb702000008000000b7030000030000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX, @ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="0500000028cc000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 27.131706463s ago: executing program 1 (id=1870): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfdef) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)="e53dc20482215df3b798668c8cefbb56de9737b1633b77333d9d07eb1a1d5135aae2e5537bc35b49762c4ee7b3e7ad5506f4ae5aa6a0bb65c681195099c3a4cc0ac9adc7733215045cd5b1c3a9a629fa8a51079595d25c0b", 0x58}, {&(0x7f00000005c0)="8e8ed9c71d27087f205c054c8c9411a6051a1e8b98f095b6d88e9b0d5ee2b903cc4d1afd4287f4a0c5c163540510be0c954de148b2e4a13eccdd84f4d4838c3c34f90665", 0x44}, {&(0x7f0000000640)="ac0beb9e8b55be8eec4c35e8abf2ee78650d8a52a968241950aaa7549d0569457cc055abb92e6ef8665834ddf267efe3785ee924f1062e4616ee59a998c77f5f231d33ad607b7383aa7379078f9665a80f95d02bfd18d0c8dcb6f7b1e5543d6c933147a1b3a16985f9016eebd676f546bed00c5740a0ff2bdc1ebb1a3ed890fbfc2d410f2e6547eab61372544767a299be62cf3cda3908324d5a2ee61fdaf08800e3014875c26d4387f0a805fe2c4a0c9ede9c1ba66dc4d22f3665ee90e2e310d31e5286adbed6d4101d1e1436c20b55a0456563ccfadc40e37dfa7e3ceb4fe04c3f092d0a1ed10922c0adc5f01f08a0335ad34f7423854c42b709ef1d59", 0xfe}, {&(0x7f0000000780)="3cf599f75df32d7765286be396a1899b9f56", 0x12}, {&(0x7f00000007c0)="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", 0xfd}], 0x5, 0x0, 0x0, 0x39c}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x82c, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) 26.668916058s ago: executing program 3 (id=1871): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xb, 0x8, 0xb, 0xfb, 0x0, 0x1, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x2, @perf_bp={0x0, 0x1}, 0x2008, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0xc}, r0, 0x0, 0xffffffffffffffff, 0x2) 23.891924993s ago: executing program 3 (id=1872): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) close(r1) r7 = gettid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, r7, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) 0s ago: executing program 32 (id=1869): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf15b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x3}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}], &(0x7f0000000100)='GPL\x00', 0x5, 0x11, &(0x7f00000001c0)=""/17, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xe, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x3, 0x4, 0x4, 0x5}, {0x3, 0x3, 0xa, 0xb}, {0x0, 0x5, 0x3, 0xa}, {0x1, 0x2, 0x5, 0x6}], 0x10, 0x1c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x1e, 0x1, 0x35, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000002a0d17dc0260000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002140)=r6, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r6, 0xffffffffffffffff, 0x1e, 0x1, r1, @void, @value, @void, @void, r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a131, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x2, @perf_config_ext={0x5, 0x54}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x3, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYBLOB="3e0002"], 0x9a) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) recvmsg$unix(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000840)=""/21, 0x15}, {&(0x7f0000000980)=""/94, 0x5e}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/95, 0x5f}], 0x6, &(0x7f0000001bc0)=[@cred={{0x1c}}], 0x20}, 0x100) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002100)={r3, 0x20, &(0x7f00000020c0)={&(0x7f0000000900)=""/62, 0x3e, 0x0, &(0x7f0000002040)=""/114, 0x72}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x1f, 0x18, &(0x7f0000001c40)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000b300000095", @ANYRES32=r12, @ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000e4ffffffb702000008000000b7030000030000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX, @ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="0500000028cc000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.889'. [ 240.592685][ T8887] team0: Device wg1 is of different type [ 241.062478][ T8903] FAULT_INJECTION: forcing a failure. [ 241.062478][ T8903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.105443][ T8903] CPU: 1 PID: 8903 Comm: syz.0.907 Not tainted syzkaller #0 [ 241.112795][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.122864][ T8903] Call Trace: [ 241.126152][ T8903] [ 241.129089][ T8903] dump_stack_lvl+0x18c/0x250 [ 241.133787][ T8903] ? show_regs_print_info+0x20/0x20 [ 241.139002][ T8903] ? load_image+0x420/0x420 [ 241.143522][ T8903] ? __might_fault+0xaa/0x120 [ 241.148211][ T8903] ? __lock_acquire+0x7d40/0x7d40 [ 241.153255][ T8903] should_fail_ex+0x39d/0x4d0 [ 241.157955][ T8903] _copy_from_user+0x2f/0xe0 [ 241.162566][ T8903] csum_and_copy_from_iter+0x1f3/0x14a0 [ 241.168145][ T8903] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 241.173791][ T8903] ? __kmem_cache_alloc_node+0x13a/0x250 [ 241.179417][ T8903] ? __alloc_skb+0x138/0x2c0 [ 241.183989][ T8903] ? rcu_is_watching+0x15/0xb0 [ 241.188761][ T8903] ip_generic_getfrag+0x163/0x2f0 [ 241.193809][ T8903] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 241.198684][ T8903] ? skb_put+0x11b/0x210 [ 241.202951][ T8903] __ip_append_data+0x2e80/0x3b80 [ 241.208017][ T8903] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 241.212891][ T8903] ? ip_setup_cork+0x860/0x860 [ 241.217681][ T8903] ? ip_setup_cork+0x530/0x860 [ 241.222468][ T8903] ip_make_skb+0x22b/0x440 [ 241.226913][ T8903] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 241.231777][ T8903] ? ip_flush_pending_frames+0x250/0x250 [ 241.237435][ T8903] udp_sendmsg+0x1ade/0x23b0 [ 241.242054][ T8903] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 241.246922][ T8903] ? udp_cmsg_send+0x350/0x350 [ 241.251707][ T8903] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 241.257699][ T8903] ? lock_chain_count+0x20/0x20 [ 241.262558][ T8903] ? inet_sendmsg+0x14b/0x2f0 [ 241.267256][ T8903] ? __local_bh_enable_ip+0x13a/0x1c0 [ 241.272636][ T8903] ? _local_bh_enable+0xa0/0xa0 [ 241.277504][ T8903] ? inet_sendmsg+0x14b/0x2f0 [ 241.282198][ T8903] ? inet_sendmsg+0x14b/0x2f0 [ 241.286887][ T8903] ? inet_send_prepare+0x260/0x260 [ 241.292019][ T8903] ____sys_sendmsg+0x5ba/0x960 [ 241.296791][ T8903] ? __lock_acquire+0x7d40/0x7d40 [ 241.301836][ T8903] ? __sys_sendmsg_sock+0x30/0x30 [ 241.306871][ T8903] ? __import_iovec+0x5f2/0x850 [ 241.311753][ T8903] ? import_iovec+0x73/0xa0 [ 241.316325][ T8903] ___sys_sendmsg+0x2a6/0x360 [ 241.321015][ T8903] ? get_pid_task+0x20/0x1e0 [ 241.325628][ T8903] ? __sys_sendmsg+0x2a0/0x2a0 [ 241.330433][ T8903] ? __lock_acquire+0x7d40/0x7d40 [ 241.335501][ T8903] __se_sys_sendmsg+0x1c2/0x2b0 [ 241.340378][ T8903] ? __x64_sys_sendmsg+0x80/0x80 [ 241.345348][ T8903] ? lockdep_hardirqs_on+0x98/0x150 [ 241.350566][ T8903] do_syscall_64+0x55/0xb0 [ 241.354995][ T8903] ? clear_bhb_loop+0x40/0x90 [ 241.359695][ T8903] ? clear_bhb_loop+0x40/0x90 [ 241.364393][ T8903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.370302][ T8903] RIP: 0033:0x7f6ce819ce59 [ 241.374729][ T8903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.394356][ T8903] RSP: 002b:00007f6ce63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.402801][ T8903] RAX: ffffffffffffffda RBX: 00007f6ce8415fa0 RCX: 00007f6ce819ce59 [ 241.410797][ T8903] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 241.418794][ T8903] RBP: 00007f6ce63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.426777][ T8903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.434758][ T8903] R13: 00007f6ce8416038 R14: 00007f6ce8415fa0 R15: 00007ffcda1b9dc8 [ 241.442760][ T8903] [ 241.841781][ T8911] validate_nla: 7 callbacks suppressed [ 241.841799][ T8911] netlink: 'syz.3.910': attribute type 153 has an invalid length. [ 241.863742][ T8911] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 241.868961][ T8913] __nla_validate_parse: 11 callbacks suppressed [ 241.868977][ T8913] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.909'. [ 241.875050][ T8911] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.910'. [ 242.122681][ T8924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.916'. [ 242.766392][ T8948] netlink: 'syz.3.920': attribute type 153 has an invalid length. [ 242.797646][ T8948] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 242.833210][ T8948] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.920'. [ 242.960301][ T8954] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.919'. [ 242.974996][ T8954] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.919'. [ 243.003794][ T8954] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.919'. [ 243.041392][ T8944] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.919'. [ 243.182705][ T8944] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 243.240460][ T8944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.919'. [ 243.266891][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.925'. [ 243.306671][ T8966] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 243.333329][ T8966] team0: Device dummy0 is up. Set it down before adding it as a team port [ 243.359269][ T8969] netlink: 'syz.3.927': attribute type 8 has an invalid length. [ 243.395963][ T8969] netlink: 'syz.3.927': attribute type 9 has an invalid length. [ 243.403660][ T8969] netlink: 'syz.3.927': attribute type 10 has an invalid length. [ 243.444619][ T8969] netlink: 'syz.3.927': attribute type 11 has an invalid length. [ 246.892646][ T9075] validate_nla: 10 callbacks suppressed [ 246.892663][ T9075] netlink: 'syz.0.967': attribute type 153 has an invalid length. [ 246.933546][ T9075] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 246.943766][ T9075] __nla_validate_parse: 24 callbacks suppressed [ 246.943778][ T9075] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.967'. [ 247.146904][ T9084] netlink: 164 bytes leftover after parsing attributes in process `syz.3.970'. [ 247.323373][ T9092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.974'. [ 247.552316][ T9096] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.972'. [ 247.565030][ T9096] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.972'. [ 247.597823][ T9087] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.972'. [ 247.619610][ T9096] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.972'. [ 247.732503][ T9096] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 247.802684][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.972'. [ 247.836190][ T9106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'. [ 248.193126][ T9113] netlink: 'syz.2.980': attribute type 153 has an invalid length. [ 248.203766][ T9113] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 248.216973][ T9113] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.980'. [ 249.192864][ T9148] netlink: 'syz.2.993': attribute type 153 has an invalid length. [ 249.206907][ T9148] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 249.287768][ T9134] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 249.967032][ T9179] netlink: 'syz.3.1006': attribute type 153 has an invalid length. [ 249.982059][ T9179] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 250.107636][ T9184] bridge_slave_1: default FDB implementation only supports local addresses [ 251.181308][ T9211] tun0: tun_chr_ioctl cmd 1074025681 [ 251.531968][ T9216] FAULT_INJECTION: forcing a failure. [ 251.531968][ T9216] name failslab, interval 1, probability 0, space 0, times 0 [ 251.560450][ T9216] CPU: 1 PID: 9216 Comm: syz.1.1022 Not tainted syzkaller #0 [ 251.567886][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.577960][ T9216] Call Trace: [ 251.581246][ T9216] [ 251.584188][ T9216] dump_stack_lvl+0x18c/0x250 [ 251.588890][ T9216] ? show_regs_print_info+0x20/0x20 [ 251.594143][ T9216] ? load_image+0x420/0x420 [ 251.598667][ T9216] ? __might_sleep+0xe0/0xe0 [ 251.603275][ T9216] ? __lock_acquire+0x7d40/0x7d40 [ 251.608320][ T9216] should_fail_ex+0x39d/0x4d0 [ 251.613027][ T9216] should_failslab+0x9/0x20 [ 251.617565][ T9216] slab_pre_alloc_hook+0x59/0x310 [ 251.622613][ T9216] ? __lock_acquire+0x7d40/0x7d40 [ 251.627657][ T9216] kmem_cache_alloc_node+0x60/0x320 [ 251.632881][ T9216] ? __alloc_skb+0x103/0x2c0 [ 251.637499][ T9216] __alloc_skb+0x103/0x2c0 [ 251.641938][ T9216] netlink_sendmsg+0x66a/0xbf0 [ 251.646745][ T9216] ? netlink_getsockopt+0x590/0x590 [ 251.651964][ T9216] ? aa_sock_msg_perm+0x94/0x150 [ 251.656915][ T9216] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 251.662201][ T9216] ? security_socket_sendmsg+0x80/0xa0 [ 251.667656][ T9216] ? netlink_getsockopt+0x590/0x590 [ 251.672849][ T9216] ____sys_sendmsg+0x5ba/0x960 [ 251.677613][ T9216] ? __asan_memset+0x22/0x40 [ 251.682206][ T9216] ? __sys_sendmsg_sock+0x30/0x30 [ 251.687222][ T9216] ? __import_iovec+0x5f2/0x850 [ 251.692067][ T9216] ? import_iovec+0x73/0xa0 [ 251.696565][ T9216] ___sys_sendmsg+0x2a6/0x360 [ 251.701237][ T9216] ? __sys_sendmsg+0x2a0/0x2a0 [ 251.706012][ T9216] ? trace_call_bpf+0xc3/0x6c0 [ 251.710786][ T9216] __se_sys_sendmsg+0x1c2/0x2b0 [ 251.715724][ T9216] ? __x64_sys_sendmsg+0x80/0x80 [ 251.720666][ T9216] ? lockdep_hardirqs_on+0x98/0x150 [ 251.725861][ T9216] do_syscall_64+0x55/0xb0 [ 251.730268][ T9216] ? clear_bhb_loop+0x40/0x90 [ 251.734937][ T9216] ? clear_bhb_loop+0x40/0x90 [ 251.739612][ T9216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.745505][ T9216] RIP: 0033:0x7f799419ce59 [ 251.749914][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.769511][ T9216] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.777918][ T9216] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 251.785904][ T9216] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 251.793879][ T9216] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 251.801853][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.809823][ T9216] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 251.817814][ T9216] [ 251.972769][ T9222] validate_nla: 4 callbacks suppressed [ 251.972783][ T9222] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 251.988065][ T9222] geneve0: entered promiscuous mode [ 252.127615][ T9224] __nla_validate_parse: 20 callbacks suppressed [ 252.127633][ T9224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1024'. [ 252.348057][ T9234] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1026'. [ 252.366656][ T9234] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1026'. [ 252.379363][ T9229] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1026'. [ 252.390364][ T9238] netlink: 'syz.0.1029': attribute type 153 has an invalid length. [ 252.390386][ T9238] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 252.390398][ T9238] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1029'. [ 252.429160][ T9234] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1026'. [ 252.689569][ T9246] netlink: 'syz.2.1026': attribute type 10 has an invalid length. [ 252.703089][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1026'. [ 252.721096][ T9246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1026'. [ 253.179084][ T9256] netlink: 'syz.2.1034': attribute type 39 has an invalid length. [ 253.457557][ T9269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1040'. [ 253.696598][ T9273] netlink: 'syz.2.1041': attribute type 153 has an invalid length. [ 253.704861][ T9273] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 253.712615][ T9273] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1041'. [ 254.022973][ T9286] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 254.323761][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.334880][ T9292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.450620][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.467213][ T9292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.490923][ T9292] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 254.519254][ T9292] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 255.163148][ T9313] netlink: 'syz.3.1057': attribute type 153 has an invalid length. [ 255.195895][ T9313] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 255.942539][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.949409][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.433753][ T9348] bridge_slave_1: left allmulticast mode [ 256.443795][ T9348] bridge_slave_1: left promiscuous mode [ 256.450836][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.477224][ T9348] bridge_slave_0: left allmulticast mode [ 256.520836][ T9348] bridge_slave_0: left promiscuous mode [ 256.531629][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.151731][ T9363] validate_nla: 6 callbacks suppressed [ 257.151745][ T9363] netlink: 'syz.1.1072': attribute type 10 has an invalid length. [ 257.184616][ T9363] __nla_validate_parse: 22 callbacks suppressed [ 257.184631][ T9363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1072'. [ 257.211661][ T9368] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 257.226915][ T9368] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 257.265775][ T9363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1072'. [ 257.522940][ T9375] FAULT_INJECTION: forcing a failure. [ 257.522940][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.565315][ T9375] CPU: 1 PID: 9375 Comm: syz.3.1080 Not tainted syzkaller #0 [ 257.572772][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.582863][ T9375] Call Trace: [ 257.586167][ T9375] [ 257.589118][ T9375] dump_stack_lvl+0x18c/0x250 [ 257.593834][ T9375] ? show_regs_print_info+0x20/0x20 [ 257.599065][ T9375] ? load_image+0x420/0x420 [ 257.603581][ T9375] ? __might_fault+0xaa/0x120 [ 257.608276][ T9375] should_fail_ex+0x39d/0x4d0 [ 257.612967][ T9375] copyin+0x1a/0x90 [ 257.616783][ T9375] _copy_from_iter+0x54f/0x12e0 [ 257.621641][ T9375] ? __virt_addr_valid+0x18c/0x540 [ 257.626770][ T9375] ? copyout_mc+0x70/0x70 [ 257.631102][ T9375] ? __virt_addr_valid+0x18c/0x540 [ 257.636227][ T9375] ? __virt_addr_valid+0x18c/0x540 [ 257.641341][ T9375] ? __virt_addr_valid+0x469/0x540 [ 257.646457][ T9375] ? __check_object_size+0x506/0xa20 [ 257.651751][ T9375] netlink_sendmsg+0x76b/0xbf0 [ 257.656524][ T9375] ? perf_trace_lock+0x304/0x3b0 [ 257.661469][ T9375] ? netlink_getsockopt+0x590/0x590 [ 257.666676][ T9375] ? aa_sock_msg_perm+0x94/0x150 [ 257.671617][ T9375] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 257.676913][ T9375] ? security_socket_sendmsg+0x80/0xa0 [ 257.682376][ T9375] ? netlink_getsockopt+0x590/0x590 [ 257.687589][ T9375] ____sys_sendmsg+0x5ba/0x960 [ 257.692365][ T9375] ? __asan_memset+0x22/0x40 [ 257.696958][ T9375] ? __sys_sendmsg_sock+0x30/0x30 [ 257.701982][ T9375] ? __import_iovec+0x3fa/0x850 [ 257.706843][ T9375] ? import_iovec+0x73/0xa0 [ 257.711356][ T9375] ___sys_sendmsg+0x2a6/0x360 [ 257.716044][ T9375] ? __sys_sendmsg+0x2a0/0x2a0 [ 257.720837][ T9375] ? __lock_acquire+0x7d40/0x7d40 [ 257.725900][ T9375] __se_sys_sendmsg+0x1c2/0x2b0 [ 257.730757][ T9375] ? __x64_sys_sendmsg+0x80/0x80 [ 257.735729][ T9375] ? lockdep_hardirqs_on+0x98/0x150 [ 257.740935][ T9375] do_syscall_64+0x55/0xb0 [ 257.745355][ T9375] ? clear_bhb_loop+0x40/0x90 [ 257.750034][ T9375] ? clear_bhb_loop+0x40/0x90 [ 257.754805][ T9375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.760702][ T9375] RIP: 0033:0x7f6c0a59ce59 [ 257.765127][ T9375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.784737][ T9375] RSP: 002b:00007f6c0b3e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.793154][ T9375] RAX: ffffffffffffffda RBX: 00007f6c0a815fa0 RCX: 00007f6c0a59ce59 [ 257.801124][ T9375] RDX: 0000000010049014 RSI: 0000200000000140 RDI: 0000000000000003 [ 257.809192][ T9375] RBP: 00007f6c0b3e2090 R08: 0000000000000000 R09: 0000000000000000 [ 257.817182][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.825151][ T9375] R13: 00007f6c0a816038 R14: 00007f6c0a815fa0 R15: 00007ffe2bad20f8 [ 257.833144][ T9375] [ 257.908467][ T9379] netlink: 'syz.1.1082': attribute type 153 has an invalid length. [ 257.916558][ T9379] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 257.924305][ T9379] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1082'. [ 258.021294][ T9385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1084'. [ 258.171236][ T9388] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 258.234764][ T9390] netlink: 'syz.1.1086': attribute type 2 has an invalid length. [ 258.251075][ T9390] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1086'. [ 258.353895][ T9394] netlink: 'syz.3.1087': attribute type 8 has an invalid length. [ 258.369574][ T9398] FAULT_INJECTION: forcing a failure. [ 258.369574][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 258.387906][ T9398] CPU: 0 PID: 9398 Comm: syz.1.1089 Not tainted syzkaller #0 [ 258.393942][ T9394] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1087'. [ 258.395299][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.395343][ T9398] Call Trace: [ 258.395351][ T9398] [ 258.395358][ T9398] dump_stack_lvl+0x18c/0x250 [ 258.395386][ T9398] ? show_regs_print_info+0x20/0x20 [ 258.395406][ T9398] ? load_image+0x420/0x420 [ 258.395426][ T9398] ? verify_lock_unused+0x140/0x140 [ 258.395445][ T9398] ? __lock_acquire+0x1273/0x7d40 [ 258.395468][ T9398] should_fail_ex+0x39d/0x4d0 [ 258.395496][ T9398] should_failslab+0x9/0x20 [ 258.395518][ T9398] slab_pre_alloc_hook+0x59/0x310 [ 258.395547][ T9398] kmem_cache_alloc_node+0x60/0x320 [ 258.395569][ T9398] ? __alloc_skb+0x103/0x2c0 [ 258.395594][ T9398] __alloc_skb+0x103/0x2c0 [ 258.395615][ T9398] _sctp_make_chunk+0x5e/0x420 [ 258.478770][ T9398] sctp_make_init+0x5f3/0xfc0 [ 258.483478][ T9398] ? sctp_addto_chunk+0x230/0x230 [ 258.488503][ T9398] ? kernel_text_address+0xa0/0xd0 [ 258.493612][ T9398] ? __kernel_text_address+0xd/0x30 [ 258.498814][ T9398] ? stack_trace_save+0x100/0x100 [ 258.503840][ T9398] ? arch_stack_walk+0x160/0x190 [ 258.508778][ T9398] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 258.513803][ T9398] sctp_do_sm+0x23a/0x5a60 [ 258.518227][ T9398] ? sctp_cname+0x110/0x110 [ 258.522725][ T9398] ? __stack_depot_save+0x1f/0x630 [ 258.527832][ T9398] ? kasan_set_track+0x4e/0x70 [ 258.532586][ T9398] ? __kasan_kmalloc+0x8f/0xa0 [ 258.537339][ T9398] ? sctp_stream_init_ext+0x57/0x170 [ 258.542616][ T9398] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 258.548155][ T9398] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 258.554048][ T9398] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 258.559064][ T9398] ? do_syscall_64+0x55/0xb0 [ 258.563650][ T9398] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.569738][ T9398] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 258.575541][ T9398] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 258.580911][ T9398] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 258.586282][ T9398] ? __asan_memcpy+0x40/0x70 [ 258.590869][ T9398] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 258.596282][ T9398] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 258.602084][ T9398] ? __sctp_connect+0xd80/0xd80 [ 258.606937][ T9398] ? __local_bh_enable_ip+0x13a/0x1c0 [ 258.612302][ T9398] ? _local_bh_enable+0xa0/0xa0 [ 258.617143][ T9398] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 258.622946][ T9398] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 258.628747][ T9398] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 258.634286][ T9398] ? security_sctp_bind_connect+0x89/0xb0 [ 258.640003][ T9398] sctp_sendmsg+0x1bd2/0x2910 [ 258.644685][ T9398] ? sctp_getsockopt+0xb60/0xb60 [ 258.649618][ T9398] ? aa_sk_perm+0x83c/0x970 [ 258.654122][ T9398] ? aa_af_perm+0x330/0x330 [ 258.658615][ T9398] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 258.665026][ T9398] ? sock_rps_record_flow+0x19/0x3f0 [ 258.670308][ T9398] ? inet_sendmsg+0x7c/0x2f0 [ 258.674903][ T9398] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 258.680181][ T9398] ? security_socket_sendmsg+0x80/0xa0 [ 258.685630][ T9398] ? inet_send_prepare+0x260/0x260 [ 258.690737][ T9398] ____sys_sendmsg+0x5ba/0x960 [ 258.695509][ T9398] ? __lock_acquire+0x7d40/0x7d40 [ 258.700533][ T9398] ? __asan_memset+0x22/0x40 [ 258.705117][ T9398] ? __sys_sendmsg_sock+0x30/0x30 [ 258.710133][ T9398] ? __import_iovec+0x5f2/0x850 [ 258.714980][ T9398] ? import_iovec+0x73/0xa0 [ 258.719477][ T9398] ___sys_sendmsg+0x2a6/0x360 [ 258.724149][ T9398] ? get_pid_task+0x20/0x1e0 [ 258.728738][ T9398] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.733506][ T9398] ? __lock_acquire+0x7d40/0x7d40 [ 258.738541][ T9398] __se_sys_sendmsg+0x1c2/0x2b0 [ 258.743395][ T9398] ? __x64_sys_sendmsg+0x80/0x80 [ 258.748342][ T9398] ? lockdep_hardirqs_on+0x98/0x150 [ 258.753538][ T9398] do_syscall_64+0x55/0xb0 [ 258.757944][ T9398] ? clear_bhb_loop+0x40/0x90 [ 258.762616][ T9398] ? clear_bhb_loop+0x40/0x90 [ 258.767288][ T9398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.773176][ T9398] RIP: 0033:0x7f799419ce59 [ 258.777587][ T9398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.797362][ T9398] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.805769][ T9398] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 258.813734][ T9398] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 258.821695][ T9398] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 258.829662][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.837626][ T9398] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 258.845615][ T9398] [ 259.210318][ T9405] netlink: 'syz.3.1093': attribute type 153 has an invalid length. [ 259.272717][ T9405] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 259.300218][ T9405] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1093'. [ 259.327565][ T9410] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1090'. [ 259.397922][ T9410] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1090'. [ 259.440416][ T9416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1095'. [ 259.739780][ T9418] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 260.510477][ T9446] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 260.981530][ T9459] macvlan0: entered promiscuous mode [ 261.013219][ T9459] macvlan0: entered allmulticast mode [ 261.069529][ T9459] veth1_vlan: entered allmulticast mode [ 261.085732][ T9461] bridge_slave_1: default FDB implementation only supports local addresses [ 261.181431][ T9463] hsr0: entered promiscuous mode [ 261.749943][ T9477] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 262.205370][ T9491] veth1_macvtap: left promiscuous mode [ 262.294198][ T9498] validate_nla: 8 callbacks suppressed [ 262.294216][ T9498] netlink: 'syz.3.1125': attribute type 153 has an invalid length. [ 262.295635][ T9491] __nla_validate_parse: 17 callbacks suppressed [ 262.295675][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 262.300518][ T9498] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 262.345499][ T9498] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1125'. [ 262.433061][ T9500] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1124'. [ 262.457309][ T9500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.646950][ T9510] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1127'. [ 262.659705][ T9510] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1127'. [ 262.669930][ T9508] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1127'. [ 262.684971][ T9510] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1127'. [ 262.880250][ T9511] netlink: 'syz.0.1127': attribute type 10 has an invalid length. [ 262.888462][ T9511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'. [ 262.905294][ T9511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'. [ 263.400171][ T9513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1128'. [ 263.598952][ T9519] netlink: 'syz.3.1131': attribute type 10 has an invalid length. [ 263.632017][ T9519] bridge_slave_1: left allmulticast mode [ 263.645105][ T9519] bridge_slave_1: left promiscuous mode [ 263.664914][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.728758][ T9525] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 264.009558][ T9536] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 264.233990][ T9542] netlink: 'syz.2.1139': attribute type 153 has an invalid length. [ 264.252504][ T9542] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 264.351398][ T9544] netlink: 'syz.3.1137': attribute type 10 has an invalid length. [ 264.369267][ T9544] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 264.835357][ C0] dccp_invalid_packet: invalid packet type [ 264.842095][ C0] dccp_invalid_packet: invalid packet type [ 264.848389][ C0] dccp_invalid_packet: invalid packet type [ 264.854800][ C0] dccp_invalid_packet: invalid packet type [ 264.860818][ C0] dccp_invalid_packet: invalid packet type [ 264.871904][ C0] dccp_invalid_packet: invalid packet type [ 265.181017][ T9569] netlink: 'syz.0.1150': attribute type 153 has an invalid length. [ 265.203000][ T9569] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 265.599191][ T9585] team0: Port device dummy0 added [ 265.802191][ T9592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.810404][ T9592] IPv6: NLM_F_CREATE should be set when creating new route [ 265.820662][ T9592] IPv6: NLM_F_CREATE should be set when creating new route [ 265.828350][ T9592] IPv6: NLM_F_CREATE should be set when creating new route [ 267.296536][ T9617] delete_channel: no stack [ 267.383469][ T9610] __nla_validate_parse: 21 callbacks suppressed [ 267.383486][ T9610] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1165'. [ 267.410718][ T9610] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1165'. [ 267.423188][ T9607] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1165'. [ 267.455883][ T9639] validate_nla: 6 callbacks suppressed [ 267.455897][ T9639] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 267.539674][ T9610] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1165'. [ 267.589291][ T9612] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 267.604814][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1165'. [ 267.626225][ T9641] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1174'. [ 267.634992][ T9612] net_ratelimit: 256 callbacks suppressed [ 267.635004][ T9612] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 267.709504][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1165'. [ 267.714805][ T9643] netlink: 'syz.1.1175': attribute type 153 has an invalid length. [ 267.754189][ T9643] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 267.775134][ T9643] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1175'. [ 267.792871][ T9646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 268.438018][ T9670] netlink: 'syz.3.1187': attribute type 153 has an invalid length. [ 268.486986][ T9670] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 268.534776][ T9670] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1187'. [ 269.209417][ T9686] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 269.223567][ T9686] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 269.706757][ T9695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.078977][ T9708] netlink: 'syz.1.1200': attribute type 153 has an invalid length. [ 270.094048][ T9708] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 270.138220][ T9715] netlink: 'syz.0.1189': attribute type 10 has an invalid length. [ 272.459409][ T9755] __nla_validate_parse: 15 callbacks suppressed [ 272.459430][ T9755] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1212'. [ 272.479624][ T9755] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1212'. [ 272.494418][ T9744] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1212'. [ 272.535456][ T9755] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1212'. [ 272.706568][ T9763] FAULT_INJECTION: forcing a failure. [ 272.706568][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.723484][ T9763] CPU: 1 PID: 9763 Comm: syz.0.1217 Not tainted syzkaller #0 [ 272.730911][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.740978][ T9763] Call Trace: [ 272.744266][ T9763] [ 272.747208][ T9763] dump_stack_lvl+0x18c/0x250 [ 272.751911][ T9763] ? show_regs_print_info+0x20/0x20 [ 272.757132][ T9763] ? load_image+0x420/0x420 [ 272.761665][ T9763] ? __lock_acquire+0x7d40/0x7d40 [ 272.766708][ T9763] ? snprintf+0xe9/0x140 [ 272.771032][ T9763] should_fail_ex+0x39d/0x4d0 [ 272.775732][ T9763] _copy_to_user+0x2f/0xa0 [ 272.780166][ T9763] simple_read_from_buffer+0xe7/0x150 [ 272.785565][ T9763] proc_fail_nth_read+0x1e8/0x260 [ 272.790611][ T9763] ? proc_fault_inject_write+0x360/0x360 [ 272.796268][ T9763] ? fsnotify_perm+0x271/0x5e0 [ 272.801045][ T9763] ? proc_fault_inject_write+0x360/0x360 [ 272.806692][ T9763] vfs_read+0x28b/0x970 [ 272.810873][ T9763] ? kernel_read+0x1e0/0x1e0 [ 272.815479][ T9763] ? __fget_files+0x28/0x4b0 [ 272.820087][ T9763] ? __fget_files+0x28/0x4b0 [ 272.824695][ T9763] ? __fget_files+0x43d/0x4b0 [ 272.829408][ T9763] ? __fdget_pos+0x2a3/0x330 [ 272.834007][ T9763] ? ksys_read+0x75/0x260 [ 272.838356][ T9763] ksys_read+0x150/0x260 [ 272.842613][ T9763] ? vfs_write+0x990/0x990 [ 272.847046][ T9763] ? lockdep_hardirqs_on+0x98/0x150 [ 272.852264][ T9763] do_syscall_64+0x55/0xb0 [ 272.856690][ T9763] ? clear_bhb_loop+0x40/0x90 [ 272.861380][ T9763] ? clear_bhb_loop+0x40/0x90 [ 272.866071][ T9763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.871975][ T9763] RIP: 0033:0x7f6ce815d68e [ 272.876402][ T9763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.896029][ T9763] RSP: 002b:00007f6ce63d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.904462][ T9763] RAX: ffffffffffffffda RBX: 00007f6ce63d56c0 RCX: 00007f6ce815d68e [ 272.912454][ T9763] RDX: 000000000000000f RSI: 00007f6ce63d50a0 RDI: 0000000000000009 [ 272.920441][ T9763] RBP: 00007f6ce63d5090 R08: 0000000000000000 R09: 0000000000000000 [ 272.928425][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.936402][ T9763] R13: 00007f6ce8416128 R14: 00007f6ce8416090 R15: 00007ffcda1b9dc8 [ 272.944405][ T9763] [ 273.143736][ T9766] validate_nla: 2 callbacks suppressed [ 273.143752][ T9766] netlink: 'syz.3.1212': attribute type 10 has an invalid length. [ 273.278751][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 273.354312][ T9766] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 273.489256][ T9769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1212'. [ 273.775454][ T9774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1222'. [ 273.851922][ T9778] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 273.870841][ T9779] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1224'. [ 273.893330][ T9779] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 273.904144][ T9779] netlink: 21820 bytes leftover after parsing attributes in process `syz.1.1224'. [ 274.033417][ T9783] netlink: 'syz.0.1226': attribute type 153 has an invalid length. [ 274.044663][ T9783] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 274.068228][ T9783] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1226'. [ 274.309780][ T9791] netlink: 'syz.0.1230': attribute type 39 has an invalid length. [ 275.043217][ T9811] netlink: 'syz.2.1238': attribute type 153 has an invalid length. [ 275.053694][ T9811] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 275.082007][ T9812] netlink: 'syz.1.1231': attribute type 10 has an invalid length. [ 275.814207][ T9836] bridge_slave_1: left allmulticast mode [ 275.822938][ T9836] bridge_slave_1: left promiscuous mode [ 275.830518][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.876267][ T9836] bridge_slave_0: left allmulticast mode [ 275.882452][ T9836] bridge_slave_0: left promiscuous mode [ 275.895059][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.229599][ T9824] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 276.504414][ T9824] team0: Device ipvlan1 failed to register rx_handler [ 276.943057][ T9824] syz.2.1241 (9824) used greatest stack depth: 18536 bytes left [ 277.480942][ T9862] __nla_validate_parse: 16 callbacks suppressed [ 277.480961][ T9862] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1255'. [ 277.558942][ T9864] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1256'. [ 277.684002][ T9866] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1255'. [ 277.949736][ T9880] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1262'. [ 278.389296][ T9893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1268'. [ 278.587326][ T9895] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1266'. [ 278.599606][ T9899] syzkaller0: entered promiscuous mode [ 278.606308][ T9899] syzkaller0: entered allmulticast mode [ 278.612765][ T9895] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1266'. [ 280.154091][ T9887] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1266'. [ 280.168980][ T9900] validate_nla: 7 callbacks suppressed [ 280.168996][ T9900] netlink: 'syz.1.1266': attribute type 10 has an invalid length. [ 280.194920][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1266'. [ 280.236014][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1266'. [ 280.363797][ T9908] netlink: 'syz.2.1273': attribute type 153 has an invalid length. [ 280.374258][ T9908] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 280.656295][ T9916] netlink: 'syz.2.1277': attribute type 2 has an invalid length. [ 280.688738][ T9916] netlink: 'syz.2.1277': attribute type 39 has an invalid length. [ 281.001910][ T5793] Bluetooth: hci3: ISO packet for unknown connection handle 62 [ 281.585700][ T9934] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 281.779885][ T9936] netlink: 'syz.3.1285': attribute type 153 has an invalid length. [ 281.810457][ T9936] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 282.603471][ T9954] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 282.617970][ T9954] __nla_validate_parse: 12 callbacks suppressed [ 282.617989][ T9954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 282.644733][ T9954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1282'. [ 282.993419][ T9963] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 283.001634][ T9963] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1294'. [ 283.012955][ T9963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1294'. [ 283.049058][ T12] tipc: Subscription rejected, illegal request [ 283.129827][ T9967] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1296'. [ 286.136823][ T9976] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1299'. [ 286.595780][ T9988] validate_nla: 5 callbacks suppressed [ 286.595812][ T9988] netlink: 'syz.0.1304': attribute type 2 has an invalid length. [ 286.639907][ T9988] netlink: 'syz.0.1304': attribute type 8 has an invalid length. [ 286.674716][ T9988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1304'. [ 286.771138][ T9974] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1300'. [ 286.787474][ T9974] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1300'. [ 286.820241][ T9980] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1300'. [ 286.951026][ T9996] netlink: 'syz.3.1307': attribute type 153 has an invalid length. [ 286.977354][ T9996] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 287.077474][T10004] netlink: 'syz.1.1300': attribute type 10 has an invalid length. [ 287.207200][T10009] netlink: 'syz.0.1310': attribute type 3 has an invalid length. [ 287.676930][T10031] FAULT_INJECTION: forcing a failure. [ 287.676930][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 287.726369][T10031] CPU: 0 PID: 10031 Comm: syz.0.1318 Not tainted syzkaller #0 [ 287.733889][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.743965][T10031] Call Trace: [ 287.747262][T10031] [ 287.750213][T10031] dump_stack_lvl+0x18c/0x250 [ 287.754923][T10031] ? show_regs_print_info+0x20/0x20 [ 287.760139][T10031] ? load_image+0x420/0x420 [ 287.764695][T10031] ? __might_sleep+0xe0/0xe0 [ 287.769300][T10031] ? __lock_acquire+0x7d40/0x7d40 [ 287.774317][T10031] should_fail_ex+0x39d/0x4d0 [ 287.778989][T10031] should_failslab+0x9/0x20 [ 287.783483][T10031] slab_pre_alloc_hook+0x59/0x310 [ 287.788519][T10031] ? tomoyo_encode+0x28b/0x540 [ 287.793301][T10031] ? tomoyo_encode+0x28b/0x540 [ 287.798088][T10031] __kmem_cache_alloc_node+0x53/0x250 [ 287.803486][T10031] ? tomoyo_encode+0x28b/0x540 [ 287.808263][T10031] __kmalloc+0xa4/0x230 [ 287.812443][T10031] tomoyo_encode+0x28b/0x540 [ 287.817055][T10031] tomoyo_realpath_from_path+0x592/0x5d0 [ 287.822732][T10031] tomoyo_path_number_perm+0x248/0x620 [ 287.828215][T10031] ? tomoyo_path_number_perm+0x217/0x620 [ 287.828471][T10035] netlink: 'syz.1.1319': attribute type 153 has an invalid length. [ 287.833855][T10031] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 287.833908][T10031] ? ksys_write+0x1c4/0x260 [ 287.851783][T10031] ? __fget_files+0x28/0x4b0 [ 287.856397][T10031] ? __fget_files+0x28/0x4b0 [ 287.861020][T10031] security_file_ioctl+0x70/0xa0 [ 287.865982][T10031] __se_sys_ioctl+0x48/0x170 [ 287.870590][T10031] do_syscall_64+0x55/0xb0 [ 287.875017][T10031] ? clear_bhb_loop+0x40/0x90 [ 287.879732][T10031] ? clear_bhb_loop+0x40/0x90 [ 287.881390][T10035] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 287.884420][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.884448][T10031] RIP: 0033:0x7f6ce819ce59 [ 287.884464][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.884478][T10031] RSP: 002b:00007f6ce63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.884498][T10031] RAX: ffffffffffffffda RBX: 00007f6ce8415fa0 RCX: 00007f6ce819ce59 [ 287.884509][T10031] RDX: 0000000000000000 RSI: 0000000080047437 RDI: 0000000000000004 [ 287.884520][T10031] RBP: 00007f6ce63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.884530][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.884540][T10031] R13: 00007f6ce8416038 R14: 00007f6ce8415fa0 R15: 00007ffcda1b9dc8 [ 287.884564][T10031] [ 287.958819][T10031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.997077][T10035] __nla_validate_parse: 6 callbacks suppressed [ 287.997090][T10035] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1319'. [ 288.529260][T10049] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1320'. [ 288.548987][T10052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1325'. [ 288.559410][T10049] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1320'. [ 288.575483][T10039] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1320'. [ 288.594192][T10049] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1320'. [ 288.802720][T10058] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 288.813657][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1320'. [ 288.828117][T10058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1320'. [ 289.199317][T10068] netlink: 'syz.1.1332': attribute type 29 has an invalid length. [ 289.251508][T10065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1330'. [ 289.263266][T10070] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1333'. [ 290.235147][T10098] netlink: zone id is out of range [ 290.247008][T10098] netlink: zone id is out of range [ 290.252283][T10098] netlink: zone id is out of range [ 290.281745][T10098] netlink: zone id is out of range [ 290.300177][T10098] netlink: zone id is out of range [ 290.308340][T10098] netlink: zone id is out of range [ 290.315310][T10098] netlink: zone id is out of range [ 290.320782][T10098] netlink: zone id is out of range [ 290.329772][T10098] netlink: zone id is out of range [ 290.337491][T10098] netlink: zone id is out of range [ 290.648935][T10110] FAULT_INJECTION: forcing a failure. [ 290.648935][T10110] name failslab, interval 1, probability 0, space 0, times 0 [ 290.662319][T10110] CPU: 1 PID: 10110 Comm: syz.1.1347 Not tainted syzkaller #0 [ 290.669806][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.679896][T10110] Call Trace: [ 290.683191][T10110] [ 290.686139][T10110] dump_stack_lvl+0x18c/0x250 [ 290.690836][T10110] ? show_regs_print_info+0x20/0x20 [ 290.696045][T10110] ? load_image+0x420/0x420 [ 290.700567][T10110] ? verify_lock_unused+0x140/0x140 [ 290.705793][T10110] should_fail_ex+0x39d/0x4d0 [ 290.710505][T10110] should_failslab+0x9/0x20 [ 290.715025][T10110] slab_pre_alloc_hook+0x59/0x310 [ 290.720065][T10110] kmem_cache_alloc+0x5a/0x2d0 [ 290.724836][T10110] ? skb_clone+0x1eb/0x370 [ 290.729258][T10110] skb_clone+0x1eb/0x370 [ 290.733499][T10110] __netlink_deliver_tap+0x41c/0x830 [ 290.738792][T10110] ? netlink_deliver_tap+0x2e/0x1b0 [ 290.743984][T10110] netlink_deliver_tap+0x19c/0x1b0 [ 290.749091][T10110] netlink_unicast+0x72c/0x8d0 [ 290.753882][T10110] netlink_sendmsg+0x8d0/0xbf0 [ 290.758652][T10110] ? netlink_getsockopt+0x590/0x590 [ 290.763945][T10110] ? aa_sock_msg_perm+0x94/0x150 [ 290.768883][T10110] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 290.774164][T10110] ? security_socket_sendmsg+0x80/0xa0 [ 290.779617][T10110] ? netlink_getsockopt+0x590/0x590 [ 290.784812][T10110] ____sys_sendmsg+0x5ba/0x960 [ 290.789580][T10110] ? __asan_memset+0x22/0x40 [ 290.794170][T10110] ? __sys_sendmsg_sock+0x30/0x30 [ 290.799188][T10110] ? __import_iovec+0x5f2/0x850 [ 290.804045][T10110] ? import_iovec+0x73/0xa0 [ 290.808546][T10110] ___sys_sendmsg+0x2a6/0x360 [ 290.813216][T10110] ? get_pid_task+0x20/0x1e0 [ 290.817806][T10110] ? __sys_sendmsg+0x2a0/0x2a0 [ 290.822585][T10110] ? __lock_acquire+0x7d40/0x7d40 [ 290.827629][T10110] __se_sys_sendmsg+0x1c2/0x2b0 [ 290.832477][T10110] ? __x64_sys_sendmsg+0x80/0x80 [ 290.837421][T10110] ? lockdep_hardirqs_on+0x98/0x150 [ 290.842621][T10110] do_syscall_64+0x55/0xb0 [ 290.847030][T10110] ? clear_bhb_loop+0x40/0x90 [ 290.851703][T10110] ? clear_bhb_loop+0x40/0x90 [ 290.856377][T10110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.862305][T10110] RIP: 0033:0x7f799419ce59 [ 290.866713][T10110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.886310][T10110] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.894720][T10110] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 290.902687][T10110] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 290.910649][T10110] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 290.918616][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.926581][T10110] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 290.934560][T10110] [ 291.677806][T10134] validate_nla: 9 callbacks suppressed [ 291.677822][T10134] netlink: 'syz.2.1356': attribute type 153 has an invalid length. [ 291.697876][T10134] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 291.999371][T10137] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 292.390590][T10150] FAULT_INJECTION: forcing a failure. [ 292.390590][T10150] name failslab, interval 1, probability 0, space 0, times 0 [ 292.403287][T10150] CPU: 1 PID: 10150 Comm: syz.0.1363 Not tainted syzkaller #0 [ 292.410781][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.420854][T10150] Call Trace: [ 292.424154][T10150] [ 292.427097][T10150] dump_stack_lvl+0x18c/0x250 [ 292.431803][T10150] ? show_regs_print_info+0x20/0x20 [ 292.437027][T10150] ? load_image+0x420/0x420 [ 292.441550][T10150] ? __kmem_cache_alloc_node+0x13a/0x250 [ 292.447204][T10150] ? netdev_core_pick_tx+0x340/0x340 [ 292.452508][T10150] should_fail_ex+0x39d/0x4d0 [ 292.457215][T10150] should_failslab+0x9/0x20 [ 292.461738][T10150] slab_pre_alloc_hook+0x59/0x310 [ 292.466803][T10150] kmem_cache_alloc+0x5a/0x2d0 [ 292.471588][T10150] ? skb_clone+0x1eb/0x370 [ 292.476035][T10150] skb_clone+0x1eb/0x370 [ 292.480315][T10150] bpf_clone_redirect+0x167/0x4a0 [ 292.485385][T10150] bpf_prog_07257a6b71309cad+0x5e/0x63 [ 292.490862][T10150] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 292.496849][T10150] ? lock_chain_count+0x20/0x20 [ 292.501697][T10150] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 292.507671][T10150] ? lockdep_softirqs_on+0x580/0x580 [ 292.512950][T10150] ? lock_chain_count+0x20/0x20 [ 292.517798][T10150] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 292.524038][T10150] ? __local_bh_disable_ip+0x108/0x1a0 [ 292.529490][T10150] ? __cant_sleep+0x220/0x220 [ 292.534187][T10150] ? __local_bh_enable_ip+0x13a/0x1c0 [ 292.539552][T10150] ? _local_bh_enable+0xa0/0xa0 [ 292.544393][T10150] ? bpf_test_timer_continue+0x135/0x380 [ 292.550021][T10150] ? bpf_test_run+0x174/0x870 [ 292.554694][T10150] bpf_test_run+0x2df/0x870 [ 292.559202][T10150] ? bpf_test_run+0x174/0x870 [ 292.563877][T10150] ? dst_hold+0x70/0x70 [ 292.568031][T10150] ? eth_get_headlen+0x210/0x210 [ 292.572972][T10150] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 292.578362][T10150] ? cpu_online+0x60/0x60 [ 292.582686][T10150] bpf_prog_test_run+0x321/0x390 [ 292.587621][T10150] __sys_bpf+0x49d/0x890 [ 292.591860][T10150] ? bpf_link_show_fdinfo+0x390/0x390 [ 292.597237][T10150] ? lock_chain_count+0x20/0x20 [ 292.602184][T10150] __x64_sys_bpf+0x7c/0x90 [ 292.606603][T10150] do_syscall_64+0x55/0xb0 [ 292.611016][T10150] ? clear_bhb_loop+0x40/0x90 [ 292.615692][T10150] ? clear_bhb_loop+0x40/0x90 [ 292.620374][T10150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.626269][T10150] RIP: 0033:0x7f6ce819ce59 [ 292.630679][T10150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.650279][T10150] RSP: 002b:00007f6ce63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.658688][T10150] RAX: ffffffffffffffda RBX: 00007f6ce8415fa0 RCX: 00007f6ce819ce59 [ 292.666654][T10150] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 292.674619][T10150] RBP: 00007f6ce63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.682579][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.690539][T10150] R13: 00007f6ce8416038 R14: 00007f6ce8415fa0 R15: 00007ffcda1b9dc8 [ 292.698522][T10150] [ 293.012812][T10165] netlink: 'syz.1.1370': attribute type 153 has an invalid length. [ 293.021063][T10165] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 293.036224][T10165] __nla_validate_parse: 18 callbacks suppressed [ 293.036240][T10165] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1370'. [ 293.482808][T10179] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1367'. [ 293.503801][T10179] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1367'. [ 293.526283][T10178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1374'. [ 293.741641][T10161] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1367'. [ 293.769370][T10180] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1367'. [ 293.829927][T10180] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 293.838120][T10180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1367'. [ 294.106448][T10198] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 294.201953][T10199] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 294.213930][T10199] netlink: 'syz.0.1380': attribute type 3 has an invalid length. [ 294.263520][T10199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1380'. [ 294.269222][T10202] netlink: 'syz.3.1382': attribute type 153 has an invalid length. [ 294.301530][T10202] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 294.331154][T10202] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1382'. [ 294.462977][ T59] hsr_slave_0: left promiscuous mode [ 294.480643][ T59] hsr_slave_1: left promiscuous mode [ 294.518398][ T59] bridge_slave_1: left allmulticast mode [ 294.524253][ T59] bridge_slave_1: left promiscuous mode [ 294.532534][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.553359][ T59] bridge_slave_0: left allmulticast mode [ 294.561521][ T59] bridge_slave_0: left promiscuous mode [ 294.572737][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.616998][ T59] veth1_macvtap: left promiscuous mode [ 294.630661][ T59] veth1_vlan: left promiscuous mode [ 294.647012][ T59] veth0_vlan: left promiscuous mode [ 295.112701][T10218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1388'. [ 295.956092][ T5793] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 296.631761][ T59] team0 (unregistering): Port device team_slave_1 removed [ 296.681892][ T59] team0 (unregistering): Port device team_slave_0 removed [ 296.933862][ T59] team0 (unregistering): Port device dummy0 removed [ 297.044937][T10236] validate_nla: 2 callbacks suppressed [ 297.044953][T10236] netlink: 'syz.0.1389': attribute type 10 has an invalid length. [ 297.515947][T10255] netlink: 'syz.0.1399': attribute type 39 has an invalid length. [ 297.765476][T10263] netlink: 'syz.2.1403': attribute type 153 has an invalid length. [ 297.773711][T10263] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 298.008008][T10274] FAULT_INJECTION: forcing a failure. [ 298.008008][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 298.024150][ T5793] Bluetooth: hci0: command tx timeout [ 298.031434][T10273] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 298.060237][T10274] CPU: 0 PID: 10274 Comm: syz.1.1407 Not tainted syzkaller #0 [ 298.067762][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.077833][T10274] Call Trace: [ 298.081106][T10274] [ 298.084026][T10274] dump_stack_lvl+0x18c/0x250 [ 298.088702][T10274] ? show_regs_print_info+0x20/0x20 [ 298.093902][T10274] ? load_image+0x420/0x420 [ 298.098404][T10274] ? __might_sleep+0xe0/0xe0 [ 298.102995][T10274] ? __lock_acquire+0x7d40/0x7d40 [ 298.108013][T10274] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 298.113640][T10274] should_fail_ex+0x39d/0x4d0 [ 298.118318][T10274] should_failslab+0x9/0x20 [ 298.122821][T10274] slab_pre_alloc_hook+0x59/0x310 [ 298.127848][T10274] kmem_cache_alloc_node+0x60/0x320 [ 298.133055][T10274] ? __alloc_skb+0x103/0x2c0 [ 298.137642][T10274] __alloc_skb+0x103/0x2c0 [ 298.142053][T10274] __ip_append_data+0x2af5/0x3b80 [ 298.147179][T10274] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 298.152033][T10274] ? ip_setup_cork+0x860/0x860 [ 298.156793][T10274] ? ip_setup_cork+0x530/0x860 [ 298.161553][T10274] ip_make_skb+0x22b/0x440 [ 298.165966][T10274] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 298.170812][T10274] ? ip_flush_pending_frames+0x250/0x250 [ 298.176452][T10274] udp_sendmsg+0x1ade/0x23b0 [ 298.181056][T10274] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 298.185905][T10274] ? udp_cmsg_send+0x350/0x350 [ 298.190669][T10274] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 298.196643][T10274] ? lock_chain_count+0x20/0x20 [ 298.201485][T10274] ? inet_sendmsg+0x14b/0x2f0 [ 298.206162][T10274] ? __local_bh_enable_ip+0x13a/0x1c0 [ 298.211526][T10274] ? _local_bh_enable+0xa0/0xa0 [ 298.216374][T10274] ? inet_sendmsg+0x14b/0x2f0 [ 298.221052][T10274] ? inet_sendmsg+0x14b/0x2f0 [ 298.225724][T10274] ? inet_send_prepare+0x260/0x260 [ 298.230831][T10274] ____sys_sendmsg+0x5ba/0x960 [ 298.235589][T10274] ? __lock_acquire+0x7d40/0x7d40 [ 298.240611][T10274] ? __sys_sendmsg_sock+0x30/0x30 [ 298.245626][T10274] ? __import_iovec+0x5f2/0x850 [ 298.250472][T10274] ? import_iovec+0x73/0xa0 [ 298.254968][T10274] ___sys_sendmsg+0x2a6/0x360 [ 298.259646][T10274] ? get_pid_task+0x20/0x1e0 [ 298.264236][T10274] ? __sys_sendmsg+0x2a0/0x2a0 [ 298.269015][T10274] ? __lock_acquire+0x7d40/0x7d40 [ 298.274051][T10274] __se_sys_sendmsg+0x1c2/0x2b0 [ 298.278896][T10274] ? __x64_sys_sendmsg+0x80/0x80 [ 298.283866][T10274] ? lockdep_hardirqs_on+0x98/0x150 [ 298.289067][T10274] do_syscall_64+0x55/0xb0 [ 298.293473][T10274] ? clear_bhb_loop+0x40/0x90 [ 298.298146][T10274] ? clear_bhb_loop+0x40/0x90 [ 298.302818][T10274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.308704][T10274] RIP: 0033:0x7f799419ce59 [ 298.313115][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.332714][T10274] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.341142][T10274] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 298.349221][T10274] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 298.357199][T10274] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 298.365171][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.373136][T10274] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 298.381125][T10274] [ 298.443379][T10273] team0: Device wg1 is of different type [ 298.897401][T10281] __nla_validate_parse: 9 callbacks suppressed [ 298.897417][T10281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1409'. [ 299.193220][T10286] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1411'. [ 299.242759][T10286] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 299.282934][T10286] CPU: 0 PID: 10286 Comm: syz.2.1411 Not tainted syzkaller #0 [ 299.290456][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.300533][T10286] Call Trace: [ 299.303827][T10286] [ 299.306782][T10286] dump_stack_lvl+0x18c/0x250 [ 299.311500][T10286] ? show_regs_print_info+0x20/0x20 [ 299.316723][T10286] ? load_image+0x420/0x420 [ 299.321254][T10286] sysfs_warn_dup+0x8e/0xa0 [ 299.325778][T10286] sysfs_do_create_link_sd+0xc0/0x110 [ 299.331176][T10286] device_add_class_symlinks+0x1cf/0x240 [ 299.336854][T10286] device_add+0x507/0xc50 [ 299.341212][T10286] wiphy_register+0x1dad/0x2ae0 [ 299.346107][T10286] ? cfg80211_event_work+0x40/0x40 [ 299.351244][T10286] ? minstrel_ht_alloc+0x88a/0x990 [ 299.356384][T10286] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 299.362480][T10286] ieee80211_register_hw+0x3464/0x4250 [ 299.367984][T10286] ? ieee80211_tasklet_handler+0x20/0x20 [ 299.373650][T10286] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 299.379570][T10286] ? __debug_object_init+0xec/0x450 [ 299.384793][T10286] ? __asan_memset+0x22/0x40 [ 299.389405][T10286] ? __hrtimer_init+0x186/0x270 [ 299.394798][T10286] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 299.400574][T10286] ? mac80211_hwsim_free+0x220/0x220 [ 299.405877][T10286] ? rcu_is_watching+0x15/0xb0 [ 299.410663][T10286] ? kstrndup+0xbd/0x140 [ 299.414938][T10286] hwsim_new_radio_nl+0xdc9/0x1a90 [ 299.420077][T10286] ? __nla_validate+0x50/0x50 [ 299.424791][T10286] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 299.431158][T10286] ? __nla_parse+0x40/0x50 [ 299.435596][T10286] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 299.442039][T10286] genl_family_rcv_msg_doit+0x211/0x310 [ 299.447607][T10286] ? end_current_label_crit_section+0x170/0x170 [ 299.453873][T10286] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 299.459796][T10286] ? bpf_lsm_capable+0x9/0x10 [ 299.464493][T10286] ? security_capable+0x89/0xb0 [ 299.469374][T10286] genl_rcv_msg+0x619/0x7a0 [ 299.473902][T10286] ? genl_bind+0x360/0x360 [ 299.478336][T10286] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 299.484686][T10286] ? ref_tracker_free+0x690/0x840 [ 299.489740][T10286] netlink_rcv_skb+0x241/0x4d0 [ 299.494531][T10286] ? genl_bind+0x360/0x360 [ 299.499001][T10286] ? netlink_ack+0x1180/0x1180 [ 299.503815][T10286] ? __lock_acquire+0x7d40/0x7d40 [ 299.508880][T10286] ? down_read+0x1ac/0x2e0 [ 299.513331][T10286] genl_rcv+0x28/0x40 [ 299.517339][T10286] netlink_unicast+0x751/0x8d0 [ 299.522130][T10286] netlink_sendmsg+0x8d0/0xbf0 [ 299.526927][T10286] ? netlink_getsockopt+0x590/0x590 [ 299.532153][T10286] ? aa_sock_msg_perm+0x94/0x150 [ 299.537118][T10286] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 299.542430][T10286] ? security_socket_sendmsg+0x80/0xa0 [ 299.547904][T10286] ? netlink_getsockopt+0x590/0x590 [ 299.553122][T10286] ____sys_sendmsg+0x5ba/0x960 [ 299.557919][T10286] ? __asan_memset+0x22/0x40 [ 299.562534][T10286] ? __sys_sendmsg_sock+0x30/0x30 [ 299.567582][T10286] ? __import_iovec+0x5f2/0x850 [ 299.572456][T10286] ? import_iovec+0x73/0xa0 [ 299.576982][T10286] ___sys_sendmsg+0x2a6/0x360 [ 299.581684][T10286] ? __sys_sendmsg+0x2a0/0x2a0 [ 299.586524][T10286] __se_sys_sendmsg+0x1c2/0x2b0 [ 299.591402][T10286] ? __x64_sys_sendmsg+0x80/0x80 [ 299.596377][T10286] ? lockdep_hardirqs_on+0x98/0x150 [ 299.601602][T10286] do_syscall_64+0x55/0xb0 [ 299.606035][T10286] ? clear_bhb_loop+0x40/0x90 [ 299.610736][T10286] ? clear_bhb_loop+0x40/0x90 [ 299.615434][T10286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.621346][T10286] RIP: 0033:0x7fd46219ce59 [ 299.625781][T10286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.645402][T10286] RSP: 002b:00007fd4630c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.653932][T10286] RAX: ffffffffffffffda RBX: 00007fd462415fa0 RCX: 00007fd46219ce59 [ 299.661918][T10286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 299.669898][T10286] RBP: 00007fd462232d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.677878][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.685955][T10286] R13: 00007fd462416038 R14: 00007fd462415fa0 R15: 00007ffc0f73a648 [ 299.693973][T10286] [ 299.865492][T10291] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1405'. [ 299.900490][T10291] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1405'. [ 299.923265][T10296] netlink: 'syz.2.1414': attribute type 153 has an invalid length. [ 299.929955][T10270] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1405'. [ 299.934200][T10296] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 299.957180][T10297] netlink: 'syz.0.1413': attribute type 3 has an invalid length. [ 299.967765][T10296] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1414'. [ 300.002278][T10297] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1413'. [ 300.012162][T10291] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1405'. [ 300.265717][T10303] netlink: 'syz.3.1405': attribute type 10 has an invalid length. [ 300.295538][T10303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1405'. [ 300.329210][T10303] net_ratelimit: 332 callbacks suppressed [ 300.329225][T10303] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 300.424299][T10291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1405'. [ 300.757915][T10313] FAULT_INJECTION: forcing a failure. [ 300.757915][T10313] name failslab, interval 1, probability 0, space 0, times 0 [ 300.771080][T10313] CPU: 0 PID: 10313 Comm: syz.0.1419 Not tainted syzkaller #0 [ 300.778565][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.788635][T10313] Call Trace: [ 300.791939][T10313] [ 300.794892][T10313] dump_stack_lvl+0x18c/0x250 [ 300.799589][T10313] ? show_regs_print_info+0x20/0x20 [ 300.804785][T10313] ? load_image+0x420/0x420 [ 300.809277][T10313] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 300.815262][T10313] ? lock_chain_count+0x20/0x20 [ 300.820105][T10313] ? __mod_lruvec_page_state+0xa5/0x410 [ 300.825651][T10313] should_fail_ex+0x39d/0x4d0 [ 300.830330][T10313] should_failslab+0x9/0x20 [ 300.834829][T10313] slab_pre_alloc_hook+0x59/0x310 [ 300.839851][T10313] ? __alloc_skb+0x138/0x2c0 [ 300.844453][T10313] kmem_cache_alloc_node+0x60/0x320 [ 300.849649][T10313] ? __alloc_skb+0x103/0x2c0 [ 300.854234][T10313] __alloc_skb+0x103/0x2c0 [ 300.858654][T10313] skb_segment+0xe78/0x40a0 [ 300.863183][T10313] udp6_ufo_fragment+0x9b7/0xf40 [ 300.868127][T10313] ? udpv6_offload_exit+0x20/0x20 [ 300.873147][T10313] ? __lock_acquire+0x1273/0x7d40 [ 300.878175][T10313] ipv6_gso_segment+0xb8b/0x2140 [ 300.883116][T10313] ? inet6_del_offload+0x50/0x50 [ 300.888043][T10313] ? __lock_acquire+0x7d40/0x7d40 [ 300.893065][T10313] ? inet6_del_offload+0x50/0x50 [ 300.897992][T10313] skb_mac_gso_segment+0x320/0x640 [ 300.903121][T10313] ? skb_mac_gso_segment+0x185/0x640 [ 300.908411][T10313] ? skb_eth_gso_segment+0x270/0x270 [ 300.913971][T10313] nsh_gso_segment+0x4c7/0xc60 [ 300.918751][T10313] ? nsh_pop+0x570/0x570 [ 300.922988][T10313] skb_mac_gso_segment+0x320/0x640 [ 300.928102][T10313] ? skb_mac_gso_segment+0x185/0x640 [ 300.933389][T10313] ? skb_eth_gso_segment+0x270/0x270 [ 300.938679][T10313] __skb_gso_segment+0x302/0x4a0 [ 300.943615][T10313] validate_xmit_skb+0x565/0xf60 [ 300.948551][T10313] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 300.954357][T10313] ? validate_xmit_skb_list+0x120/0x120 [ 300.959911][T10313] validate_xmit_skb_list+0x84/0x120 [ 300.965196][T10313] sch_direct_xmit+0xe0/0x4c0 [ 300.969872][T10313] ? read_lock_is_recursive+0x20/0x20 [ 300.975240][T10313] ? rcu_read_lock_bh_held+0x7a/0x100 [ 300.980601][T10313] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 300.986575][T10313] ? __lock_acquire+0x7cc0/0x7d40 [ 300.991598][T10313] __dev_queue_xmit+0x165d/0x3660 [ 300.996637][T10313] ? __dev_queue_xmit+0x265/0x3660 [ 301.001766][T10313] ? netdev_core_pick_tx+0x340/0x340 [ 301.007049][T10313] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 301.012615][T10313] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 301.018762][T10313] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 301.024746][T10313] ? packet_xmit+0x66/0x330 [ 301.029241][T10313] ? packet_sendmsg+0x3916/0x4c30 [ 301.034257][T10313] packet_sendmsg+0x3a0e/0x4c30 [ 301.039122][T10313] ? __might_sleep+0xe0/0xe0 [ 301.043707][T10313] ? mark_lock+0x94/0x320 [ 301.048035][T10313] ? __lock_acquire+0x1273/0x7d40 [ 301.053055][T10313] ? verify_lock_unused+0x140/0x140 [ 301.058249][T10313] ? aa_sk_perm+0x83c/0x970 [ 301.062747][T10313] ? packet_getsockopt+0xad0/0xad0 [ 301.067859][T10313] ? tomoyo_check_mkdev_acl+0xa0/0x490 [ 301.073317][T10313] ? aa_sock_msg_perm+0x94/0x150 [ 301.078350][T10313] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 301.083631][T10313] ? security_socket_sendmsg+0x80/0xa0 [ 301.089087][T10313] ? packet_getsockopt+0xad0/0xad0 [ 301.094195][T10313] ____sys_sendmsg+0x5ba/0x960 [ 301.098958][T10313] ? __lock_acquire+0x7d40/0x7d40 [ 301.103979][T10313] ? __asan_memset+0x22/0x40 [ 301.108564][T10313] ? __sys_sendmsg_sock+0x30/0x30 [ 301.113580][T10313] ? __import_iovec+0x3fa/0x850 [ 301.118432][T10313] ? import_iovec+0x73/0xa0 [ 301.122928][T10313] ___sys_sendmsg+0x2a6/0x360 [ 301.127609][T10313] ? __sys_sendmsg+0x2a0/0x2a0 [ 301.132388][T10313] ? trace_call_bpf+0xc3/0x6c0 [ 301.137166][T10313] __se_sys_sendmsg+0x1c2/0x2b0 [ 301.142018][T10313] ? __x64_sys_sendmsg+0x80/0x80 [ 301.146962][T10313] ? lockdep_hardirqs_on+0x98/0x150 [ 301.152158][T10313] do_syscall_64+0x55/0xb0 [ 301.156576][T10313] ? clear_bhb_loop+0x40/0x90 [ 301.161250][T10313] ? clear_bhb_loop+0x40/0x90 [ 301.165935][T10313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.171821][T10313] RIP: 0033:0x7f6ce819ce59 [ 301.176234][T10313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.195921][T10313] RSP: 002b:00007f6ce63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.204415][T10313] RAX: ffffffffffffffda RBX: 00007f6ce8415fa0 RCX: 00007f6ce819ce59 [ 301.212390][T10313] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 301.220351][T10313] RBP: 00007f6ce63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.228314][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.236276][T10313] R13: 00007f6ce8416038 R14: 00007f6ce8415fa0 R15: 00007ffcda1b9dc8 [ 301.244250][T10313] [ 301.273202][T10311] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 301.433893][T10311] team0: Port device geneve1 added [ 302.934413][T10363] validate_nla: 3 callbacks suppressed [ 302.941338][T10363] netlink: 'syz.3.1436': attribute type 153 has an invalid length. [ 302.949297][T10363] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 303.361930][T10369] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 304.418557][T10387] netlink: 'syz.0.1446': attribute type 153 has an invalid length. [ 304.439179][T10387] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 304.453773][T10387] __nla_validate_parse: 10 callbacks suppressed [ 304.453787][T10387] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1446'. [ 304.473155][T10392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1445'. [ 305.180434][T10412] : renamed from bond_slave_0 (while UP) [ 305.213205][T10411] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 305.246212][T10411] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 305.292229][T10411] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 305.331178][T10415] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1450'. [ 305.346067][T10411] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 305.362728][T10415] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1450'. [ 305.401260][T10411] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 305.414054][T10401] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1450'. [ 305.944065][T10419] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1450'. [ 305.974820][T10423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1450'. [ 305.984261][T10423] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 306.020486][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1450'. [ 306.123479][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1458'. [ 306.170952][T10429] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1459'. [ 306.486622][T10445] team0: Port device hsr_slave_0 added [ 307.630599][T10480] C: renamed from team_slave_0 (while UP) [ 307.664398][T10480] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.050902][T10500] validate_nla: 12 callbacks suppressed [ 308.050919][T10500] netlink: 'syz.0.1486': attribute type 153 has an invalid length. [ 308.087925][T10500] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 309.026850][T10522] bridge_slave_1: default FDB implementation only supports local addresses [ 309.270848][T10533] netlink: 'syz.1.1495': attribute type 3 has an invalid length. [ 309.366950][T10535] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 309.751453][T10540] netlink: 'syz.3.1498': attribute type 153 has an invalid length. [ 309.762391][T10540] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 309.774500][T10540] __nla_validate_parse: 24 callbacks suppressed [ 309.774514][T10540] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1498'. [ 310.142163][T10556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1505'. [ 310.202004][T10560] netlink: 'syz.2.1506': attribute type 10 has an invalid length. [ 310.284874][T10560] geneve0: entered promiscuous mode [ 310.348777][T10560] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 310.686998][T10573] netlink: 'syz.1.1512': attribute type 153 has an invalid length. [ 310.713374][T10573] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 310.764324][T10573] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1512'. [ 311.183237][T10584] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1518'. [ 311.207821][T10585] netlink: 'syz.0.1517': attribute type 39 has an invalid length. [ 311.306953][T10586] team0: Port device wlan1 added [ 311.332662][T10589] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1508'. [ 311.344215][T10589] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1508'. [ 311.357747][T10564] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1508'. [ 311.390708][T10589] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1508'. [ 311.545791][T10589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1508'. [ 311.585464][T10589] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 311.673976][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1508'. [ 314.342691][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 314.344527][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 314.476849][T10645] validate_nla: 5 callbacks suppressed [ 314.476867][T10645] netlink: 'syz.3.1537': attribute type 153 has an invalid length. [ 314.490487][T10645] netlink: 'syz.3.1537': attribute type 1 has an invalid length. [ 314.750580][T10656] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 315.096540][T10667] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 315.369575][T10676] netlink: 'syz.3.1548': attribute type 153 has an invalid length. [ 315.377945][T10676] netlink: 'syz.3.1548': attribute type 1 has an invalid length. [ 315.386364][T10676] __nla_validate_parse: 11 callbacks suppressed [ 315.386377][T10676] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1548'. [ 315.679360][T10682] netlink: 'syz.3.1551': attribute type 10 has an invalid length. [ 315.689588][T10682] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 315.714330][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 315.755018][T10683] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1549'. [ 315.776631][T10683] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1549'. [ 315.817633][T10679] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1549'. [ 315.858540][T10683] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1549'. [ 316.034222][T10696] FAULT_INJECTION: forcing a failure. [ 316.034222][T10696] name failslab, interval 1, probability 0, space 0, times 0 [ 316.048981][T10696] CPU: 0 PID: 10696 Comm: syz.1.1555 Not tainted syzkaller #0 [ 316.056481][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.066571][T10696] Call Trace: [ 316.069878][T10696] [ 316.072832][T10696] dump_stack_lvl+0x18c/0x250 [ 316.077552][T10696] ? show_regs_print_info+0x20/0x20 [ 316.080866][T10679] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 316.082763][T10696] ? load_image+0x420/0x420 [ 316.082795][T10696] ? verify_lock_unused+0x140/0x140 [ 316.082819][T10696] ? perf_trace_lock+0x304/0x3b0 [ 316.082850][T10696] should_fail_ex+0x39d/0x4d0 [ 316.082889][T10696] should_failslab+0x9/0x20 [ 316.082914][T10696] slab_pre_alloc_hook+0x59/0x310 [ 316.082952][T10696] kmem_cache_alloc+0x5a/0x2d0 [ 316.082975][T10696] ? skb_clone+0x1eb/0x370 [ 316.083009][T10696] skb_clone+0x1eb/0x370 [ 316.083040][T10696] __netlink_deliver_tap+0x41c/0x830 [ 316.083086][T10696] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.083112][T10696] netlink_deliver_tap+0x19c/0x1b0 [ 316.083138][T10696] netlink_unicast+0x72c/0x8d0 [ 316.083181][T10696] netlink_sendmsg+0x8d0/0xbf0 [ 316.083202][T10696] ? perf_trace_lock+0x304/0x3b0 [ 316.083237][T10696] ? netlink_getsockopt+0x590/0x590 [ 316.083265][T10696] ? aa_sock_msg_perm+0x94/0x150 [ 316.083295][T10696] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 316.083325][T10696] ? security_socket_sendmsg+0x80/0xa0 [ 316.083346][T10696] ? netlink_getsockopt+0x590/0x590 [ 316.083372][T10696] ____sys_sendmsg+0x5ba/0x960 [ 316.083409][T10696] ? __asan_memset+0x22/0x40 [ 316.083434][T10696] ? __sys_sendmsg_sock+0x30/0x30 [ 316.083453][T10696] ? __import_iovec+0x3fa/0x850 [ 316.083492][T10696] ? import_iovec+0x73/0xa0 [ 316.083521][T10696] ___sys_sendmsg+0x2a6/0x360 [ 316.083557][T10696] ? __sys_sendmsg+0x2a0/0x2a0 [ 316.083623][T10696] ? __lock_acquire+0x7d40/0x7d40 [ 316.083697][T10696] __se_sys_sendmsg+0x1c2/0x2b0 [ 316.083726][T10696] ? __x64_sys_sendmsg+0x80/0x80 [ 316.083781][T10696] ? lockdep_hardirqs_on+0x98/0x150 [ 316.083815][T10696] do_syscall_64+0x55/0xb0 [ 316.083835][T10696] ? clear_bhb_loop+0x40/0x90 [ 316.083859][T10696] ? clear_bhb_loop+0x40/0x90 [ 316.083888][T10696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.083912][T10696] RIP: 0033:0x7f799419ce59 [ 316.083933][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.083950][T10696] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.083975][T10696] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 316.083989][T10696] RDX: 0000000010049014 RSI: 0000200000000140 RDI: 0000000000000003 [ 316.084003][T10696] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 316.084016][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.084029][T10696] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 316.084075][T10696] [ 316.118449][T10696] netlink: 'syz.1.1555': attribute type 2 has an invalid length. [ 316.143544][T10679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1549'. [ 316.199544][T10696] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1555'. [ 316.341877][T10683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1549'. [ 316.405722][T10700] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 316.548090][T10704] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.1558'. [ 317.565842][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.572379][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.333882][T10750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.979565][T10762] macvlan0: entered promiscuous mode [ 318.985372][T10762] macvlan0: entered allmulticast mode [ 318.990770][T10762] veth1_vlan: entered allmulticast mode [ 319.137462][T10764] bridge_slave_1: default FDB implementation only supports local addresses [ 319.457274][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 319.459778][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 319.608257][T10777] bond0: (slave 30): Releasing backup interface [ 319.663002][T10777] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 320.072157][T10791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.116874][T10786] validate_nla: 10 callbacks suppressed [ 320.116888][T10786] netlink: 'syz.1.1587': attribute type 10 has an invalid length. [ 320.809321][T10809] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 321.176766][T10811] netlink: 'syz.0.1596': attribute type 153 has an invalid length. [ 321.184997][T10811] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 321.192743][T10811] __nla_validate_parse: 22 callbacks suppressed [ 321.192756][T10811] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1596'. [ 321.437072][T10816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1598'. [ 322.309943][T10830] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1606'. [ 322.418909][T10830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.825292][T10841] netlink: 'syz.2.1608': attribute type 153 has an invalid length. [ 322.865139][T10841] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 322.874042][T10841] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1608'. [ 322.968461][T10822] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1601'. [ 322.995435][T10822] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1601'. [ 323.059005][T10840] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1601'. [ 323.093712][T10844] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1601'. [ 323.233673][T10848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1610'. [ 323.242357][T10822] netlink: 'syz.1.1601': attribute type 10 has an invalid length. [ 323.251504][T10822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1601'. [ 323.547197][T10855] bridge_slave_1: default FDB implementation only supports local addresses [ 323.731316][T10863] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 323.756907][T10862] netlink: 'syz.1.1617': attribute type 153 has an invalid length. [ 323.759474][T10863] team0: Port device dummy0 added [ 323.777280][T10862] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 323.945413][T10872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.953137][T10872] IPv6: NLM_F_CREATE should be set when creating new route [ 323.961724][T10872] IPv6: NLM_F_CREATE should be set when creating new route [ 323.972518][T10872] IPv6: NLM_F_CREATE should be set when creating new route [ 325.258897][T10905] bond0: (slave netdevsim0): Releasing backup interface [ 325.332836][T10894] delete_channel: no stack [ 325.790433][T10925] validate_nla: 5 callbacks suppressed [ 325.790450][T10925] netlink: 'syz.3.1641': attribute type 153 has an invalid length. [ 325.824162][T10925] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 326.110561][T10931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.397642][T10923] __nla_validate_parse: 14 callbacks suppressed [ 327.397661][T10923] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1640'. [ 327.416221][T10923] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1640'. [ 327.455597][T10935] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1640'. [ 327.465230][T10937] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1640'. [ 327.675463][T10938] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 327.683335][T10938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'. [ 327.858626][T10938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1640'. [ 328.353989][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1645'. [ 329.154740][T10947] netlink: 'syz.3.1647': attribute type 21 has an invalid length. [ 329.183443][T10949] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 329.211330][T10949] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 329.313540][T10957] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1651'. [ 329.339990][T10957] netlink: 7535 bytes leftover after parsing attributes in process `syz.1.1651'. [ 329.341422][T10959] netlink: 'syz.2.1652': attribute type 153 has an invalid length. [ 329.354187][T10957] netlink: 7535 bytes leftover after parsing attributes in process `syz.1.1651'. [ 329.382313][T10959] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 329.658047][T10971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.414745][T10983] netlink: 'syz.1.1654': attribute type 10 has an invalid length. [ 330.534276][T10995] netlink: 'syz.1.1663': attribute type 153 has an invalid length. [ 330.549745][T10995] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 331.600769][T11019] netlink: 'syz.1.1673': attribute type 10 has an invalid length. [ 331.710553][T11019] team0: Port device dummy0 added [ 331.951340][T11021] netlink: 'syz.0.1674': attribute type 153 has an invalid length. [ 332.005942][T11021] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 332.515815][T11015] netlink: 'syz.2.1671': attribute type 10 has an invalid length. [ 332.524962][T11015] __nla_validate_parse: 16 callbacks suppressed [ 332.525053][T11015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1671'. [ 332.605095][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1671'. [ 332.660161][T11043] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 332.688546][T11043] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1682'. [ 332.988480][T11052] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 333.034982][T11052] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 333.061323][T11052] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 333.098184][T11052] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 333.130464][T11056] delete_channel: no stack [ 333.155017][T11052] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 333.187466][T11056] delete_channel: no stack [ 333.224203][T11059] netlink: 'syz.3.1688': attribute type 153 has an invalid length. [ 333.244686][T11059] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 333.260726][T11059] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1688'. [ 333.814939][T11066] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1691'. [ 333.826418][T11066] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1691'. [ 333.847791][T11075] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1691'. [ 333.857875][T11080] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1691'. [ 334.185290][T11083] netlink: 'syz.3.1691': attribute type 10 has an invalid length. [ 334.262649][T11083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1691'. [ 334.322668][T11083] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 334.375266][T11088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1691'. [ 334.727399][T11094] netlink: 'syz.1.1700': attribute type 153 has an invalid length. [ 335.011141][T11108] FAULT_INJECTION: forcing a failure. [ 335.011141][T11108] name failslab, interval 1, probability 0, space 0, times 0 [ 335.040780][T11108] CPU: 1 PID: 11108 Comm: syz.1.1706 Not tainted syzkaller #0 [ 335.048295][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.058369][T11108] Call Trace: [ 335.061657][T11108] [ 335.064594][T11108] dump_stack_lvl+0x18c/0x250 [ 335.069293][T11108] ? show_regs_print_info+0x20/0x20 [ 335.074507][T11108] ? load_image+0x420/0x420 [ 335.079037][T11108] ? __might_sleep+0xe0/0xe0 [ 335.083649][T11108] ? __lock_acquire+0x7d40/0x7d40 [ 335.088695][T11108] should_fail_ex+0x39d/0x4d0 [ 335.093401][T11108] should_failslab+0x9/0x20 [ 335.097928][T11108] slab_pre_alloc_hook+0x59/0x310 [ 335.102980][T11108] ? __get_vm_area_node+0x125/0x370 [ 335.108202][T11108] __kmem_cache_alloc_node+0x53/0x250 [ 335.113596][T11108] ? __get_vm_area_node+0x125/0x370 [ 335.118815][T11108] kmalloc_node_trace+0x26/0xe0 [ 335.123689][T11108] __get_vm_area_node+0x125/0x370 [ 335.128738][T11108] __vmalloc_node_range+0x36e/0x1330 [ 335.134044][T11108] ? netlink_sendmsg+0x602/0xbf0 [ 335.139003][T11108] ? netlink_insert+0x109f/0x13a0 [ 335.144058][T11108] ? netlink_data_ready+0x10/0x10 [ 335.149112][T11108] ? free_vm_area+0x50/0x50 [ 335.153643][T11108] ? netlink_sendmsg+0x602/0xbf0 [ 335.158598][T11108] vmalloc+0x79/0x90 [ 335.162509][T11108] ? netlink_sendmsg+0x602/0xbf0 [ 335.167459][T11108] netlink_sendmsg+0x602/0xbf0 [ 335.172250][T11108] ? netlink_getsockopt+0x590/0x590 [ 335.177472][T11108] ? aa_sock_msg_perm+0x94/0x150 [ 335.182434][T11108] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.187745][T11108] ? security_socket_sendmsg+0x80/0xa0 [ 335.193226][T11108] sock_write_iter+0x2df/0x420 [ 335.198017][T11108] ? sock_read_iter+0x3e0/0x3e0 [ 335.202907][T11108] ? common_file_perm+0x198/0x1f0 [ 335.207962][T11108] vfs_write+0x46c/0x990 [ 335.212235][T11108] ? file_end_write+0x250/0x250 [ 335.217112][T11108] ? __fget_files+0x43d/0x4b0 [ 335.221820][T11108] ? __fdget_pos+0x1d8/0x330 [ 335.226430][T11108] ? ksys_write+0x75/0x260 [ 335.230868][T11108] ksys_write+0x150/0x260 [ 335.235224][T11108] ? __ia32_sys_read+0x90/0x90 [ 335.240012][T11108] ? lockdep_hardirqs_on+0x98/0x150 [ 335.245239][T11108] do_syscall_64+0x55/0xb0 [ 335.249672][T11108] ? clear_bhb_loop+0x40/0x90 [ 335.254368][T11108] ? clear_bhb_loop+0x40/0x90 [ 335.259076][T11108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.264990][T11108] RIP: 0033:0x7f799419ce59 [ 335.269431][T11108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.289058][T11108] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.297495][T11108] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 335.305484][T11108] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 335.313477][T11108] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 335.321464][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.329453][T11108] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 335.337469][T11108] [ 335.371496][T11108] syz.1.1706: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 335.389508][T11108] CPU: 1 PID: 11108 Comm: syz.1.1706 Not tainted syzkaller #0 [ 335.396996][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.407067][T11108] Call Trace: [ 335.410357][T11108] [ 335.413296][T11108] dump_stack_lvl+0x18c/0x250 [ 335.417993][T11108] ? show_regs_print_info+0x20/0x20 [ 335.423208][T11108] ? load_image+0x420/0x420 [ 335.427741][T11108] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 335.434179][T11108] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 335.440706][T11108] warn_alloc+0x246/0x340 [ 335.445060][T11108] ? __get_vm_area_node+0x125/0x370 [ 335.450283][T11108] ? zone_watermark_ok_safe+0x230/0x230 [ 335.455846][T11108] ? rcu_is_watching+0x15/0xb0 [ 335.460632][T11108] ? __get_vm_area_node+0x356/0x370 [ 335.465862][T11108] __vmalloc_node_range+0x393/0x1330 [ 335.471166][T11108] ? netlink_insert+0x109f/0x13a0 [ 335.476232][T11108] ? netlink_data_ready+0x10/0x10 [ 335.481271][T11108] ? free_vm_area+0x50/0x50 [ 335.485797][T11108] ? netlink_sendmsg+0x602/0xbf0 [ 335.490756][T11108] vmalloc+0x79/0x90 [ 335.494668][T11108] ? netlink_sendmsg+0x602/0xbf0 [ 335.499623][T11108] netlink_sendmsg+0x602/0xbf0 [ 335.504407][T11108] ? netlink_getsockopt+0x590/0x590 [ 335.509619][T11108] ? aa_sock_msg_perm+0x94/0x150 [ 335.514570][T11108] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.519867][T11108] ? security_socket_sendmsg+0x80/0xa0 [ 335.525344][T11108] sock_write_iter+0x2df/0x420 [ 335.530129][T11108] ? sock_read_iter+0x3e0/0x3e0 [ 335.535006][T11108] ? common_file_perm+0x198/0x1f0 [ 335.540054][T11108] vfs_write+0x46c/0x990 [ 335.544330][T11108] ? file_end_write+0x250/0x250 [ 335.549209][T11108] ? __fget_files+0x43d/0x4b0 [ 335.553916][T11108] ? __fdget_pos+0x1d8/0x330 [ 335.558524][T11108] ? ksys_write+0x75/0x260 [ 335.562960][T11108] ksys_write+0x150/0x260 [ 335.567313][T11108] ? __ia32_sys_read+0x90/0x90 [ 335.572100][T11108] ? lockdep_hardirqs_on+0x98/0x150 [ 335.577319][T11108] do_syscall_64+0x55/0xb0 [ 335.581755][T11108] ? clear_bhb_loop+0x40/0x90 [ 335.586448][T11108] ? clear_bhb_loop+0x40/0x90 [ 335.591331][T11108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.597247][T11108] RIP: 0033:0x7f799419ce59 [ 335.601678][T11108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.621302][T11108] RSP: 002b:00007f79950a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.629732][T11108] RAX: ffffffffffffffda RBX: 00007f7994415fa0 RCX: 00007f799419ce59 [ 335.637718][T11108] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 335.645701][T11108] RBP: 00007f79950a2090 R08: 0000000000000000 R09: 0000000000000000 [ 335.653684][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.661668][T11108] R13: 00007f7994416038 R14: 00007f7994415fa0 R15: 00007ffc401c1878 [ 335.669671][T11108] [ 335.704206][ T5788] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 335.722300][T11108] Mem-Info: [ 335.738234][T11114] FAULT_INJECTION: forcing a failure. [ 335.738234][T11114] name failslab, interval 1, probability 0, space 0, times 0 [ 335.750956][T11114] CPU: 1 PID: 11114 Comm: syz.0.1710 Not tainted syzkaller #0 [ 335.758429][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.768577][T11114] Call Trace: [ 335.771870][T11114] [ 335.774809][T11114] dump_stack_lvl+0x18c/0x250 [ 335.779506][T11114] ? show_regs_print_info+0x20/0x20 [ 335.784716][T11114] ? load_image+0x420/0x420 [ 335.789236][T11114] ? __kmem_cache_alloc_node+0x13a/0x250 [ 335.794897][T11114] ? netdev_core_pick_tx+0x340/0x340 [ 335.800201][T11114] should_fail_ex+0x39d/0x4d0 [ 335.804903][T11114] should_failslab+0x9/0x20 [ 335.809437][T11114] slab_pre_alloc_hook+0x59/0x310 [ 335.814495][T11114] kmem_cache_alloc+0x5a/0x2d0 [ 335.819277][T11114] ? skb_clone+0x1eb/0x370 [ 335.823714][T11114] skb_clone+0x1eb/0x370 [ 335.827974][T11114] bpf_clone_redirect+0x167/0x4a0 [ 335.833029][T11114] bpf_prog_de5959beb1c8948f+0x5a/0x5f [ 335.838515][T11114] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 335.844512][T11114] ? lock_chain_count+0x20/0x20 [ 335.849383][T11114] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 335.855373][T11114] ? lockdep_softirqs_on+0x580/0x580 [ 335.860672][T11114] ? lock_chain_count+0x20/0x20 [ 335.865534][T11114] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 335.871795][T11114] ? __local_bh_disable_ip+0x108/0x1a0 [ 335.877266][T11114] ? __cant_sleep+0x220/0x220 [ 335.881949][T11114] ? __local_bh_enable_ip+0x13a/0x1c0 [ 335.887345][T11114] ? _local_bh_enable+0xa0/0xa0 [ 335.892223][T11114] ? bpf_test_timer_continue+0x135/0x380 [ 335.897880][T11114] ? bpf_test_run+0x174/0x870 [ 335.902586][T11114] bpf_test_run+0x2df/0x870 [ 335.907113][T11114] ? bpf_test_run+0x174/0x870 [ 335.911802][T11114] ? dst_hold+0x70/0x70 [ 335.915970][T11114] ? eth_get_headlen+0x210/0x210 [ 335.920925][T11114] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 335.926331][T11114] ? cpu_online+0x60/0x60 [ 335.930679][T11114] bpf_prog_test_run+0x321/0x390 [ 335.935630][T11114] __sys_bpf+0x49d/0x890 [ 335.939899][T11114] ? bpf_link_show_fdinfo+0x390/0x390 [ 335.945299][T11114] ? lock_chain_count+0x20/0x20 [ 335.950175][T11114] __x64_sys_bpf+0x7c/0x90 [ 335.954610][T11114] do_syscall_64+0x55/0xb0 [ 335.959043][T11114] ? clear_bhb_loop+0x40/0x90 [ 335.963734][T11114] ? clear_bhb_loop+0x40/0x90 [ 335.968430][T11114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.974336][T11114] RIP: 0033:0x7f6ce819ce59 [ 335.978759][T11114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.998552][T11114] RSP: 002b:00007f6ce63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.007065][T11114] RAX: ffffffffffffffda RBX: 00007f6ce8415fa0 RCX: 00007f6ce819ce59 [ 336.015049][T11114] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 336.023030][T11114] RBP: 00007f6ce63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.031027][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.039005][T11114] R13: 00007f6ce8416038 R14: 00007f6ce8415fa0 R15: 00007ffcda1b9dc8 [ 336.047020][T11114] [ 336.061059][T11108] active_anon:9416 inactive_anon:0 isolated_anon:0 [ 336.061059][T11108] active_file:17130 inactive_file:40056 isolated_file:0 [ 336.061059][T11108] unevictable:768 dirty:204 writeback:0 [ 336.061059][T11108] slab_reclaimable:10321 slab_unreclaimable:95136 [ 336.061059][T11108] mapped:24458 shmem:5149 pagetables:548 [ 336.061059][T11108] sec_pagetables:0 bounce:0 [ 336.061059][T11108] kernel_misc_reclaimable:0 [ 336.061059][T11108] free:1340296 free_pcp:10051 free_cma:0 [ 336.147714][T11108] Node 0 active_anon:33924kB inactive_anon:0kB active_file:68520kB inactive_file:160024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97864kB dirty:816kB writeback:0kB shmem:15340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10708kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 336.216776][T11108] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 336.277992][T11108] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.344865][T11108] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 336.350704][T11108] Node 0 DMA32 free:1452804kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24684kB inactive_anon:0kB active_file:68520kB inactive_file:159192kB unevictable:1536kB writepending:816kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:30148kB local_pcp:21204kB free_cma:0kB [ 336.432976][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 336.469488][T11108] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.574265][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 336.586973][T11108] Node 1 Normal free:3891452kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23028kB local_pcp:8352kB free_cma:0kB [ 336.985433][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 337.034743][T11108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 337.055929][T11108] Node 0 DMA32: 957*4kB (UME) 1693*8kB (UME) 790*16kB (UME) 1257*32kB (UME) 364*64kB (UME) 140*128kB (UME) 122*256kB (UM) 100*512kB (UME) 51*1024kB (UME) 8*2048kB (UME) 296*4096kB (UM) = 1474908kB [ 337.129320][T11108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 337.192233][T11108] Node 1 Normal: 155*4kB (UME) 54*8kB (UME) 46*16kB (UME) 50*32kB (UME) 11*64kB (U) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (U) 948*4096kB (M) = 3891452kB [ 337.230990][T11108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.254611][T11108] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.264112][T11108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.322748][T11108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.332718][T11111] validate_nla: 1 callbacks suppressed [ 337.332732][T11111] netlink: 'syz.2.1709': attribute type 10 has an invalid length. [ 337.341007][T11131] netlink: 'syz.3.1714': attribute type 153 has an invalid length. [ 337.354670][T11108] 58547 total pagecache pages [ 337.359369][T11108] 0 pages in swap cache [ 337.363526][T11108] Free swap = 124996kB [ 337.368112][T11131] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 337.376179][T11108] Total swap = 124996kB [ 337.380348][T11108] 2097051 pages RAM [ 337.384239][T11108] 0 pages HighMem/MovableOnly [ 337.414552][T11108] 416932 pages reserved [ 337.418749][T11108] 0 pages cma reserved [ 337.620755][T11142] netlink: 'syz.3.1718': attribute type 153 has an invalid length. [ 337.629968][T11142] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 337.641384][T11142] __nla_validate_parse: 8 callbacks suppressed [ 337.641397][T11142] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1718'. [ 337.806332][T11150] netlink: 'syz.1.1722': attribute type 153 has an invalid length. [ 337.814357][T11150] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 337.822651][T11150] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1722'. [ 337.996712][T11158] netlink: 'syz.1.1726': attribute type 153 has an invalid length. [ 338.006609][T11158] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 338.018724][T11158] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1726'. [ 338.273062][T11163] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.284143][T11163] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.299119][T11157] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.309679][T11163] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.393304][T11163] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 338.408637][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.423056][T11163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.831020][T11165] syzkaller0: entered promiscuous mode [ 338.838070][T11165] syzkaller0: entered allmulticast mode [ 339.248377][T11184] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1735'. [ 339.950584][T11175] delete_channel: no stack [ 340.537765][T11185] team0: Port device wlan1 added [ 343.043454][T11222] validate_nla: 8 callbacks suppressed [ 343.043470][T11222] netlink: 'syz.3.1746': attribute type 39 has an invalid length. [ 343.441038][T11218] delete_channel: no stack [ 343.922190][T11230] netlink: 'syz.0.1747': attribute type 10 has an invalid length. [ 344.060563][T11234] netlink: 'syz.1.1748': attribute type 153 has an invalid length. [ 344.145999][T11234] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 344.153780][T11234] __nla_validate_parse: 9 callbacks suppressed [ 344.153792][T11234] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1748'. [ 344.215587][T11230] team0: Port device geneve1 added [ 344.533142][T11240] netlink: 'syz.0.1759': attribute type 153 has an invalid length. [ 344.622927][T11240] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 344.716614][T11240] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1759'. [ 345.004398][T11237] netlink: 'syz.3.1749': attribute type 10 has an invalid length. [ 345.112708][T11245] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1750'. [ 345.261534][T11237] team0: Port device wlan1 added [ 345.323774][T11245] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1750'. [ 345.378597][T11241] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1750'. [ 345.480411][T11241] netlink: 'syz.1.1750': attribute type 10 has an invalid length. [ 345.508047][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1750'. [ 345.667419][T11241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1750'. [ 346.831360][T11253] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1752'. [ 346.854811][T11253] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1752'. [ 346.988074][T11252] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1752'. [ 347.282160][T11253] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 347.695531][T11261] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 348.117714][T11277] validate_nla: 4 callbacks suppressed [ 348.117728][T11277] netlink: 'syz.1.1763': attribute type 9 has an invalid length. [ 348.134276][T11276] netlink: 'syz.3.1771': attribute type 153 has an invalid length. [ 348.142654][T11276] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 348.172751][T11280] netlink: 'syz.1.1763': attribute type 9 has an invalid length. [ 348.483453][T11287] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 348.499356][T11284] bridge_slave_0: left allmulticast mode [ 348.507262][T11284] bridge_slave_0: left promiscuous mode [ 348.516180][T11284] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.553258][T11288] netlink: 'syz.1.1764': attribute type 153 has an invalid length. [ 348.571936][T11288] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 349.230989][T11301] netlink: 'syz.0.1776': attribute type 9 has an invalid length. [ 349.247393][T11303] netlink: 'syz.2.1766': attribute type 10 has an invalid length. [ 349.257212][T11301] __nla_validate_parse: 18 callbacks suppressed [ 349.257226][T11301] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1776'. [ 349.276856][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1766'. [ 349.293502][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1766'. [ 349.352389][T11305] netlink: 'syz.0.1776': attribute type 9 has an invalid length. [ 349.365613][T11305] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1776'. [ 350.371331][T11327] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1775'. [ 350.604589][T11327] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1775'. [ 350.624517][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1775'. [ 350.633931][T11334] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 351.005099][T11323] team0: Device ipvlan1 failed to register rx_handler [ 351.401315][T11321] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1775'. [ 351.425110][T11327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1775'. [ 351.491901][T11341] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1779'. [ 351.587363][ T59] tipc: Subscription rejected, illegal request [ 352.515187][T11347] tun0: tun_chr_ioctl cmd 1074025681 [ 352.917098][T11345] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 353.570216][T11364] validate_nla: 7 callbacks suppressed [ 353.570233][T11364] netlink: 'syz.1.1783': attribute type 10 has an invalid length. [ 353.932561][T11369] netlink: 'syz.2.1787': attribute type 153 has an invalid length. [ 353.972018][T11369] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 354.258970][T11378] netlink: 'syz.2.1791': attribute type 153 has an invalid length. [ 354.395317][T11378] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 354.403097][T11378] __nla_validate_parse: 13 callbacks suppressed [ 354.403106][T11378] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1791'. [ 354.649634][T11382] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1788'. [ 354.667816][T11382] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1788'. [ 354.679155][T11370] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1788'. [ 354.710519][T11382] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1788'. [ 354.768353][T11387] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1790'. [ 354.777913][T11387] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1790'. [ 354.796632][T11380] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1790'. [ 354.826587][T11387] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1790'. [ 354.986101][T11387] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 355.104992][T11387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 355.225033][T11390] netlink: 'syz.3.1788': attribute type 10 has an invalid length. [ 355.341027][T11390] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 355.895461][T11399] tun0: tun_chr_ioctl cmd 1074025681 [ 356.363457][T11402] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 356.979731][T11410] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 358.118397][T11429] netlink: 'syz.3.1797': attribute type 10 has an invalid length. [ 358.135243][T11429] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 359.647792][T11433] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 359.658806][T11435] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 359.682509][T11435] team0: Port device geneve1 added [ 361.067214][T11466] netlink: 'syz.2.1816': attribute type 5 has an invalid length. [ 361.131298][T11450] __nla_validate_parse: 20 callbacks suppressed [ 361.131341][T11450] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.165444][T11450] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.207832][T11466] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1816'. [ 361.233562][T11456] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.259270][T11469] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.342159][T11473] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1818'. [ 361.434640][T11481] netlink: 'syz.3.1818': attribute type 3 has an invalid length. [ 361.465978][T11481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1818'. [ 361.498960][T11474] netlink: 'syz.1.1810': attribute type 10 has an invalid length. [ 361.550582][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.654029][T11474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.805090][T11486] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1822'. [ 362.261839][T11500] netlink: 'syz.3.1826': attribute type 153 has an invalid length. [ 362.285202][T11500] netlink: 'syz.3.1826': attribute type 1 has an invalid length. [ 362.386735][T11504] netlink: 'syz.1.1829': attribute type 29 has an invalid length. [ 362.465994][T11510] netlink: 'syz.3.1830': attribute type 153 has an invalid length. [ 362.479550][T11502] syzkaller0: entered promiscuous mode [ 362.485273][T11510] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 362.493053][T11502] syzkaller0: entered allmulticast mode [ 362.795916][T11521] FAULT_INJECTION: forcing a failure. [ 362.795916][T11521] name failslab, interval 1, probability 0, space 0, times 0 [ 362.812610][T11521] CPU: 1 PID: 11521 Comm: syz.3.1833 Not tainted syzkaller #0 [ 362.820139][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.830208][T11521] Call Trace: [ 362.833490][T11521] [ 362.836425][T11521] dump_stack_lvl+0x18c/0x250 [ 362.841126][T11521] ? show_regs_print_info+0x20/0x20 [ 362.846338][T11521] ? load_image+0x420/0x420 [ 362.850850][T11521] ? __might_sleep+0xe0/0xe0 [ 362.855452][T11521] ? __lock_acquire+0x7d40/0x7d40 [ 362.860487][T11521] should_fail_ex+0x39d/0x4d0 [ 362.865181][T11521] should_failslab+0x9/0x20 [ 362.869696][T11521] slab_pre_alloc_hook+0x59/0x310 [ 362.874734][T11521] ? rtnl_newlink+0x10d/0x20a0 [ 362.879507][T11521] __kmem_cache_alloc_node+0x53/0x250 [ 362.884894][T11521] ? rtnl_newlink+0x10d/0x20a0 [ 362.889667][T11521] kmalloc_trace+0x2a/0xe0 [ 362.894101][T11521] ? rtnl_setlink+0x4e0/0x4e0 [ 362.898790][T11521] rtnl_newlink+0x10d/0x20a0 [ 362.903393][T11521] ? arch_stack_walk+0x160/0x190 [ 362.908368][T11521] ? __mutex_trylock_common+0x159/0x260 [ 362.913924][T11521] ? rtnl_setlink+0x4e0/0x4e0 [ 362.918611][T11521] ? trace_raw_output_contention_end+0xd0/0xd0 [ 362.924779][T11521] ? rcu_is_watching+0x15/0xb0 [ 362.929554][T11521] ? trace_contention_end+0x39/0xe0 [ 362.934757][T11521] ? __mutex_lock+0x315/0xcc0 [ 362.939457][T11521] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 362.944581][T11521] ? mutex_lock_nested+0x20/0x20 [ 362.949539][T11521] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 362.954661][T11521] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 362.959778][T11521] ? rtnl_setlink+0x4e0/0x4e0 [ 362.964463][T11521] rtnetlink_rcv_msg+0x869/0xfa0 [ 362.969420][T11521] ? lockdep_hardirqs_on+0x98/0x150 [ 362.974628][T11521] ? rtnetlink_bind+0x80/0x80 [ 362.979319][T11521] ? perf_trace_preemptirq_template+0xac/0x330 [ 362.985488][T11521] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 362.991485][T11521] ? lock_chain_count+0x20/0x20 [ 362.996349][T11521] ? __local_bh_enable_ip+0x13a/0x1c0 [ 363.001743][T11521] ? lockdep_hardirqs_on+0x98/0x150 [ 363.006969][T11521] ? __local_bh_enable_ip+0x13a/0x1c0 [ 363.012351][T11521] ? _local_bh_enable+0xa0/0xa0 [ 363.017219][T11521] ? __dev_queue_xmit+0x265/0x3660 [ 363.022352][T11521] ? __dev_queue_xmit+0x265/0x3660 [ 363.027487][T11521] ? __dev_queue_xmit+0x1b2c/0x3660 [ 363.032715][T11521] ? __dev_queue_xmit+0x265/0x3660 [ 363.037852][T11521] ? ref_tracker_free+0x690/0x840 [ 363.042906][T11521] netlink_rcv_skb+0x241/0x4d0 [ 363.047689][T11521] ? rtnetlink_bind+0x80/0x80 [ 363.052383][T11521] ? netlink_ack+0x1180/0x1180 [ 363.057170][T11521] ? __lock_acquire+0x7d40/0x7d40 [ 363.062212][T11521] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.067516][T11521] netlink_unicast+0x751/0x8d0 [ 363.072302][T11521] netlink_sendmsg+0x8d0/0xbf0 [ 363.077088][T11521] ? netlink_getsockopt+0x590/0x590 [ 363.082300][T11521] ? aa_sock_msg_perm+0x94/0x150 [ 363.087260][T11521] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 363.092557][T11521] ? security_socket_sendmsg+0x80/0xa0 [ 363.098024][T11521] ? netlink_getsockopt+0x590/0x590 [ 363.103237][T11521] ____sys_sendmsg+0x5ba/0x960 [ 363.108020][T11521] ? __asan_memset+0x22/0x40 [ 363.112626][T11521] ? __sys_sendmsg_sock+0x30/0x30 [ 363.117671][T11521] ? __import_iovec+0x5f2/0x850 [ 363.122549][T11521] ? import_iovec+0x73/0xa0 [ 363.127066][T11521] ___sys_sendmsg+0x2a6/0x360 [ 363.131763][T11521] ? get_pid_task+0x20/0x1e0 [ 363.136381][T11521] ? __sys_sendmsg+0x2a0/0x2a0 [ 363.141181][T11521] ? __lock_acquire+0x7d40/0x7d40 [ 363.146244][T11521] __se_sys_sendmsg+0x1c2/0x2b0 [ 363.151108][T11521] ? __x64_sys_sendmsg+0x80/0x80 [ 363.156076][T11521] ? lockdep_hardirqs_on+0x98/0x150 [ 363.161289][T11521] do_syscall_64+0x55/0xb0 [ 363.165717][T11521] ? clear_bhb_loop+0x40/0x90 [ 363.170412][T11521] ? clear_bhb_loop+0x40/0x90 [ 363.175104][T11521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.181011][T11521] RIP: 0033:0x7f6c0a59ce59 [ 363.185432][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.205046][T11521] RSP: 002b:00007f6c0b3e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.213479][T11521] RAX: ffffffffffffffda RBX: 00007f6c0a815fa0 RCX: 00007f6c0a59ce59 [ 363.221458][T11521] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 363.229438][T11521] RBP: 00007f6c0b3e2090 R08: 0000000000000000 R09: 0000000000000000 [ 363.237419][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.245398][T11521] R13: 00007f6c0a816038 R14: 00007f6c0a815fa0 R15: 00007ffe2bad20f8 [ 363.253829][T11521] [ 363.540271][T11525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.794012][T11527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 364.657111][T11528] delete_channel: no stack [ 365.437950][T11536] validate_nla: 3 callbacks suppressed [ 365.437963][T11536] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 365.466064][T11536] team0: Device wg1 is of different type [ 365.480277][T11538] netlink: 'syz.2.1831': attribute type 10 has an invalid length. [ 365.881393][T11563] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.910250][T11563] netlink: 'syz.1.1847': attribute type 3 has an invalid length. [ 366.040603][T11573] netlink: 'syz.0.1852': attribute type 153 has an invalid length. [ 366.048726][T11573] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 366.342656][T11577] netlink: 'syz.1.1854': attribute type 10 has an invalid length. [ 366.480584][T11577] team0: Device wg1 is of different type [ 366.673220][T11578] __nla_validate_parse: 11 callbacks suppressed [ 366.673233][T11578] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1853'. [ 366.813655][T11578] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1853'. [ 366.860543][T11575] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1853'. [ 366.892013][T11592] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1853'. [ 366.937714][T11575] netlink: 'syz.2.1853': attribute type 10 has an invalid length. [ 366.964788][T11575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1853'. [ 367.007101][T11578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1853'. [ 367.307296][T11608] netlink: 'syz.2.1862': attribute type 10 has an invalid length. [ 367.339132][T11607] netlink: 'syz.1.1863': attribute type 153 has an invalid length. [ 367.361649][T11607] netlink: 'syz.1.1863': attribute type 1 has an invalid length. [ 367.370988][T11607] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1863'. [ 369.001823][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1870'. [ 369.138594][T11635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1866'. [ 369.182118][T11635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1866'. [ 386.790428][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.800767][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.811668][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.820407][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.828581][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.835981][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.145483][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.155344][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.163471][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.172243][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.180144][ T5788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 387.188043][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.448203][ T5789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 387.458732][ T5789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 387.467527][ T5789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 387.476184][ T5789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 387.496559][ T5789] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 387.503967][ T5789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.750790][ T5788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.763535][ T5788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.771902][ T5788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.780593][ T5788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.794686][ T5788] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 387.805448][ T5788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.890683][T11647] chnl_net:caif_netlink_parms(): no params data found [ 388.311442][T11651] chnl_net:caif_netlink_parms(): no params data found [ 388.324067][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.342566][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.350298][T11647] bridge_slave_0: entered allmulticast mode [ 388.362945][T11647] bridge_slave_0: entered promiscuous mode [ 388.423995][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.440344][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.450776][T11647] bridge_slave_1: entered allmulticast mode [ 388.458577][T11647] bridge_slave_1: entered promiscuous mode [ 388.603402][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.636785][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.894772][ T5788] Bluetooth: hci4: command tx timeout [ 389.294836][ T5788] Bluetooth: hci5: command tx timeout [ 389.534703][ T5788] Bluetooth: hci6: command tx timeout [ 389.854948][ T5788] Bluetooth: hci7: command tx timeout [ 390.976604][ T5788] Bluetooth: hci4: command tx timeout [ 391.374655][ T5788] Bluetooth: hci5: command tx timeout [ 391.614600][ T5788] Bluetooth: hci6: command tx timeout [ 391.934910][ T5788] Bluetooth: hci7: command tx timeout [ 395.700439][ T5789] Bluetooth: hci5: command tx timeout [ 395.705950][ T5789] Bluetooth: hci6: command tx timeout [ 395.711353][ T5789] Bluetooth: hci7: command tx timeout [ 395.720185][ T5788] Bluetooth: hci4: command tx timeout [ 400.944978][ T5788] Bluetooth: hci4: command tx timeout [ 400.950431][ T5788] Bluetooth: hci7: command tx timeout [ 400.956029][ T5788] Bluetooth: hci6: command tx timeout [ 400.961432][ T5788] Bluetooth: hci5: command tx timeout [ 447.420385][ T5788] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 447.434973][ T5788] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 447.442718][ T5788] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 447.451733][ T5788] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 447.459788][ T5788] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 447.467465][ T5788] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 447.595575][ T5790] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 447.610718][ T5790] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 447.619089][ T5790] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 447.628228][ T5790] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 447.642508][ T5790] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 447.650181][ T5790] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 447.739412][ T5788] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 447.748949][ T5788] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 447.757226][ T5788] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 447.765653][ T5788] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 447.773902][ T5788] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 447.782977][ T5788] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 447.865386][ T5790] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 447.874075][ T5790] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 447.882585][ T5790] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 447.892446][ T5790] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 447.900608][ T5790] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 447.911907][ T5790] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 449.534683][ T5788] Bluetooth: hci8: command tx timeout [ 449.694852][ T5788] Bluetooth: hci9: command tx timeout [ 449.859180][ T5788] Bluetooth: hci10: command tx timeout [ 450.014685][ T5788] Bluetooth: hci11: command tx timeout [ 451.616659][ T5788] Bluetooth: hci8: command tx timeout [ 451.774580][ T5788] Bluetooth: hci9: command tx timeout [ 451.934770][ T5788] Bluetooth: hci10: command tx timeout [ 452.094669][ T5788] Bluetooth: hci11: command tx timeout [ 455.765260][ T5788] Bluetooth: hci8: command tx timeout [ 455.770719][ T5788] Bluetooth: hci9: command tx timeout [ 455.776963][ T5790] Bluetooth: hci10: command tx timeout [ 455.782473][ T5790] Bluetooth: hci11: command tx timeout [ 457.855203][ T5790] Bluetooth: hci11: command tx timeout [ 457.860749][ T5790] Bluetooth: hci9: command tx timeout [ 457.866313][ T5789] Bluetooth: hci10: command tx timeout [ 457.872056][ T5789] Bluetooth: hci8: command tx timeout [ 470.378293][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.391660][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.754451][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 472.761112][ C0] rcu: 0-....: (10388 ticks this GP) idle=b77c/1/0x4000000000000000 softirq=36659/36660 fqs=3256 [ 472.772512][ C0] rcu: hardirqs softirqs csw/system [ 472.778906][ C0] rcu: number: 1365997 4 0 [ 472.785294][ C0] rcu: cputime: 17021 35478 43 ==> 52520(ms) [ 472.793075][ C0] rcu: (t=10503 jiffies g=42369 q=2635 ncpus=2) [ 472.799398][ C0] CPU: 0 PID: 11622 Comm: syz.0.1869 Not tainted syzkaller #0 [ 472.806925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.816981][ C0] RIP: 0010:rcuref_put_slowpath+0x4/0x150 [ 472.822729][ C0] Code: 51 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c a6 48 89 df e8 de 0b b5 fd eb 9c 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa <55> 53 89 f5 48 89 fb e8 f0 cb 5c fd bf ff ff ff ff 89 ee e8 94 cf [ 472.842345][ C0] RSP: 0018:ffffc90000007478 EFLAGS: 00000246 [ 472.848422][ C0] RAX: ffffffff887ee820 RBX: ffff88804d1a8900 RCX: ffff88802a9b0000 [ 472.856398][ C0] RDX: 0000000000000100 RSI: 00000000ffffffff RDI: ffff88804d1a8900 [ 472.864347][ C0] RBP: ffffc90000007518 R08: ffff88804d1a8903 R09: 1ffff11009a35120 [ 472.872299][ C0] R10: dffffc0000000000 R11: ffffed1009a35121 R12: dffffc0000000000 [ 472.880249][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: 1ffff92000000e90 [ 472.888198][ C0] FS: 00007f6ce63d56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 472.897105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.903664][ C0] CR2: 00007f6ce63d5d58 CR3: 00000000548b9000 CR4: 00000000003506f0 [ 472.911614][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 472.919565][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 472.927538][ C0] Call Trace: [ 472.930802][ C0] [ 472.933630][ C0] rcuref_put+0x20b/0x220 [ 472.937949][ C0] ? dst_release+0x1a0/0x1a0 [ 472.942521][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 472.948667][ C0] dst_release+0x24/0x1a0 [ 472.952979][ C0] __dev_queue_xmit+0x97a/0x3660 [ 472.957905][ C0] ? read_seqbegin+0x196/0x270 [ 472.962654][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 472.967746][ C0] ? read_seqbegin+0x19a/0x270 [ 472.972496][ C0] ? read_seqbegin+0x1c8/0x270 [ 472.977242][ C0] ? neigh_event_send+0x110/0x110 [ 472.982254][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 472.987521][ C0] ? __asan_memcpy+0x40/0x70 [ 472.992094][ C0] ? eth_header+0x11b/0x200 [ 472.996577][ C0] ? llc_sysctl_exit+0x70/0x70 [ 473.001318][ C0] ? neigh_resolve_output+0x618/0x730 [ 473.006679][ C0] ip6_finish_output2+0xe3d/0x1630 [ 473.011780][ C0] ? ip6_finish_output2+0x645/0x1630 [ 473.017048][ C0] ? ip6_mtu+0x7d/0x3f0 [ 473.021182][ C0] ? nf_hook+0x390/0x390 [ 473.025408][ C0] ? ip6_finish_output+0x57b/0x820 [ 473.030505][ C0] ndisc_send_skb+0xc26/0x14f0 [ 473.035250][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 473.040171][ C0] ? ndisc_mc_map+0x680/0x680 [ 473.044829][ C0] ? skb_dst+0xd0/0xd0 [ 473.048891][ C0] addrconf_rs_timer+0x2d5/0x630 [ 473.053814][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 473.059862][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 473.065830][ C0] call_timer_fn+0x189/0x540 [ 473.070487][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 473.076533][ C0] ? call_timer_fn+0xd2/0x540 [ 473.081186][ C0] ? __run_timers+0x800/0x800 [ 473.085847][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 473.091901][ C0] __run_timers+0x542/0x800 [ 473.096389][ C0] ? detach_timer+0x2b0/0x2b0 [ 473.101053][ C0] run_timer_softirq+0x67/0xf0 [ 473.105795][ C0] handle_softirqs+0x280/0x820 [ 473.110540][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 473.115284][ C0] ? do_softirq+0x1a0/0x1a0 [ 473.119770][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 473.124950][ C0] __irq_exit_rcu+0xd3/0x190 [ 473.129516][ C0] ? irq_exit_rcu+0x20/0x20 [ 473.134005][ C0] irq_exit_rcu+0x9/0x20 [ 473.138225][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 473.143841][ C0] [ 473.146756][ C0] [ 473.149701][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.155662][ C0] RIP: 0010:generic_exec_single+0x48a/0x4f0 [ 473.161536][ C0] Code: db 75 16 e8 b8 06 0b 00 eb 15 e8 b1 06 0b 00 e8 3c f6 0b 09 48 85 db 74 ea e8 a2 06 0b 00 fb 31 c0 48 c7 44 24 20 0e 36 e0 45 <4b> c7 04 2c 00 00 00 00 43 c7 44 2c 08 00 00 00 00 65 48 8b 0c 25 [ 473.181123][ C0] RSP: 0018:ffffc900036d7a00 EFLAGS: 00000246 [ 473.187171][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 473.195121][ C0] RDX: ffffc90012ebc000 RSI: 0000000000003d0b RDI: 0000000000003d0c [ 473.203070][ C0] RBP: ffffc900036d7ad0 R08: ffffffff911cc5ff R09: 1ffffffff22398bf [ 473.211021][ C0] R10: dffffc0000000000 R11: fffffbfff22398c0 R12: 1ffff920006daf44 [ 473.218972][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920006daf65 [ 473.226938][ C0] ? event_function+0x300/0x300 [ 473.231771][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 473.237471][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 473.243435][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 473.249051][ C0] smp_call_function_single+0x36d/0x5a0 [ 473.254575][ C0] ? event_function+0x300/0x300 [ 473.259407][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 473.265539][ C0] ? event_function+0x300/0x300 [ 473.270395][ C0] perf_install_in_context+0x5be/0x920 [ 473.275840][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 473.281805][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 473.287077][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 473.292258][ C0] ? perf_event__header_size+0x165/0x220 [ 473.297873][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 473.303572][ C0] ? security_bpf+0x7e/0xa0 [ 473.308063][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 473.313682][ C0] ? lock_chain_count+0x20/0x20 [ 473.318515][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 473.323704][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 473.329340][ C0] do_syscall_64+0x55/0xb0 [ 473.333741][ C0] ? clear_bhb_loop+0x40/0x90 [ 473.338404][ C0] ? clear_bhb_loop+0x40/0x90 [ 473.343086][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.348960][ C0] RIP: 0033:0x7f6ce819ce59 [ 473.353360][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.372954][ C0] RSP: 002b:00007f6ce63d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 473.381349][ C0] RAX: ffffffffffffffda RBX: 00007f6ce8416090 RCX: 00007f6ce819ce59 [ 473.389301][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 473.397251][ C0] RBP: 00007f6ce8232d6f R08: 0000000000000002 R09: 0000000000000000 [ 473.405289][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 473.413239][ C0] R13: 00007f6ce8416128 R14: 00007f6ce8416090 R15: 00007ffcda1b9dc8 [ 473.421202][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)