last executing test programs: 6.235185746s ago: executing program 2 (id=1967): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x110028, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000b00000000000000000000008500000097000000180100002020692500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b7030000feffffff850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r8}, &(0x7f0000000380), &(0x7f0000000780)=r0}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x76, &(0x7f0000000500)=""/118, 0x41100, 0x1c, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0xfe42, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[{0x1, 0x4, 0xd, 0x6}, {0x1, 0x3, 0xd, 0x7}, {0x0, 0x4, 0xb, 0x7}], 0x10, 0xc4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f0000000280), &(0x7f0000000700)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.690765278s ago: executing program 2 (id=1970): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010008107d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 4.317329877s ago: executing program 2 (id=1981): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x2) r2 = socket$kcm(0x23, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB='b\x00\x00:* rm\x00'], 0x9) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0064000002000000b70500000800000085000000c200000095", @ANYRES64=r8, @ANYRES8=r8], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r10 = socket$kcm(0x2, 0x6, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xa1}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28008840) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 4.002460954s ago: executing program 3 (id=1984): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_clone(0x20021000, &(0x7f0000001180), 0x0, &(0x7f0000001040), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, r4, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000006000000850000001600000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r9 = socket$kcm(0x2, 0x1, 0x0) close(r3) sendmsg$inet(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) 3.891048076s ago: executing program 2 (id=1987): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000003018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.528026235s ago: executing program 1 (id=1992): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x800000008001, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x4, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000011ac1414aa00"], 0xcfa4) 2.507312246s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000000fcff204e006800000000000ca00000000000009504000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x14, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) 2.505023026s ago: executing program 1 (id=1994): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x40008000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x300, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'sit0\x00', @random="0200ac7f7f00"}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) 2.395911988s ago: executing program 2 (id=1996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.395534238s ago: executing program 3 (id=1997): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000a5000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.119727424s ago: executing program 3 (id=1998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000001}, 0x94) (async, rerun: 64) r1 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441) (async) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000440)=r4) (async) r5 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r7) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x83, &(0x7f0000000000)=r8, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r8, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r12, 0x0, 0x0}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r9, @lirc_mode2, r4, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x6, 0x6}, 0x10, 0x0, r8, 0x3, &(0x7f0000000700)=[r10, r8, r13, r8, r8, r8], &(0x7f0000000740)=[{0x0, 0x2, 0xb, 0x4}, {0x0, 0x2, 0x9, 0xb}, {0x5, 0x4, 0x9, 0x7}], 0x10, 0x80}, 0x94) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r15 = openat$cgroup_devices(r14, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r15, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:*'], 0xa) recvmsg(r1, &(0x7f0000001d00)={&(0x7f0000000840)=@xdp, 0x80, &(0x7f0000001c00)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/216, 0xd8}, {&(0x7f00000019c0)=""/107, 0x6b}, {&(0x7f0000001a40)=""/203, 0xcb}, {&(0x7f0000001b40)=""/191, 0xbf}], 0x5, &(0x7f0000001c80)=""/101, 0x65}, 0x60001020) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0xe, 0x3, 0x82000000}]}) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1.999267247s ago: executing program 0 (id=1999): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x0, 0x62, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000000e00), 0x0, 0x0, 0xd4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x1590f}, 0x2920, 0x6, 0x6, 0x8, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079104800000000006900220000000f0095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 1.635939534s ago: executing program 0 (id=2000): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000214c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000002000000000000000000003000000000100000002"], 0x0, 0x66}, 0x28) 1.217872764s ago: executing program 2 (id=2001): socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x79, &(0x7f0000000000), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f01000000000000000000000000000000990000000000000004c9d920c1926c72310afac149cd6b0c00000000000000000000000c00000000000000000100000f03000000000000000000de92fd95439d8e1360cd27affea9a60fd175e469fc8614637792fd723662be3ce48d75218da08682cc379178e7f65dbeb50bb60f164c4cf40f1819c905fc48a927c6162a6599e4287a430237631361ada20db458d7128b8db339af5d6057633bc3898ec07d900134813ba40171482700"/256], 0x0, 0x82, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, &(0x7f0000000080)) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 1.176555195s ago: executing program 3 (id=2002): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd600664f7931fed6bd954b43370e97", 0xd7}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="f32288557b39864701b58ed1b7325cdc84870bf9ed766ce3f3e2e732faf954976d9ccbb0554fa383bdbdaf0c4915a7cbf315979cd8b7e54dbc8876bf343778425fd8f09978abb4f8681b286cc66ea0784f5d27218431830dc7591f1a55e29d004c2ffcb5460c1da7755604186e5c0e66362dca0497db4e838836f3e74371bc5390b842129f40dbfb3aac04ac2cdfbba4b12e1810d2e372df71be86d82e453656e7eb41af323c2e410d9698cf8566e3d4b29bbbf424602dabba4c43355413a4246a0aa211c8f47045cee6f9e2cedeb3dcf5863097211e88f81ae0c66d4f6b7e935739405770f13b3ca90b9624", 0xec}, {&(0x7f0000000c40)="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", 0x118}], 0x2, &(0x7f0000001080)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b774594"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0xd0, 0x107, 0x7, "67fe31de3edd141f0c76bebc733acab75b1eb805a0c13fe84d113c956f151d923a8a9c1517b70706a382f656b2489f8e3eaee06565415a85807004243428cc6375ea1b2516ecabc6b7d5cfff94ea23aa2538c448e9534f1b8aaa248cf0320bbdd14e529faa11aaf30e7e165c1bbf74a2efb15fb837faa215e73736eb1d00b84cdaa4fe9c8fe9baa9af3ec4b9b7b3c36f75748df69d5becfbf2d48e41bbb0c0b7a852a8023223573a37bc7324aa6945e141f3da72ace4e9d3ce084a144c5a"}, {0x70, 0x108, 0xffff7a8f, "240100008069030da4711f76960c0607f912ceb8fdff35fa720f9c701289057311e7bf6d559a0c59565aefc28a8e67750106b0dbbb9ea7b29785d71140b9509974d40529993896071e4c5e6146702ab0e8e8de7ca1d1730e53c7bfce"}, {0x28, 0x22, 0x2, "a2c657814eb471b0882322afcae866fae378e61a"}, {0x68, 0x29, 0xe72, "3a2e9eeb98ec347da1bdd577dfd4ac25f4c4acc84ac11838d560054ed302ccd51b6326757c407162823c4d2bf36bfa3065b458791c80024aa896af5186a420b45d7bdc4e350aa38959ec5bb839515eec097b514d50"}, {0xc8, 0x10a, 0x8, "63c3edd93989dde3c226ee3916e811fc6efc4cc93db65f1dd59fbae02bff4ac9f5ca02336685104c04d490fb26db8fc843e5c2e9a094a942a5d4e168a86a80b2d7271710d37d6029aa3c3457705e4adfdcc7db05e44b483c5388f8005c6997a5e68683730c801cfe28b2248cab84253e20a03d3de614f8162d3f706854e9f9c1b4b909b0708d2ee4bd756f80303e6b3b7ec55bcd41836d1a168b5f9d3faf940108009e761565eb4b719ac688e4e962fee3245f81"}], 0x378}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000001f00000071a2040000000000950000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0xb0}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) 1.111880716s ago: executing program 0 (id=2003): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.110902866s ago: executing program 1 (id=2004): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000041000511d25a80648c63940d0324fc60040035400c0002000200002037153e", 0x23}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d"], 0xfe33) socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000041000511d25a80648c63940d0324fc60040035400c0002000200002037153e", 0x23}], 0x1}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d"], 0xfe33) (async) 750.509664ms ago: executing program 0 (id=2005): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\t\x00)\x00\x00\x00\v'], 0x28}, 0x0) 643.999066ms ago: executing program 1 (id=2006): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x2000000, 0x8dde, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_config_ext={0x4, 0xf9}, 0x806, 0xc8, 0x22, 0x4, 0x400, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, 0x0, 0x66) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x13, &(0x7f0000000200), 0x4) sendmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c8d4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='cpu&20\t&&') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) 438.080451ms ago: executing program 0 (id=2007): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x8, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x1, 0x8, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xbf}, @ldst={0x0, 0x0, 0x1, 0x1, 0x9, 0x20, 0xfffffffffffffff0}], &(0x7f0000000580)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x7ff, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x1, 0xf, 0x4}, {0x5, 0x4, 0xc, 0x4}, {0x1, 0x2, 0x2, 0x2}, {0x5, 0x2, 0x8}, {0x0, 0x3, 0x2, 0x3}, {0x4, 0x5, 0x2, 0x6}, {0x5, 0x2, 0x7, 0x4}, {0x3, 0x4, 0xc, 0x9}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x7}, @ldst={0x1, 0x1, 0x6, 0x6, 0xa, 0xffffffffffffffd1, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x2, 0x3, 0x0, 0x6, 0xb, 0xfffffffffffffff4}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0xc, '\x00', r3, @fallback=0x13, r1, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x1b, 0x5}, 0x10, r4, r5, 0x6, 0x0, &(0x7f0000000780)=[{0x1, 0x2, 0x1, 0x4}, {0x3, 0x2, 0x10, 0xd}, {0x0, 0x4, 0xe, 0x5}, {0x0, 0x4, 0x9, 0x7}, {0x5, 0x4, 0xf, 0x8}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x8}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg(r7, &(0x7f0000002140)={&(0x7f0000000800)=@generic={0x15, "b85b97205f841d66106de39b0f596f40ead4a9b75343c1a795c1c2626d6c96b7b9f0219b20adb3d85fa0bee045275a102fc342387dc0b14fdfa5ac4289973f7c98fa6a24631e63830139f89e8986231d428b38565971157d477dcbbbdc2eb457057815b67971e01ff42b0cf76c2caf23bbc7173bbef01e9b36c5392caf20"}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000009c0)="189d1a1ce703595e612ecc845b6b4c4b75879db7bd2f02dac11c6fdc6926b93d23891d9dde9cdda42dba19b808fe6fdcc83e3c4a0bd19837777700d0396ed8553f292135a46d58d950111604ada3358f2325722f5fdb134c1e7d392a61ad6832df582b5b9f396cbe57202085cd0cfd41106647cfeac24874523984db756784c29ac253eed4e9788fad1d965332207ae41ecedf0c9b6d8ddaa2ea495ba037e5", 0x9f}, {&(0x7f0000000a80)="e9420d135a915c4c0a98957457d0309ca199885e22eb982b73afaa4b03cc3c931b5b67bfbfc2f27ab2e22288ad81d5bac6119e8e8477335e857f57aaeb7daff82a8b09813c9e3d2465bc86062b9b4d9e", 0x50}, {&(0x7f0000000b00)="8c73de9fd0d886cbeb46c312af21ba8b5aa332fba3a0ddc598d90430445e5ae9951e5564d1df1945ee844184e437b8ab13b884c44b33c2a995bf11b084a917daff3dbbce8d29177d92976df63e7b13bde5589f", 0x53}, {&(0x7f0000000b80)="8cfe1f75d129f0bf5793d4a63eb2d88a2e2947315e47c34a73b0056b425550c76a236afbf8084270b765b5e2", 0x2c}, {&(0x7f0000000bc0)="88ea72636408e3584136877a9a6e60d472f2f7e5ea58e4fc684f4e69d543bcb357ea74e8b747c2c48b39296ba17ed7524d1a4a1965f272bbdf82fc73806be4ade6a2f33197a2588f3d14", 0x4a}, {&(0x7f0000000c40)="3d7c7e19b4faa01a50c627b22a356e8aaf31bcd2849b7d1fcde05ad72d220b721f878dcec56a2c53a3d1f3bad121ca439f0caaba1d767628c6bbfa512550f44b5424c72ae9b58f2e7e41d360709a3006e6bc93e21c75bf03fd674ea7e25c228dbddfebf5fd5bd127da9af5fab4ff29de7360f2008ac822ab758b2165c80b050b3527fb3d4dd244aad22ce65d1749831e854f01a3a2e034bf8d6f440ca65aed32076d7e5de59a7593a7e5e47b07a3b3df2c5ec52d3091dda81e8125e04e54425910dd", 0xc2}, {&(0x7f0000000d40)="e8e13f2d4620a24d0720b112e660a5ac60cf3b2a8205310dbda7432654d3b8048da978da6d34f4eb153db7c0fc117cafc8b34c454a9d177fbb6831d88b0532b3aef173a809a05f27d6a408157701598e1c7e62b4131a168614aefd38cdc81005a415623e9cc066739ab0e5140ad1e86ffd4faa03f3bb35c7e47b5ca0ec16434f91cd4758635c94d98372e0e3809777d5", 0x90}, {&(0x7f0000000e00)="6a125d2fc82f59f3f9616f7505a52240d9b72e604570e09ac01c646b4da8474ed7d3c48103363cc81c98c6af8691f3bdf813d812b9557fe4ab06ff8108381908bc814da1e871edb61a28efdf683bba38efd1cd9ef53b794397d84c97", 0x5c}, {&(0x7f0000000e80)="b6178b1c9c261b5c37a4779288d6c550ee58a32b3cba4d92fd289d07dc80", 0x1e}, {&(0x7f0000000ec0)="366cc233603360c091aa13eca3cbd5a1641a415dc5e163e5f5ffde02e24cbf08bf9eb7a8a5f0807f0d11c37ca01ac3ab5587ba557d349e8cdd2214f0a51613f956004bd6e6a1711368eaeaf3507306", 0x4f}], 0xa, &(0x7f0000001100)=[{0x1010, 0x29, 0xffffff71, "5d240228f990de3c2ebd6758eb338863411cbfd23d323b64e7414ed2b9378128709fe8a171f06e46b05c61994c71754e092292c5886536b90924b633f31182c5f021338f5c8250e300224eeb2ad579fbea20ca8e95a3ce7adcd4c752e325fcb9ba79f365fd62ada0d3087231e8369866984990e2bd3c1978d472ad0b0c54283eb7a03e79affb18c9362282cd4af373fbf9510d86d19c50f9cf9896771d50f870c6797908f448bf58c82423db54afc4cd527c1dcad97de351e50f934eb5cdd88b6310a826e8b7b2136a52745cc49c57df66eda419bf4b58d0acddd33ef30d7dc2e12d7a6709aabf8eae6aa225a4d98756414077a299dd075383f9c990965320ae30594ce289260c3310468da529412e6537ca58f6130ecd96fc2bcfe408b3e6d5a88cbad751f89b6d3c734781856728f4d1794048c94894765c275dbb2768f0d7031d3da94b9c1333f2d7edc6389826e5038de19902f63236f80bf3365a272424ffdedb00567a1f2b1bc8eb0ba275f344121ed6873f80d58e8453a0ea061deff4d0aba7bfaaed950c7135e22310b17768176fcf9fbf20dcb38a5286ed1af23ac2d2cd158f8908d81816685f45fdae43b669da518cc149c7a404ce24a5e38cc8cd8ad4cabfb34a6a996b0efe72b7f087117b35dd471c2330f6ab429f0bfe98bb0ef7f20a4040daa78f7423705b14b95e6b1b8458b722573cbdb64c727fa5c859d68dad02ab03cc3ec7e52e0cb6346229c1134b9ba9a76a89f2280f258f8776003625d581009c048e4ca40dee4b852376922a30470f548696284b5f8737269c7b224bd1c4162e6bb9a7df4711510c9b6fc71eb399a60e3c8605eedffca04a26f4840905b6db29e13261f45f64df6ae38b6640bfb1193392df066d699aa442249e63e3fbbf4878adc785eae6eded5b7c6bf81763702f24e1a79f312869d634937668894bff2b211003dcd5d83eb0c394ee25e29d5bab325883b4ecdebb426bfa68fe2f5c3f4eef6fea9bac76000ddb7cf361171ab788fbccc23f0c19190bc7df2f3fb2baae8c4335ec67182d10eafe7193b45f0478dcdc90d477280b9b8dac0c2a24e5958d4cffe2b005e2da27c62e6a95ac53aa77dc28e61e23d6787cc1830ced8cd2bc7283615a7ef3459c6ce92bde566623c9ee414cf4d43b2a774ce15902e658c0a49850ba14154593ed842c11adf3bc63c3745df435be3ca0a8d7a7a52c4a9f206b9523cd1b6f974c7b8426e2798c2b4e62fcc9e9f7782f8cc3446c9351b833f2fb970311ceff1c79b4ea200c6a196fdc244388900c2423ad48a114564c536f16540cbccc381599761eeea26e5b7879f56be402225447fbe8c80f98d8e8b8ee03be9db12552839e7dd8e95db85e3e7b1c06e47ecfc4fd6eee4d61062aca70c30cbeda627591d83474ee3c29bc3e4847af81596eac1fe876ba9f1b2bdc39336681749302e5b5a8eadf8750993cf0c393ff37214f96c786b4d4067f0b53f73720811d6a2b2693808a31d5eb34b20a1d69c1af038ea692502936e5a86a81e6ed4e592e0a2e1bf484495e9ad3609bb76e01dd195cbaa7f6d1cb91056d2af46a848069666e772932fda36bad5e0b0aceee5debbb143c8d560d98a6710a0c9ce2afb101d06298cd78431c3d7a0fc9900ae4e2633a0aec89a8f74a7b01ec11bd878d6440a13a72f449b4036abe99adafc5137222b0fb1af8523e037872bf39c863df827fab460ee455b53b5a4ca7797b634ef9adb4d7d0430559f007177d2b8256c22276db4e5c2b974ae854db3abd8296c388267cedff431c300a5cddc571bc33a6d192aead7b7eb0fcbe4ff84fdebfcb5e1603dd20c65a686a95c99acabc93a5eef2ef3e8610be8062332ad4135b8746584e3a38a665f7e9d28ca34be0b213e24acf23703c46c493f9685746cfa7db159b4c52d10be6bfef6bad54fa287f6dc5dc54966b655b9c57fcb3a6b8cc9b958a16d72be142965e4856d31ce76fe218f85bc0195d3e76960c4a5235125b36ebf349d37aef11af8da2b36e94895c68cc7662a487fb8ac5009eed8a38ff2dfdbeb144f027b5ff2ea7b28655ac42663fdafa6533ddb8d3c83568ea8a7efd98a2b2548f2ee47b7530055c8542ff9fb93bcb339741f445b7e99f4321d2a5f23889969bc59f46b964de684fbaf731f6f09009d605dadd3338b93759b6a6284b7f33cc35ac9c3d77b1d0cfc5abe4865e9028c678b961d4a18e4618de06e76db2f8821ad2200af9d3bd55d5bcef51808bdb3e25f80a640d159b1bf6d01d467be0749df15b29f9517ddee966ad0ab4087371ace00f7c1cc1e6d3f09c67da4b34a593646f3058db8bb7bafc23220bd0b926c32092cdaa98f5960d6929ded288a9071c21ed35611d6f1dece508e6368138de7ddd1dd841a201841e2da311eb120867eaf71f3b7740bde3b632bcd16a7e90a52a22684231ae56962d2961a556f2020b4d710dc85750eff2f4601f430190fc89093585610590ff471443a84979c2bc0e694a45af16fb7bff314192968e9cd49203f61123000640812b58281d5325b6cba3a0561c48288ad84d310c755c2f19e8844897acb72c4883869525840105312ed70b8c15716716ac71d24b71cf0effebde7bd9ddf596e6472fe8ec1fa5442cbb485ed4e98131e1fb14df3827db7a24405131d0972dbca8fff85d99626b59ac585231773f257ffae1ad2e5806fda3e6ff6127095d23471911c8797c855636a4cd814b66ea1ce5d09cfb0452fb6a75d38aba2f043705858dac64b079024f8dc7078559f2b92494740c6bdd1d0fbe3f0c31e658bcfc8f0dab233f5289b88411375c41bfad7f1a5d8f992c8b71b87972da71ed6669698871ad2e688b6d699637a357c0f428ce34808011f6a1e55cb70d4c197735c0a8539df706c431e07f21c69c028fc1a7551428bc3fb0d30baf72ff681d0a7e9abb4f26e05da1839af600db2db28a379c26da9ba8bdb38cf2aac600a5eb69a23f235765acce9610166c447500377474169e7c3c504b269838a716d63a1d4c5234dac35e641ab54b38efcd04c5a4741e667d346a3459cfc7224447f2b73c8019a930a1fa208827c50d5eed6b56df827cf92a681c1bd6679d356cd6d7c2800ba744714f29fb6cb7f2d57041e6554827ab8b2d3157026c95cb5e83b6580139b366686ed6e57b48fd0745f85bf3e49f95568914d71ac5661f627595883e37fb7dd48c581710f49d0255694340227af693da9bcb86f88f99137072a3ebce152135decc6a7136059f3e99b3d06ec0743711977137e81181ad3880024bfeb16cc625f804d9036bbee968117861a1750ab68e1846f20c3e18d4bec0c69b87fc6436e70f99a2b6d9e2bc015cd66c6d830f0e35ae52551fd364dd1028a7a4091907032d869817a5bcbd7ba34fb58ccdcda1ddbda26e7d024d36b24bc1c1941fe7ec4aec0bca1ea97ceebaeff44c234a79218f480d2e1a98b7a6925b7337dc6ced56345a5b59efc14e644abf54bddab003920bdee091c5a230240f4bf019b0ea6627a779f843b8ead956fbc92f2dc9dc62b0536b2ba58eeed0c62876550e429c41f246c69fb3ac5cf02c8ddf9ce8cbcb2d0cb947e3bea93ee8acefa15551d4b814ac34259712a15014a4f44a8d73c231b2d59b7a2797f0fee643707c5ba871107bf25b8fcd9300459434c100c138875d360ead86d2771f369305ea74d9caf1d37be7f81cf781cf64ba6d80602b2a5dd22b54242b10dece2337ead85ee6b88e79ba9d8744f657a5f316d9290ff1a8c86ba51b97c5d4dbad3f61fc6d4fafff288b35eaac5c585ebda4e2abd836e5b8c16f4d9977818931a5b9513aa147e29f1324ef648b318830858044863ca371e07b516c24caa971fad52b11998be3f8fcd3b1ea20df5d13ba5423074ad95b83e0e7b4b00a9bc5e07577231e3325c2ec7475bc949f306c145b47880f59eeed83b3fcadf22175c3c0ca1cc977c7942b1508bea38ead17608b550ed2395464e277c693ba0e5cd4e0b1c543f853813abfa810291a32ec8901e3966dd6792e4078c2540464f51a88b118e26a1b0afa54247657c1c694318b82132b8f2f2a300740dd1c0a144e727ad3b8c208c7f45481f1d3ce152be74c8902f87a500428d6297211b7274eeef1ae1eb52d3fb775c411a9113ca67ad76c408fcaaddf18fe4b657fc810a19e96ec78c4a24b6bfcbcb76998fd813fbed48380871b2ce87e9c0e3bfe1d4e0d9733fe9a3a83de5059e52296654a16e995597052504188a092e88d3dda9984c9a153c8de82cb91bca25aba969b1c1700cea1faf7a690fe1ff411d9231a0e0fbeeede23e83d9a2ff4ff2fa1b462256020e903277cd11cb08b6a2ec287e8e8efb8c235998cf8f150f73ef7489f55fb28b0f9e1b6d5cc236ab01d4e4e4a6aec72ed8cca8557b4a771853d9da1a4958705f046573be12765c53f5b4797d9f00c4123eed24d786f41bc6977db1ad25d91b1d51ec0839812e559131c6ce89e0e6495ffc80182c7b19ae87936489953851b82c8a2404a817cb1b673d4eb37c5d3e29999dd8885f31307e9e4731de9bf3e49b9e41d858f086f4672af25693d1794c25a546b13f8af9166e94f2069756c22b6abc8c734ba43909129d267320e31870d13818eb0f036272ceec8018f55ddecdac210ff8bff2437e089359e4d32f07c53de874d68197c80d835b8712eb32105b92233ae536955706e20af39856b452642a1b28d0eced0edcbf2db9d04b9a57fe5bca1a3e315f7a0b24674ff89d0a42336e3dd61037c7bb6429b8ecf50741136de622f812cfbf16c10eef995968b8f284983b2e267cdffa2f2818fb622dbc3eef9cbe5b19ceaae03c44f8fa3cc3ffc4a23256ce47b946349d82852669da7a7471e8eb032b48a84aa4807bff264891115d91fe7bdbcc8fc9a5e1cd17dce405b3b2aa35f2e0e1307063e96180fa4252a9c5b54ce328f0062c0324e39a379eb2fea63d8853cb89dfba70bb6ee78f692e77ddaddfab6b8e2d9f9bed0e1472b43b843c4b38d58fbf17f00d50b07c74cf4d5a5fd7b60a7eb03c4c7824b86f255b7cbedfd939d5bd1e9a197adc1b4557f6ab13e54c7b967adeda3d94fbf79955b1cd18f3c2b360bfe611f12766b85c32b42943f04ae5df46bc197c3316fe9ceb91f6bc13b36b27e5cfb230cb5618f9fa8748e20469c500da414398c9b04ed28374beeb4886a6cb60ae39e1b527eecbe79aac4abdeb28d1a4b29e29f54bc8e86eb6c94f872d41e4d9a506187b38846a0b5e81194ba0c1a7ab70c3e2b1bce455c94091f981ac9653ff99ef061609d771915a830687d4d92317c878348c3a80ef42a7683bc4e31738eb527124719456ba68b18f9948063a086bf7f4e959084ed361149180300a27f3b013a5f8aaf31a4cd7ef0179add5e9015deee0587eaba7f25b00c331e5fe198e536f4730a393170f0306d4b8e4751ffb054807a0781fce11ecaeb8c68ea1c8eed22f17e34022126aca38da4dea3bdbae6fb34894b013f6d1419082f6e0115aee8f390f8784c670e3601a99bbf9fc2841a97d87bfc416dd2bd53ca7a48427a4ba476f985a8ad4b3d72947c7130553bf77b85dbd1690e2e1bf1781f29a9677f55703043c995e6c8bb1756908fcadc4f3622ca1607a32242579715c61ef0f6ea8d4776a9784e1a1563dbe82431681ccdaccd0df841e3e3f0549af5d8972a3362ff2f1c2b8b4798524bdb3327c1a6e1ba15ee231970eb706bac084e335f182230955510432a979d4f7752c0235ff123e85f3c04fdd4bda781af730dda2c423e3c8d9f29e5f4441e02ca234a"}], 0x1010}, 0x4040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="183dbade00000100000000001000000000002600", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x20, 0xffffffffffffffff, 0x0, 0x11, '\x00', 0x0, 0x38}, 0x94) socket$kcm(0x29, 0x7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x881c0, 0x0) r8 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x8, 0x8, 0x0, 0x3, 0x94, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xa10, 0x8, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffffffffffd}) ioctl$TUNGETVNETLE(r0, 0x8953, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r8], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) close(r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x8, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x1, 0x8, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xbf}, @ldst={0x0, 0x0, 0x1, 0x1, 0x9, 0x20, 0xfffffffffffffff0}], &(0x7f0000000580)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x7ff, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x1, 0xf, 0x4}, {0x5, 0x4, 0xc, 0x4}, {0x1, 0x2, 0x2, 0x2}, {0x5, 0x2, 0x8}, {0x0, 0x3, 0x2, 0x3}, {0x4, 0x5, 0x2, 0x6}, {0x5, 0x2, 0x7, 0x4}, {0x3, 0x4, 0xc, 0x9}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x7}, @ldst={0x1, 0x1, 0x6, 0x6, 0xa, 0xffffffffffffffd1, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x2, 0x3, 0x0, 0x6, 0xb, 0xfffffffffffffff4}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0xc, '\x00', r3, @fallback=0x13, r1, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x1b, 0x5}, 0x10, r4, r5, 0x6, 0x0, &(0x7f0000000780)=[{0x1, 0x2, 0x1, 0x4}, {0x3, 0x2, 0x10, 0xd}, {0x0, 0x4, 0xe, 0x5}, {0x0, 0x4, 0x9, 0x7}, {0x5, 0x4, 0xf, 0x8}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x8}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) sendmsg(r7, &(0x7f0000002140)={&(0x7f0000000800)=@generic={0x15, "b85b97205f841d66106de39b0f596f40ead4a9b75343c1a795c1c2626d6c96b7b9f0219b20adb3d85fa0bee045275a102fc342387dc0b14fdfa5ac4289973f7c98fa6a24631e63830139f89e8986231d428b38565971157d477dcbbbdc2eb457057815b67971e01ff42b0cf76c2caf23bbc7173bbef01e9b36c5392caf20"}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000009c0)="189d1a1ce703595e612ecc845b6b4c4b75879db7bd2f02dac11c6fdc6926b93d23891d9dde9cdda42dba19b808fe6fdcc83e3c4a0bd19837777700d0396ed8553f292135a46d58d950111604ada3358f2325722f5fdb134c1e7d392a61ad6832df582b5b9f396cbe57202085cd0cfd41106647cfeac24874523984db756784c29ac253eed4e9788fad1d965332207ae41ecedf0c9b6d8ddaa2ea495ba037e5", 0x9f}, {&(0x7f0000000a80)="e9420d135a915c4c0a98957457d0309ca199885e22eb982b73afaa4b03cc3c931b5b67bfbfc2f27ab2e22288ad81d5bac6119e8e8477335e857f57aaeb7daff82a8b09813c9e3d2465bc86062b9b4d9e", 0x50}, {&(0x7f0000000b00)="8c73de9fd0d886cbeb46c312af21ba8b5aa332fba3a0ddc598d90430445e5ae9951e5564d1df1945ee844184e437b8ab13b884c44b33c2a995bf11b084a917daff3dbbce8d29177d92976df63e7b13bde5589f", 0x53}, {&(0x7f0000000b80)="8cfe1f75d129f0bf5793d4a63eb2d88a2e2947315e47c34a73b0056b425550c76a236afbf8084270b765b5e2", 0x2c}, {&(0x7f0000000bc0)="88ea72636408e3584136877a9a6e60d472f2f7e5ea58e4fc684f4e69d543bcb357ea74e8b747c2c48b39296ba17ed7524d1a4a1965f272bbdf82fc73806be4ade6a2f33197a2588f3d14", 0x4a}, {&(0x7f0000000c40)="3d7c7e19b4faa01a50c627b22a356e8aaf31bcd2849b7d1fcde05ad72d220b721f878dcec56a2c53a3d1f3bad121ca439f0caaba1d767628c6bbfa512550f44b5424c72ae9b58f2e7e41d360709a3006e6bc93e21c75bf03fd674ea7e25c228dbddfebf5fd5bd127da9af5fab4ff29de7360f2008ac822ab758b2165c80b050b3527fb3d4dd244aad22ce65d1749831e854f01a3a2e034bf8d6f440ca65aed32076d7e5de59a7593a7e5e47b07a3b3df2c5ec52d3091dda81e8125e04e54425910dd", 0xc2}, {&(0x7f0000000d40)="e8e13f2d4620a24d0720b112e660a5ac60cf3b2a8205310dbda7432654d3b8048da978da6d34f4eb153db7c0fc117cafc8b34c454a9d177fbb6831d88b0532b3aef173a809a05f27d6a408157701598e1c7e62b4131a168614aefd38cdc81005a415623e9cc066739ab0e5140ad1e86ffd4faa03f3bb35c7e47b5ca0ec16434f91cd4758635c94d98372e0e3809777d5", 0x90}, {&(0x7f0000000e00)="6a125d2fc82f59f3f9616f7505a52240d9b72e604570e09ac01c646b4da8474ed7d3c48103363cc81c98c6af8691f3bdf813d812b9557fe4ab06ff8108381908bc814da1e871edb61a28efdf683bba38efd1cd9ef53b794397d84c97", 0x5c}, {&(0x7f0000000e80)="b6178b1c9c261b5c37a4779288d6c550ee58a32b3cba4d92fd289d07dc80", 0x1e}, {&(0x7f0000000ec0)="366cc233603360c091aa13eca3cbd5a1641a415dc5e163e5f5ffde02e24cbf08bf9eb7a8a5f0807f0d11c37ca01ac3ab5587ba557d349e8cdd2214f0a51613f956004bd6e6a1711368eaeaf3507306", 0x4f}], 0xa, &(0x7f0000001100)=[{0x1010, 0x29, 0xffffff71, "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"}], 0x1010}, 0x4040) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="183dbade00000100000000001000000000002600", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x20, 0xffffffffffffffff, 0x0, 0x11, '\x00', 0x0, 0x38}, 0x94) (async) socket$kcm(0x29, 0x7, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x881c0, 0x0) (async) socket$kcm(0x2, 0x200000000000006, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x8, 0x8, 0x0, 0x3, 0x94, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xa10, 0x8, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffffffffffd}) (async) ioctl$TUNGETVNETLE(r0, 0x8953, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r8], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0}, 0x94) (async) 420.44846ms ago: executing program 0 (id=2008): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x40000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x22, &(0x7f0000000080), 0x10) r3 = socket$kcm(0xa, 0x6, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x140, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x2, 0x922000000001, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f00000002c0)=r6, 0x8) perf_event_open$cgroup(0x0, r6, 0x3, r4, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x7f, 0x9, 0x3, 0x6, 0x0, 0x8000000000000001, 0x20480, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x101004, 0x4, 0x2, 0x3, 0xfffffffffffffff7, 0x0, 0xffff, 0x0, 0x5, 0x0, 0x5}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000100)=r7, 0x120) sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) 257.500154ms ago: executing program 3 (id=2009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 89.658018ms ago: executing program 1 (id=2010): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$kcm(0x2, 0x3, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000010601000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 0s ago: executing program 1 (id=2011): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) gettid() (async) r6 = gettid() r7 = perf_event_open(&(0x7f0000000680)={0x7b2aacd72a4e496b, 0x80, 0x7, 0x7f, 0x0, 0x9, 0x0, 0xffffffffd19a3cf1, 0x5000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x1}, 0x4000, 0x7fff, 0x0, 0x1, 0x6, 0x7, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xb, r2, 0xe) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x6, 0x2, 0x0, 0x50000000000000, 0x23031, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x3}, 0x1000, 0x6d0, 0x3, 0x7, 0x5f6d, 0x10001, 0xefe, 0x0, 0x3f0, 0x0, 0xfffffffffffffffb}, r6, 0xf, r7, 0x2) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.swap.events\x00', 0x26e1, 0x0) close(r10) socket$kcm(0x15, 0x5, 0x0) write$cgroup_devices(r10, 0x0, 0x4) (async) write$cgroup_devices(r10, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r11 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000400)=r8}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)={r0, r8}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) kernel console output (not intermixed with test programs): 6291] netlink: 'syz.2.151': attribute type 39 has an invalid length. [ 102.411294][ T6296] netlink: 144 bytes leftover after parsing attributes in process `syz.1.153'. [ 102.484971][ T6300] netlink: 'syz.1.153': attribute type 21 has an invalid length. [ 102.754474][ T6311] netlink: 144 bytes leftover after parsing attributes in process `syz.2.165'. [ 102.815682][ T6314] netlink: 'syz.2.165': attribute type 21 has an invalid length. [ 102.896784][ T6316] netlink: 'syz.0.159': attribute type 3 has an invalid length. [ 102.916279][ T6316] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.159'. [ 103.428906][ T6331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.645077][ T6341] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.170'. [ 103.657487][ T6343] netlink: 144 bytes leftover after parsing attributes in process `syz.2.169'. [ 103.688502][ T6341] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.170'. [ 103.732920][ T6345] validate_nla: 1 callbacks suppressed [ 103.732936][ T6345] netlink: 'syz.2.169': attribute type 21 has an invalid length. [ 103.913814][ T6349] FAULT_INJECTION: forcing a failure. [ 103.913814][ T6349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.967505][ T6349] CPU: 0 PID: 6349 Comm: syz.1.171 Not tainted syzkaller #0 [ 103.974867][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.984946][ T6349] Call Trace: [ 103.988253][ T6349] [ 103.991205][ T6349] dump_stack_lvl+0x18c/0x250 [ 103.995938][ T6349] ? show_regs_print_info+0x20/0x20 [ 104.001172][ T6349] ? load_image+0x420/0x420 [ 104.005711][ T6349] ? __might_fault+0xaa/0x120 [ 104.010415][ T6349] ? __lock_acquire+0x7d80/0x7d80 [ 104.015477][ T6349] ? perf_trace_preemptirq_template+0x269/0x330 [ 104.021760][ T6349] should_fail_ex+0x394/0x4c0 [ 104.026484][ T6349] _copy_to_iter+0x1ce/0x1110 [ 104.031197][ T6349] ? lock_chain_count+0x20/0x20 [ 104.036081][ T6349] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.042276][ T6349] ? lockdep_hardirqs_on+0x98/0x150 [ 104.047510][ T6349] ? iov_iter_init+0x1e0/0x1e0 [ 104.052302][ T6349] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.058505][ T6349] ? __check_object_size+0x8a/0xa40 [ 104.063737][ T6349] packet_recvmsg+0x5cf/0x1650 [ 104.068539][ T6349] ? verify_lock_unused+0x140/0x140 [ 104.073770][ T6349] ? packet_sendmsg+0x4c70/0x4c70 [ 104.078826][ T6349] ? aa_af_perm+0x330/0x330 [ 104.083358][ T6349] ? perf_trace_lock+0xfc/0x3b0 [ 104.088239][ T6349] ? aa_sock_msg_perm+0x94/0x150 [ 104.093209][ T6349] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 104.098523][ T6349] ? security_socket_recvmsg+0x89/0xb0 [ 104.103997][ T6349] ? packet_sendmsg+0x4c70/0x4c70 [ 104.109061][ T6349] ____sys_recvmsg+0x2bd/0x5d0 [ 104.113861][ T6349] ? __sys_recvmsg_sock+0x50/0x50 [ 104.118931][ T6349] ? import_iovec+0x73/0xa0 [ 104.123474][ T6349] ___sys_recvmsg+0x214/0x590 [ 104.128190][ T6349] ? __sys_recvmsg+0x2a0/0x2a0 [ 104.132983][ T6349] ? trace_call_bpf+0xc3/0x6c0 [ 104.137784][ T6349] ? trace_call_bpf+0x5e9/0x6c0 [ 104.142663][ T6349] ? __fget_files+0x3fc/0x460 [ 104.147353][ T6349] __x64_sys_recvmsg+0x21e/0x2f0 [ 104.152288][ T6349] ? perf_trace_preemptirq_template+0x269/0x330 [ 104.158529][ T6349] ? ___sys_recvmsg+0x590/0x590 [ 104.163384][ T6349] ? lockdep_hardirqs_on+0x98/0x150 [ 104.168581][ T6349] do_syscall_64+0x55/0xb0 [ 104.173003][ T6349] ? clear_bhb_loop+0x40/0x90 [ 104.177689][ T6349] ? clear_bhb_loop+0x40/0x90 [ 104.182365][ T6349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.188263][ T6349] RIP: 0033:0x7f69bad9de99 [ 104.192676][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.212282][ T6349] RSP: 002b:00007f69bbceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 104.220693][ T6349] RAX: ffffffffffffffda RBX: 00007f69bb025fa0 RCX: 00007f69bad9de99 [ 104.228660][ T6349] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000009 [ 104.236628][ T6349] RBP: 00007f69bbceb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.244596][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.252561][ T6349] R13: 00007f69bb026038 R14: 00007f69bb025fa0 R15: 00007ffc8bc3b1d8 [ 104.260540][ T6349] [ 104.419902][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.429647][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.439026][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.448248][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.457452][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.466683][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.475906][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.485152][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.494383][ T6364] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.935328][ T6371] netlink: 144 bytes leftover after parsing attributes in process `syz.2.181'. [ 104.981952][ T6373] netlink: 156 bytes leftover after parsing attributes in process `syz.3.180'. [ 105.091412][ T6375] netlink: 'syz.2.181': attribute type 21 has an invalid length. [ 105.722792][ T6396] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 107.970061][ T6403] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 108.031561][ T6403] syz_tun: entered promiscuous mode [ 108.077653][ T6403] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.111407][ T6414] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 108.237939][ T6414] veth0_vlan: left promiscuous mode [ 108.277170][ T6414] veth0_vlan: entered promiscuous mode [ 108.296874][ T6414] team0: Device veth0_vlan failed to register rx_handler [ 108.548260][ T6419] netlink: 144 bytes leftover after parsing attributes in process `syz.1.193'. [ 108.575955][ T6420] netlink: 'syz.1.193': attribute type 21 has an invalid length. [ 108.638498][ T6414] syz.3.192 (6414) used greatest stack depth: 19240 bytes left [ 108.745614][ T6431] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 109.552899][ T6431] team0: Device vxcan1 is of different type [ 110.484219][ T6449] FAULT_INJECTION: forcing a failure. [ 110.484219][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.579529][ T6449] CPU: 0 PID: 6449 Comm: syz.0.205 Not tainted syzkaller #0 [ 110.586903][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.596979][ T6449] Call Trace: [ 110.600272][ T6449] [ 110.603217][ T6449] dump_stack_lvl+0x18c/0x250 [ 110.607920][ T6449] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.614092][ T6449] ? show_regs_print_info+0x20/0x20 [ 110.619316][ T6449] ? load_image+0x420/0x420 [ 110.623863][ T6449] should_fail_ex+0x394/0x4c0 [ 110.628583][ T6449] _copy_to_user+0x2f/0xa0 [ 110.633033][ T6449] simple_read_from_buffer+0xe7/0x150 [ 110.638449][ T6449] proc_fail_nth_read+0x1e8/0x260 [ 110.643511][ T6449] ? proc_fault_inject_write+0x360/0x360 [ 110.649176][ T6449] ? fsnotify_perm+0x271/0x5e0 [ 110.653969][ T6449] ? proc_fault_inject_write+0x360/0x360 [ 110.659891][ T6449] vfs_read+0x298/0x990 [ 110.664074][ T6449] ? kernel_read+0x1e0/0x1e0 [ 110.668685][ T6449] ? __fget_files+0x28/0x460 [ 110.673297][ T6449] ? __fget_files+0x3fc/0x460 [ 110.678009][ T6449] ? __fdget_pos+0x2a3/0x330 [ 110.682623][ T6449] ? ksys_read+0x74/0x260 [ 110.686993][ T6449] ksys_read+0x151/0x260 [ 110.691266][ T6449] ? vfs_write+0x9a0/0x9a0 [ 110.695713][ T6449] ? lockdep_hardirqs_on+0x98/0x150 [ 110.700941][ T6449] do_syscall_64+0x55/0xb0 [ 110.705380][ T6449] ? clear_bhb_loop+0x40/0x90 [ 110.710072][ T6449] ? clear_bhb_loop+0x40/0x90 [ 110.714767][ T6449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.720690][ T6449] RIP: 0033:0x7fde3875e6ce [ 110.725135][ T6449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.744777][ T6449] RSP: 002b:00007fde39724fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.753230][ T6449] RAX: ffffffffffffffda RBX: 00007fde397256c0 RCX: 00007fde3875e6ce [ 110.761226][ T6449] RDX: 000000000000000f RSI: 00007fde397250a0 RDI: 0000000000000005 [ 110.769214][ T6449] RBP: 00007fde39725090 R08: 0000000000000000 R09: 0000000000000000 [ 110.777210][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.785201][ T6449] R13: 00007fde38a26038 R14: 00007fde38a25fa0 R15: 00007fff4e64ef68 [ 110.793219][ T6449] [ 111.468553][ T6459] netlink: 144 bytes leftover after parsing attributes in process `syz.3.207'. [ 111.564873][ T6459] netlink: 'syz.3.207': attribute type 21 has an invalid length. [ 112.941276][ T6477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.214'. [ 113.120048][ T6486] netlink: 144 bytes leftover after parsing attributes in process `syz.0.216'. [ 113.188497][ T6491] netlink: 'syz.0.216': attribute type 21 has an invalid length. [ 116.851677][ T6520] netlink: 144 bytes leftover after parsing attributes in process `syz.2.226'. [ 116.911677][ T6524] netlink: 'syz.2.226': attribute type 21 has an invalid length. [ 117.662269][ T6540] FAULT_INJECTION: forcing a failure. [ 117.662269][ T6540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.719182][ T6540] CPU: 1 PID: 6540 Comm: syz.0.232 Not tainted syzkaller #0 [ 117.726532][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.736595][ T6540] Call Trace: [ 117.739871][ T6540] [ 117.742797][ T6540] dump_stack_lvl+0x18c/0x250 [ 117.747506][ T6540] ? show_regs_print_info+0x20/0x20 [ 117.752704][ T6540] ? load_image+0x420/0x420 [ 117.757204][ T6540] ? __lock_acquire+0x7d80/0x7d80 [ 117.762228][ T6540] ? snprintf+0xe9/0x140 [ 117.766475][ T6540] should_fail_ex+0x394/0x4c0 [ 117.771171][ T6540] _copy_to_user+0x2f/0xa0 [ 117.775584][ T6540] simple_read_from_buffer+0xe7/0x150 [ 117.780964][ T6540] proc_fail_nth_read+0x1e8/0x260 [ 117.785993][ T6540] ? proc_fault_inject_write+0x360/0x360 [ 117.791647][ T6540] ? fsnotify_perm+0x271/0x5e0 [ 117.796436][ T6540] ? proc_fault_inject_write+0x360/0x360 [ 117.802088][ T6540] vfs_read+0x298/0x990 [ 117.806257][ T6540] ? kernel_read+0x1e0/0x1e0 [ 117.810856][ T6540] ? __fget_files+0x28/0x460 [ 117.815451][ T6540] ? __fget_files+0x3fc/0x460 [ 117.820225][ T6540] ? __fdget_pos+0x2a3/0x330 [ 117.824817][ T6540] ? ksys_read+0x74/0x260 [ 117.829151][ T6540] ksys_read+0x151/0x260 [ 117.833399][ T6540] ? vfs_write+0x9a0/0x9a0 [ 117.837824][ T6540] ? lockdep_hardirqs_on+0x98/0x150 [ 117.843028][ T6540] do_syscall_64+0x55/0xb0 [ 117.847443][ T6540] ? clear_bhb_loop+0x40/0x90 [ 117.852118][ T6540] ? clear_bhb_loop+0x40/0x90 [ 117.856793][ T6540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.862690][ T6540] RIP: 0033:0x7fde3875e6ce [ 117.867116][ T6540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.886726][ T6540] RSP: 002b:00007fde39724fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.895137][ T6540] RAX: ffffffffffffffda RBX: 00007fde397256c0 RCX: 00007fde3875e6ce [ 117.903107][ T6540] RDX: 000000000000000f RSI: 00007fde397250a0 RDI: 0000000000000006 [ 117.911079][ T6540] RBP: 00007fde39725090 R08: 0000000000000000 R09: 0000000000000000 [ 117.919067][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.927091][ T6540] R13: 00007fde38a26038 R14: 00007fde38a25fa0 R15: 00007fff4e64ef68 [ 117.935078][ T6540] [ 118.513074][ T6558] netlink: 144 bytes leftover after parsing attributes in process `syz.2.239'. [ 118.572369][ T6559] netlink: 'syz.2.239': attribute type 21 has an invalid length. [ 119.179847][ T6567] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.242'. [ 121.449779][ T6585] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.248'. [ 121.573064][ T6588] netlink: 144 bytes leftover after parsing attributes in process `syz.3.249'. [ 121.628408][ T6592] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 121.714628][ T6592] veth0_vlan: left promiscuous mode [ 121.743196][ T6592] veth0_vlan: entered promiscuous mode [ 121.763123][ T6592] team0: Device veth0_vlan failed to register rx_handler [ 121.815701][ T6593] netlink: 'syz.3.249': attribute type 21 has an invalid length. [ 122.018240][ T6599] net_ratelimit: 3320 callbacks suppressed [ 122.018272][ T6599] sock: sock_set_timeout: `syz.0.253' (pid 6599) tries to set negative timeout [ 122.208044][ T6612] netlink: 'syz.0.253': attribute type 13 has an invalid length. [ 122.252084][ T6612] netlink: 152 bytes leftover after parsing attributes in process `syz.0.253'. [ 122.302088][ T6612] syz_tun: refused to change device tx_queue_len [ 122.324463][ T6612] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 122.393077][ T6599] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 125.084993][ T6599] team0: Port device netdevsim0 added [ 125.372518][ T6632] netlink: 144 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.438574][ T6641] netlink: 'syz.2.263': attribute type 21 has an invalid length. [ 125.809340][ T6645] netlink: 'syz.1.268': attribute type 9 has an invalid length. [ 125.839949][ T6645] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.268'. [ 125.874436][ T6653] netlink: 156 bytes leftover after parsing attributes in process `syz.0.279'. [ 125.931165][ T6655] sock: sock_set_timeout: `syz.2.271' (pid 6655) tries to set negative timeout [ 126.132719][ T6658] netlink: 'syz.2.271': attribute type 13 has an invalid length. [ 126.156463][ T6658] netlink: 152 bytes leftover after parsing attributes in process `syz.2.271'. [ 126.226232][ T6658] netlink: 'syz.2.271': attribute type 10 has an invalid length. [ 126.286639][ T6658] team0: Port device netdevsim0 added [ 128.963543][ T6668] netlink: 144 bytes leftover after parsing attributes in process `syz.1.275'. [ 129.028375][ T6674] netlink: 'syz.1.275': attribute type 21 has an invalid length. [ 129.072968][ T6677] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 129.114208][ T6679] FAULT_INJECTION: forcing a failure. [ 129.114208][ T6679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.128168][ T6679] CPU: 1 PID: 6679 Comm: syz.3.278 Not tainted syzkaller #0 [ 129.135487][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.145577][ T6679] Call Trace: [ 129.148897][ T6679] [ 129.151851][ T6679] dump_stack_lvl+0x18c/0x250 [ 129.156556][ T6679] ? show_regs_print_info+0x20/0x20 [ 129.161782][ T6679] ? load_image+0x420/0x420 [ 129.166324][ T6679] ? __might_fault+0xaa/0x120 [ 129.171026][ T6679] ? __lock_acquire+0x7d80/0x7d80 [ 129.176067][ T6679] ? bpf_percpu_array_update+0xec/0x490 [ 129.181633][ T6679] ? __virt_addr_valid+0x10c/0x380 [ 129.186766][ T6679] should_fail_ex+0x394/0x4c0 [ 129.191468][ T6679] _copy_from_user+0x2f/0xe0 [ 129.196080][ T6679] generic_map_update_batch+0x53e/0x800 [ 129.201652][ T6679] ? rcu_read_unlock+0xa0/0xa0 [ 129.206438][ T6679] ? __fdget+0x180/0x210 [ 129.210705][ T6679] ? rcu_read_unlock+0xa0/0xa0 [ 129.215485][ T6679] bpf_map_do_batch+0x3f2/0x600 [ 129.220357][ T6679] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 129.226719][ T6679] __sys_bpf+0x381/0x890 [ 129.230984][ T6679] ? bpf_link_show_fdinfo+0x390/0x390 [ 129.236391][ T6679] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.242589][ T6679] __x64_sys_bpf+0x7c/0x90 [ 129.247024][ T6679] do_syscall_64+0x55/0xb0 [ 129.251464][ T6679] ? clear_bhb_loop+0x40/0x90 [ 129.256156][ T6679] ? clear_bhb_loop+0x40/0x90 [ 129.260854][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.266773][ T6679] RIP: 0033:0x7fa86c39de99 [ 129.271213][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.290851][ T6679] RSP: 002b:00007fa86d1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.299293][ T6679] RAX: ffffffffffffffda RBX: 00007fa86c625fa0 RCX: 00007fa86c39de99 [ 129.307636][ T6679] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 129.315635][ T6679] RBP: 00007fa86d1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 129.323626][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.331613][ T6679] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007ffd5358de68 [ 129.339620][ T6679] [ 129.478487][ T6677] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 129.697091][ T6683] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.282'. [ 129.722468][ T6683] bridge_slave_1: default FDB implementation only supports local addresses [ 129.868114][ T6698] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 129.884715][ T6696] sock: sock_set_timeout: `syz.1.284' (pid 6696) tries to set negative timeout [ 129.903839][ T6698] team0: Device vxcan1 is of different type [ 130.359145][ T6705] netlink: 'syz.3.286': attribute type 9 has an invalid length. [ 130.367364][ T6705] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.286'. [ 132.899029][ T6704] netlink: 'syz.1.284': attribute type 13 has an invalid length. [ 132.908066][ T6704] netlink: 152 bytes leftover after parsing attributes in process `syz.1.284'. [ 132.923553][ T6704] syz_tun: refused to change device tx_queue_len [ 132.929959][ T6704] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 132.971528][ T6696] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 133.022290][ T6696] team0: Port device netdevsim0 added [ 133.049317][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.058385][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243841][ T6714] netlink: 144 bytes leftover after parsing attributes in process `syz.1.291'. [ 133.278668][ T6719] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 133.307802][ T6719] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 133.330585][ T6720] netlink: 'syz.1.291': attribute type 21 has an invalid length. [ 133.353909][ T6719] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 133.656743][ T6732] Driver unsupported XDP return value 0 on prog (id 197) dev N/A, expect packet loss! [ 133.988673][ T6737] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 134.390038][ T6750] netlink: 144 bytes leftover after parsing attributes in process `syz.1.302'. [ 134.476615][ T6756] validate_nla: 7 callbacks suppressed [ 134.476631][ T6756] netlink: 'syz.1.302': attribute type 21 has an invalid length. [ 134.819746][ T6755] netlink: 'syz.2.301': attribute type 9 has an invalid length. [ 134.845176][ T6755] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.301'. [ 137.272320][ T6775] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 137.548152][ T6775] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 137.628499][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 137.726948][ T6787] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.312'. [ 137.811675][ T6787] bridge_slave_1: default FDB implementation only supports local addresses [ 137.901268][ T6792] netlink: 144 bytes leftover after parsing attributes in process `syz.2.315'. [ 137.952144][ T6796] netlink: 'syz.2.315': attribute type 21 has an invalid length. [ 138.794799][ T6819] netlink: 'syz.0.321': attribute type 9 has an invalid length. [ 138.816556][ T6816] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 138.883599][ T6819] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.321'. [ 139.170026][ T6816] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 139.620296][ T6826] netlink: 144 bytes leftover after parsing attributes in process `syz.1.328'. [ 139.677913][ T6830] netlink: 'syz.1.328': attribute type 21 has an invalid length. [ 141.559919][ T6838] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 141.664507][ T6841] netlink: 196 bytes leftover after parsing attributes in process `syz.1.332'. [ 141.739337][ T6838] veth0_vlan: left promiscuous mode [ 141.793427][ T6838] veth0_vlan: entered promiscuous mode [ 141.811551][ T6838] team0: Device veth0_vlan failed to register rx_handler [ 141.955830][ T6835] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.330'. [ 142.441548][ T6859] netlink: 144 bytes leftover after parsing attributes in process `syz.2.338'. [ 142.525878][ T6861] netlink: 'syz.2.338': attribute type 21 has an invalid length. [ 145.685144][ T6882] bridge_slave_1: left allmulticast mode [ 145.691973][ T6882] bridge_slave_1: left promiscuous mode [ 145.699327][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.739364][ T6882] bridge_slave_0: left allmulticast mode [ 145.758747][ T6882] bridge_slave_0: left promiscuous mode [ 145.766708][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.820969][ T6898] netlink: 144 bytes leftover after parsing attributes in process `syz.2.351'. [ 148.875346][ T6900] netlink: 'syz.2.351': attribute type 21 has an invalid length. [ 149.125868][ T6911] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.357'. [ 153.295426][ T6944] netlink: 'syz.2.370': attribute type 21 has an invalid length. [ 153.320893][ T6944] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.370'. [ 153.898874][ T6950] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.371'. [ 154.088145][ T6956] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 156.840676][ T6956] syz_tun: entered promiscuous mode [ 156.928116][ T6956] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.961396][ T6957] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 156.971919][ T6957] veth0_vlan: left promiscuous mode [ 156.999719][ T6957] veth0_vlan: entered promiscuous mode [ 157.028908][ T6957] team0: Device veth0_vlan failed to register rx_handler [ 159.241752][ T6966] netlink: 'syz.3.376': attribute type 21 has an invalid length. [ 159.846756][ T6978] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.378'. [ 159.895402][ T6978] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 160.495221][ T6984] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.381'. [ 161.811695][ T7005] netlink: 'syz.0.387': attribute type 21 has an invalid length. [ 169.550507][ T7037] netlink: 144 bytes leftover after parsing attributes in process `syz.3.399'. [ 169.566508][ T7035] netlink: 'syz.0.398': attribute type 21 has an invalid length. [ 169.617074][ T7039] netlink: 'syz.3.399': attribute type 21 has an invalid length. [ 170.055876][ T7051] sit0: entered allmulticast mode [ 170.098207][ T7057] sit0: entered promiscuous mode [ 172.557866][ T7077] netlink: 'syz.0.410': attribute type 21 has an invalid length. [ 172.621657][ T7082] netlink: 144 bytes leftover after parsing attributes in process `syz.3.412'. [ 172.642388][ T7079] netlink: 'syz.2.411': attribute type 21 has an invalid length. [ 172.651537][ T7079] netlink: 'syz.2.411': attribute type 20 has an invalid length. [ 172.717216][ T7082] netlink: 'syz.3.412': attribute type 21 has an invalid length. [ 175.734368][ T7096] bridge_slave_0: left allmulticast mode [ 175.747168][ T7096] bridge_slave_0: left promiscuous mode [ 175.771773][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.173371][ T7113] netlink: 144 bytes leftover after parsing attributes in process `syz.1.421'. [ 176.250559][ T7116] netlink: 'syz.1.421': attribute type 21 has an invalid length. [ 176.435533][ T7121] netlink: 'syz.1.424': attribute type 21 has an invalid length. [ 178.375226][ T7127] FAULT_INJECTION: forcing a failure. [ 178.375226][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.395707][ T7127] CPU: 1 PID: 7127 Comm: syz.1.427 Not tainted syzkaller #0 [ 178.403094][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 178.413171][ T7127] Call Trace: [ 178.416456][ T7127] [ 178.419384][ T7127] dump_stack_lvl+0x18c/0x250 [ 178.424077][ T7127] ? show_regs_print_info+0x20/0x20 [ 178.429293][ T7127] ? load_image+0x420/0x420 [ 178.433809][ T7127] ? __might_fault+0xaa/0x120 [ 178.438508][ T7127] ? __lock_acquire+0x7d80/0x7d80 [ 178.443538][ T7127] ? bpf_percpu_array_update+0xec/0x490 [ 178.449091][ T7127] ? __virt_addr_valid+0x10c/0x380 [ 178.454207][ T7127] should_fail_ex+0x394/0x4c0 [ 178.458891][ T7127] _copy_from_user+0x2f/0xe0 [ 178.463483][ T7127] generic_map_update_batch+0x53e/0x800 [ 178.469070][ T7127] ? rcu_read_unlock+0xa0/0xa0 [ 178.473839][ T7127] ? __fdget+0x180/0x210 [ 178.478088][ T7127] ? rcu_read_unlock+0xa0/0xa0 [ 178.482848][ T7127] bpf_map_do_batch+0x3f2/0x600 [ 178.487700][ T7127] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 178.494046][ T7127] __sys_bpf+0x381/0x890 [ 178.498300][ T7127] ? bpf_link_show_fdinfo+0x390/0x390 [ 178.503685][ T7127] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 178.509883][ T7127] ? lock_chain_count+0x20/0x20 [ 178.514746][ T7127] __x64_sys_bpf+0x7c/0x90 [ 178.519167][ T7127] do_syscall_64+0x55/0xb0 [ 178.523590][ T7127] ? clear_bhb_loop+0x40/0x90 [ 178.528259][ T7127] ? clear_bhb_loop+0x40/0x90 [ 178.532930][ T7127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.538825][ T7127] RIP: 0033:0x7f69bad9de99 [ 178.543234][ T7127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.562929][ T7127] RSP: 002b:00007f69bbceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.571346][ T7127] RAX: ffffffffffffffda RBX: 00007f69bb025fa0 RCX: 00007f69bad9de99 [ 178.579322][ T7127] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 178.587294][ T7127] RBP: 00007f69bbceb090 R08: 0000000000000000 R09: 0000000000000000 [ 178.595261][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.603227][ T7127] R13: 00007f69bb026038 R14: 00007f69bb025fa0 R15: 00007ffc8bc3b1d8 [ 178.611208][ T7127] [ 178.751070][ T7134] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 178.760244][ T7134] team0: Device vxcan1 is of different type [ 178.881559][ T7140] ªªªªª+: renamed from veth0_vlan [ 178.897656][ T7139] netlink: 144 bytes leftover after parsing attributes in process `syz.1.432'. [ 179.000383][ T7144] netlink: 'syz.1.432': attribute type 21 has an invalid length. [ 179.397165][ T7152] netlink: 'syz.0.435': attribute type 21 has an invalid length. [ 182.640224][ T7192] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.443'. [ 182.681043][ T7192] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 182.817240][ T7196] netlink: 144 bytes leftover after parsing attributes in process `syz.0.444'. [ 182.891698][ T7203] netlink: 'syz.0.444': attribute type 21 has an invalid length. [ 186.929523][ T7243] netlink: 144 bytes leftover after parsing attributes in process `syz.0.457'. [ 187.012346][ T7243] netlink: 'syz.0.457': attribute type 21 has an invalid length. [ 187.152826][ T7240] ipvlan1: entered promiscuous mode [ 187.182627][ T7240] ipvlan1: entered allmulticast mode [ 187.209788][ T7240] veth0_vlan: entered allmulticast mode [ 188.209007][ T7240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.458'. [ 189.107685][ T7280] netlink: 'syz.1.468': attribute type 3 has an invalid length. [ 189.137404][ T7280] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.468'. [ 191.447054][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 191.453353][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 191.459390][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 191.470834][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 191.746427][ T7286] netlink: 144 bytes leftover after parsing attributes in process `syz.1.469'. [ 191.817819][ T7290] netlink: 'syz.1.469': attribute type 21 has an invalid length. [ 191.854560][ T7289] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.470'. [ 192.360074][ T7306] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 192.377315][ T7306] netlink: 2 bytes leftover after parsing attributes in process `syz.0.478'. [ 192.389231][ T7306] hsr0: entered promiscuous mode [ 192.418159][ T7306] bridge0: port 3(hsr0) entered blocking state [ 192.456526][ T7306] bridge0: port 3(hsr0) entered disabled state [ 192.503668][ T7306] hsr0: entered allmulticast mode [ 192.508756][ T7306] hsr_slave_0: entered allmulticast mode [ 192.562094][ T7306] hsr_slave_1: entered allmulticast mode [ 192.617232][ T7306] bridge0: port 3(hsr0) entered blocking state [ 192.623661][ T7306] bridge0: port 3(hsr0) entered forwarding state [ 194.488698][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514020][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.866249][ T7324] netlink: 144 bytes leftover after parsing attributes in process `syz.2.484'. [ 195.922635][ T7331] netlink: 'syz.2.484': attribute type 21 has an invalid length. [ 196.534582][ T7350] netlink: 'syz.2.494': attribute type 9 has an invalid length. [ 196.567961][ T7351] netlink: 'syz.2.494': attribute type 9 has an invalid length. [ 196.592863][ T7351] netlink: 391 bytes leftover after parsing attributes in process `syz.2.494'. [ 196.610926][ T7350] netlink: 391 bytes leftover after parsing attributes in process `syz.2.494'. [ 199.848724][ T7370] netlink: 144 bytes leftover after parsing attributes in process `syz.3.498'. [ 199.917581][ T7370] netlink: 'syz.3.498': attribute type 21 has an invalid length. [ 200.035774][ T7375] netlink: 144 bytes leftover after parsing attributes in process `syz.0.509'. [ 200.094411][ T7375] netlink: 'syz.0.509': attribute type 21 has an invalid length. [ 201.270464][ T7402] FAULT_INJECTION: forcing a failure. [ 201.270464][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.284030][ T7402] CPU: 0 PID: 7402 Comm: syz.1.511 Not tainted syzkaller #0 [ 201.291354][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.301432][ T7402] Call Trace: [ 201.304733][ T7402] [ 201.307678][ T7402] dump_stack_lvl+0x18c/0x250 [ 201.312387][ T7402] ? show_regs_print_info+0x20/0x20 [ 201.317617][ T7402] ? load_image+0x420/0x420 [ 201.322147][ T7402] ? __might_fault+0xaa/0x120 [ 201.326847][ T7402] ? __lock_acquire+0x7d80/0x7d80 [ 201.331890][ T7402] ? bpf_percpu_array_update+0xec/0x490 [ 201.337467][ T7402] ? __virt_addr_valid+0x10c/0x380 [ 201.342608][ T7402] should_fail_ex+0x394/0x4c0 [ 201.347314][ T7402] _copy_from_user+0x2f/0xe0 [ 201.351927][ T7402] generic_map_update_batch+0x58c/0x800 [ 201.357505][ T7402] ? rcu_read_unlock+0xa0/0xa0 [ 201.362295][ T7402] ? __fdget+0x180/0x210 [ 201.366560][ T7402] ? rcu_read_unlock+0xa0/0xa0 [ 201.371362][ T7402] bpf_map_do_batch+0x3f2/0x600 [ 201.376231][ T7402] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 201.382591][ T7402] __sys_bpf+0x381/0x890 [ 201.386853][ T7402] ? bpf_link_show_fdinfo+0x390/0x390 [ 201.392263][ T7402] ? lock_chain_count+0x20/0x20 [ 201.397146][ T7402] __x64_sys_bpf+0x7c/0x90 [ 201.401588][ T7402] do_syscall_64+0x55/0xb0 [ 201.406033][ T7402] ? clear_bhb_loop+0x40/0x90 [ 201.410731][ T7402] ? clear_bhb_loop+0x40/0x90 [ 201.415424][ T7402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.421343][ T7402] RIP: 0033:0x7f69bad9de99 [ 201.425772][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.445405][ T7402] RSP: 002b:00007f69bbceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.453847][ T7402] RAX: ffffffffffffffda RBX: 00007f69bb025fa0 RCX: 00007f69bad9de99 [ 201.461843][ T7402] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 201.469826][ T7402] RBP: 00007f69bbceb090 R08: 0000000000000000 R09: 0000000000000000 [ 201.477812][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.485801][ T7402] R13: 00007f69bb026038 R14: 00007f69bb025fa0 R15: 00007ffc8bc3b1d8 [ 201.493808][ T7402] [ 203.588811][ T7413] netlink: 144 bytes leftover after parsing attributes in process `syz.3.513'. [ 203.644569][ T7416] netlink: 'syz.2.514': attribute type 10 has an invalid length. [ 203.663564][ T7416] team0: Device vxcan1 is of different type [ 203.721610][ T7417] netlink: 'syz.3.513': attribute type 21 has an invalid length. [ 203.791320][ T7419] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 203.827247][ T7419] veth0_vlan: left promiscuous mode [ 203.840330][ T7419] veth0_vlan: entered promiscuous mode [ 203.876226][ T7419] team0: Device veth0_vlan failed to register rx_handler [ 203.909592][ T7422] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.517'. [ 204.171778][ T7427] netlink: 'syz.3.518': attribute type 3 has an invalid length. [ 204.172298][ T7432] netlink: 'syz.3.518': attribute type 3 has an invalid length. [ 204.201155][ T7427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.518'. [ 204.221965][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.518'. [ 210.548035][ T7454] netlink: 144 bytes leftover after parsing attributes in process `syz.0.526'. [ 210.656794][ T7457] netlink: 'syz.0.526': attribute type 21 has an invalid length. [ 211.018232][ T7467] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.529'. [ 211.659498][ T7471] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 216.171516][ T7503] netlink: 144 bytes leftover after parsing attributes in process `syz.2.540'. [ 216.269649][ T7505] netlink: 'syz.2.540': attribute type 21 has an invalid length. [ 216.719364][ T7513] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 216.756158][ T7510] syz.1.542 uses obsolete (PF_INET,SOCK_PACKET) [ 219.953389][ T7536] netlink: 144 bytes leftover after parsing attributes in process `syz.1.551'. [ 220.013769][ T7538] netlink: 'syz.1.551': attribute type 21 has an invalid length. [ 222.937771][ T7554] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 225.763363][ T7554] syz_tun: entered promiscuous mode [ 225.790475][ T7554] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 226.121910][ T7571] netlink: 144 bytes leftover after parsing attributes in process `syz.3.560'. [ 226.131879][ T7577] netlink: 'syz.3.560': attribute type 21 has an invalid length. [ 226.712327][ T7600] netlink: 144 bytes leftover after parsing attributes in process `syz.2.572'. [ 226.767268][ T7604] netlink: 'syz.2.572': attribute type 21 has an invalid length. [ 230.036682][ T5776] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 230.036779][ T5776] Bluetooth: hci1: Malformed LE Event: 0x02 [ 230.207281][ T7632] netlink: 'syz.0.582': attribute type 21 has an invalid length. [ 233.331083][ T7646] bridge_slave_1: left allmulticast mode [ 233.337259][ T7646] bridge_slave_1: left promiscuous mode [ 233.377241][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.407417][ T7646] bridge_slave_0: left allmulticast mode [ 233.420787][ T7646] bridge_slave_0: left promiscuous mode [ 233.426576][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.458254][ T7649] FAULT_INJECTION: forcing a failure. [ 233.458254][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.487648][ T7649] CPU: 0 PID: 7649 Comm: syz.1.589 Not tainted syzkaller #0 [ 233.494999][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 233.505087][ T7649] Call Trace: [ 233.508379][ T7649] [ 233.511319][ T7649] dump_stack_lvl+0x18c/0x250 [ 233.516006][ T7649] ? show_regs_print_info+0x20/0x20 [ 233.521199][ T7649] ? load_image+0x420/0x420 [ 233.525692][ T7649] ? __might_fault+0xaa/0x120 [ 233.530360][ T7649] ? __lock_acquire+0x7d80/0x7d80 [ 233.535384][ T7649] ? bpf_percpu_array_update+0xec/0x490 [ 233.540940][ T7649] ? __virt_addr_valid+0x10c/0x380 [ 233.546054][ T7649] should_fail_ex+0x394/0x4c0 [ 233.550736][ T7649] _copy_from_user+0x2f/0xe0 [ 233.555321][ T7649] generic_map_update_batch+0x53e/0x800 [ 233.560884][ T7649] ? rcu_read_unlock+0xa0/0xa0 [ 233.565675][ T7649] ? __fdget+0x180/0x210 [ 233.569913][ T7649] ? rcu_read_unlock+0xa0/0xa0 [ 233.574668][ T7649] bpf_map_do_batch+0x3f2/0x600 [ 233.579515][ T7649] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 233.585865][ T7649] __sys_bpf+0x381/0x890 [ 233.590106][ T7649] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.595477][ T7649] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.601638][ T7649] __x64_sys_bpf+0x7c/0x90 [ 233.606049][ T7649] do_syscall_64+0x55/0xb0 [ 233.610466][ T7649] ? clear_bhb_loop+0x40/0x90 [ 233.615137][ T7649] ? clear_bhb_loop+0x40/0x90 [ 233.619806][ T7649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.625701][ T7649] RIP: 0033:0x7f69bad9de99 [ 233.630111][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.649722][ T7649] RSP: 002b:00007f69bbceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.658132][ T7649] RAX: ffffffffffffffda RBX: 00007f69bb025fa0 RCX: 00007f69bad9de99 [ 233.666095][ T7649] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 233.674058][ T7649] RBP: 00007f69bbceb090 R08: 0000000000000000 R09: 0000000000000000 [ 233.682033][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.690001][ T7649] R13: 00007f69bb026038 R14: 00007f69bb025fa0 R15: 00007ffc8bc3b1d8 [ 233.697979][ T7649] [ 233.869964][ T7653] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 234.230096][ T7664] netlink: 'syz.0.594': attribute type 21 has an invalid length. [ 234.256059][ T7668] netlink: 144 bytes leftover after parsing attributes in process `syz.3.596'. [ 234.276694][ T7667] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 234.434705][ T7667] veth0_vlan: left promiscuous mode [ 234.476945][ T7667] veth0_vlan: entered promiscuous mode [ 234.513042][ T7667] team0: Device veth0_vlan failed to register rx_handler [ 234.678693][ T7670] netlink: 'syz.3.596': attribute type 21 has an invalid length. [ 238.123239][ T7698] netlink: 'syz.0.602': attribute type 21 has an invalid length. [ 238.159876][ T7698] netlink: 152 bytes leftover after parsing attributes in process `syz.0.602'. [ 238.231971][ T7698] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 238.235159][ T7702] netlink: 'syz.1.604': attribute type 16 has an invalid length. [ 238.254048][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'. [ 238.257614][ T7703] netlink: 'syz.1.604': attribute type 16 has an invalid length. [ 238.277204][ T7702] netlink: 'syz.1.604': attribute type 3 has an invalid length. [ 238.285555][ T7703] netlink: 'syz.1.604': attribute type 3 has an invalid length. [ 238.291930][ T7698] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 238.298737][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.604'. [ 238.324527][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.604'. [ 241.477510][ T7714] netlink: 144 bytes leftover after parsing attributes in process `syz.0.606'. [ 241.558146][ T7719] netlink: 'syz.0.606': attribute type 21 has an invalid length. [ 241.833055][ T7729] netlink: 144 bytes leftover after parsing attributes in process `syz.2.613'. [ 241.894317][ T7733] netlink: 'syz.2.613': attribute type 21 has an invalid length. [ 244.907594][ T7741] netlink: 144 bytes leftover after parsing attributes in process `syz.2.624'. [ 244.968126][ T7748] netlink: 'syz.2.624': attribute type 21 has an invalid length. [ 245.213863][ T7756] netlink: 144 bytes leftover after parsing attributes in process `syz.1.620'. [ 245.317406][ T7760] netlink: 'syz.1.620': attribute type 21 has an invalid length. [ 248.043292][ T7775] netlink: 'syz.3.627': attribute type 10 has an invalid length. [ 248.136434][ T7778] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.628'. [ 248.398357][ T7786] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 251.102742][ T7786] team0: Device wg1 is of different type [ 251.165527][ T7789] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.631'. [ 251.194973][ T7791] netlink: 144 bytes leftover after parsing attributes in process `syz.1.632'. [ 251.304282][ T7796] netlink: 'syz.1.632': attribute type 21 has an invalid length. [ 251.337369][ T7795] netlink: 144 bytes leftover after parsing attributes in process `syz.3.633'. [ 251.358142][ T7798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.381036][ T7799] netlink: 'syz.3.633': attribute type 21 has an invalid length. [ 254.968833][ T7826] netlink: 144 bytes leftover after parsing attributes in process `syz.2.643'. [ 255.057368][ T7830] netlink: 'syz.2.643': attribute type 21 has an invalid length. [ 255.087678][ T7832] netlink: 144 bytes leftover after parsing attributes in process `syz.1.646'. [ 255.170415][ T7834] netlink: 'syz.1.646': attribute type 21 has an invalid length. [ 255.206986][ T7836] netlink: 'syz.0.655': attribute type 10 has an invalid length. [ 255.225865][ T7838] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.647'. [ 255.238745][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.261774][ T7836] bridge_slave_1: left allmulticast mode [ 255.267662][ T7836] bridge_slave_1: left promiscuous mode [ 255.276333][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.334644][ T7836] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.547206][ T7846] netlink: 'syz.0.650': attribute type 27 has an invalid length. [ 255.567760][ T7846] netlink: 'syz.0.650': attribute type 25 has an invalid length. [ 255.910110][ T7857] netlink: 144 bytes leftover after parsing attributes in process `syz.2.656'. [ 255.924436][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931908][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.842521][ T7860] netlink: 'syz.2.656': attribute type 21 has an invalid length. [ 258.851134][ T7862] netlink: 144 bytes leftover after parsing attributes in process `syz.1.657'. [ 258.870827][ T7863] netlink: 'syz.1.657': attribute type 21 has an invalid length. [ 259.187025][ T7875] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.662'. [ 259.643662][ T7883] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 259.739020][ T7883] team0: Device vxcan1 is of different type [ 259.841804][ T7889] tap0: tun_chr_ioctl cmd 1074025673 [ 259.882870][ T7888] tap0: tun_chr_ioctl cmd 1074025675 [ 259.888323][ T7888] tap0: persist enabled [ 259.904187][ T7891] netlink: 144 bytes leftover after parsing attributes in process `syz.1.668'. [ 259.929653][ T7889] tap0: tun_chr_ioctl cmd 1074025675 [ 259.947718][ T7889] tap0: persist enabled [ 259.955841][ T7888] tap0: tun_chr_ioctl cmd 1074025675 [ 259.966926][ T7888] tap0: persist enabled [ 259.976764][ T7897] netlink: 'syz.1.668': attribute type 21 has an invalid length. [ 260.256430][ T7909] netlink: 'syz.1.674': attribute type 10 has an invalid length. [ 260.278287][ T7909] veth0_vlan: left promiscuous mode [ 260.285564][ T7909] veth0_vlan: entered promiscuous mode [ 260.298256][ T7909] team0: Device veth0_vlan failed to register rx_handler [ 260.449525][ T7913] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 260.516451][ T7913] bridge0: port 3(hsr0) entered disabled state [ 260.575248][ T7913] hsr0: left allmulticast mode [ 260.603828][ T7913] hsr_slave_0: left allmulticast mode [ 260.618025][ T7913] hsr_slave_1: left allmulticast mode [ 260.712805][ T7913] bridge0: port 3(hsr0) entered disabled state [ 263.498903][ T7913] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 263.514664][ T7913] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 263.525470][ T7913] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 263.537898][ T7913] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 263.550334][ T7921] netlink: 'syz.3.679': attribute type 10 has an invalid length. [ 263.574554][ T7921] netlink: 55 bytes leftover after parsing attributes in process `syz.3.679'. [ 263.669218][ T7933] netlink: 144 bytes leftover after parsing attributes in process `syz.2.682'. [ 263.718332][ T7932] FAULT_INJECTION: forcing a failure. [ 263.718332][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.741612][ T7935] netlink: 'syz.2.682': attribute type 21 has an invalid length. [ 263.754469][ T7932] CPU: 1 PID: 7932 Comm: syz.0.681 Not tainted syzkaller #0 [ 263.761830][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 263.771918][ T7932] Call Trace: [ 263.775225][ T7932] [ 263.778185][ T7932] dump_stack_lvl+0x18c/0x250 [ 263.782913][ T7932] ? show_regs_print_info+0x20/0x20 [ 263.788150][ T7932] ? load_image+0x420/0x420 [ 263.792722][ T7932] ? __might_fault+0xaa/0x120 [ 263.797436][ T7932] ? __lock_acquire+0x7d80/0x7d80 [ 263.802557][ T7932] should_fail_ex+0x394/0x4c0 [ 263.807305][ T7932] _copy_from_user+0x2f/0xe0 [ 263.811932][ T7932] do_tcp_setsockopt+0x58d/0x1c50 [ 263.817015][ T7932] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 263.822428][ T7932] ? aa_af_perm+0x330/0x330 [ 263.826964][ T7932] ? __fget_files+0x28/0x460 [ 263.831596][ T7932] ? aa_sock_opt_perm+0x74/0x100 [ 263.836572][ T7932] ? sock_common_setsockopt+0x36/0xc0 [ 263.841978][ T7932] ? tcp_setsockopt+0x3d/0xe0 [ 263.846684][ T7932] ? tcp_enable_tx_delay+0x70/0x70 [ 263.851831][ T7932] ? sock_common_recvmsg+0x190/0x190 [ 263.857141][ T7932] do_sock_setsockopt+0x175/0x1a0 [ 263.862177][ T7932] ? __fdget+0x180/0x210 [ 263.866430][ T7932] __x64_sys_setsockopt+0x182/0x200 [ 263.871665][ T7932] do_syscall_64+0x55/0xb0 [ 263.876091][ T7932] ? clear_bhb_loop+0x40/0x90 [ 263.880771][ T7932] ? clear_bhb_loop+0x40/0x90 [ 263.885458][ T7932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.891373][ T7932] RIP: 0033:0x7fde3879de99 [ 263.895789][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.915434][ T7932] RSP: 002b:00007fde39725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.923853][ T7932] RAX: ffffffffffffffda RBX: 00007fde38a25fa0 RCX: 00007fde3879de99 [ 263.931837][ T7932] RDX: 0000000000000043 RSI: 0000000000000006 RDI: 0000000000000008 [ 263.939815][ T7932] RBP: 00007fde39725090 R08: 0000000000000004 R09: 0000000000000000 [ 263.947788][ T7932] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.955763][ T7932] R13: 00007fde38a26038 R14: 00007fde38a25fa0 R15: 00007fff4e64ef68 [ 263.963760][ T7932] [ 264.050666][ T7945] netlink: 'syz.3.685': attribute type 10 has an invalid length. [ 264.340681][ T7951] netlink: 128 bytes leftover after parsing attributes in process `syz.3.687'. [ 264.386268][ T7951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.489764][ T7959] netlink: 144 bytes leftover after parsing attributes in process `syz.0.692'. [ 264.552258][ T7963] netlink: 'syz.0.692': attribute type 21 has an invalid length. [ 264.681560][ T7967] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.691'. [ 264.709165][ T7967] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 267.977081][ T7990] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.700'. [ 268.402875][ T7993] netlink: 144 bytes leftover after parsing attributes in process `syz.1.701'. [ 268.444797][ T7994] netlink: 'syz.1.701': attribute type 21 has an invalid length. [ 271.436197][ T8007] netlink: 144 bytes leftover after parsing attributes in process `syz.1.705'. [ 271.461158][ T8008] netlink: 'syz.1.705': attribute type 21 has an invalid length. [ 271.698159][ T8011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.706'. [ 271.978150][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.007663][ T8025] bridge0: entered allmulticast mode [ 272.144807][ T8025] bridge_slave_0: left allmulticast mode [ 272.196809][ T8025] bridge_slave_0: left promiscuous mode [ 272.225104][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.331534][ T8030] netlink: 144 bytes leftover after parsing attributes in process `syz.1.713'. [ 272.363584][ T8032] netlink: 'syz.1.713': attribute type 21 has an invalid length. [ 272.537674][ T8040] netlink: 144 bytes leftover after parsing attributes in process `syz.2.716'. [ 272.597211][ T8044] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.718'. [ 272.625758][ T8045] netlink: 'syz.2.716': attribute type 21 has an invalid length. [ 273.664092][ T8056] netlink: 'syz.0.723': attribute type 3 has an invalid length. [ 273.685912][ T8056] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 273.700500][ T8056] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.723'. [ 273.751749][ T8065] netlink: 'syz.3.724': attribute type 46 has an invalid length. [ 273.759549][ T8065] netlink: 55 bytes leftover after parsing attributes in process `syz.3.724'. [ 273.803811][ T8065] netlink: 'syz.3.724': attribute type 9 has an invalid length. [ 273.811783][ T8065] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.724'. [ 273.821705][ T8068] ipvlan1: entered promiscuous mode [ 273.851130][ T8068] ipvlan1: entered allmulticast mode [ 273.856578][ T8068] veth0_vlan: entered allmulticast mode [ 274.034825][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.726'. [ 274.072783][ T8073] netlink: 144 bytes leftover after parsing attributes in process `syz.0.729'. [ 274.134522][ T8075] netlink: 'syz.0.729': attribute type 21 has an invalid length. [ 277.130194][ T8096] __nla_validate_parse: 1 callbacks suppressed [ 277.130219][ T8096] netlink: 144 bytes leftover after parsing attributes in process `syz.3.738'. [ 277.240170][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.262005][ T8100] netlink: 'syz.3.738': attribute type 21 has an invalid length. [ 277.371970][ T8106] sctp: [Deprecated]: syz.3.744 (pid 8106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.371970][ T8106] Use struct sctp_sack_info instead [ 277.395371][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.533804][ T8112] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.742'. [ 280.455206][ T8124] netlink: 168 bytes leftover after parsing attributes in process `syz.3.747'. [ 280.490913][ T8125] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.746'. [ 280.514643][ T8125] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.746'. [ 280.753726][ T8138] netlink: 144 bytes leftover after parsing attributes in process `syz.2.752'. [ 280.810200][ T8138] netlink: 'syz.2.752': attribute type 21 has an invalid length. [ 280.924306][ T8148] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.756'. [ 281.009193][ T8150] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 281.784516][ T8150] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 282.280811][ T8171] netlink: 144 bytes leftover after parsing attributes in process `syz.3.765'. [ 282.384289][ T8175] netlink: 'syz.3.765': attribute type 21 has an invalid length. [ 282.525858][ T8179] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.769'. [ 285.531999][ T8189] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 285.568435][ T8189] team0: Device vxcan1 is of different type [ 285.719864][ T8201] netlink: 144 bytes leftover after parsing attributes in process `syz.0.777'. [ 285.799796][ T8205] netlink: 'syz.0.777': attribute type 21 has an invalid length. [ 286.012882][ T8214] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.781'. [ 286.363642][ T8222] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 286.382386][ T8222] veth0_vlan: left promiscuous mode [ 286.396287][ T8222] veth0_vlan: entered promiscuous mode [ 286.445647][ T8222] team0: Device veth0_vlan failed to register rx_handler [ 286.473045][ T8224] FAULT_INJECTION: forcing a failure. [ 286.473045][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.513404][ T8224] CPU: 1 PID: 8224 Comm: syz.0.784 Not tainted syzkaller #0 [ 286.520787][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.530898][ T8224] Call Trace: [ 286.534231][ T8224] [ 286.537218][ T8224] dump_stack_lvl+0x18c/0x250 [ 286.541984][ T8224] ? show_regs_print_info+0x20/0x20 [ 286.547250][ T8224] ? load_image+0x420/0x420 [ 286.551834][ T8224] ? __lock_acquire+0x7d80/0x7d80 [ 286.556925][ T8224] ? snprintf+0xe9/0x140 [ 286.561246][ T8224] should_fail_ex+0x394/0x4c0 [ 286.565986][ T8224] _copy_to_user+0x2f/0xa0 [ 286.570433][ T8224] simple_read_from_buffer+0xe7/0x150 [ 286.575854][ T8224] proc_fail_nth_read+0x1e8/0x260 [ 286.580919][ T8224] ? proc_fault_inject_write+0x360/0x360 [ 286.586596][ T8224] ? fsnotify_perm+0x271/0x5e0 [ 286.591394][ T8224] ? proc_fault_inject_write+0x360/0x360 [ 286.597056][ T8224] vfs_read+0x298/0x990 [ 286.601262][ T8224] ? kernel_read+0x1e0/0x1e0 [ 286.605884][ T8224] ? __fget_files+0x28/0x460 [ 286.610501][ T8224] ? __fget_files+0x3fc/0x460 [ 286.615232][ T8224] ? __fdget_pos+0x2a3/0x330 [ 286.619842][ T8224] ? ksys_read+0x74/0x260 [ 286.624206][ T8224] ksys_read+0x151/0x260 [ 286.628485][ T8224] ? vfs_write+0x9a0/0x9a0 [ 286.632941][ T8224] ? lockdep_hardirqs_on+0x98/0x150 [ 286.638179][ T8224] do_syscall_64+0x55/0xb0 [ 286.642632][ T8224] ? clear_bhb_loop+0x40/0x90 [ 286.647333][ T8224] ? clear_bhb_loop+0x40/0x90 [ 286.652036][ T8224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.657960][ T8224] RIP: 0033:0x7fde3875e6ce [ 286.662397][ T8224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 286.682044][ T8224] RSP: 002b:00007fde39724fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.690501][ T8224] RAX: ffffffffffffffda RBX: 00007fde397256c0 RCX: 00007fde3875e6ce [ 286.698495][ T8224] RDX: 000000000000000f RSI: 00007fde397250a0 RDI: 0000000000000009 [ 286.706486][ T8224] RBP: 00007fde39725090 R08: 0000000000000000 R09: 0000000000000000 [ 286.714493][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.722483][ T8224] R13: 00007fde38a26038 R14: 00007fde38a25fa0 R15: 00007fff4e64ef68 [ 286.730532][ T8224] [ 287.235104][ T8235] netlink: 144 bytes leftover after parsing attributes in process `syz.3.789'. [ 287.293863][ T8238] netlink: 'syz.3.789': attribute type 21 has an invalid length. [ 290.205457][ T8251] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.792'. [ 290.354800][ T8259] FAULT_INJECTION: forcing a failure. [ 290.354800][ T8259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.375289][ T8259] CPU: 1 PID: 8259 Comm: syz.3.795 Not tainted syzkaller #0 [ 290.382638][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 290.392702][ T8259] Call Trace: [ 290.396002][ T8259] [ 290.398952][ T8259] dump_stack_lvl+0x18c/0x250 [ 290.403657][ T8259] ? show_regs_print_info+0x20/0x20 [ 290.408875][ T8259] ? load_image+0x420/0x420 [ 290.413399][ T8259] ? __might_fault+0xaa/0x120 [ 290.418088][ T8259] ? __lock_acquire+0x7d80/0x7d80 [ 290.423135][ T8259] ? bpf_percpu_array_update+0xec/0x490 [ 290.428710][ T8259] ? __virt_addr_valid+0x10c/0x380 [ 290.433825][ T8259] should_fail_ex+0x394/0x4c0 [ 290.438513][ T8259] _copy_from_user+0x2f/0xe0 [ 290.443105][ T8259] generic_map_update_batch+0x53e/0x800 [ 290.448685][ T8259] ? rcu_read_unlock+0xa0/0xa0 [ 290.453477][ T8259] ? __fdget+0x180/0x210 [ 290.457731][ T8259] ? rcu_read_unlock+0xa0/0xa0 [ 290.462492][ T8259] bpf_map_do_batch+0x3f2/0x600 [ 290.467363][ T8259] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 290.473746][ T8259] __sys_bpf+0x381/0x890 [ 290.477995][ T8259] ? bpf_link_show_fdinfo+0x390/0x390 [ 290.483377][ T8259] ? lock_chain_count+0x20/0x20 [ 290.488232][ T8259] __x64_sys_bpf+0x7c/0x90 [ 290.492645][ T8259] do_syscall_64+0x55/0xb0 [ 290.497068][ T8259] ? clear_bhb_loop+0x40/0x90 [ 290.501738][ T8259] ? clear_bhb_loop+0x40/0x90 [ 290.506410][ T8259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.512306][ T8259] RIP: 0033:0x7fa86c39de99 [ 290.516719][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.536319][ T8259] RSP: 002b:00007fa86d1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.544734][ T8259] RAX: ffffffffffffffda RBX: 00007fa86c625fa0 RCX: 00007fa86c39de99 [ 290.552702][ T8259] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 290.560671][ T8259] RBP: 00007fa86d1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 290.568638][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.576670][ T8259] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007ffd5358de68 [ 290.584655][ T8259] [ 290.663556][ T8262] netlink: 'syz.0.796': attribute type 10 has an invalid length. [ 292.269911][ T8287] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.805'. [ 293.020902][ T8310] netlink: 'syz.0.820': attribute type 17 has an invalid length. [ 293.080797][ T8310] netlink: 152 bytes leftover after parsing attributes in process `syz.0.820'. [ 293.189874][ T8310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.348398][ T8321] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.816'. [ 296.493596][ T8324] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 296.507408][ T8324] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.818'. [ 299.859077][ T8352] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.829'. [ 300.043560][ T8361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.092008][ T8362] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 301.383325][ T8393] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.841'. [ 301.480491][ T8396] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.842'. [ 301.542353][ T8400] netlink: 'syz.1.844': attribute type 15 has an invalid length. [ 301.550368][ T8400] netlink: 'syz.1.844': attribute type 16 has an invalid length. [ 301.571044][ T8400] netlink: 'syz.1.844': attribute type 20 has an invalid length. [ 301.590387][ T8400] netlink: 'syz.1.844': attribute type 21 has an invalid length. [ 301.650872][ T8400] netlink: 'syz.1.844': attribute type 23 has an invalid length. [ 301.667756][ T8400] netlink: 'syz.1.844': attribute type 25 has an invalid length. [ 301.687006][ T8409] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 301.695408][ T8400] netlink: 'syz.1.844': attribute type 27 has an invalid length. [ 301.704886][ T8400] netlink: 'syz.1.844': attribute type 28 has an invalid length. [ 301.727306][ T8400] netlink: 'syz.1.844': attribute type 29 has an invalid length. [ 302.114289][ T8428] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.853'. [ 303.496565][ T8460] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.864'. [ 306.638633][ T8486] validate_nla: 2 callbacks suppressed [ 306.638649][ T8486] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 306.667939][ T8486] veth0_vlan: left promiscuous mode [ 306.678021][ T8486] veth0_vlan: entered promiscuous mode [ 306.690061][ T8486] team0: Device veth0_vlan failed to register rx_handler [ 306.846175][ T8495] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 306.946495][ T8500] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 306.973373][ T8502] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.877'. [ 306.998074][ T8500] team0: Device vxcan1 is of different type [ 307.326298][ T8498] netlink: 'syz.3.875': attribute type 21 has an invalid length. [ 307.482525][ T8509] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 307.516193][ T8509] netlink: 'syz.1.880': attribute type 9 has an invalid length. [ 307.540790][ T8509] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.880'. [ 310.538122][ T8528] netlink: 'syz.3.886': attribute type 21 has an invalid length. [ 310.657588][ T8534] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 310.669457][ T8534] team0: Device vxcan1 is of different type [ 310.688710][ T8532] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.887'. [ 310.839874][ T8540] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1 (while UP) [ 313.985608][ T8559] netlink: 'syz.3.895': attribute type 10 has an invalid length. [ 314.538945][ T8574] netlink: 144 bytes leftover after parsing attributes in process `syz.2.899'. [ 314.554870][ T8575] netlink: 'syz.2.899': attribute type 21 has an invalid length. [ 314.705971][ T8579] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.900'. [ 314.783182][ T8583] netlink: 144 bytes leftover after parsing attributes in process `syz.0.901'. [ 314.847324][ T8586] netlink: 'syz.0.901': attribute type 21 has an invalid length. [ 317.364959][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.376849][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.020981][ T8605] netlink: 144 bytes leftover after parsing attributes in process `syz.1.912'. [ 318.375891][ T8607] netlink: 'syz.1.912': attribute type 21 has an invalid length. [ 318.531903][ T8618] netlink: 144 bytes leftover after parsing attributes in process `syz.1.915'. [ 318.676141][ T8620] netlink: 'syz.1.915': attribute type 21 has an invalid length. [ 318.792386][ T8626] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.917'. [ 321.579876][ T8629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.949435][ T8641] netlink: 144 bytes leftover after parsing attributes in process `syz.1.923'. [ 322.042636][ T8644] netlink: 'syz.1.923': attribute type 21 has an invalid length. [ 322.745930][ T8659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.927'. [ 325.714211][ T8663] netlink: 144 bytes leftover after parsing attributes in process `syz.3.929'. [ 325.742670][ T8664] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.930'. [ 325.782798][ T8668] netlink: 'syz.3.929': attribute type 21 has an invalid length. [ 326.040255][ T8675] netlink: 144 bytes leftover after parsing attributes in process `syz.1.934'. [ 326.099221][ T8681] netlink: 'syz.1.934': attribute type 21 has an invalid length. [ 326.633852][ T8687] ipvlan1: entered promiscuous mode [ 326.639190][ T8687] ipvlan1: entered allmulticast mode [ 326.650976][ T8687] veth0_vlan: entered allmulticast mode [ 326.840948][ T8688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.938'. [ 327.136224][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.941'. [ 329.973584][ T8706] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.943'. [ 329.989933][ T8708] netlink: 'syz.0.944': attribute type 10 has an invalid length. [ 330.035392][ T8708] team0: Device vxcan1 is of different type [ 330.162136][ T8713] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 330.264372][ T8713] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.300402][ T8713] bond0: (slave team0): Enslaving as an active interface with an up link [ 330.313110][ T8718] netlink: 144 bytes leftover after parsing attributes in process `syz.0.947'. [ 330.331094][ T8715] netlink: 'syz.0.947': attribute type 21 has an invalid length. [ 331.519901][ T8736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.953'. [ 333.642270][ T8738] FAULT_INJECTION: forcing a failure. [ 333.642270][ T8738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.691074][ T8738] CPU: 0 PID: 8738 Comm: syz.3.954 Not tainted syzkaller #0 [ 333.698429][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 333.708525][ T8738] Call Trace: [ 333.711826][ T8738] [ 333.714763][ T8738] dump_stack_lvl+0x18c/0x250 [ 333.719442][ T8738] ? show_regs_print_info+0x20/0x20 [ 333.724629][ T8738] ? load_image+0x420/0x420 [ 333.729123][ T8738] ? __might_fault+0xaa/0x120 [ 333.733787][ T8738] ? __lock_acquire+0x7d80/0x7d80 [ 333.738796][ T8738] ? bpf_percpu_array_update+0xec/0x490 [ 333.744351][ T8738] ? __virt_addr_valid+0x10c/0x380 [ 333.749453][ T8738] should_fail_ex+0x394/0x4c0 [ 333.754134][ T8738] _copy_from_user+0x2f/0xe0 [ 333.758729][ T8738] generic_map_update_batch+0x53e/0x800 [ 333.764276][ T8738] ? rcu_read_unlock+0xa0/0xa0 [ 333.769034][ T8738] ? __fdget+0x180/0x210 [ 333.773274][ T8738] ? rcu_read_unlock+0xa0/0xa0 [ 333.778030][ T8738] bpf_map_do_batch+0x3f2/0x600 [ 333.782875][ T8738] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 333.789202][ T8738] __sys_bpf+0x381/0x890 [ 333.793438][ T8738] ? bpf_link_show_fdinfo+0x390/0x390 [ 333.798811][ T8738] ? asm_common_interrupt+0x26/0x40 [ 333.804024][ T8738] __x64_sys_bpf+0x7c/0x90 [ 333.808452][ T8738] do_syscall_64+0x55/0xb0 [ 333.812868][ T8738] ? clear_bhb_loop+0x40/0x90 [ 333.817537][ T8738] ? clear_bhb_loop+0x40/0x90 [ 333.822210][ T8738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.828123][ T8738] RIP: 0033:0x7fa86c39de99 [ 333.832534][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.852135][ T8738] RSP: 002b:00007fa86d1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.860545][ T8738] RAX: ffffffffffffffda RBX: 00007fa86c625fa0 RCX: 00007fa86c39de99 [ 333.868514][ T8738] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 333.876482][ T8738] RBP: 00007fa86d1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.884446][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.892417][ T8738] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007ffd5358de68 [ 333.900399][ T8738] [ 333.910129][ T8746] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.956'. [ 334.067115][ T8750] netlink: 144 bytes leftover after parsing attributes in process `syz.2.959'. [ 334.132738][ T8756] netlink: 'syz.2.959': attribute type 21 has an invalid length. [ 334.956438][ T8777] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.968'. [ 335.066695][ T8773] delete_channel: no stack [ 335.147577][ T8783] netlink: 'syz.0.971': attribute type 6 has an invalid length. [ 335.168689][ T8783] netlink: 168 bytes leftover after parsing attributes in process `syz.0.971'. [ 335.261224][ T8786] netlink: 144 bytes leftover after parsing attributes in process `syz.3.972'. [ 335.324292][ T8792] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 337.300682][ T8821] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.983'. [ 337.327506][ T8819] netlink: 144 bytes leftover after parsing attributes in process `syz.3.984'. [ 337.422698][ T8824] netlink: 'syz.3.984': attribute type 21 has an invalid length. [ 337.991174][ T8805] netlink: 'syz.0.978': attribute type 7 has an invalid length. [ 337.998926][ T8805] netlink: 140 bytes leftover after parsing attributes in process `syz.0.978'. [ 338.375019][ T8844] netlink: 'syz.1.991': attribute type 21 has an invalid length. [ 338.404098][ T8844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.991'. [ 339.368509][ T8849] netlink: 'syz.3.992': attribute type 3 has an invalid length. [ 339.391078][ T8849] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.992'. [ 339.515879][ T8851] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.995'. [ 339.527608][ T8853] netlink: 144 bytes leftover after parsing attributes in process `syz.1.996'. [ 339.606625][ T8855] netlink: 'syz.1.996': attribute type 21 has an invalid length. [ 339.773919][ T8861] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.998'. [ 339.790860][ T8863] netlink: 'syz.2.999': attribute type 2 has an invalid length. [ 339.798932][ T8863] netlink: 'syz.2.999': attribute type 11 has an invalid length. [ 339.817393][ T8863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.999'. [ 339.936630][ T8867] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1001'. [ 340.854605][ T8881] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1006'. [ 340.906694][ T8883] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1008'. [ 340.999954][ T8887] netlink: 'syz.0.1008': attribute type 21 has an invalid length. [ 341.011040][ T8888] netlink: 'syz.3.1010': attribute type 10 has an invalid length. [ 341.221157][ T8895] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1013'. [ 341.325433][ T8899] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1014'. [ 342.169994][ T8910] ipvlan1: entered promiscuous mode [ 342.190143][ T8910] ipvlan1: entered allmulticast mode [ 342.262343][ T8910] ªªªªª+: entered allmulticast mode [ 342.492829][ T8920] netlink: 'syz.1.1023': attribute type 21 has an invalid length. [ 343.808907][ T8950] netlink: 'syz.2.1033': attribute type 10 has an invalid length. [ 344.059055][ T8952] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 344.081023][ T8952] veth0_vlan: left promiscuous mode [ 344.087381][ T8952] veth0_vlan: entered promiscuous mode [ 344.115651][ T8952] team0: Device veth0_vlan failed to register rx_handler [ 344.382798][ T8956] netlink: 'syz.3.1036': attribute type 21 has an invalid length. [ 344.713883][ T8978] FAULT_INJECTION: forcing a failure. [ 344.713883][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.749239][ T8978] CPU: 1 PID: 8978 Comm: syz.0.1043 Not tainted syzkaller #0 [ 344.756668][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 344.766743][ T8978] Call Trace: [ 344.770047][ T8978] [ 344.772997][ T8978] dump_stack_lvl+0x18c/0x250 [ 344.777752][ T8978] ? show_regs_print_info+0x20/0x20 [ 344.783025][ T8978] ? load_image+0x420/0x420 [ 344.787551][ T8978] ? __might_fault+0xaa/0x120 [ 344.792249][ T8978] ? __lock_acquire+0x7d80/0x7d80 [ 344.797296][ T8978] ? bpf_percpu_array_update+0xec/0x490 [ 344.802864][ T8978] ? __virt_addr_valid+0x10c/0x380 [ 344.807998][ T8978] should_fail_ex+0x394/0x4c0 [ 344.812701][ T8978] _copy_from_user+0x2f/0xe0 [ 344.817314][ T8978] generic_map_update_batch+0x58c/0x800 [ 344.822888][ T8978] ? rcu_read_unlock+0xa0/0xa0 [ 344.827691][ T8978] ? __fdget+0x180/0x210 [ 344.831962][ T8978] ? rcu_read_unlock+0xa0/0xa0 [ 344.836740][ T8978] bpf_map_do_batch+0x3f2/0x600 [ 344.841592][ T8978] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 344.847918][ T8978] __sys_bpf+0x381/0x890 [ 344.852155][ T8978] ? bpf_link_show_fdinfo+0x390/0x390 [ 344.857530][ T8978] ? lock_chain_count+0x20/0x20 [ 344.862383][ T8978] __x64_sys_bpf+0x7c/0x90 [ 344.866795][ T8978] do_syscall_64+0x55/0xb0 [ 344.871210][ T8978] ? clear_bhb_loop+0x40/0x90 [ 344.875882][ T8978] ? clear_bhb_loop+0x40/0x90 [ 344.880548][ T8978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.886439][ T8978] RIP: 0033:0x7fde3879de99 [ 344.890849][ T8978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.910449][ T8978] RSP: 002b:00007fde39725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.918862][ T8978] RAX: ffffffffffffffda RBX: 00007fde38a25fa0 RCX: 00007fde3879de99 [ 344.926830][ T8978] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 344.934794][ T8978] RBP: 00007fde39725090 R08: 0000000000000000 R09: 0000000000000000 [ 344.942757][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.950722][ T8978] R13: 00007fde38a26038 R14: 00007fde38a25fa0 R15: 00007fff4e64ef68 [ 344.958704][ T8978] [ 345.376757][ T8991] __nla_validate_parse: 5 callbacks suppressed [ 345.376795][ T8991] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1048'. [ 345.759081][ T8996] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1049'. [ 345.824336][ T8999] netlink: 'syz.1.1049': attribute type 21 has an invalid length. [ 346.154065][ T9008] tap1: tun_chr_ioctl cmd 1074025677 [ 346.160685][ T9008] tap1: linktype set to 825 [ 346.957861][ T9017] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1059'. [ 347.345877][ T9026] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1063'. [ 347.421838][ T9028] netlink: 'syz.0.1063': attribute type 21 has an invalid length. [ 347.974796][ T9048] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1072'. [ 348.373497][ T9054] netlink: 'syz.0.1074': attribute type 9 has an invalid length. [ 348.385427][ T9054] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1074'. [ 348.886709][ T9059] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1076'. [ 348.946352][ T9065] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 349.145993][ T9070] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 349.461573][ T9077] netlink: 'syz.1.1081': attribute type 9 has an invalid length. [ 349.489697][ T9077] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1081'. [ 349.584200][ T9086] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1084'. [ 349.821869][ T9095] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1089'. [ 349.940672][ T9096] netlink: 'syz.0.1089': attribute type 21 has an invalid length. [ 350.010064][ T9099] netlink: 'syz.3.1090': attribute type 3 has an invalid length. [ 350.034836][ T9099] netlink: 'syz.3.1090': attribute type 20 has an invalid length. [ 350.046402][ T9099] netlink: 'syz.3.1090': attribute type 25 has an invalid length. [ 351.127402][ T9119] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1097'. [ 351.350127][ T9125] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1100'. [ 351.435292][ T9127] netlink: 'syz.0.1100': attribute type 21 has an invalid length. [ 352.018567][ T9139] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1105'. [ 352.297772][ T9151] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1111'. [ 352.299325][ T9149] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1109'. [ 352.525293][ T9157] validate_nla: 3 callbacks suppressed [ 352.525337][ T9157] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 352.561531][ T9159] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1115'. [ 353.007758][ T9180] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1124'. [ 353.043379][ T9182] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1123'. [ 353.140416][ T9183] netlink: 'syz.2.1123': attribute type 21 has an invalid length. [ 353.415867][ T9189] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1126'. [ 353.426250][ T9189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.716982][ T9206] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1134'. [ 353.813052][ T9210] netlink: 'syz.1.1135': attribute type 21 has an invalid length. [ 355.015667][ T9247] netlink: 'syz.2.1146': attribute type 21 has an invalid length. [ 356.091774][ T9268] netlink: 'syz.2.1156': attribute type 10 has an invalid length. [ 356.154332][ T9272] __nla_validate_parse: 4 callbacks suppressed [ 356.154353][ T9272] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1158'. [ 356.221222][ T9274] netlink: 'syz.3.1158': attribute type 21 has an invalid length. [ 356.325542][ T9278] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 356.351723][ T9278] veth0_vlan: left promiscuous mode [ 356.358087][ T9278] veth0_vlan: entered promiscuous mode [ 356.371537][ T9278] team0: Device veth0_vlan failed to register rx_handler [ 356.450083][ T9283] netlink: 'syz.3.1162': attribute type 21 has an invalid length. [ 356.794389][ T9287] syzkaller0: entered promiscuous mode [ 356.799939][ T9287] syzkaller0: entered allmulticast mode [ 360.794535][ T9298] tc_dump_action: action bad kind [ 360.917668][ T9312] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1171'. [ 360.954947][ T9314] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1172'. [ 360.972477][ T9316] netlink: 'syz.1.1171': attribute type 21 has an invalid length. [ 361.029070][ T9322] netlink: 'syz.2.1174': attribute type 21 has an invalid length. [ 361.594045][ T9333] FAULT_INJECTION: forcing a failure. [ 361.594045][ T9333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.646198][ T9333] CPU: 0 PID: 9333 Comm: syz.3.1179 Not tainted syzkaller #0 [ 361.653633][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 361.663712][ T9333] Call Trace: [ 361.667001][ T9333] [ 361.669958][ T9333] dump_stack_lvl+0x18c/0x250 [ 361.674830][ T9333] ? show_regs_print_info+0x20/0x20 [ 361.680069][ T9333] ? load_image+0x420/0x420 [ 361.684632][ T9333] ? __might_fault+0xaa/0x120 [ 361.689372][ T9333] ? __lock_acquire+0x7d80/0x7d80 [ 361.694440][ T9333] ? bpf_percpu_array_update+0xec/0x490 [ 361.700028][ T9333] ? __virt_addr_valid+0x10c/0x380 [ 361.705198][ T9333] should_fail_ex+0x394/0x4c0 [ 361.709929][ T9333] _copy_from_user+0x2f/0xe0 [ 361.714543][ T9333] generic_map_update_batch+0x53e/0x800 [ 361.720120][ T9333] ? rcu_read_unlock+0xa0/0xa0 [ 361.724907][ T9333] ? __fdget+0x180/0x210 [ 361.729221][ T9333] ? rcu_read_unlock+0xa0/0xa0 [ 361.734030][ T9333] bpf_map_do_batch+0x3f2/0x600 [ 361.738924][ T9333] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 361.745291][ T9333] __sys_bpf+0x381/0x890 [ 361.749559][ T9333] ? bpf_link_show_fdinfo+0x390/0x390 [ 361.754961][ T9333] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.761307][ T9333] __x64_sys_bpf+0x7c/0x90 [ 361.765747][ T9333] do_syscall_64+0x55/0xb0 [ 361.770184][ T9333] ? clear_bhb_loop+0x40/0x90 [ 361.774871][ T9333] ? clear_bhb_loop+0x40/0x90 [ 361.779564][ T9333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.785476][ T9333] RIP: 0033:0x7fa86c39de99 [ 361.789903][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.809534][ T9333] RSP: 002b:00007fa86d1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.817976][ T9333] RAX: ffffffffffffffda RBX: 00007fa86c625fa0 RCX: 00007fa86c39de99 [ 361.825970][ T9333] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 361.833962][ T9333] RBP: 00007fa86d1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 361.841962][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.849954][ T9333] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007ffd5358de68 [ 361.857963][ T9333] [ 364.523641][ T9353] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 364.550496][ T9353] team0: Device vxcan1 is of different type [ 364.566831][ T9351] netlink: 'syz.1.1183': attribute type 21 has an invalid length. [ 364.590025][ T9355] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1185'. [ 364.639566][ T9359] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1186'. [ 364.650340][ T9356] netlink: 'syz.2.1185': attribute type 21 has an invalid length. [ 365.648861][ T9396] netlink: 'syz.0.1196': attribute type 21 has an invalid length. [ 366.131674][ T9410] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1198'. [ 366.194124][ T9416] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1199'. [ 366.214334][ T9410] netlink: 'syz.2.1198': attribute type 21 has an invalid length. [ 368.558913][ T9429] netlink: 'syz.3.1205': attribute type 21 has an invalid length. [ 368.796309][ T9441] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1209'. [ 368.878768][ T9444] netlink: 'syz.1.1209': attribute type 21 has an invalid length. [ 369.189669][ T9450] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1212'. [ 369.966392][ T9459] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1215'. [ 370.081457][ T9461] netlink: 'syz.1.1216': attribute type 21 has an invalid length. [ 370.322209][ T9472] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1220'. [ 370.385297][ T9475] netlink: 'syz.2.1220': attribute type 21 has an invalid length. [ 373.569031][ T9487] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1224'. [ 373.719861][ T9495] netlink: 'syz.0.1227': attribute type 21 has an invalid length. [ 373.947280][ T9505] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1232'. [ 374.017012][ T9512] netlink: 'syz.3.1232': attribute type 21 has an invalid length. [ 377.139500][ T9525] netlink: 'syz.2.1238': attribute type 21 has an invalid length. [ 377.246012][ T9527] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1239'. [ 377.495538][ T9537] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1244'. [ 377.559356][ T9541] netlink: 'syz.0.1244': attribute type 21 has an invalid length. [ 378.806868][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.817298][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.625603][ T9555] netlink: 'syz.0.1248': attribute type 21 has an invalid length. [ 380.741265][ T9561] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1251'. [ 380.785729][ T9565] netlink: 'syz.3.1250': attribute type 10 has an invalid length. [ 381.381316][ T9582] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1257'. [ 381.475787][ T9586] netlink: 'syz.2.1257': attribute type 21 has an invalid length. [ 381.531615][ T9588] netlink: 'syz.1.1259': attribute type 21 has an invalid length. [ 384.546898][ T9601] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1263'. [ 384.769625][ T9612] netlink: 'syz.3.1268': attribute type 21 has an invalid length. [ 384.943945][ T9618] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1270'. [ 385.011382][ T9622] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1269'. [ 385.041403][ T9623] netlink: 'syz.3.1270': attribute type 21 has an invalid length. [ 388.216303][ T9631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1275'. [ 388.282671][ T9631] bridge_slave_0: entered allmulticast mode [ 391.287753][ T9641] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1277'. [ 391.299670][ T9643] netlink: 'syz.0.1279': attribute type 21 has an invalid length. [ 391.491154][ T9649] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1282'. [ 394.434775][ T9653] netlink: 'syz.0.1282': attribute type 21 has an invalid length. [ 394.898901][ T9674] netlink: 'syz.1.1290': attribute type 21 has an invalid length. [ 395.157636][ T9677] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1291'. [ 397.833524][ T9681] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1292'. [ 398.084932][ T9687] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1294'. [ 398.150501][ T9693] netlink: 'syz.0.1294': attribute type 21 has an invalid length. [ 398.335870][ T9698] netlink: 'syz.1.1299': attribute type 21 has an invalid length. [ 400.988595][ T9711] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1303'. [ 401.151726][ T9715] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1305'. [ 401.189545][ T9717] netlink: 'syz.3.1306': attribute type 10 has an invalid length. [ 401.347546][ T9719] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1307'. [ 401.451875][ T9722] netlink: 'syz.1.1308': attribute type 21 has an invalid length. [ 401.558321][ T9724] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1309'. [ 401.634307][ T9724] netlink: 'syz.1.1309': attribute type 21 has an invalid length. [ 404.288965][ T9740] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1315'. [ 404.309674][ T9740] openvswitch: netlink: Duplicate key (type 0). [ 404.337319][ T9740] netlink: 'syz.1.1315': attribute type 9 has an invalid length. [ 404.354242][ T9740] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1315'. [ 407.084286][ T9744] netlink: 'syz.2.1317': attribute type 21 has an invalid length. [ 407.266018][ T9753] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1320'. [ 407.285404][ T9748] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1318'. [ 407.331258][ T9755] sit0: entered promiscuous mode [ 407.342430][ T9755] sit0: entered allmulticast mode [ 407.369967][ T9759] netlink: 'syz.1.1318': attribute type 21 has an invalid length. [ 407.572146][ T9762] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1323'. [ 407.590456][ T9762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.392220][ T9772] netlink: 'syz.2.1327': attribute type 21 has an invalid length. [ 413.659600][ T9785] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1331'. [ 413.863631][ T9797] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1335'. [ 413.891710][ T9799] netlink: 'syz.0.1337': attribute type 21 has an invalid length. [ 413.941515][ T9802] netlink: 'syz.2.1335': attribute type 21 has an invalid length. [ 417.066049][ T9830] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1346'. [ 417.089437][ T9833] netlink: 'syz.0.1347': attribute type 21 has an invalid length. [ 417.643950][ T9841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1350'. [ 417.718594][ T9844] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1351'. [ 417.782883][ T9847] netlink: 'syz.2.1351': attribute type 21 has an invalid length. [ 419.467137][ T9866] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1358'. [ 420.094900][ T9864] netlink: 'syz.1.1357': attribute type 21 has an invalid length. [ 420.284703][ T9873] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1361'. [ 420.349120][ T9877] netlink: 'syz.1.1361': attribute type 21 has an invalid length. [ 423.609882][ T9890] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1370'. [ 423.637829][ T9895] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 423.665884][ T9893] netlink: 'syz.0.1369': attribute type 21 has an invalid length. [ 423.973447][ T9903] netlink: 'syz.1.1374': attribute type 10 has an invalid length. [ 423.981494][ T9903] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1374'. [ 423.998623][ T9903] hsr0: entered promiscuous mode [ 424.153587][ T9909] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1375'. [ 424.218349][ T9911] netlink: 'syz.1.1375': attribute type 21 has an invalid length. [ 426.781297][ T9914] netlink: 'syz.2.1376': attribute type 10 has an invalid length. [ 426.816062][ T9914] veth0_vlan: left promiscuous mode [ 426.823463][ T9914] veth0_vlan: entered promiscuous mode [ 426.832833][ T9914] team0: Device veth0_vlan failed to register rx_handler [ 426.955223][ T9925] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1380'. [ 427.671585][ T9921] netlink: 'syz.1.1379': attribute type 21 has an invalid length. [ 427.687509][ T9921] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.714594][ T9921] IPv6: Can't replace route, no match found [ 427.741768][ T9928] netlink: 'syz.2.1381': attribute type 21 has an invalid length. [ 428.079847][ T9943] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1387'. [ 428.136643][ T9947] netlink: 'syz.1.1387': attribute type 21 has an invalid length. [ 430.927812][ T9951] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 430.958966][ T9951] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.1388'. [ 431.017999][ T9957] FAULT_INJECTION: forcing a failure. [ 431.017999][ T9957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.051928][ T9957] CPU: 1 PID: 9957 Comm: syz.2.1389 Not tainted syzkaller #0 [ 431.059344][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 431.069408][ T9957] Call Trace: [ 431.072701][ T9957] [ 431.075652][ T9957] dump_stack_lvl+0x18c/0x250 [ 431.080432][ T9957] ? show_regs_print_info+0x20/0x20 [ 431.085666][ T9957] ? load_image+0x420/0x420 [ 431.090210][ T9957] ? __might_fault+0xaa/0x120 [ 431.094912][ T9957] ? __lock_acquire+0x7d80/0x7d80 [ 431.099959][ T9957] ? bpf_percpu_array_update+0xec/0x490 [ 431.105532][ T9957] ? __virt_addr_valid+0x10c/0x380 [ 431.110676][ T9957] should_fail_ex+0x394/0x4c0 [ 431.115387][ T9957] _copy_from_user+0x2f/0xe0 [ 431.119998][ T9957] generic_map_update_batch+0x58c/0x800 [ 431.125572][ T9957] ? rcu_read_unlock+0xa0/0xa0 [ 431.130364][ T9957] ? __fdget+0x180/0x210 [ 431.134637][ T9957] ? rcu_read_unlock+0xa0/0xa0 [ 431.139458][ T9957] bpf_map_do_batch+0x3f2/0x600 [ 431.144329][ T9957] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 431.150697][ T9957] __sys_bpf+0x381/0x890 [ 431.154970][ T9957] ? bpf_link_show_fdinfo+0x390/0x390 [ 431.160382][ T9957] ? lock_chain_count+0x20/0x20 [ 431.165271][ T9957] __x64_sys_bpf+0x7c/0x90 [ 431.169715][ T9957] do_syscall_64+0x55/0xb0 [ 431.174154][ T9957] ? clear_bhb_loop+0x40/0x90 [ 431.178851][ T9957] ? clear_bhb_loop+0x40/0x90 [ 431.183550][ T9957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.189644][ T9957] RIP: 0033:0x7f9751d9de99 [ 431.194081][ T9957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.213721][ T9957] RSP: 002b:00007f9752bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.222173][ T9957] RAX: ffffffffffffffda RBX: 00007f9752025fa0 RCX: 00007f9751d9de99 [ 431.230181][ T9957] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 431.238177][ T9957] RBP: 00007f9752bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 431.246170][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.254164][ T9957] R13: 00007f9752026038 R14: 00007f9752025fa0 R15: 00007ffc8518b928 [ 431.262171][ T9957] [ 431.482349][ T9965] netlink: 'syz.2.1392': attribute type 21 has an invalid length. [ 431.752795][ T9967] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1393'. [ 431.776643][ T9967] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1393'. [ 432.072860][ T9970] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1394'. [ 434.178572][ T9990] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 434.192436][ T9990] team0: Device vxcan1 is of different type [ 434.214637][ T9986] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1398'. [ 434.301232][ T9992] netlink: 'syz.0.1398': attribute type 21 has an invalid length. [ 434.395414][ T9994] netlink: 'syz.3.1401': attribute type 21 has an invalid length. [ 437.332426][T10008] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1406'. [ 437.371636][T10007] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1405'. [ 437.697415][T10020] netlink: 'syz.2.1410': attribute type 21 has an invalid length. [ 437.720923][T10022] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1412'. [ 440.246755][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.255432][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.562259][T10036] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1415'. [ 440.597249][T10040] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1418'. [ 440.625120][T10042] netlink: 'syz.1.1415': attribute type 21 has an invalid length. [ 443.698419][T10054] netlink: 'syz.2.1421': attribute type 21 has an invalid length. [ 443.984639][T10066] netlink: 'syz.0.1426': attribute type 5 has an invalid length. [ 444.006833][T10067] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1427'. [ 444.079395][T10070] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 444.104789][T10070] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1426'. [ 444.131646][T10067] netlink: 'syz.1.1427': attribute type 21 has an invalid length. [ 447.039872][T10080] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1431'. [ 447.241022][T10082] netlink: 'syz.3.1432': attribute type 21 has an invalid length. [ 450.096702][T10099] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1437'. [ 450.159162][T10105] netlink: 'syz.3.1437': attribute type 21 has an invalid length. [ 450.465206][T10115] netlink: 'syz.1.1442': attribute type 21 has an invalid length. [ 453.281692][T10128] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1447'. [ 456.373755][T10134] netlink: 'syz.3.1451': attribute type 21 has an invalid length. [ 456.484824][T10140] netlink: 'syz.2.1453': attribute type 4 has an invalid length. [ 456.493549][T10140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1453'. [ 456.548781][T10147] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1454'. [ 456.609970][T10149] netlink: 'syz.1.1454': attribute type 21 has an invalid length. [ 457.434988][T10159] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1457'. [ 459.764221][T10166] netlink: 'syz.0.1460': attribute type 21 has an invalid length. [ 459.881183][T10171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.589284][T10179] netlink: 'syz.2.1464': attribute type 10 has an invalid length. [ 460.617253][T10185] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1465'. [ 460.631262][T10183] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1465'. [ 460.651436][T10191] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1466'. [ 460.753054][T10194] netlink: 'syz.1.1466': attribute type 21 has an invalid length. [ 460.952730][T10203] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1469'. [ 463.870067][T10211] netlink: 'syz.3.1471': attribute type 21 has an invalid length. [ 463.963097][T10213] netlink: 'syz.1.1473': attribute type 21 has an invalid length. [ 464.001283][T10213] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.105803][T10238] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1482'. [ 470.120980][T10239] netlink: 'syz.0.1482': attribute type 21 has an invalid length. [ 470.129383][T10241] netlink: 'syz.1.1483': attribute type 21 has an invalid length. [ 470.386959][T10250] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1484'. [ 474.292515][T10271] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1494'. [ 474.312699][T10272] netlink: 'syz.0.1494': attribute type 21 has an invalid length. [ 474.430182][T10278] netlink: 'syz.3.1495': attribute type 21 has an invalid length. [ 474.533020][T10282] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1497'. [ 474.636579][T10286] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1498'. [ 477.928328][T10304] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1505'. [ 478.004939][T10304] netlink: 'syz.1.1505': attribute type 21 has an invalid length. [ 478.246923][T10308] netlink: 'syz.0.1507': attribute type 21 has an invalid length. [ 478.316244][T10311] netlink: 'syz.3.1508': attribute type 21 has an invalid length. [ 478.336254][T10313] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1509'. [ 478.435128][T10319] netlink: 'syz.1.1511': attribute type 10 has an invalid length. [ 478.439028][T10316] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1510'. [ 478.509893][T10319] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 478.912782][T10337] netlink: 'syz.3.1518': attribute type 21 has an invalid length. [ 478.956492][T10335] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1517'. [ 479.045837][T10338] netlink: 'syz.0.1517': attribute type 21 has an invalid length. [ 481.990046][T10355] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1525'. [ 482.187490][T10361] netlink: 'syz.3.1528': attribute type 21 has an invalid length. [ 482.442245][T10365] netlink: 'syz.1.1526': attribute type 10 has an invalid length. [ 482.450128][T10365] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.1526'. [ 482.470541][T10369] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1531'. [ 482.605917][T10369] netlink: 'syz.3.1531': attribute type 21 has an invalid length. [ 483.679170][T10387] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1537'. [ 485.850307][T10392] netlink: 'syz.1.1539': attribute type 21 has an invalid length. [ 486.005743][T10399] netlink: 'syz.1.1549': attribute type 21 has an invalid length. [ 486.135357][T10403] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1543'. [ 486.196525][T10412] netlink: 'syz.1.1543': attribute type 21 has an invalid length. [ 486.227511][T10411] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1545'. [ 486.619816][T10422] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1548'. [ 487.003233][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1547'. [ 489.773013][T10439] netlink: 'syz.1.1552': attribute type 21 has an invalid length. [ 489.911962][T10444] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1556'. [ 489.976074][T10449] netlink: 'syz.1.1556': attribute type 21 has an invalid length. [ 490.018948][T10450] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 493.542812][T10453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1557'. [ 493.567701][T10469] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1563'. [ 493.708100][T10476] netlink: 'syz.2.1564': attribute type 21 has an invalid length. [ 493.740577][T10475] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 494.144770][T10491] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1569'. [ 494.217928][T10494] netlink: 'syz.0.1569': attribute type 21 has an invalid length. [ 494.369088][T10499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1571'. [ 494.418480][T10499] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1571'. [ 494.451812][T10502] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1571'. [ 494.471010][T10499] bridge_slave_0: entered allmulticast mode [ 494.483360][T10499] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1571'. [ 494.520838][T10502] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1571'. [ 494.541364][T10504] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1571'. [ 496.086675][T10507] netlink: 'syz.1.1575': attribute type 21 has an invalid length. [ 496.099728][T10509] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1576'. [ 496.643725][T10528] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1583'. [ 496.711235][T10532] netlink: 'syz.1.1583': attribute type 21 has an invalid length. [ 497.777442][T10540] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1588'. [ 497.788792][T10544] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1586'. [ 497.858521][T10546] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 498.039417][T10551] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1597'. [ 498.115506][T10554] netlink: 'syz.0.1597': attribute type 21 has an invalid length. [ 498.270351][T10558] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1593'. [ 498.294809][T10558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.449064][T10565] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1595'. [ 498.557930][T10569] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1598'. [ 498.558067][T10570] netlink: 'syz.2.1595': attribute type 21 has an invalid length. [ 501.465050][T10579] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1601'. [ 501.548932][T10582] netlink: 'syz.3.1601': attribute type 21 has an invalid length. [ 501.557587][T10583] netlink: 'syz.2.1600': attribute type 29 has an invalid length. [ 501.570216][T10583] netlink: 'syz.2.1600': attribute type 29 has an invalid length. [ 501.684177][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.695744][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.541071][T10600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1608'. [ 502.612495][T10602] netlink: 'syz.3.1608': attribute type 21 has an invalid length. [ 502.728581][T10610] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1610'. [ 502.752829][T10608] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 502.771247][T10608] ªªªªª+: left promiscuous mode [ 502.777368][T10608] ªªªªª+: entered promiscuous mode [ 502.785140][T10608] team0: Device ªªªªª+ failed to register rx_handler [ 503.561636][T10612] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1612'. [ 503.586409][T10613] netlink: 'syz.1.1612': attribute type 21 has an invalid length. [ 504.069643][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1614'. [ 505.484644][T10637] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1620'. [ 505.583081][T10643] netlink: 'syz.1.1620': attribute type 21 has an invalid length. [ 508.721384][T10655] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1625'. [ 508.783646][T10663] netlink: 'syz.2.1625': attribute type 21 has an invalid length. [ 509.065255][T10671] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1632'. [ 509.188184][T10667] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 509.275629][T10675] netlink: 'syz.3.1632': attribute type 21 has an invalid length. [ 512.392657][T10690] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1637'. [ 512.463455][T10697] netlink: 'syz.2.1637': attribute type 21 has an invalid length. [ 512.480571][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 512.981189][T10716] netlink: 'syz.1.1646': attribute type 10 has an invalid length. [ 513.252768][T10725] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1649'. [ 513.312105][T10727] netlink: 'syz.3.1649': attribute type 21 has an invalid length. [ 513.950516][T10731] netlink: 'syz.2.1651': attribute type 33 has an invalid length. [ 513.961586][T10731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1651'. [ 514.108813][T10739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.295561][T10747] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1658'. [ 514.374842][T10751] netlink: 'syz.2.1658': attribute type 21 has an invalid length. [ 517.560398][T10777] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1669'. [ 517.789528][T10787] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1671'. [ 517.850393][T10789] netlink: 'syz.3.1671': attribute type 21 has an invalid length. [ 521.196657][T10809] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1681'. [ 521.217293][T10810] netlink: 'syz.3.1681': attribute type 21 has an invalid length. [ 521.875784][T10841] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1692'. [ 521.947148][T10844] netlink: 'syz.1.1692': attribute type 21 has an invalid length. [ 528.279432][T10872] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1702'. [ 528.369106][T10878] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 528.389846][T10879] netlink: 'syz.2.1702': attribute type 21 has an invalid length. [ 528.417457][T10881] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 531.218779][T10881] team0: Port device netdevsim0 removed [ 531.266317][T10881] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 532.187859][T10895] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1710'. [ 532.233296][T10895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.251646][T10895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.278883][T10895] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 532.345141][T10895] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 532.359197][T10895] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 532.380056][T10895] bond0 (unregistering): Released all slaves [ 532.395708][T10902] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1711'. [ 532.408415][T10903] netlink: 'syz.0.1711': attribute type 21 has an invalid length. [ 532.590325][T10912] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 532.607324][T10912] team0: Device vxcan1 is of different type [ 532.671645][T10915] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1714'. [ 532.926404][T10919] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1716'. [ 532.980500][T10927] netlink: 'syz.3.1716': attribute type 21 has an invalid length. [ 533.200426][T10938] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1722'. [ 533.263497][T10940] netlink: 'syz.3.1722': attribute type 21 has an invalid length. [ 533.450928][T10948] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 533.474475][T10948] team0: Device vxcan1 is of different type [ 533.845103][T10951] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1726'. [ 533.915113][T10951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.955596][T10951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.985935][T10951] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 534.008637][T10951] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 534.035223][T10951] bond0 (unregistering): (slave team0): Releasing backup interface [ 534.048827][T10951] bond0 (unregistering): Released all slaves [ 534.099310][T10960] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1730'. [ 534.126105][T10964] netlink: 'syz.1.1730': attribute type 21 has an invalid length. [ 534.389604][T10977] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1736'. [ 534.445319][T10982] netlink: 'syz.0.1736': attribute type 21 has an invalid length. [ 534.571153][T10984] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 534.593336][T10984] team0: Device vxcan1 is of different type [ 534.612599][T10989] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1741'. [ 534.658684][T10992] netlink: 'syz.0.1741': attribute type 21 has an invalid length. [ 534.859384][T10999] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1745'. [ 534.889749][T11003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1743'. [ 535.394443][T11003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.419928][T11003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.478556][T11003] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 535.496013][T11003] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 535.520626][T11003] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 535.532046][T11003] bond0 (unregistering): Released all slaves [ 535.552098][T11016] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1749'. [ 535.626066][T11019] netlink: 'syz.1.1749': attribute type 21 has an invalid length. [ 535.773123][T11026] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1752'. [ 535.792305][T11026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.819298][T11028] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1753'. [ 535.873548][T11032] netlink: 'syz.0.1753': attribute type 21 has an invalid length. [ 536.163678][T11045] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 536.994375][T11051] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1760'. [ 537.007523][T11052] netlink: 'syz.0.1760': attribute type 21 has an invalid length. [ 537.438877][T11061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.461856][T11061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.547315][T11061] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 537.576161][T11061] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 537.597982][T11061] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 537.621656][T11061] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 537.641340][T11061] bond0 (unregistering): Released all slaves [ 537.668346][T11069] netlink: 'syz.2.1766': attribute type 21 has an invalid length. [ 538.584077][T11091] netlink: 'syz.3.1776': attribute type 10 has an invalid length. [ 539.112056][T11099] FAULT_INJECTION: forcing a failure. [ 539.112056][T11099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.125662][T11099] CPU: 1 PID: 11099 Comm: syz.0.1780 Not tainted syzkaller #0 [ 539.133153][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 539.143227][T11099] Call Trace: [ 539.146520][T11099] [ 539.149476][T11099] dump_stack_lvl+0x18c/0x250 [ 539.154192][T11099] ? show_regs_print_info+0x20/0x20 [ 539.159425][T11099] ? load_image+0x420/0x420 [ 539.163964][T11099] ? __might_fault+0xaa/0x120 [ 539.168663][T11099] ? __lock_acquire+0x7d80/0x7d80 [ 539.173712][T11099] ? bpf_percpu_array_update+0xec/0x490 [ 539.179282][T11099] ? __virt_addr_valid+0x10c/0x380 [ 539.184420][T11099] should_fail_ex+0x394/0x4c0 [ 539.189121][T11099] _copy_from_user+0x2f/0xe0 [ 539.193732][T11099] generic_map_update_batch+0x53e/0x800 [ 539.199323][T11099] ? rcu_read_unlock+0xa0/0xa0 [ 539.204099][T11099] ? rcu_read_unlock+0xa0/0xa0 [ 539.208880][T11099] ? bpf_map_do_batch+0x39f/0x600 [ 539.213925][T11099] ? rcu_read_unlock+0xa0/0xa0 [ 539.218709][T11099] bpf_map_do_batch+0x3f2/0x600 [ 539.223593][T11099] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 539.229951][T11099] __sys_bpf+0x381/0x890 [ 539.234214][T11099] ? bpf_link_show_fdinfo+0x390/0x390 [ 539.239619][T11099] ? lock_chain_count+0x20/0x20 [ 539.244499][T11099] __x64_sys_bpf+0x7c/0x90 [ 539.248940][T11099] do_syscall_64+0x55/0xb0 [ 539.253381][T11099] ? clear_bhb_loop+0x40/0x90 [ 539.258075][T11099] ? clear_bhb_loop+0x40/0x90 [ 539.262783][T11099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.268715][T11099] RIP: 0033:0x7fde3879de99 [ 539.273156][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.292796][T11099] RSP: 002b:00007fde39725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.301242][T11099] RAX: ffffffffffffffda RBX: 00007fde38a25fa0 RCX: 00007fde3879de99 [ 539.309239][T11099] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 539.317236][T11099] RBP: 00007fde39725090 R08: 0000000000000000 R09: 0000000000000000 [ 539.325243][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.333242][T11099] R13: 00007fde38a26038 R14: 00007fde38a25fa0 R15: 00007fff4e64ef68 [ 539.341251][T11099] [ 539.494032][T11112] __nla_validate_parse: 2 callbacks suppressed [ 539.494069][T11112] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1783'. [ 539.728436][T11116] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1784'. [ 539.840622][T11118] netlink: 'syz.0.1784': attribute type 21 has an invalid length. [ 541.316358][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.334447][T11142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.360049][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.385704][T11142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.417834][T11142] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 541.429605][T11142] batman_adv: batadv0: Removing interface: virt_wifi0 [ 541.533220][T11146] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1796'. [ 541.551941][T11149] netlink: 'syz.3.1796': attribute type 21 has an invalid length. [ 542.838785][T11181] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1809'. [ 542.876517][T11168] netlink: 'syz.3.1804': attribute type 1 has an invalid length. [ 542.916031][T11168] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1804'. [ 542.969480][T11184] netlink: 'syz.0.1809': attribute type 21 has an invalid length. [ 544.720077][T11215] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1820'. [ 544.815616][T11219] netlink: 'syz.3.1820': attribute type 21 has an invalid length. [ 546.300950][T11240] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1829'. [ 546.324057][T11240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.450268][T11246] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1831'. [ 546.553677][T11252] netlink: 'syz.2.1831': attribute type 21 has an invalid length. [ 546.750043][T11258] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1835'. [ 546.787152][T11258] FAULT_INJECTION: forcing a failure. [ 546.787152][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.800771][T11258] CPU: 0 PID: 11258 Comm: syz.2.1835 Not tainted syzkaller #0 [ 546.808266][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 546.818344][T11258] Call Trace: [ 546.821639][T11258] [ 546.824579][T11258] dump_stack_lvl+0x18c/0x250 [ 546.829274][T11258] ? show_regs_print_info+0x20/0x20 [ 546.834496][T11258] ? load_image+0x420/0x420 [ 546.839024][T11258] ? __might_fault+0xaa/0x120 [ 546.843722][T11258] ? __lock_acquire+0x7d80/0x7d80 [ 546.848776][T11258] should_fail_ex+0x394/0x4c0 [ 546.853481][T11258] _copy_from_user+0x2f/0xe0 [ 546.858082][T11258] mptcp_setsockopt+0x2065/0x3370 [ 546.863247][T11258] ? aa_sk_perm+0x83c/0x970 [ 546.867792][T11258] ? __fget_files+0x28/0x460 [ 546.872399][T11258] ? pm_nl_exit_net+0x230/0x230 [ 546.877275][T11258] ? aa_af_perm+0x330/0x330 [ 546.881801][T11258] ? __fget_files+0x28/0x460 [ 546.886403][T11258] ? aa_sock_opt_perm+0x74/0x100 [ 546.891357][T11258] ? sock_common_setsockopt+0x36/0xc0 [ 546.896854][T11258] ? sock_common_recvmsg+0x190/0x190 [ 546.902155][T11258] do_sock_setsockopt+0x175/0x1a0 [ 546.907254][T11258] __x64_sys_setsockopt+0x182/0x200 [ 546.912479][T11258] do_syscall_64+0x55/0xb0 [ 546.916911][T11258] ? clear_bhb_loop+0x40/0x90 [ 546.921597][T11258] ? clear_bhb_loop+0x40/0x90 [ 546.926282][T11258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.932191][T11258] RIP: 0033:0x7f9751d9de99 [ 546.936621][T11258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.956243][T11258] RSP: 002b:00007f9752bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 546.964673][T11258] RAX: ffffffffffffffda RBX: 00007f9752025fa0 RCX: 00007f9751d9de99 [ 546.972653][T11258] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 000000000000000e [ 546.980631][T11258] RBP: 00007f9752bd0090 R08: 0000000000000008 R09: 0000000000000000 [ 546.988612][T11258] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 546.996600][T11258] R13: 00007f9752026038 R14: 00007f9752025fa0 R15: 00007ffc8518b928 [ 547.004599][T11258] [ 547.039493][T11260] netlink: 'syz.0.1836': attribute type 19 has an invalid length. [ 547.067867][T11260] netlink: 'syz.0.1836': attribute type 39 has an invalid length. [ 547.091102][T11263] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1837'. [ 547.425181][T11268] netlink: 'syz.3.1839': attribute type 21 has an invalid length. [ 547.459750][T11268] netlink: 'syz.3.1839': attribute type 10 has an invalid length. [ 547.487708][T11268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1839'. [ 547.512452][T11268] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 548.420263][T11277] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1843'. [ 548.492884][T11282] netlink: 'syz.3.1843': attribute type 21 has an invalid length. [ 548.776900][ T5776] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 549.614071][T11308] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1853'. [ 549.757379][T11311] netlink: 'syz.0.1853': attribute type 21 has an invalid length. [ 551.221608][T11329] netlink: 'syz.3.1861': attribute type 19 has an invalid length. [ 551.263042][T11329] netlink: 'syz.3.1861': attribute type 39 has an invalid length. [ 554.431495][T11342] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1865'. [ 554.678613][T11346] netlink: 'syz.1.1865': attribute type 21 has an invalid length. [ 555.242611][T11349] netlink: 'syz.2.1867': attribute type 10 has an invalid length. [ 555.273169][T11349] team0: Device vxcan1 is of different type [ 556.606139][T11368] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 556.635693][T11368] netlink: 'syz.2.1874': attribute type 16 has an invalid length. [ 556.660860][T11368] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1874'. [ 556.786872][T11370] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 556.840990][T11370] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 556.880209][T11375] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 558.795290][T11395] netlink: 'syz.3.1881': attribute type 10 has an invalid length. [ 560.294063][T11396] netlink: 'syz.3.1881': attribute type 10 has an invalid length. [ 560.317936][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1881'. [ 560.362799][T11396] team0: entered promiscuous mode [ 560.368145][T11396] team_slave_0: entered promiscuous mode [ 560.381759][T11396] team_slave_1: entered promiscuous mode [ 560.398149][T11396] team0: entered allmulticast mode [ 560.406649][T11396] team_slave_0: entered allmulticast mode [ 560.421600][T11396] team_slave_1: entered allmulticast mode [ 560.443062][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.462294][T11396] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 560.798202][T11403] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1883'. [ 563.128829][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.138069][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.296468][T11449] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 566.315465][T11449] netlink: 'syz.1.1903': attribute type 4 has an invalid length. [ 566.327182][T11449] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1903'. [ 568.399307][T11469] netlink: 'syz.3.1912': attribute type 29 has an invalid length. [ 568.407701][T11469] netlink: 'syz.3.1912': attribute type 29 has an invalid length. [ 568.433264][T11469] netlink: 'syz.3.1912': attribute type 29 has an invalid length. [ 568.547241][T11475] netlink: 'syz.0.1913': attribute type 2 has an invalid length. [ 568.595114][T11475] netlink: 'syz.0.1913': attribute type 8 has an invalid length. [ 568.631939][T11475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1913'. [ 569.340994][T11482] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1916'. [ 569.375518][T11482] netlink: 'syz.3.1916': attribute type 21 has an invalid length. [ 569.385128][T11482] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1916'. [ 569.401728][T11482] netlink: 'syz.3.1916': attribute type 5 has an invalid length. [ 569.409496][T11482] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1916'. [ 569.566770][T11488] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1928'. [ 569.929518][T11495] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 569.954312][T11495] syzkaller1: linktype set to 773 [ 572.647455][T11501] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1933'. [ 572.918980][T11504] netlink: 'syz.2.1924': attribute type 29 has an invalid length. [ 572.927956][T11504] netlink: 'syz.2.1924': attribute type 29 has an invalid length. [ 572.946521][T11504] netlink: 'syz.2.1924': attribute type 29 has an invalid length. [ 573.340956][T11512] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 573.366156][T11512] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1926'. [ 573.459490][T11524] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1931'. [ 573.514045][T11526] netlink: 'syz.1.1931': attribute type 21 has an invalid length. [ 573.946144][T11534] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1934'. [ 573.980980][T11532] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1935'. [ 577.408916][T11572] netlink: 'syz.1.1950': attribute type 10 has an invalid length. [ 577.443069][T11575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1951'. [ 577.538930][T11577] netlink: 'syz.3.1951': attribute type 21 has an invalid length. [ 578.632836][T11603] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1962'. [ 578.692848][T11607] netlink: 'syz.2.1962': attribute type 21 has an invalid length. [ 579.801402][T11639] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1976'. [ 579.967518][T11643] netlink: 'syz.0.1976': attribute type 21 has an invalid length. [ 580.611833][T11654] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 581.396298][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1984'. [ 582.816671][T11699] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1995'. [ 584.671089][T11739] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2008'. [ 585.058273][ C1] [ 585.058281][ C1] ================================ [ 585.058286][ C1] WARNING: inconsistent lock state [ 585.058301][ C1] syzkaller #0 Not tainted [ 585.058310][ C1] -------------------------------- [ 585.058315][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 585.058322][ C1] syz.1.2011/11748 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 585.058340][ C1] ffff88802d4aaa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 585.058389][ C1] {INITIAL USE} state was registered at: [ 585.058396][ C1] lock_acquire+0x19e/0x420 [ 585.058414][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 585.058517][ C1] trie_update_elem+0xcd/0xdf0 [ 585.058535][ C1] bpf_map_update_value+0x64b/0x710 [ 585.058550][ C1] generic_map_update_batch+0x5de/0x800 [ 585.058564][ C1] bpf_map_do_batch+0x3f2/0x600 [ 585.058579][ C1] __sys_bpf+0x381/0x890 [ 585.058594][ C1] __x64_sys_bpf+0x7c/0x90 [ 585.058607][ C1] do_syscall_64+0x55/0xb0 [ 585.058631][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.058665][ C1] irq event stamp: 2102 [ 585.058670][ C1] hardirqs last enabled at (2101): [] memcg_account_kmem+0x109/0x1c0 [ 585.058702][ C1] hardirqs last disabled at (2102): [] exc_debug+0x73/0x140 [ 585.058721][ C1] softirqs last enabled at (2042): [] rds_create+0x42e/0x4a0 [ 585.058810][ C1] softirqs last disabled at (2040): [] rds_create+0x36e/0x4a0 [ 585.058834][ C1] [ 585.058834][ C1] other info that might help us debug this: [ 585.058839][ C1] Possible unsafe locking scenario: [ 585.058839][ C1] [ 585.058842][ C1] CPU0 [ 585.058846][ C1] ---- [ 585.058848][ C1] lock(&trie->lock); [ 585.058873][ C1] [ 585.058875][ C1] lock(&trie->lock); [ 585.058885][ C1] [ 585.058885][ C1] *** DEADLOCK *** [ 585.058885][ C1] [ 585.058888][ C1] no locks held by syz.1.2011/11748. [ 585.058896][ C1] [ 585.058896][ C1] stack backtrace: [ 585.058901][ C1] CPU: 1 PID: 11748 Comm: syz.1.2011 Not tainted syzkaller #0 [ 585.058916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 585.058926][ C1] Call Trace: [ 585.058933][ C1] <#DB> [ 585.058940][ C1] dump_stack_lvl+0x18c/0x250 [ 585.058963][ C1] ? show_regs_print_info+0x20/0x20 [ 585.058989][ C1] ? print_usage_bug+0x43d/0x6a0 [ 585.059008][ C1] ? verify_lock_unused+0x15/0x140 [ 585.059027][ C1] lock_acquire+0x2c2/0x420 [ 585.059047][ C1] ? trie_delete_elem+0x95/0x680 [ 585.059068][ C1] ? read_lock_is_recursive+0x20/0x20 [ 585.059086][ C1] ? get_user_pages_fast_only+0xa0/0xa0 [ 585.059109][ C1] ? look_up_lock_class+0x75/0x140 [ 585.059129][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 585.059149][ C1] ? trie_delete_elem+0x95/0x680 [ 585.059168][ C1] ? _raw_spin_lock+0x40/0x40 [ 585.059188][ C1] ? perf_prepare_sample+0x1558/0x1db0 [ 585.059208][ C1] trie_delete_elem+0x95/0x680 [ 585.059228][ C1] ? perf_callchain+0x220/0x220 [ 585.059248][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 585.059266][ C1] bpf_overflow_handler+0x1fc/0x510 [ 585.059290][ C1] ? bpf_overflow_handler+0xde/0x510 [ 585.059310][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 585.059335][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 585.059355][ C1] __perf_event_overflow+0x461/0x660 [ 585.059376][ C1] perf_swevent_event+0x319/0x570 [ 585.059395][ C1] ? perf_tp_event+0x1550/0x1550 [ 585.059419][ C1] perf_bp_event+0x319/0x430 [ 585.059440][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 585.059472][ C1] ? lock_acquire+0x2c2/0x420 [ 585.059492][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 585.059515][ C1] notifier_call_chain+0x18f/0x380 [ 585.059548][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 585.059569][ C1] atomic_notifier_call_chain+0xda/0x180 [ 585.059589][ C1] notify_die+0x145/0x1a0 [ 585.059609][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 585.059632][ C1] ? rcu_is_watching+0x15/0xb0 [ 585.059660][ C1] notify_debug+0x2e/0x50 [ 585.059687][ C1] exc_debug+0xde/0x140 [ 585.059703][ C1] asm_exc_debug+0x1e/0x40 [ 585.059725][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 585.059743][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 585.059756][ C1] RSP: 0018:ffffc9000498f6b0 EFLAGS: 00050202 [ 585.059769][ C1] RAX: ffffffff842eff01 RBX: 0000000000000ec0 RCX: 0000000000000c00 [ 585.059781][ C1] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff88807aaac2c0 [ 585.059792][ C1] RBP: ffffc9000498f810 R08: ffff88807aaacebf R09: 1ffff1100f5559d7 [ 585.059804][ C1] R10: dffffc0000000000 R11: ffffed100f5559d8 R12: 0000200000000f40 [ 585.059816][ C1] R13: ffffc9000498fe40 R14: ffff88807aaac000 R15: 0000200000000080 [ 585.059832][ C1] ? copyin+0x21/0x90 [ 585.059853][ C1] [ 585.059858][ C1] [ 585.059863][ C1] copyin+0x70/0x90 [ 585.059881][ C1] _copy_from_iter+0x3ec/0x1290 [ 585.059900][ C1] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 585.059924][ C1] ? copyout_mc+0x70/0x70 [ 585.059941][ C1] ? __virt_addr_valid+0x10c/0x380 [ 585.059960][ C1] ? __virt_addr_valid+0x10c/0x380 [ 585.059978][ C1] ? __virt_addr_valid+0x10c/0x380 [ 585.059998][ C1] ? __check_object_size+0x4fc/0xa40 [ 585.060016][ C1] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 585.060047][ C1] ? skb_put+0x112/0x210 [ 585.060063][ C1] unix_stream_sendmsg+0x562/0xbf0 [ 585.060149][ C1] ? unix_show_fdinfo+0x280/0x280 [ 585.060169][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 585.060195][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 585.060212][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 585.060231][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 585.060259][ C1] ? unix_show_fdinfo+0x280/0x280 [ 585.060282][ C1] ____sys_sendmsg+0x61b/0x980 [ 585.060308][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 585.060330][ C1] ? __import_iovec+0x3fa/0x850 [ 585.060352][ C1] ? import_iovec+0x73/0xa0 [ 585.060373][ C1] ___sys_sendmsg+0x2a6/0x360 [ 585.060398][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 585.060441][ C1] __se_sys_sendmsg+0x1d0/0x2c0 [ 585.060465][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 585.060494][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 585.060514][ C1] do_syscall_64+0x55/0xb0 [ 585.060535][ C1] ? clear_bhb_loop+0x40/0x90 [ 585.060549][ C1] ? clear_bhb_loop+0x40/0x90 [ 585.060564][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.060586][ C1] RIP: 0033:0x7f69bad9de99 [ 585.060599][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.060612][ C1] RSP: 002b:00007f69bbceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.060628][ C1] RAX: ffffffffffffffda RBX: 00007f69bb025fa0 RCX: 00007f69bad9de99 [ 585.060646][ C1] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 585.060657][ C1] RBP: 00007f69bae33eaf R08: 0000000000000000 R09: 0000000000000000 [ 585.060667][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.060676][ C1] R13: 00007f69bb026038 R14: 00007f69bb025fa0 R15: 00007ffc8bc3b1d8 [ 585.060694][ C1] [ 585.784928][T11751] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2012'. [ 585.794217][T11751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.810473][T11749] netlink: 'syz.1.2011': attribute type 21 has an invalid length. [ 585.818579][T11749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2011'. [ 585.830114][T11749] netlink: 'syz.1.2011': attribute type 4 has an invalid length.