last executing test programs: 16.254505923s ago: executing program 4 (id=7837): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = gettid() perf_event_open(0x0, r3, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xa5, 0x6e, 0x0, 0x0, 0x2183, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x9}, 0xecb1, 0xc9, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffff03f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="1400", 0x2}], 0x1}, 0x2000c884) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) close(r5) 15.94138423s ago: executing program 4 (id=7840): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, 0x0, 0x38}, 0x41) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0xfcd8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r1) r7 = socket$kcm(0xa, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x80108907, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x81}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r9, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.136494522s ago: executing program 4 (id=7844): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x18, 0x7, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x106) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffef2, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 11.020070848s ago: executing program 4 (id=7859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0xac5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xe3}, 0x100002, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x3000c085) sendmsg(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)='|', 0x1}], 0x1}, 0x8011) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 10.1041874s ago: executing program 1 (id=7867): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.814614676s ago: executing program 1 (id=7869): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x18, 0x7, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x106) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffef2, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 6.128506284s ago: executing program 0 (id=7882): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe}, 0x38) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x10628, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) socketpair$unix(0x1, 0x628dff32ad7d3e49, 0x0, &(0x7f0000000400)) r2 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 5.893963805s ago: executing program 4 (id=7883): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2b, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'io'}, {0x2d, 'net'}]}, 0x35) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x10628, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) socketpair$unix(0x1, 0x628dff32ad7d3e49, 0x0, &(0x7f0000000400)) r2 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 5.829177421s ago: executing program 0 (id=7884): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, 0x0}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.345099304s ago: executing program 0 (id=7899): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, 0x0}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.27964556s ago: executing program 3 (id=7890): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000680)="76389e6a655855", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.100200906s ago: executing program 4 (id=7891): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2593e92108732c49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20009000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x4, 0x16}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) socket$kcm(0x10, 0x2, 0x0) 5.088917647s ago: executing program 0 (id=7902): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000001100), 0x9) 5.010605864s ago: executing program 3 (id=7892): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.781548284s ago: executing program 0 (id=7893): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="dc8bf649de62f6b514f28c66606bdc61e77bb48b8ed04b7c2d7bc2039f8f69d7203b258b993218c906272cd4929097fde4f48ece6b1a8a46f7672b957e7b50574b9c016fe8d3ec222cc16b356f7ec475dbdacbb20a9a1b6ac8acef68fe22bde4bed63dbbea9d15dcbca5f09f72eadb93d3a4b9e07b661b56b9934ba174a0184754f38d43f9f89343f28a0e7c7aa027019652be64ce0638f70c2cb14579610269e7c32a8e072cd973909558fee5809271a408ff34a6a18a45afa1b0902dccf2376e700e62d41477f239f809fc0c8271d77830c91c959b7438f2023bed6b5755bc1e47f3e2a1d209bfcc05ffd001de752385e004c53a4b6abdfa8188", 0xfb}, {&(0x7f00000003c0)="471a42027b6496883f43ba7ee60f6584e2949cfd5dabc7be08a48c3bcf3bcde3b465e6b0f3126608282990c622bead5a5a46da6dfb0c6ad023d07e047a9ecf8168d674c7742621454c6979d4e9f26c506d9d26c2261f00bb638a5a3af0180c87ecf11f8afe0d98a2", 0x68}, {&(0x7f0000000540)="2cf9d3f8a888a5d3d649e8be9e40736f356cb89f4f1962b1fd28ad2b17563f9bdf59bc16ea80796e4fb5a5dbbba2093ed0de07d0c35f6e8cef57eb12223443d74a3005805dfb2ae2e5fa933898decf935d", 0x51}], 0x3, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2109}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x86, 0x1, 0x3, [{@loopback, 0xfffffffb}, {@loopback}, {@loopback}, {@broadcast, 0x9}, {@multicast2, 0x8000}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x6}, {@broadcast, 0x640}, {@rand_addr=0x64010101, 0x6e1}, {@empty, 0x8}]}, @noop, @timestamp={0x44, 0xc, 0xf6, 0x0, 0xb, [0x0, 0xd82]}, @lsrr={0x83, 0x1f, 0x81, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @multicast2]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "4f06cb01bfe04d0459"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x786}}], 0xd8}, 0x24000801) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.696212471s ago: executing program 3 (id=7895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0xac5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xe3}, 0x100002, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x3000c085) sendmsg(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)='|', 0x1}], 0x1}, 0x8011) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 3.609234128s ago: executing program 0 (id=7896): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x18, 0x7, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x106) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffef2, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 2.818198359s ago: executing program 2 (id=7904): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000680)="76389e6a655855", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.646651074s ago: executing program 2 (id=7905): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000010c0), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 2.623341276s ago: executing program 2 (id=7906): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2b, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'io'}, {0x2d, 'net'}]}, 0x35) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x10628, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) socketpair$unix(0x1, 0x628dff32ad7d3e49, 0x0, &(0x7f0000000400)) r2 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 2.338577802s ago: executing program 2 (id=7907): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x43) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8927, &(0x7f0000000080)) 1.445436731s ago: executing program 3 (id=7908): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="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", 0xfb}, {&(0x7f00000003c0)="471a42027b6496883f43ba7ee60f6584e2949cfd5dabc7be08a48c3bcf3bcde3b465e6b0f3126608282990c622bead5a5a46da6dfb0c6ad023d07e047a9ecf8168d674c7742621454c6979d4e9f26c506d9d26c2261f00bb638a5a3af0180c87ecf11f8afe0d98a2", 0x68}, {&(0x7f0000000540)="2cf9d3f8a888a5d3d649e8be9e40736f356cb89f4f1962b1fd28ad2b17563f9bdf59bc16ea80796e4fb5a5dbbba2093ed0de07d0c35f6e8cef57eb12223443d74a3005805dfb2ae2e5fa933898decf935d", 0x51}], 0x3, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2109}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x86, 0x1, 0x3, [{@loopback, 0xfffffffb}, {@loopback}, {@loopback}, {@broadcast, 0x9}, {@multicast2, 0x8000}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x6}, {@broadcast, 0x640}, {@rand_addr=0x64010101, 0x6e1}, {@empty, 0x8}]}, @noop, @timestamp={0x44, 0xc, 0xf6, 0x0, 0xb, [0x0, 0xd82]}, @lsrr={0x83, 0x1f, 0x81, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @multicast2]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "4f06cb01bfe04d0459"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x786}}], 0xd8}, 0x24000801) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.331884271s ago: executing program 1 (id=7909): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x6, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x80, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x88001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) close(r0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="d656d2f32cedb398e7b462e89131712e02cad7fa9630a90525b0550377143028a7b948fc793b4b6a0bfb1de183f143fef23f23e6c4ab087738b49cb4244125b89d233d4b7ea7ec7dcfad142c767e56bd994eb3958bac40850d4594a0d4f988c4fa6d273b35a141974ea7fbefa76588dd0792011e96d2614e52410d2e6c27db26d808573ecbb9dfa0895b1d501cf41c03207c22c00cc7a7265fe665729eab2c3d2235c229653e727ed8cc8879f85b480a7548f11ecf9dc6178c9a48e52176aac5add99deb5ffd2b3663593591bbfa66ac3f6963b9c2dc8d8601f53aacba978aed4ee7cbc4fde586e2386c0c7b4961372866d304e0ed", @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRES32=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 1.194900224s ago: executing program 2 (id=7910): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 862.013803ms ago: executing program 2 (id=7911): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x6, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x80, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x88001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) close(r0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="d656d2f32cedb398e7b462e89131712e02cad7fa9630a90525b0550377143028a7b948fc793b4b6a0bfb1de183f143fef23f23e6c4ab087738b49cb4244125b89d233d4b7ea7ec7dcfad142c767e56bd994eb3958bac40850d4594a0d4f988c4fa6d273b35a141974ea7fbefa76588dd0792011e96d2614e52410d2e6c27db26d808573ecbb9dfa0895b1d501cf41c03207c22c00cc7a7265fe665729eab2c3d2235c229653e727ed8cc8879f85b480a7548f11ecf9dc6178c9a48e52176aac5add99deb5ffd2b3663593591bbfa66ac3f6963b9c2dc8d8601f53aacba978aed4ee7cbc4fde586e2386c0c7b4961372866d304e0ed", @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRES32=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 337.71021ms ago: executing program 1 (id=7912): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 298.193804ms ago: executing program 3 (id=7913): r0 = socket$kcm(0x10, 0x2, 0x10) close(r0) 178.594794ms ago: executing program 1 (id=7914): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, 0x0, 0x38}, 0x41) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0xfcd8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0) close(r1) r7 = socket$kcm(0xa, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x80108907, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x81}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r9, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 104.68016ms ago: executing program 3 (id=7915): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) socket$kcm(0x2, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2b, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'io'}, {0x2d, 'net'}]}, 0x35) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x10628, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) socketpair$unix(0x1, 0x628dff32ad7d3e49, 0x0, &(0x7f0000000400)) r2 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 0s ago: executing program 1 (id=7916): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000010c0), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): ce team0 may have been left with an inconsistent configuration, please check. [ 956.867920][T23495] device syzkaller0 entered promiscuous mode [ 957.346620][T23507] FAULT_INJECTION: forcing a failure. [ 957.346620][T23507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.375885][T23505] netlink: 'syz.2.6789': attribute type 16 has an invalid length. [ 957.393720][T23505] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6789'. [ 957.407336][T23507] CPU: 0 PID: 23507 Comm: syz.3.6790 Not tainted syzkaller #0 [ 957.414852][T23507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.425019][T23507] Call Trace: [ 957.428313][T23507] [ 957.431258][T23507] dump_stack_lvl+0x188/0x24e [ 957.436046][T23507] ? show_regs_print_info+0x12/0x12 [ 957.441369][T23507] ? load_image+0x400/0x400 [ 957.445990][T23507] ? __lock_acquire+0x7d10/0x7d10 [ 957.451129][T23507] should_fail_ex+0x399/0x4d0 [ 957.455923][T23507] strncpy_from_user+0x32/0x350 [ 957.460885][T23507] bpf_prog_load+0x1f3/0x1560 [ 957.465583][T23507] ? map_freeze+0x390/0x390 [ 957.470089][T23507] ? __might_fault+0xa6/0x120 [ 957.474765][T23507] ? __might_fault+0xa6/0x120 [ 957.479516][T23507] ? __might_fault+0xc2/0x120 [ 957.484267][T23507] ? __might_fault+0xa6/0x120 [ 957.488948][T23507] ? bpf_lsm_bpf+0x5/0x10 [ 957.493271][T23507] ? security_bpf+0x7a/0xa0 [ 957.497786][T23507] __sys_bpf+0x5b8/0x780 [ 957.502035][T23507] ? bpf_link_show_fdinfo+0x380/0x380 [ 957.507409][T23507] ? lock_chain_count+0x20/0x20 [ 957.512351][T23507] __x64_sys_bpf+0x78/0x90 [ 957.516797][T23507] do_syscall_64+0x4c/0xa0 [ 957.521218][T23507] ? clear_bhb_loop+0x60/0xb0 [ 957.525972][T23507] ? clear_bhb_loop+0x60/0xb0 [ 957.530643][T23507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.536530][T23507] RIP: 0033:0x7f09ab39c629 [ 957.540961][T23507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.560565][T23507] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 957.568978][T23507] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 957.576939][T23507] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 957.584903][T23507] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 957.592871][T23507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.601004][T23507] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 957.609160][T23507] [ 960.268231][T23514] netlink: 'syz.3.6792': attribute type 16 has an invalid length. [ 960.276184][T23514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6792'. [ 960.286885][T23525] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6797'. [ 960.308358][T23525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 960.511750][T23535] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6801'. [ 960.573203][T23535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 961.647724][T23559] device syzkaller0 entered promiscuous mode [ 961.701882][T23565] netlink: 'syz.3.6810': attribute type 16 has an invalid length. [ 961.730555][T23565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6810'. [ 961.921638][T23573] netlink: 'syz.1.6823': attribute type 16 has an invalid length. [ 961.944262][T23573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6823'. [ 961.973505][T23575] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6813'. [ 961.984165][T23575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 962.354474][T23587] FAULT_INJECTION: forcing a failure. [ 962.354474][T23587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.398370][T23587] CPU: 0 PID: 23587 Comm: syz.4.6819 Not tainted syzkaller #0 [ 962.405890][T23587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.415961][T23587] Call Trace: [ 962.419319][T23587] [ 962.422344][T23587] dump_stack_lvl+0x188/0x24e [ 962.427111][T23587] ? show_regs_print_info+0x12/0x12 [ 962.432304][T23587] ? load_image+0x400/0x400 [ 962.436801][T23587] ? __lock_acquire+0x7d10/0x7d10 [ 962.441830][T23587] should_fail_ex+0x399/0x4d0 [ 962.446502][T23587] strncpy_from_user+0x32/0x350 [ 962.451353][T23587] bpf_prog_load+0x1f3/0x1560 [ 962.456032][T23587] ? map_freeze+0x390/0x390 [ 962.460626][T23587] ? __might_fault+0xa6/0x120 [ 962.465312][T23587] ? __might_fault+0xa6/0x120 [ 962.469988][T23587] ? __might_fault+0xc2/0x120 [ 962.474654][T23587] ? __might_fault+0xa6/0x120 [ 962.479320][T23587] ? bpf_lsm_bpf+0x5/0x10 [ 962.483644][T23587] ? security_bpf+0x7a/0xa0 [ 962.488365][T23587] __sys_bpf+0x5b8/0x780 [ 962.492616][T23587] ? bpf_link_show_fdinfo+0x380/0x380 [ 962.498075][T23587] ? lock_chain_count+0x20/0x20 [ 962.502928][T23587] __x64_sys_bpf+0x78/0x90 [ 962.507343][T23587] do_syscall_64+0x4c/0xa0 [ 962.511756][T23587] ? clear_bhb_loop+0x60/0xb0 [ 962.516428][T23587] ? clear_bhb_loop+0x60/0xb0 [ 962.521118][T23587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.527032][T23587] RIP: 0033:0x7fbcd959c629 [ 962.531541][T23587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.551848][T23587] RSP: 002b:00007fbcda52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 962.560262][T23587] RAX: ffffffffffffffda RBX: 00007fbcd9815fa0 RCX: 00007fbcd959c629 [ 962.568231][T23587] RDX: 0000000000000090 RSI: 0000200000000680 RDI: 0000000000000005 [ 962.576223][T23587] RBP: 00007fbcda52c090 R08: 0000000000000000 R09: 0000000000000000 [ 962.584287][T23587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.592375][T23587] R13: 00007fbcd9816038 R14: 00007fbcd9815fa0 R15: 00007ffe96b5c618 [ 962.600361][T23587] [ 963.325206][T23600] FAULT_INJECTION: forcing a failure. [ 963.325206][T23600] name failslab, interval 1, probability 0, space 0, times 0 [ 963.346813][T23600] CPU: 0 PID: 23600 Comm: syz.0.6822 Not tainted syzkaller #0 [ 963.354681][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.364940][T23600] Call Trace: [ 963.368234][T23600] [ 963.371220][T23600] dump_stack_lvl+0x188/0x24e [ 963.375922][T23600] ? show_regs_print_info+0x12/0x12 [ 963.381144][T23600] ? load_image+0x400/0x400 [ 963.385753][T23600] ? __might_sleep+0xd0/0xd0 [ 963.390467][T23600] ? __lock_acquire+0x7d10/0x7d10 [ 963.395523][T23600] should_fail_ex+0x399/0x4d0 [ 963.400277][T23600] should_failslab+0x5/0x20 [ 963.404894][T23600] slab_pre_alloc_hook+0x59/0x310 [ 963.410026][T23600] ? tomoyo_encode+0x27e/0x540 [ 963.414817][T23600] __kmem_cache_alloc_node+0x4f/0x260 [ 963.420300][T23600] ? tomoyo_encode+0x27e/0x540 [ 963.425082][T23600] __kmalloc+0xa0/0x240 [ 963.429278][T23600] tomoyo_encode+0x27e/0x540 [ 963.433893][T23600] tomoyo_realpath_from_path+0x58e/0x5d0 [ 963.439569][T23600] ? tomoyo_path_number_perm+0x205/0x650 [ 963.445233][T23600] tomoyo_path_number_perm+0x22f/0x650 [ 963.450708][T23600] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 963.456792][T23600] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 963.462445][T23600] ? trace_call_bpf+0xbf/0x6b0 [ 963.467237][T23600] ? trace_call_bpf+0xbf/0x6b0 [ 963.472055][T23600] ? __fget_files+0x28/0x4b0 [ 963.476664][T23600] ? __fget_files+0x28/0x4b0 [ 963.481376][T23600] security_file_ioctl+0x6c/0xa0 [ 963.486602][T23600] __se_sys_ioctl+0x48/0x170 [ 963.491306][T23600] do_syscall_64+0x4c/0xa0 [ 963.495829][T23600] ? clear_bhb_loop+0x60/0xb0 [ 963.500523][T23600] ? clear_bhb_loop+0x60/0xb0 [ 963.505215][T23600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.511127][T23600] RIP: 0033:0x7fa18a39c629 [ 963.515644][T23600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.535354][T23600] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.543881][T23600] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 963.551959][T23600] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000005 [ 963.559950][T23600] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 963.567943][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.575927][T23600] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 963.584117][T23600] [ 963.615223][T23600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 965.521018][T23593] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6820'. [ 965.534175][T23593] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 965.553624][T23602] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6824'. [ 965.563381][T23602] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 965.776734][T23617] netlink: 'syz.0.6827': attribute type 16 has an invalid length. [ 965.787444][T23617] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6827'. [ 965.852587][T23621] FAULT_INJECTION: forcing a failure. [ 965.852587][T23621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.973373][T23621] CPU: 1 PID: 23621 Comm: syz.3.6830 Not tainted syzkaller #0 [ 965.981000][T23621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 965.992034][T23621] Call Trace: [ 965.995327][T23621] [ 965.998355][T23621] dump_stack_lvl+0x188/0x24e [ 966.003110][T23621] ? show_regs_print_info+0x12/0x12 [ 966.008439][T23621] ? load_image+0x400/0x400 [ 966.013078][T23621] ? __lock_acquire+0x7d10/0x7d10 [ 966.018282][T23621] ? irq_work_queue+0xb8/0x140 [ 966.023084][T23621] should_fail_ex+0x399/0x4d0 [ 966.027801][T23621] _copy_to_user+0x2c/0x130 [ 966.032432][T23621] bpf_prog_test_run_syscall+0x332/0x4a0 [ 966.038105][T23621] ? sock_gen_cookie+0x60/0x60 [ 966.042910][T23621] ? sock_gen_cookie+0x60/0x60 [ 966.048044][T23621] bpf_prog_test_run+0x31e/0x390 [ 966.053014][T23621] __sys_bpf+0x62b/0x780 [ 966.057437][T23621] ? bpf_link_show_fdinfo+0x380/0x380 [ 966.062823][T23621] ? lock_chain_count+0x20/0x20 [ 966.067681][T23621] __x64_sys_bpf+0x78/0x90 [ 966.072096][T23621] do_syscall_64+0x4c/0xa0 [ 966.076598][T23621] ? clear_bhb_loop+0x60/0xb0 [ 966.081279][T23621] ? clear_bhb_loop+0x60/0xb0 [ 966.086041][T23621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.092022][T23621] RIP: 0033:0x7f09ab39c629 [ 966.096433][T23621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.116166][T23621] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 966.124588][T23621] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 966.132740][T23621] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 966.140762][T23621] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 966.149191][T23621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.157167][T23621] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 966.165709][T23621] [ 966.467938][T23634] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 966.627771][T23638] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6836'. [ 966.644657][T23638] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 967.414144][T23656] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6840'. [ 967.438028][T23656] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 967.603544][T23658] device syzkaller0 entered promiscuous mode [ 967.625777][T23657] netlink: 'syz.2.6841': attribute type 16 has an invalid length. [ 967.641330][T23657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6841'. [ 970.453430][T23702] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 970.687864][T23710] netlink: 'syz.3.6855': attribute type 16 has an invalid length. [ 970.707669][T23710] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6855'. [ 970.721315][T23714] FAULT_INJECTION: forcing a failure. [ 970.721315][T23714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.755383][T23714] CPU: 1 PID: 23714 Comm: syz.2.6858 Not tainted syzkaller #0 [ 970.763098][T23714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 970.773699][T23714] Call Trace: [ 970.776998][T23714] [ 970.780038][T23714] dump_stack_lvl+0x188/0x24e [ 970.784761][T23714] ? show_regs_print_info+0x12/0x12 [ 970.790028][T23714] ? load_image+0x400/0x400 [ 970.794553][T23714] ? __lock_acquire+0x7d10/0x7d10 [ 970.799690][T23714] should_fail_ex+0x399/0x4d0 [ 970.804399][T23714] _copy_from_user+0x2c/0x170 [ 970.809098][T23714] iovec_from_user+0x143/0x360 [ 970.813874][T23714] __import_iovec+0x6d/0x500 [ 970.818642][T23714] import_iovec+0x6f/0xa0 [ 970.822970][T23714] ___sys_sendmsg+0x252/0x360 [ 970.827654][T23714] ? __sys_sendmsg+0x290/0x290 [ 970.832455][T23714] ? __lock_acquire+0x7d10/0x7d10 [ 970.837490][T23714] __se_sys_sendmsg+0x1bb/0x2a0 [ 970.842347][T23714] ? ct_nmi_exit+0x145/0x1c0 [ 970.846943][T23714] ? __x64_sys_sendmsg+0x80/0x80 [ 970.851971][T23714] ? lockdep_hardirqs_on+0x94/0x140 [ 970.857174][T23714] do_syscall_64+0x4c/0xa0 [ 970.861589][T23714] ? clear_bhb_loop+0x60/0xb0 [ 970.866256][T23714] ? clear_bhb_loop+0x60/0xb0 [ 970.870929][T23714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.876907][T23714] RIP: 0033:0x7f4e7c59c629 [ 970.881321][T23714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.901113][T23714] RSP: 002b:00007f4e7d485028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.909531][T23714] RAX: ffffffffffffffda RBX: 00007f4e7c815fa0 RCX: 00007f4e7c59c629 [ 970.917589][T23714] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 970.925825][T23714] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 970.933813][T23714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.941866][T23714] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 970.949851][T23714] [ 971.057327][T23719] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 971.305424][T23729] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6861'. [ 971.322556][T23729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 971.548996][T23735] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 971.665174][T23737] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 971.700522][T23737] syzkaller0: linktype set to 820 [ 972.068039][T23750] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 972.176351][T23756] netlink: 'syz.4.6868': attribute type 3 has an invalid length. [ 972.194613][T23756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6868'. [ 972.253555][T23761] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 972.314738][T23761] syzkaller0: linktype set to 820 [ 972.441314][T23769] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6870'. [ 972.468301][T23769] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 972.742531][T23762] device syzkaller0 entered promiscuous mode [ 972.772821][T23778] netlink: 'syz.1.6873': attribute type 16 has an invalid length. [ 972.792221][T23778] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6873'. [ 973.203234][T23789] FAULT_INJECTION: forcing a failure. [ 973.203234][T23789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.230872][T23789] CPU: 1 PID: 23789 Comm: syz.3.6876 Not tainted syzkaller #0 [ 973.238389][T23789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 973.248442][T23789] Call Trace: [ 973.251807][T23789] [ 973.254736][T23789] dump_stack_lvl+0x188/0x24e [ 973.259870][T23789] ? show_regs_print_info+0x12/0x12 [ 973.265261][T23789] ? load_image+0x400/0x400 [ 973.269808][T23789] ? __lock_acquire+0x7d10/0x7d10 [ 973.275012][T23789] ? snprintf+0xe5/0x140 [ 973.279249][T23789] should_fail_ex+0x399/0x4d0 [ 973.283930][T23789] _copy_to_user+0x2c/0x130 [ 973.288432][T23789] simple_read_from_buffer+0xe3/0x150 [ 973.293811][T23789] proc_fail_nth_read+0x1a6/0x220 [ 973.298860][T23789] ? proc_fault_inject_write+0x310/0x310 [ 973.304522][T23789] ? fsnotify_perm+0x248/0x550 [ 973.309290][T23789] ? proc_fault_inject_write+0x310/0x310 [ 973.314946][T23789] vfs_read+0x2de/0xa00 [ 973.319108][T23789] ? kernel_read+0x1e0/0x1e0 [ 973.323700][T23789] ? __fget_files+0x28/0x4b0 [ 973.328380][T23789] ? __fget_files+0x28/0x4b0 [ 973.332989][T23789] ? __fget_files+0x43d/0x4b0 [ 973.337773][T23789] ? __fdget_pos+0x2ae/0x360 [ 973.342374][T23789] ? ksys_read+0x71/0x250 [ 973.346717][T23789] ksys_read+0x14c/0x250 [ 973.350959][T23789] ? vfs_write+0xa30/0xa30 [ 973.355378][T23789] ? lockdep_hardirqs_on+0x94/0x140 [ 973.360583][T23789] do_syscall_64+0x4c/0xa0 [ 973.364997][T23789] ? clear_bhb_loop+0x60/0xb0 [ 973.369755][T23789] ? clear_bhb_loop+0x60/0xb0 [ 973.374426][T23789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.380317][T23789] RIP: 0033:0x7f09ab35cece [ 973.384740][T23789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 973.404344][T23789] RSP: 002b:00007f09a95f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 973.412757][T23789] RAX: ffffffffffffffda RBX: 00007f09a95f66c0 RCX: 00007f09ab35cece [ 973.420722][T23789] RDX: 000000000000000f RSI: 00007f09a95f60a0 RDI: 0000000000000004 [ 973.428695][T23789] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 973.436661][T23789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.444631][T23789] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 973.452626][T23789] [ 975.964005][T23797] netlink: 'syz.4.6878': attribute type 21 has an invalid length. [ 975.972246][T23797] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6878'. [ 975.982048][T23797] netlink: 'syz.4.6878': attribute type 4 has an invalid length. [ 975.990094][T23797] netlink: 'syz.4.6878': attribute type 5 has an invalid length. [ 975.997836][T23797] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6878'. [ 976.028669][T23801] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 976.149478][T23814] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6882'. [ 976.159352][T23812] FAULT_INJECTION: forcing a failure. [ 976.159352][T23812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.187930][T23814] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 976.231419][T23812] CPU: 0 PID: 23812 Comm: syz.2.6883 Not tainted syzkaller #0 [ 976.238931][T23812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.249015][T23812] Call Trace: [ 976.252320][T23812] [ 976.255270][T23812] dump_stack_lvl+0x188/0x24e [ 976.259985][T23812] ? show_regs_print_info+0x12/0x12 [ 976.265222][T23812] ? load_image+0x400/0x400 [ 976.269844][T23812] ? __lock_acquire+0x7d10/0x7d10 [ 976.274897][T23812] ? snprintf+0xe5/0x140 [ 976.279186][T23812] should_fail_ex+0x399/0x4d0 [ 976.284130][T23812] _copy_to_user+0x2c/0x130 [ 976.288664][T23812] simple_read_from_buffer+0xe3/0x150 [ 976.294086][T23812] proc_fail_nth_read+0x1a6/0x220 [ 976.299136][T23812] ? proc_fault_inject_write+0x310/0x310 [ 976.305037][T23812] ? fsnotify_perm+0x248/0x550 [ 976.309803][T23812] ? proc_fault_inject_write+0x310/0x310 [ 976.315425][T23812] vfs_read+0x2de/0xa00 [ 976.319581][T23812] ? kernel_read+0x1e0/0x1e0 [ 976.324250][T23812] ? __fget_files+0x28/0x4b0 [ 976.328838][T23812] ? __fget_files+0x28/0x4b0 [ 976.333422][T23812] ? __fget_files+0x43d/0x4b0 [ 976.338197][T23812] ? __fdget_pos+0x2ae/0x360 [ 976.342886][T23812] ? ksys_read+0x71/0x250 [ 976.347211][T23812] ksys_read+0x14c/0x250 [ 976.351452][T23812] ? vfs_write+0xa30/0xa30 [ 976.355957][T23812] ? lockdep_hardirqs_on+0x94/0x140 [ 976.361153][T23812] do_syscall_64+0x4c/0xa0 [ 976.365562][T23812] ? clear_bhb_loop+0x60/0xb0 [ 976.370241][T23812] ? clear_bhb_loop+0x60/0xb0 [ 976.374911][T23812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.380886][T23812] RIP: 0033:0x7f4e7c55cece [ 976.385309][T23812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 976.405002][T23812] RSP: 002b:00007f4e7d484fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 976.413677][T23812] RAX: ffffffffffffffda RBX: 00007f4e7d4856c0 RCX: 00007f4e7c55cece [ 976.421658][T23812] RDX: 000000000000000f RSI: 00007f4e7d4850a0 RDI: 0000000000000004 [ 976.429642][T23812] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 976.437783][T23812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.445829][T23812] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 976.453805][T23812] [ 976.503518][T23822] netlink: 'syz.3.6886': attribute type 16 has an invalid length. [ 976.529841][T23822] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6886'. [ 977.071172][T23847] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6890'. [ 977.088561][T23847] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 977.270273][T23855] IPv6: Can't replace route, no match found [ 977.785776][T23861] device syzkaller0 entered promiscuous mode [ 980.054657][T23879] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 980.313197][T23895] FAULT_INJECTION: forcing a failure. [ 980.313197][T23895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.329505][T23895] CPU: 0 PID: 23895 Comm: syz.3.6900 Not tainted syzkaller #0 [ 980.337195][T23895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.347266][T23895] Call Trace: [ 980.350551][T23895] [ 980.353487][T23895] dump_stack_lvl+0x188/0x24e [ 980.358274][T23895] ? show_regs_print_info+0x12/0x12 [ 980.363497][T23895] ? load_image+0x400/0x400 [ 980.368009][T23895] ? __lock_acquire+0x7d10/0x7d10 [ 980.373047][T23895] should_fail_ex+0x399/0x4d0 [ 980.377750][T23895] strncpy_from_user+0x32/0x350 [ 980.382605][T23895] bpf_prog_load+0x1f3/0x1560 [ 980.387371][T23895] ? map_freeze+0x390/0x390 [ 980.391881][T23895] ? __might_fault+0xa6/0x120 [ 980.396615][T23895] ? __might_fault+0xa6/0x120 [ 980.401280][T23895] ? __might_fault+0xc2/0x120 [ 980.405961][T23895] ? __might_fault+0xa6/0x120 [ 980.410643][T23895] ? bpf_lsm_bpf+0x5/0x10 [ 980.414989][T23895] ? security_bpf+0x7a/0xa0 [ 980.419492][T23895] __sys_bpf+0x5b8/0x780 [ 980.423943][T23895] ? bpf_link_show_fdinfo+0x380/0x380 [ 980.429353][T23895] ? lock_chain_count+0x20/0x20 [ 980.434219][T23895] __x64_sys_bpf+0x78/0x90 [ 980.438780][T23895] do_syscall_64+0x4c/0xa0 [ 980.443279][T23895] ? clear_bhb_loop+0x60/0xb0 [ 980.447957][T23895] ? clear_bhb_loop+0x60/0xb0 [ 980.453190][T23895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.459081][T23895] RIP: 0033:0x7f09ab39c629 [ 980.463487][T23895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.483352][T23895] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 980.491846][T23895] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 980.499811][T23895] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 980.507864][T23895] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 980.515828][T23895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.523790][T23895] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 980.531851][T23895] [ 980.545419][T23894] netlink: 'syz.2.6902': attribute type 3 has an invalid length. [ 980.563417][T23894] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6902'. [ 980.576590][T23894] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 980.589596][T23894] syzkaller0: linktype set to 820 [ 981.516490][T23918] device syzkaller0 entered promiscuous mode [ 981.583377][T23930] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 981.600729][T23929] netlink: 'syz.3.6911': attribute type 21 has an invalid length. [ 981.611973][T23929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6911'. [ 981.623567][T23929] netlink: 'syz.3.6911': attribute type 4 has an invalid length. [ 981.656161][T23929] netlink: 'syz.3.6911': attribute type 5 has an invalid length. [ 981.706316][T23929] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6911'. [ 984.553213][T23950] netlink: 'syz.3.6917': attribute type 3 has an invalid length. [ 984.561521][T23950] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6917'. [ 984.578056][T23953] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 984.589522][T23953] syzkaller0: linktype set to 820 [ 984.809665][T23975] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6938'. [ 984.858353][T23975] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 984.925356][T23981] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 985.181218][T23988] netlink: 'syz.1.6929': attribute type 21 has an invalid length. [ 985.206671][T23988] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6929'. [ 985.282146][T23988] netlink: 'syz.1.6929': attribute type 4 has an invalid length. [ 985.344057][T23988] netlink: 'syz.1.6929': attribute type 5 has an invalid length. [ 985.388004][T23988] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6929'. [ 986.108972][T24009] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 986.327412][T24020] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6942'. [ 986.362373][T24020] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 986.676262][T24032] netlink: 'syz.0.6946': attribute type 10 has an invalid length. [ 986.708676][T24032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6946'. [ 986.773292][T24032] device ipvlan1 entered promiscuous mode [ 986.841125][T24032] bridge0: port 3(ipvlan1) entered blocking state [ 986.854187][T24032] bridge0: port 3(ipvlan1) entered disabled state [ 986.901900][T24032] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 986.942148][T24033] netlink: 'syz.0.6946': attribute type 10 has an invalid length. [ 986.963837][T24033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6946'. [ 987.004788][T24033] bridge0: port 3(ipvlan1) entered blocking state [ 987.030316][T24033] bridge0: port 3(ipvlan1) entered disabled state [ 987.124590][T24033] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 987.164373][T24038] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6948'. [ 987.221089][T24038] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 987.312899][T24043] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6949'. [ 987.379888][T24043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 987.667358][T24062] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 987.726650][T24063] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 987.971105][T24074] FAULT_INJECTION: forcing a failure. [ 987.971105][T24074] name failslab, interval 1, probability 0, space 0, times 0 [ 988.059890][T24074] CPU: 0 PID: 24074 Comm: syz.3.6957 Not tainted syzkaller #0 [ 988.067428][T24074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 988.077579][T24074] Call Trace: [ 988.080862][T24074] [ 988.083798][T24074] dump_stack_lvl+0x188/0x24e [ 988.088491][T24074] ? show_regs_print_info+0x12/0x12 [ 988.093799][T24074] ? load_image+0x400/0x400 [ 988.098318][T24074] ? __might_sleep+0xd0/0xd0 [ 988.102914][T24074] ? __lock_acquire+0x7d10/0x7d10 [ 988.107959][T24074] should_fail_ex+0x399/0x4d0 [ 988.112663][T24074] should_failslab+0x5/0x20 [ 988.117177][T24074] slab_pre_alloc_hook+0x59/0x310 [ 988.122219][T24074] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 988.128658][T24074] __kmem_cache_alloc_node+0x4f/0x260 [ 988.134055][T24074] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 988.140507][T24074] __kmalloc+0xa0/0x240 [ 988.144684][T24074] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 988.150952][T24074] ? xdp_convert_buff_to_md+0x200/0x200 [ 988.156611][T24074] ? __fget_files+0x28/0x4b0 [ 988.161306][T24074] ? __fget_files+0x28/0x4b0 [ 988.165923][T24074] ? __fget_files+0x43d/0x4b0 [ 988.170617][T24074] ? xdp_convert_buff_to_md+0x200/0x200 [ 988.176188][T24074] bpf_prog_test_run+0x31e/0x390 [ 988.181232][T24074] __sys_bpf+0x62b/0x780 [ 988.185494][T24074] ? bpf_link_show_fdinfo+0x380/0x380 [ 988.191038][T24074] ? lock_chain_count+0x20/0x20 [ 988.195916][T24074] __x64_sys_bpf+0x78/0x90 [ 988.200353][T24074] do_syscall_64+0x4c/0xa0 [ 988.204871][T24074] ? clear_bhb_loop+0x60/0xb0 [ 988.209569][T24074] ? clear_bhb_loop+0x60/0xb0 [ 988.214254][T24074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.220166][T24074] RIP: 0033:0x7f09ab39c629 [ 988.224597][T24074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.244227][T24074] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 988.252663][T24074] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 988.260737][T24074] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 988.268721][T24074] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 988.276782][T24074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.284762][T24074] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 988.292756][T24074] [ 988.389255][T24078] netlink: 'syz.2.6956': attribute type 21 has an invalid length. [ 988.408649][T24078] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6956'. [ 988.472165][T24078] netlink: 'syz.2.6956': attribute type 4 has an invalid length. [ 988.522342][T24078] netlink: 'syz.2.6956': attribute type 5 has an invalid length. [ 988.574175][T24078] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6956'. [ 988.685367][T24089] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6962'. [ 988.715476][T24089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 988.897415][T24095] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6964'. [ 988.929318][T24095] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 989.316982][T24106] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6968'. [ 989.326939][T24106] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 991.874728][T24124] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 991.884523][T24134] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6976'. [ 991.908149][T24134] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 992.060489][T24140] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6980'. [ 992.093452][T24140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 992.138639][T24145] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6981'. [ 992.175943][T24145] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 992.356474][T24154] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6983'. [ 992.389113][T24154] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 992.406753][T24156] FAULT_INJECTION: forcing a failure. [ 992.406753][T24156] name failslab, interval 1, probability 0, space 0, times 0 [ 992.437086][T24156] CPU: 0 PID: 24156 Comm: syz.2.6984 Not tainted syzkaller #0 [ 992.444966][T24156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 992.455041][T24156] Call Trace: [ 992.458339][T24156] [ 992.461291][T24156] dump_stack_lvl+0x188/0x24e [ 992.465997][T24156] ? show_regs_print_info+0x12/0x12 [ 992.471229][T24156] ? load_image+0x400/0x400 [ 992.475763][T24156] ? __might_sleep+0xd0/0xd0 [ 992.480466][T24156] ? __lock_acquire+0x7d10/0x7d10 [ 992.485618][T24156] should_fail_ex+0x399/0x4d0 [ 992.490318][T24156] should_failslab+0x5/0x20 [ 992.494935][T24156] slab_pre_alloc_hook+0x59/0x310 [ 992.499988][T24156] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 992.505559][T24156] __kmem_cache_alloc_node+0x4f/0x260 [ 992.510961][T24156] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 992.516533][T24156] __kmalloc+0xa0/0x240 [ 992.520730][T24156] bpf_prog_test_run_skb+0x234/0x12a0 [ 992.526229][T24156] ? __fget_files+0x28/0x4b0 [ 992.530863][T24156] ? __fget_files+0x28/0x4b0 [ 992.535477][T24156] ? __fget_files+0x43d/0x4b0 [ 992.540186][T24156] ? cpu_online+0xa0/0xa0 [ 992.544541][T24156] bpf_prog_test_run+0x31e/0x390 [ 992.549516][T24156] __sys_bpf+0x62b/0x780 [ 992.553794][T24156] ? bpf_link_show_fdinfo+0x380/0x380 [ 992.559297][T24156] ? lock_chain_count+0x20/0x20 [ 992.564182][T24156] __x64_sys_bpf+0x78/0x90 [ 992.568626][T24156] do_syscall_64+0x4c/0xa0 [ 992.573064][T24156] ? clear_bhb_loop+0x60/0xb0 [ 992.577854][T24156] ? clear_bhb_loop+0x60/0xb0 [ 992.582549][T24156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.588444][T24156] RIP: 0033:0x7f4e7c59c629 [ 992.592854][T24156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.612461][T24156] RSP: 002b:00007f4e7d485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 992.621051][T24156] RAX: ffffffffffffffda RBX: 00007f4e7c815fa0 RCX: 00007f4e7c59c629 [ 992.629111][T24156] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 992.637256][T24156] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 992.645310][T24156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.653270][T24156] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 992.661250][T24156] [ 992.854993][T24164] device wlan1 entered promiscuous mode [ 993.043124][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.052095][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.508415][T24184] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 993.805209][T24193] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6994'. [ 993.825019][T24193] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 993.923922][T24196] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6996'. [ 993.983561][T24196] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 994.366065][T24214] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7000'. [ 995.119489][T20220] Bluetooth: hci3: command 0x0406 tx timeout [ 996.312943][T24221] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 996.401286][T24229] device syzkaller0 entered promiscuous mode [ 998.955844][T24245] IPv6: Can't replace route, no match found [ 998.962714][T24256] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7013'. [ 998.983583][T24256] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 999.023539][T24259] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7015'. [ 999.039061][T24259] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 999.233883][T24269] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7018'. [ 999.245692][T24269] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 999.311738][T24267] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1002.338604][T24297] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7028'. [ 1002.348334][T24297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1002.364345][T24300] IPv6: Can't replace route, no match found [ 1002.406929][T24305] device syzkaller0 entered promiscuous mode [ 1002.419536][T24314] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7030'. [ 1002.438300][T24314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1002.505865][T24320] FAULT_INJECTION: forcing a failure. [ 1002.505865][T24320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.553465][T24320] CPU: 0 PID: 24320 Comm: syz.1.7031 Not tainted syzkaller #0 [ 1002.561168][T24320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1002.571439][T24320] Call Trace: [ 1002.574768][T24320] [ 1002.577911][T24320] dump_stack_lvl+0x188/0x24e [ 1002.582756][T24320] ? show_regs_print_info+0x12/0x12 [ 1002.588006][T24320] ? load_image+0x400/0x400 [ 1002.592553][T24320] ? __lock_acquire+0x7d10/0x7d10 [ 1002.597646][T24320] ? __fget_files+0x28/0x4b0 [ 1002.602282][T24320] should_fail_ex+0x399/0x4d0 [ 1002.606998][T24320] _copy_from_user+0x2c/0x170 [ 1002.611715][T24320] netlink_setsockopt+0x18f/0x710 [ 1002.616948][T24320] ? aa_af_perm+0x340/0x340 [ 1002.621460][T24320] ? netlink_ioctl+0x10/0x10 [ 1002.626057][T24320] ? aa_sock_opt_perm+0x74/0x100 [ 1002.630992][T24320] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1002.636620][T24320] ? security_socket_setsockopt+0x7a/0xa0 [ 1002.642523][T24320] ? netlink_ioctl+0x10/0x10 [ 1002.647129][T24320] __sys_setsockopt+0x2bf/0x3d0 [ 1002.652075][T24320] __x64_sys_setsockopt+0xb1/0xc0 [ 1002.657191][T24320] do_syscall_64+0x4c/0xa0 [ 1002.661613][T24320] ? clear_bhb_loop+0x60/0xb0 [ 1002.666375][T24320] ? clear_bhb_loop+0x60/0xb0 [ 1002.671157][T24320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.677411][T24320] RIP: 0033:0x7f8f4659c629 [ 1002.681915][T24320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.701532][T24320] RSP: 002b:00007f8f47450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1002.709948][T24320] RAX: ffffffffffffffda RBX: 00007f8f46815fa0 RCX: 00007f8f4659c629 [ 1002.717923][T24320] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000004 [ 1002.726063][T24320] RBP: 00007f8f47450090 R08: 0000000000000004 R09: 0000000000000000 [ 1002.734129][T24320] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1002.742304][T24320] R13: 00007f8f46816038 R14: 00007f8f46815fa0 R15: 00007ffce6adabc8 [ 1002.750385][T24320] [ 1005.550517][T24331] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7035'. [ 1005.560069][T24331] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1005.577201][T24335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7038'. [ 1005.588461][T24335] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1005.643865][T24355] IPv6: Can't replace route, no match found [ 1005.652433][T24358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1005.668519][T24358] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1006.219486][T24385] device syzkaller0 entered promiscuous mode [ 1008.555881][T24404] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1008.565270][T24404] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1008.624364][T24396] device syzkaller0 entered promiscuous mode [ 1008.640241][T24417] IPv6: Can't replace route, no match found [ 1008.647162][T24419] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1008.739694][T24414] device syzkaller0 entered promiscuous mode [ 1010.810746][T24426] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1010.819975][T24426] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1013.125216][T24436] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7060'. [ 1013.134518][T24436] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1013.158306][T24461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7066'. [ 1013.316695][T24448] device syzkaller0 entered promiscuous mode [ 1013.365062][T24467] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1013.415829][T24467] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1015.797489][T24471] IPv6: Can't replace route, no match found [ 1015.863078][T24474] device syzkaller0 entered promiscuous mode [ 1016.080566][T24491] device syzkaller0 entered promiscuous mode [ 1016.090075][T24496] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1016.104324][T24496] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1019.866228][T24508] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1019.875467][T24508] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1020.003284][T24519] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7081'. [ 1020.093672][T24519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1020.200801][T24527] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7084'. [ 1020.258281][T24527] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1020.544667][T24536] IPv6: Can't replace route, no match found [ 1020.602521][T24536] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1021.108959][T24537] device syzkaller0 entered promiscuous mode [ 1021.136779][T24558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7092'. [ 1021.165110][T24558] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1021.295026][T24566] FAULT_INJECTION: forcing a failure. [ 1021.295026][T24566] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.420726][T24566] CPU: 1 PID: 24566 Comm: syz.2.7094 Not tainted syzkaller #0 [ 1021.428246][T24566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1021.438406][T24566] Call Trace: [ 1021.441688][T24566] [ 1021.444618][T24566] dump_stack_lvl+0x188/0x24e [ 1021.449299][T24566] ? show_regs_print_info+0x12/0x12 [ 1021.454505][T24566] ? load_image+0x400/0x400 [ 1021.459089][T24566] ? __lock_acquire+0x7d10/0x7d10 [ 1021.464113][T24566] should_fail_ex+0x399/0x4d0 [ 1021.468810][T24566] should_failslab+0x5/0x20 [ 1021.473488][T24566] slab_pre_alloc_hook+0x59/0x310 [ 1021.478504][T24566] ? verify_lock_unused+0x140/0x140 [ 1021.483701][T24566] ? bpf_test_init+0x9f/0x140 [ 1021.488547][T24566] __kmem_cache_alloc_node+0x4f/0x260 [ 1021.493921][T24566] ? bpf_test_init+0x9f/0x140 [ 1021.498590][T24566] __kmalloc+0xa0/0x240 [ 1021.502841][T24566] bpf_test_init+0x9f/0x140 [ 1021.507339][T24566] bpf_prog_test_run_xdp+0x484/0xf10 [ 1021.512626][T24566] ? dev_put+0x80/0x80 [ 1021.516697][T24566] ? dev_put+0x80/0x80 [ 1021.520758][T24566] bpf_prog_test_run+0x31e/0x390 [ 1021.525777][T24566] __sys_bpf+0x62b/0x780 [ 1021.530016][T24566] ? bpf_link_show_fdinfo+0x380/0x380 [ 1021.535396][T24566] ? lock_chain_count+0x20/0x20 [ 1021.540268][T24566] __x64_sys_bpf+0x78/0x90 [ 1021.544767][T24566] do_syscall_64+0x4c/0xa0 [ 1021.549182][T24566] ? clear_bhb_loop+0x60/0xb0 [ 1021.553851][T24566] ? clear_bhb_loop+0x60/0xb0 [ 1021.558522][T24566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.564406][T24566] RIP: 0033:0x7f4e7c59c629 [ 1021.568816][T24566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.589111][T24566] RSP: 002b:00007f4e7d485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1021.597520][T24566] RAX: ffffffffffffffda RBX: 00007f4e7c815fa0 RCX: 00007f4e7c59c629 [ 1021.605486][T24566] RDX: 0000000000000029 RSI: 0000200000000000 RDI: 000000000000000a [ 1021.613460][T24566] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.621516][T24566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.629572][T24566] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 1021.637634][T24566] [ 1024.305010][T24574] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1024.315076][T24574] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1024.363634][T24579] device syzkaller0 entered promiscuous mode [ 1024.379768][T24593] IPv6: Can't replace route, no match found [ 1024.401793][T24596] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1024.418564][T24606] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1024.428295][T24606] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1027.551675][T24618] IPv6: Can't replace route, no match found [ 1027.565676][T24619] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1027.585935][T24632] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7112'. [ 1027.607135][T24632] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1027.656300][T24640] netlink: 'syz.1.7114': attribute type 21 has an invalid length. [ 1027.674715][T24640] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7114'. [ 1027.741145][T24645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.910222][T24653] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1027.948274][T24653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1028.565824][T24654] device syzkaller0 entered promiscuous mode [ 1031.262604][T24665] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7121'. [ 1031.272258][T24665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1031.356005][T24679] device syzkaller0 entered promiscuous mode [ 1031.512605][T24696] device syzkaller0 entered promiscuous mode [ 1035.924801][T24701] IPv6: Can't replace route, no match found [ 1035.930900][T24709] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7133'. [ 1035.940137][T24709] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1035.976549][T24710] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1036.099633][T24725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.037753][T24744] device syzkaller0 entered promiscuous mode [ 1037.176162][T24750] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7145'. [ 1037.186142][T24750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1039.046762][T24775] FAULT_INJECTION: forcing a failure. [ 1039.046762][T24775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.060235][T24775] CPU: 1 PID: 24775 Comm: syz.0.7150 Not tainted syzkaller #0 [ 1039.067730][T24775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.078323][T24775] Call Trace: [ 1039.081621][T24775] [ 1039.084552][T24775] dump_stack_lvl+0x188/0x24e [ 1039.089234][T24775] ? show_regs_print_info+0x12/0x12 [ 1039.094431][T24775] ? load_image+0x400/0x400 [ 1039.098936][T24775] ? __lock_acquire+0x7d10/0x7d10 [ 1039.103965][T24775] should_fail_ex+0x399/0x4d0 [ 1039.108736][T24775] strncpy_from_user+0x32/0x350 [ 1039.113673][T24775] bpf_prog_load+0x1f3/0x1560 [ 1039.118367][T24775] ? map_freeze+0x390/0x390 [ 1039.122911][T24775] ? __might_fault+0xa6/0x120 [ 1039.127617][T24775] ? __might_fault+0xa6/0x120 [ 1039.132288][T24775] ? __might_fault+0xc2/0x120 [ 1039.136968][T24775] ? __might_fault+0xa6/0x120 [ 1039.141749][T24775] ? bpf_lsm_bpf+0x5/0x10 [ 1039.146073][T24775] ? security_bpf+0x7a/0xa0 [ 1039.150573][T24775] __sys_bpf+0x5b8/0x780 [ 1039.154813][T24775] ? bpf_link_show_fdinfo+0x380/0x380 [ 1039.160194][T24775] ? lock_chain_count+0x20/0x20 [ 1039.165047][T24775] __x64_sys_bpf+0x78/0x90 [ 1039.169462][T24775] do_syscall_64+0x4c/0xa0 [ 1039.173883][T24775] ? clear_bhb_loop+0x60/0xb0 [ 1039.178552][T24775] ? clear_bhb_loop+0x60/0xb0 [ 1039.183259][T24775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.189146][T24775] RIP: 0033:0x7fa18a39c629 [ 1039.193560][T24775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.213165][T24775] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.221574][T24775] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 1039.229628][T24775] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1039.237694][T24775] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.245660][T24775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.253628][T24775] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1039.261607][T24775] [ 1040.894836][T24758] IPv6: Can't replace route, no match found [ 1040.901965][T24752] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1040.912770][T24765] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7147'. [ 1040.922306][T24765] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1041.343788][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 1041.357914][T24794] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1041.404084][T24794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1041.436045][T24795] IPv6: Can't replace route, no match found [ 1041.499525][T24799] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1041.511037][T24805] FAULT_INJECTION: forcing a failure. [ 1041.511037][T24805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.562549][T24805] CPU: 0 PID: 24805 Comm: syz.0.7163 Not tainted syzkaller #0 [ 1041.570088][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1041.580256][T24805] Call Trace: [ 1041.583544][T24805] [ 1041.586492][T24805] dump_stack_lvl+0x188/0x24e [ 1041.591203][T24805] ? show_regs_print_info+0x12/0x12 [ 1041.596424][T24805] ? load_image+0x400/0x400 [ 1041.601040][T24805] ? __lock_acquire+0x7d10/0x7d10 [ 1041.606095][T24805] should_fail_ex+0x399/0x4d0 [ 1041.610809][T24805] _copy_from_user+0x2c/0x170 [ 1041.615509][T24805] iovec_from_user+0x143/0x360 [ 1041.620298][T24805] __import_iovec+0x6d/0x500 [ 1041.624904][T24805] ? __might_fault+0xa6/0x120 [ 1041.629598][T24805] import_iovec+0x6f/0xa0 [ 1041.633947][T24805] ___sys_recvmsg+0x4b6/0x590 [ 1041.638651][T24805] ? __sys_recvmsg+0x290/0x290 [ 1041.643442][T24805] ? common_file_perm+0x171/0x1c0 [ 1041.648495][T24805] ? __fget_files+0x43d/0x4b0 [ 1041.653205][T24805] __x64_sys_recvmsg+0x205/0x2e0 [ 1041.658176][T24805] ? ___sys_recvmsg+0x590/0x590 [ 1041.663062][T24805] ? lockdep_hardirqs_on+0x94/0x140 [ 1041.668282][T24805] do_syscall_64+0x4c/0xa0 [ 1041.672715][T24805] ? clear_bhb_loop+0x60/0xb0 [ 1041.677408][T24805] ? clear_bhb_loop+0x60/0xb0 [ 1041.682103][T24805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.688018][T24805] RIP: 0033:0x7fa18a39c629 [ 1041.692536][T24805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.712227][T24805] RSP: 002b:00007fa18b28a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1041.721010][T24805] RAX: ffffffffffffffda RBX: 00007fa18a616090 RCX: 00007fa18a39c629 [ 1041.729006][T24805] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1041.737354][T24805] RBP: 00007fa18b28a090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.745354][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.753351][T24805] R13: 00007fa18a616128 R14: 00007fa18a616090 R15: 00007ffdf46b9478 [ 1041.761353][T24805] [ 1042.559238][T24820] netlink: 'syz.3.7167': attribute type 21 has an invalid length. [ 1042.632285][T24823] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7169'. [ 1042.668526][T24823] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1043.510298][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7178'. [ 1043.668181][T24846] device syzkaller0 entered promiscuous mode [ 1043.716724][T24853] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1043.759428][T24853] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1043.800008][T24854] device macsec0 entered promiscuous mode [ 1044.161271][T24872] FAULT_INJECTION: forcing a failure. [ 1044.161271][T24872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.221694][T24872] CPU: 0 PID: 24872 Comm: syz.3.7183 Not tainted syzkaller #0 [ 1044.229226][T24872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1044.239530][T24872] Call Trace: [ 1044.243033][T24872] [ 1044.246008][T24872] dump_stack_lvl+0x188/0x24e [ 1044.250716][T24872] ? show_regs_print_info+0x12/0x12 [ 1044.255954][T24872] ? load_image+0x400/0x400 [ 1044.260573][T24872] ? __lock_acquire+0x7d10/0x7d10 [ 1044.265645][T24872] should_fail_ex+0x399/0x4d0 [ 1044.270360][T24872] strncpy_from_user+0x32/0x350 [ 1044.275249][T24872] bpf_prog_load+0x1f3/0x1560 [ 1044.280055][T24872] ? map_freeze+0x390/0x390 [ 1044.284756][T24872] ? __might_fault+0xa6/0x120 [ 1044.289452][T24872] ? trace_call_bpf+0xbf/0x6b0 [ 1044.294249][T24872] ? __might_fault+0xa6/0x120 [ 1044.298962][T24872] ? __might_fault+0xc2/0x120 [ 1044.303664][T24872] ? __might_fault+0xa6/0x120 [ 1044.308368][T24872] ? bpf_lsm_bpf+0x5/0x10 [ 1044.312720][T24872] ? security_bpf+0x7a/0xa0 [ 1044.317251][T24872] __sys_bpf+0x5b8/0x780 [ 1044.321528][T24872] ? bpf_link_show_fdinfo+0x380/0x380 [ 1044.326942][T24872] ? lock_chain_count+0x20/0x20 [ 1044.331871][T24872] __x64_sys_bpf+0x78/0x90 [ 1044.336585][T24872] do_syscall_64+0x4c/0xa0 [ 1044.341297][T24872] ? clear_bhb_loop+0x60/0xb0 [ 1044.346171][T24872] ? clear_bhb_loop+0x60/0xb0 [ 1044.350915][T24872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.356816][T24872] RIP: 0033:0x7f09ab39c629 [ 1044.361322][T24872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.381027][T24872] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1044.389526][T24872] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 1044.397577][T24872] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1044.405550][T24872] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.413522][T24872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.421592][T24872] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 1044.429582][T24872] [ 1045.033326][T24891] FAULT_INJECTION: forcing a failure. [ 1045.033326][T24891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.063589][T24891] CPU: 1 PID: 24891 Comm: syz.0.7188 Not tainted syzkaller #0 [ 1045.071567][T24891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1045.081649][T24891] Call Trace: [ 1045.084942][T24891] [ 1045.087884][T24891] dump_stack_lvl+0x188/0x24e [ 1045.092589][T24891] ? show_regs_print_info+0x12/0x12 [ 1045.097915][T24891] ? load_image+0x400/0x400 [ 1045.102448][T24891] ? __lock_acquire+0x7d10/0x7d10 [ 1045.107486][T24891] should_fail_ex+0x399/0x4d0 [ 1045.112267][T24891] _copy_from_iter+0x1c0/0x1130 [ 1045.117141][T24891] ? __lock_acquire+0x7d10/0x7d10 [ 1045.122182][T24891] ? copyout_mc+0x110/0x110 [ 1045.126691][T24891] ? __virt_addr_valid+0x188/0x540 [ 1045.131813][T24891] ? __virt_addr_valid+0x188/0x540 [ 1045.136937][T24891] ? __virt_addr_valid+0x465/0x540 [ 1045.142146][T24891] ? __check_object_size+0x500/0xa40 [ 1045.147442][T24891] kernfs_fop_write_iter+0x1a0/0x520 [ 1045.152746][T24891] vfs_write+0x4b1/0xa30 [ 1045.157001][T24891] ? file_end_write+0x250/0x250 [ 1045.161879][T24891] ? __fget_files+0x43d/0x4b0 [ 1045.166574][T24891] ? __fdget_pos+0x2ae/0x360 [ 1045.171171][T24891] ? ksys_write+0x71/0x250 [ 1045.175602][T24891] ksys_write+0x14c/0x250 [ 1045.179946][T24891] ? __ia32_sys_read+0x80/0x80 [ 1045.184723][T24891] ? lockdep_hardirqs_on+0x94/0x140 [ 1045.190019][T24891] do_syscall_64+0x4c/0xa0 [ 1045.194448][T24891] ? clear_bhb_loop+0x60/0xb0 [ 1045.199126][T24891] ? clear_bhb_loop+0x60/0xb0 [ 1045.203807][T24891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1045.209712][T24891] RIP: 0033:0x7fa18a39c629 [ 1045.214148][T24891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.233758][T24891] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1045.242177][T24891] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 1045.250156][T24891] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004 [ 1045.258129][T24891] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.266196][T24891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.274433][T24891] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1045.282424][T24891] [ 1047.046907][T24868] netlink: 'syz.1.7182': attribute type 21 has an invalid length. [ 1047.062646][T24882] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7185'. [ 1047.108880][T24882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.125600][T24882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.165668][T24882] bond0 (unregistering): Released all slaves [ 1047.176505][T24897] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1047.192552][T24897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1047.355449][T24909] FAULT_INJECTION: forcing a failure. [ 1047.355449][T24909] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.462661][T24909] CPU: 0 PID: 24909 Comm: syz.4.7193 Not tainted syzkaller #0 [ 1047.470274][T24909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.480522][T24909] Call Trace: [ 1047.483900][T24909] [ 1047.486848][T24909] dump_stack_lvl+0x188/0x24e [ 1047.491558][T24909] ? show_regs_print_info+0x12/0x12 [ 1047.496783][T24909] ? load_image+0x400/0x400 [ 1047.501315][T24909] ? __lock_acquire+0x7d10/0x7d10 [ 1047.506376][T24909] should_fail_ex+0x399/0x4d0 [ 1047.511188][T24909] should_failslab+0x5/0x20 [ 1047.515708][T24909] slab_pre_alloc_hook+0x59/0x310 [ 1047.520738][T24909] ? vmemdup_user+0x45/0x1d0 [ 1047.525348][T24909] __kmem_cache_alloc_node+0x4f/0x260 [ 1047.530743][T24909] ? vmemdup_user+0x45/0x1d0 [ 1047.535333][T24909] __kmalloc_node+0xa0/0x240 [ 1047.539941][T24909] vmemdup_user+0x45/0x1d0 [ 1047.544381][T24909] map_get_next_key+0x225/0x620 [ 1047.549242][T24909] ? __might_fault+0xa6/0x120 [ 1047.553952][T24909] ? bpf_lsm_bpf+0x5/0x10 [ 1047.558310][T24909] __sys_bpf+0x466/0x780 [ 1047.562579][T24909] ? bpf_link_show_fdinfo+0x380/0x380 [ 1047.568004][T24909] ? lock_chain_count+0x20/0x20 [ 1047.572896][T24909] __x64_sys_bpf+0x78/0x90 [ 1047.577342][T24909] do_syscall_64+0x4c/0xa0 [ 1047.581785][T24909] ? clear_bhb_loop+0x60/0xb0 [ 1047.586564][T24909] ? clear_bhb_loop+0x60/0xb0 [ 1047.591268][T24909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.597271][T24909] RIP: 0033:0x7fbcd959c629 [ 1047.601708][T24909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.621425][T24909] RSP: 002b:00007fbcda52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1047.629865][T24909] RAX: ffffffffffffffda RBX: 00007fbcd9815fa0 RCX: 00007fbcd959c629 [ 1047.637957][T24909] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000004 [ 1047.645949][T24909] RBP: 00007fbcda52c090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.653941][T24909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.661931][T24909] R13: 00007fbcd9816038 R14: 00007fbcd9815fa0 R15: 00007ffe96b5c618 [ 1047.670095][T24909] [ 1047.768216][T24919] IPv6: Can't replace route, no match found [ 1047.811021][T24920] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7196'. [ 1047.838427][T24920] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1047.915730][T24919] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1047.984609][T24927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1048.008442][T24927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1048.050488][T24932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1048.086057][T24927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1048.225016][T24935] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7201'. [ 1048.258369][T24935] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1048.724882][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7205'. [ 1049.086544][T24947] device syzkaller0 entered promiscuous mode [ 1049.103430][T24954] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7216'. [ 1049.144085][T24954] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1049.245331][T24955] device macsec0 entered promiscuous mode [ 1049.256130][T24957] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1049.385215][T24972] FAULT_INJECTION: forcing a failure. [ 1049.385215][T24972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.434748][T24972] CPU: 0 PID: 24972 Comm: syz.0.7207 Not tainted syzkaller #0 [ 1049.442355][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1049.452432][T24972] Call Trace: [ 1049.455730][T24972] [ 1049.458687][T24972] dump_stack_lvl+0x188/0x24e [ 1049.463395][T24972] ? show_regs_print_info+0x12/0x12 [ 1049.468627][T24972] ? load_image+0x400/0x400 [ 1049.473164][T24972] ? __lock_acquire+0x7d10/0x7d10 [ 1049.478314][T24972] should_fail_ex+0x399/0x4d0 [ 1049.483027][T24972] _copy_from_user+0x2c/0x170 [ 1049.487734][T24972] ___sys_recvmsg+0x172/0x590 [ 1049.492503][T24972] ? __sys_recvmsg+0x290/0x290 [ 1049.497293][T24972] ? trace_call_bpf+0xbf/0x6b0 [ 1049.502080][T24972] ? trace_call_bpf+0x5d6/0x6b0 [ 1049.506976][T24972] ? __fget_files+0x43d/0x4b0 [ 1049.511700][T24972] __x64_sys_recvmsg+0x205/0x2e0 [ 1049.516680][T24972] ? perf_trace_preemptirq_template+0x268/0x320 [ 1049.523134][T24972] ? ___sys_recvmsg+0x590/0x590 [ 1049.528028][T24972] ? lockdep_hardirqs_on+0x94/0x140 [ 1049.533253][T24972] do_syscall_64+0x4c/0xa0 [ 1049.537705][T24972] ? clear_bhb_loop+0x60/0xb0 [ 1049.542422][T24972] ? clear_bhb_loop+0x60/0xb0 [ 1049.547123][T24972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.553037][T24972] RIP: 0033:0x7fa18a39c629 [ 1049.557481][T24972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.577128][T24972] RSP: 002b:00007fa18b269028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1049.585549][T24972] RAX: ffffffffffffffda RBX: 00007fa18a616180 RCX: 00007fa18a39c629 [ 1049.593546][T24972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1049.601542][T24972] RBP: 00007fa18b269090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.609559][T24972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.617578][T24972] R13: 00007fa18a616218 R14: 00007fa18a616180 R15: 00007ffdf46b9478 [ 1049.625593][T24972] [ 1050.122771][T24993] FAULT_INJECTION: forcing a failure. [ 1050.122771][T24993] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.150989][T24993] CPU: 0 PID: 24993 Comm: syz.2.7217 Not tainted syzkaller #0 [ 1050.158514][T24993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1050.168600][T24993] Call Trace: [ 1050.171883][T24993] [ 1050.174816][T24993] dump_stack_lvl+0x188/0x24e [ 1050.179603][T24993] ? show_regs_print_info+0x12/0x12 [ 1050.184816][T24993] ? load_image+0x400/0x400 [ 1050.189312][T24993] ? __lock_acquire+0x7d10/0x7d10 [ 1050.194388][T24993] should_fail_ex+0x399/0x4d0 [ 1050.199242][T24993] should_failslab+0x5/0x20 [ 1050.203837][T24993] slab_pre_alloc_hook+0x59/0x310 [ 1050.208965][T24993] ? verify_lock_unused+0x140/0x140 [ 1050.214362][T24993] ? bpf_test_init+0x9f/0x140 [ 1050.219046][T24993] __kmem_cache_alloc_node+0x4f/0x260 [ 1050.224499][T24993] ? bpf_test_init+0x9f/0x140 [ 1050.229170][T24993] __kmalloc+0xa0/0x240 [ 1050.233322][T24993] bpf_test_init+0x9f/0x140 [ 1050.237818][T24993] bpf_prog_test_run_xdp+0x484/0xf10 [ 1050.243117][T24993] ? dev_put+0x80/0x80 [ 1050.247211][T24993] ? dev_put+0x80/0x80 [ 1050.251289][T24993] bpf_prog_test_run+0x31e/0x390 [ 1050.256230][T24993] __sys_bpf+0x62b/0x780 [ 1050.260472][T24993] ? bpf_link_show_fdinfo+0x380/0x380 [ 1050.265855][T24993] ? lock_chain_count+0x20/0x20 [ 1050.270708][T24993] __x64_sys_bpf+0x78/0x90 [ 1050.275118][T24993] do_syscall_64+0x4c/0xa0 [ 1050.279530][T24993] ? clear_bhb_loop+0x60/0xb0 [ 1050.284236][T24993] ? clear_bhb_loop+0x60/0xb0 [ 1050.288907][T24993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1050.294791][T24993] RIP: 0033:0x7f4e7c59c629 [ 1050.299207][T24993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.319018][T24993] RSP: 002b:00007f4e7d485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1050.327432][T24993] RAX: ffffffffffffffda RBX: 00007f4e7c815fa0 RCX: 00007f4e7c59c629 [ 1050.335487][T24993] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 1050.343456][T24993] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.351420][T24993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.359382][T24993] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 1050.367356][T24993] [ 1051.928896][T24991] IPv6: Can't replace route, no match found [ 1051.935397][T24994] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1052.079197][T25003] __nla_validate_parse: 4 callbacks suppressed [ 1052.079215][T25003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1052.154371][T25008] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7222'. [ 1052.170436][T25008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1052.277188][T25012] device macsec0 entered promiscuous mode [ 1052.740644][T25023] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7226'. [ 1052.762388][T25023] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1053.105059][T25034] FAULT_INJECTION: forcing a failure. [ 1053.105059][T25034] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.134979][T25034] CPU: 0 PID: 25034 Comm: syz.3.7231 Not tainted syzkaller #0 [ 1053.142513][T25034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.152590][T25034] Call Trace: [ 1053.155881][T25034] [ 1053.158827][T25034] dump_stack_lvl+0x188/0x24e [ 1053.163532][T25034] ? show_regs_print_info+0x12/0x12 [ 1053.168759][T25034] ? load_image+0x400/0x400 [ 1053.173292][T25034] ? __lock_acquire+0x7d10/0x7d10 [ 1053.178353][T25034] should_fail_ex+0x399/0x4d0 [ 1053.183072][T25034] should_failslab+0x5/0x20 [ 1053.187604][T25034] slab_pre_alloc_hook+0x59/0x310 [ 1053.192648][T25034] ? vmemdup_user+0x45/0x1d0 [ 1053.197265][T25034] __kmem_cache_alloc_node+0x4f/0x260 [ 1053.202674][T25034] ? vmemdup_user+0x45/0x1d0 [ 1053.207280][T25034] __kmalloc_node+0xa0/0x240 [ 1053.211877][T25034] vmemdup_user+0x45/0x1d0 [ 1053.216293][T25034] map_get_next_key+0x225/0x620 [ 1053.221233][T25034] ? __might_fault+0xa6/0x120 [ 1053.225903][T25034] ? bpf_lsm_bpf+0x5/0x10 [ 1053.230333][T25034] __sys_bpf+0x466/0x780 [ 1053.234588][T25034] ? bpf_link_show_fdinfo+0x380/0x380 [ 1053.240108][T25034] ? lock_chain_count+0x20/0x20 [ 1053.244978][T25034] __x64_sys_bpf+0x78/0x90 [ 1053.249396][T25034] do_syscall_64+0x4c/0xa0 [ 1053.253806][T25034] ? clear_bhb_loop+0x60/0xb0 [ 1053.258472][T25034] ? clear_bhb_loop+0x60/0xb0 [ 1053.263172][T25034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.269068][T25034] RIP: 0033:0x7f09ab39c629 [ 1053.273560][T25034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.293240][T25034] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1053.301657][T25034] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 1053.309622][T25034] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 [ 1053.317586][T25034] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.325559][T25034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.333523][T25034] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 1053.341499][T25034] [ 1053.423172][T25036] netlink: 'syz.1.7230': attribute type 3 has an invalid length. [ 1053.441133][T25036] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7230'. [ 1053.492614][T25038] netlink: 'syz.1.7230': attribute type 3 has an invalid length. [ 1053.510962][T25038] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7230'. [ 1054.092982][T25044] device syzkaller0 entered promiscuous mode [ 1054.241440][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7238'. [ 1054.482945][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.489368][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.748712][T25072] FAULT_INJECTION: forcing a failure. [ 1054.748712][T25072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.769343][T25072] CPU: 0 PID: 25072 Comm: syz.0.7243 Not tainted syzkaller #0 [ 1054.776847][T25072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.787023][T25072] Call Trace: [ 1054.790301][T25072] [ 1054.793229][T25072] dump_stack_lvl+0x188/0x24e [ 1054.797912][T25072] ? show_regs_print_info+0x12/0x12 [ 1054.803204][T25072] ? load_image+0x400/0x400 [ 1054.807704][T25072] ? __lock_acquire+0x7d10/0x7d10 [ 1054.812740][T25072] should_fail_ex+0x399/0x4d0 [ 1054.817523][T25072] _copy_from_user+0x2c/0x170 [ 1054.822285][T25072] ___sys_sendmsg+0x1c3/0x360 [ 1054.827060][T25072] ? __sys_sendmsg+0x290/0x290 [ 1054.832186][T25072] ? trace_call_bpf+0xbf/0x6b0 [ 1054.836964][T25072] __se_sys_sendmsg+0x1bb/0x2a0 [ 1054.841816][T25072] ? __x64_sys_sendmsg+0x80/0x80 [ 1054.846758][T25072] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.852064][T25072] do_syscall_64+0x4c/0xa0 [ 1054.856655][T25072] ? clear_bhb_loop+0x60/0xb0 [ 1054.861497][T25072] ? clear_bhb_loop+0x60/0xb0 [ 1054.866174][T25072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.872191][T25072] RIP: 0033:0x7fa18a39c629 [ 1054.876782][T25072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.896391][T25072] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.904807][T25072] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 1054.912902][T25072] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1054.921052][T25072] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.929129][T25072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.937191][T25072] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1054.945520][T25072] [ 1056.665797][T25062] netlink: 'syz.4.7240': attribute type 33 has an invalid length. [ 1056.674229][T25062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1056.686345][T25064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7241'. [ 1056.696438][T25064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1056.727264][T25059] device macsec0 entered promiscuous mode [ 1056.806185][T25079] device syzkaller0 entered promiscuous mode [ 1056.946304][T25084] netlink: 'syz.4.7246': attribute type 28 has an invalid length. [ 1056.954724][T25084] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7246'. [ 1056.981713][T25087] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1056.999469][T25087] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1057.254995][ T4285] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 1059.117253][T25091] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1059.128248][T25091] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1059.145973][T25100] netlink: 'syz.4.7249': attribute type 33 has an invalid length. [ 1059.159597][T25100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7249'. [ 1059.278187][ T4285] Bluetooth: hci3: command 0x2021 tx timeout [ 1059.355409][T25117] IPv6: Can't replace route, no match found [ 1059.536557][T25124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7259'. [ 1059.555182][T25125] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1059.566008][T25125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1060.586645][T25144] device syzkaller0 entered promiscuous mode [ 1060.614823][T25149] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7265'. [ 1060.672665][T25149] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1061.295710][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7271'. [ 1061.628358][T25177] FAULT_INJECTION: forcing a failure. [ 1061.628358][T25177] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.651484][T25177] CPU: 0 PID: 25177 Comm: syz.2.7274 Not tainted syzkaller #0 [ 1061.659014][T25177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.669106][T25177] Call Trace: [ 1061.672405][T25177] [ 1061.675365][T25177] dump_stack_lvl+0x188/0x24e [ 1061.680076][T25177] ? show_regs_print_info+0x12/0x12 [ 1061.685306][T25177] ? load_image+0x400/0x400 [ 1061.689934][T25177] ? __might_sleep+0xd0/0xd0 [ 1061.694643][T25177] ? __lock_acquire+0x7d10/0x7d10 [ 1061.699719][T25177] should_fail_ex+0x399/0x4d0 [ 1061.704418][T25177] should_failslab+0x5/0x20 [ 1061.708928][T25177] slab_pre_alloc_hook+0x59/0x310 [ 1061.713951][T25177] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1061.719677][T25177] __kmem_cache_alloc_node+0x4f/0x260 [ 1061.725042][T25177] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1061.730764][T25177] __kmalloc+0xa0/0x240 [ 1061.734921][T25177] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1061.740470][T25177] ? tomoyo_path_number_perm+0x205/0x650 [ 1061.746184][T25177] tomoyo_path_number_perm+0x22f/0x650 [ 1061.751643][T25177] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1061.757105][T25177] ? ksys_write+0x1c0/0x250 [ 1061.761629][T25177] ? common_file_perm+0x171/0x1c0 [ 1061.766684][T25177] ? __fget_files+0x28/0x4b0 [ 1061.771276][T25177] ? __fget_files+0x28/0x4b0 [ 1061.775883][T25177] security_file_ioctl+0x6c/0xa0 [ 1061.780832][T25177] __se_sys_ioctl+0x48/0x170 [ 1061.785442][T25177] do_syscall_64+0x4c/0xa0 [ 1061.789903][T25177] ? clear_bhb_loop+0x60/0xb0 [ 1061.794588][T25177] ? clear_bhb_loop+0x60/0xb0 [ 1061.799269][T25177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.805170][T25177] RIP: 0033:0x7f4e7c59c629 [ 1061.809587][T25177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.829454][T25177] RSP: 002b:00007f4e7d464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.837873][T25177] RAX: ffffffffffffffda RBX: 00007f4e7c816090 RCX: 00007f4e7c59c629 [ 1061.846016][T25177] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000008 [ 1061.853981][T25177] RBP: 00007f4e7d464090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.861944][T25177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.869992][T25177] R13: 00007f4e7c816128 R14: 00007f4e7c816090 R15: 00007fffbc9b8908 [ 1061.877975][T25177] [ 1061.916552][T25177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1063.608905][T25181] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7276'. [ 1063.623074][T25181] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1064.373644][T25213] netlink: 'syz.3.7286': attribute type 3 has an invalid length. [ 1064.385284][T25213] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1064.424741][T25218] netlink: 'syz.3.7286': attribute type 3 has an invalid length. [ 1064.460738][T25218] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1064.485255][T25219] netlink: 'syz.0.7287': attribute type 10 has an invalid length. [ 1064.733872][T25219] team0: Port device netdevsim0 added [ 1065.157527][T25227] device syzkaller0 entered promiscuous mode [ 1065.176740][T25233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7291'. [ 1065.205735][T25233] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1065.545410][T25253] FAULT_INJECTION: forcing a failure. [ 1065.545410][T25253] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.589084][T25253] CPU: 1 PID: 25253 Comm: syz.2.7295 Not tainted syzkaller #0 [ 1065.596680][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1065.606841][T25253] Call Trace: [ 1065.610140][T25253] [ 1065.613181][T25253] dump_stack_lvl+0x188/0x24e [ 1065.617980][T25253] ? show_regs_print_info+0x12/0x12 [ 1065.623206][T25253] ? load_image+0x400/0x400 [ 1065.627727][T25253] ? __might_sleep+0xd0/0xd0 [ 1065.632330][T25253] ? __lock_acquire+0x7d10/0x7d10 [ 1065.637467][T25253] should_fail_ex+0x399/0x4d0 [ 1065.642173][T25253] should_failslab+0x5/0x20 [ 1065.646708][T25253] slab_pre_alloc_hook+0x59/0x310 [ 1065.651933][T25253] ? tomoyo_encode+0x27e/0x540 [ 1065.656807][T25253] __kmem_cache_alloc_node+0x4f/0x260 [ 1065.662202][T25253] ? tomoyo_encode+0x27e/0x540 [ 1065.667121][T25253] __kmalloc+0xa0/0x240 [ 1065.671479][T25253] tomoyo_encode+0x27e/0x540 [ 1065.676277][T25253] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1065.681960][T25253] ? tomoyo_path_number_perm+0x205/0x650 [ 1065.687705][T25253] tomoyo_path_number_perm+0x22f/0x650 [ 1065.693187][T25253] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1065.698853][T25253] ? ksys_write+0x1c0/0x250 [ 1065.703387][T25253] ? common_file_perm+0x171/0x1c0 [ 1065.708463][T25253] ? __fget_files+0x28/0x4b0 [ 1065.713076][T25253] ? __fget_files+0x28/0x4b0 [ 1065.717702][T25253] security_file_ioctl+0x6c/0xa0 [ 1065.722657][T25253] __se_sys_ioctl+0x48/0x170 [ 1065.727294][T25253] do_syscall_64+0x4c/0xa0 [ 1065.731822][T25253] ? clear_bhb_loop+0x60/0xb0 [ 1065.736614][T25253] ? clear_bhb_loop+0x60/0xb0 [ 1065.741398][T25253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1065.747352][T25253] RIP: 0033:0x7f4e7c59c629 [ 1065.751792][T25253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.771423][T25253] RSP: 002b:00007f4e7d464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1065.779861][T25253] RAX: ffffffffffffffda RBX: 00007f4e7c816090 RCX: 00007f4e7c59c629 [ 1065.787845][T25253] RDX: 0000000000000000 RSI: 000000000000891a RDI: 0000000000000003 [ 1065.796083][T25253] RBP: 00007f4e7d464090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.804426][T25253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.812411][T25253] R13: 00007f4e7c816128 R14: 00007f4e7c816090 R15: 00007fffbc9b8908 [ 1065.820405][T25253] [ 1065.926473][T25253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1068.103941][T25274] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7303'. [ 1068.116541][T25274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1068.156229][T25283] netlink: 166 bytes leftover after parsing attributes in process `syz.2.7304'. [ 1068.415250][T25298] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7310'. [ 1068.445803][T25298] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1068.529433][T25301] netlink: 'syz.1.7308': attribute type 10 has an invalid length. [ 1068.722541][T25301] team0: Port device netdevsim0 added [ 1068.831867][T25303] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1068.923062][T25303] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1069.382841][T25324] FAULT_INJECTION: forcing a failure. [ 1069.382841][T25324] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.406161][T25324] CPU: 1 PID: 25324 Comm: syz.4.7315 Not tainted syzkaller #0 [ 1069.413905][T25324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.424007][T25324] Call Trace: [ 1069.427374][T25324] [ 1069.430346][T25324] dump_stack_lvl+0x188/0x24e [ 1069.435068][T25324] ? show_regs_print_info+0x12/0x12 [ 1069.440310][T25324] ? load_image+0x400/0x400 [ 1069.444846][T25324] ? __might_sleep+0xd0/0xd0 [ 1069.449579][T25324] ? __lock_acquire+0x7d10/0x7d10 [ 1069.454649][T25324] should_fail_ex+0x399/0x4d0 [ 1069.459375][T25324] should_failslab+0x5/0x20 [ 1069.463935][T25324] slab_pre_alloc_hook+0x59/0x310 [ 1069.468992][T25324] ? tomoyo_encode+0x27e/0x540 [ 1069.473962][T25324] __kmem_cache_alloc_node+0x4f/0x260 [ 1069.479450][T25324] ? tomoyo_encode+0x27e/0x540 [ 1069.484329][T25324] __kmalloc+0xa0/0x240 [ 1069.488507][T25324] tomoyo_encode+0x27e/0x540 [ 1069.493130][T25324] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1069.498897][T25324] ? tomoyo_path_number_perm+0x205/0x650 [ 1069.504733][T25324] tomoyo_path_number_perm+0x22f/0x650 [ 1069.510224][T25324] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1069.516230][T25324] ? ksys_write+0x1c0/0x250 [ 1069.520759][T25324] ? common_file_perm+0x171/0x1c0 [ 1069.525817][T25324] ? __fget_files+0x28/0x4b0 [ 1069.530407][T25324] ? __fget_files+0x28/0x4b0 [ 1069.535103][T25324] security_file_ioctl+0x6c/0xa0 [ 1069.540133][T25324] __se_sys_ioctl+0x48/0x170 [ 1069.544725][T25324] do_syscall_64+0x4c/0xa0 [ 1069.549148][T25324] ? clear_bhb_loop+0x60/0xb0 [ 1069.553845][T25324] ? clear_bhb_loop+0x60/0xb0 [ 1069.558548][T25324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.564494][T25324] RIP: 0033:0x7fbcd959c629 [ 1069.568957][T25324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.588597][T25324] RSP: 002b:00007fbcda50b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.597039][T25324] RAX: ffffffffffffffda RBX: 00007fbcd9816090 RCX: 00007fbcd959c629 [ 1069.605122][T25324] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 1069.613124][T25324] RBP: 00007fbcda50b090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.621127][T25324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.629130][T25324] R13: 00007fbcd9816128 R14: 00007fbcd9816090 R15: 00007ffe96b5c618 [ 1069.637410][T25324] [ 1069.669093][T25324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1069.881871][T25335] device syzkaller0 entered promiscuous mode [ 1069.935203][T25327] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1069.967746][T25327] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1069.994005][T25344] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7320'. [ 1070.016213][T25344] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1071.015223][T25370] FAULT_INJECTION: forcing a failure. [ 1071.015223][T25370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.057165][T25370] CPU: 0 PID: 25370 Comm: syz.3.7327 Not tainted syzkaller #0 [ 1071.064777][T25370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.074853][T25370] Call Trace: [ 1071.078324][T25370] [ 1071.081270][T25370] dump_stack_lvl+0x188/0x24e [ 1071.085994][T25370] ? show_regs_print_info+0x12/0x12 [ 1071.091218][T25370] ? load_image+0x400/0x400 [ 1071.095747][T25370] ? __lock_acquire+0x7d10/0x7d10 [ 1071.100883][T25370] ? preempt_schedule+0xbc/0xd0 [ 1071.105753][T25370] ? schedule_preempt_disabled+0x20/0x20 [ 1071.111416][T25370] should_fail_ex+0x399/0x4d0 [ 1071.116119][T25370] _copy_to_user+0x2c/0x130 [ 1071.120650][T25370] bpf_prog_test_run_raw_tp+0x4c6/0x660 [ 1071.126226][T25370] ? trace_bpf_test_finish+0x220/0x220 [ 1071.131735][T25370] ? trace_bpf_test_finish+0x220/0x220 [ 1071.137304][T25370] bpf_prog_test_run+0x31e/0x390 [ 1071.142278][T25370] __sys_bpf+0x62b/0x780 [ 1071.146604][T25370] ? bpf_link_show_fdinfo+0x380/0x380 [ 1071.152018][T25370] ? lock_chain_count+0x20/0x20 [ 1071.156993][T25370] __x64_sys_bpf+0x78/0x90 [ 1071.161434][T25370] do_syscall_64+0x4c/0xa0 [ 1071.166040][T25370] ? clear_bhb_loop+0x60/0xb0 [ 1071.170744][T25370] ? clear_bhb_loop+0x60/0xb0 [ 1071.175431][T25370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.181441][T25370] RIP: 0033:0x7f09ab39c629 [ 1071.185973][T25370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.205611][T25370] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1071.214043][T25370] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 1071.222118][T25370] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 1071.230189][T25370] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.238174][T25370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.246179][T25370] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 1071.254279][T25370] [ 1071.432557][T25376] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1071.974556][T25389] FAULT_INJECTION: forcing a failure. [ 1071.974556][T25389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.994167][T25389] CPU: 0 PID: 25389 Comm: syz.3.7334 Not tainted syzkaller #0 [ 1072.001873][T25389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1072.012405][T25389] Call Trace: [ 1072.015707][T25389] [ 1072.018649][T25389] dump_stack_lvl+0x188/0x24e [ 1072.023355][T25389] ? show_regs_print_info+0x12/0x12 [ 1072.028585][T25389] ? load_image+0x400/0x400 [ 1072.033107][T25389] ? __lock_acquire+0x7d10/0x7d10 [ 1072.038156][T25389] should_fail_ex+0x399/0x4d0 [ 1072.042859][T25389] _copy_from_user+0x2c/0x170 [ 1072.047563][T25389] __copy_msghdr+0x3b7/0x580 [ 1072.052190][T25389] ___sys_sendmsg+0x210/0x360 [ 1072.056912][T25389] ? __sys_sendmsg+0x290/0x290 [ 1072.061739][T25389] ? __lock_acquire+0x7d10/0x7d10 [ 1072.066898][T25389] __se_sys_sendmsg+0x1bb/0x2a0 [ 1072.071771][T25389] ? __x64_sys_sendmsg+0x80/0x80 [ 1072.076828][T25389] ? lockdep_hardirqs_on+0x94/0x140 [ 1072.082133][T25389] do_syscall_64+0x4c/0xa0 [ 1072.086572][T25389] ? clear_bhb_loop+0x60/0xb0 [ 1072.091270][T25389] ? clear_bhb_loop+0x60/0xb0 [ 1072.095970][T25389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1072.101877][T25389] RIP: 0033:0x7f09ab39c629 [ 1072.106922][T25389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.126730][T25389] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.135170][T25389] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 1072.143161][T25389] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1072.151252][T25389] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.159249][T25389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.167330][T25389] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 1072.175339][T25389] [ 1074.490171][T25399] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7339'. [ 1074.532325][T25399] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1075.228365][T25425] device syzkaller0 entered promiscuous mode [ 1075.265461][T25429] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7350'. [ 1075.855989][T25439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7353'. [ 1076.583095][T25457] FAULT_INJECTION: forcing a failure. [ 1076.583095][T25457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.598466][T25457] CPU: 0 PID: 25457 Comm: syz.1.7357 Not tainted syzkaller #0 [ 1076.606396][T25457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1076.616541][T25457] Call Trace: [ 1076.619816][T25457] [ 1076.622753][T25457] dump_stack_lvl+0x188/0x24e [ 1076.627616][T25457] ? show_regs_print_info+0x12/0x12 [ 1076.632821][T25457] ? load_image+0x400/0x400 [ 1076.637322][T25457] ? __lock_acquire+0x7d10/0x7d10 [ 1076.642516][T25457] should_fail_ex+0x399/0x4d0 [ 1076.647365][T25457] _copy_from_user+0x2c/0x170 [ 1076.652053][T25457] iovec_from_user+0x143/0x360 [ 1076.656833][T25457] __import_iovec+0x6d/0x500 [ 1076.661440][T25457] import_iovec+0x6f/0xa0 [ 1076.665799][T25457] ___sys_sendmsg+0x252/0x360 [ 1076.670565][T25457] ? __sys_sendmsg+0x290/0x290 [ 1076.675355][T25457] ? __lock_acquire+0x7d10/0x7d10 [ 1076.680476][T25457] __se_sys_sendmsg+0x1bb/0x2a0 [ 1076.685415][T25457] ? __x64_sys_sendmsg+0x80/0x80 [ 1076.690356][T25457] ? lockdep_hardirqs_on+0x94/0x140 [ 1076.695565][T25457] do_syscall_64+0x4c/0xa0 [ 1076.700034][T25457] ? clear_bhb_loop+0x60/0xb0 [ 1076.704701][T25457] ? clear_bhb_loop+0x60/0xb0 [ 1076.709562][T25457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.715470][T25457] RIP: 0033:0x7f8f4659c629 [ 1076.720053][T25457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.739663][T25457] RSP: 002b:00007f8f47450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.748162][T25457] RAX: ffffffffffffffda RBX: 00007f8f46815fa0 RCX: 00007f8f4659c629 [ 1076.756224][T25457] RDX: 000000000404c844 RSI: 0000200000000040 RDI: 0000000000000003 [ 1076.764199][T25457] RBP: 00007f8f47450090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.772174][T25457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.780235][T25457] R13: 00007f8f46816038 R14: 00007f8f46815fa0 R15: 00007ffce6adabc8 [ 1076.788360][T25457] [ 1078.440416][T25442] device macsec0 entered promiscuous mode [ 1078.534057][T25444] device syzkaller0 entered promiscuous mode [ 1078.543983][T25459] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7358'. [ 1078.594228][T25459] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1079.996229][T25488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7370'. [ 1081.737348][T25476] netlink: 'syz.2.7364': attribute type 25 has an invalid length. [ 1081.745704][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7364'. [ 1081.931422][T25499] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1081.972733][T25499] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1082.240955][T25513] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1083.047289][T25508] device syzkaller0 entered promiscuous mode [ 1085.934873][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7384'. [ 1087.850034][T25531] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7382'. [ 1087.859303][T25531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1087.974834][T25543] device syzkaller0 entered promiscuous mode [ 1088.068448][T25559] FAULT_INJECTION: forcing a failure. [ 1088.068448][T25559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.113726][T25559] CPU: 0 PID: 25559 Comm: syz.1.7389 Not tainted syzkaller #0 [ 1088.121242][T25559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1088.131411][T25559] Call Trace: [ 1088.134700][T25559] [ 1088.137643][T25559] dump_stack_lvl+0x188/0x24e [ 1088.142437][T25559] ? show_regs_print_info+0x12/0x12 [ 1088.147656][T25559] ? load_image+0x400/0x400 [ 1088.152172][T25559] ? __lock_acquire+0x7d10/0x7d10 [ 1088.157218][T25559] should_fail_ex+0x399/0x4d0 [ 1088.161915][T25559] _copy_from_user+0x2c/0x170 [ 1088.166626][T25559] __copy_msghdr+0x3b7/0x580 [ 1088.171232][T25559] ___sys_sendmsg+0x210/0x360 [ 1088.176011][T25559] ? __sys_sendmsg+0x290/0x290 [ 1088.180885][T25559] ? __lock_acquire+0x7d10/0x7d10 [ 1088.186024][T25559] __se_sys_sendmsg+0x1bb/0x2a0 [ 1088.190889][T25559] ? __x64_sys_sendmsg+0x80/0x80 [ 1088.195849][T25559] ? lockdep_hardirqs_on+0x94/0x140 [ 1088.201095][T25559] do_syscall_64+0x4c/0xa0 [ 1088.205606][T25559] ? clear_bhb_loop+0x60/0xb0 [ 1088.210297][T25559] ? clear_bhb_loop+0x60/0xb0 [ 1088.214981][T25559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.220876][T25559] RIP: 0033:0x7f8f4659c629 [ 1088.225386][T25559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.245062][T25559] RSP: 002b:00007f8f47450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.253571][T25559] RAX: ffffffffffffffda RBX: 00007f8f46815fa0 RCX: 00007f8f4659c629 [ 1088.261632][T25559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1088.269602][T25559] RBP: 00007f8f47450090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.277573][T25559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.285715][T25559] R13: 00007f8f46816038 R14: 00007f8f46815fa0 R15: 00007ffce6adabc8 [ 1088.293967][T25559] [ 1088.608934][T25572] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1092.016274][T25596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7399'. [ 1093.664695][T25589] device syzkaller0 entered promiscuous mode [ 1096.611570][T25602] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1096.620729][T25602] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1096.636413][T25610] netlink: 'syz.2.7404': attribute type 10 has an invalid length. [ 1096.644875][T25610] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7404'. [ 1096.869368][T25624] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1100.282446][T25639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7413'. [ 1100.350644][T25632] device syzkaller0 entered promiscuous mode [ 1102.260705][T25674] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1106.807451][T25646] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7415'. [ 1106.816833][T25646] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1106.889122][T25668] device syzkaller0 entered promiscuous mode [ 1106.896411][T25679] netlink: 'syz.1.7433': attribute type 10 has an invalid length. [ 1106.918459][T25679] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7433'. [ 1107.774302][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7430'. [ 1109.523891][T25711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7434'. [ 1109.580887][T25711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1109.706759][T25712] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7435'. [ 1109.743605][T25712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1110.331107][T25725] device syzkaller0 entered promiscuous mode [ 1110.542213][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7444'. [ 1112.348816][T25741] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7442'. [ 1112.361033][T25741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1112.547812][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7445'. [ 1112.889998][T25768] device syzkaller0 entered promiscuous mode [ 1113.142734][T25779] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7454'. [ 1113.159514][T25779] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1113.266962][T25782] netlink: 'syz.2.7455': attribute type 21 has an invalid length. [ 1113.298224][T25782] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7455'. [ 1113.307415][T25782] netlink: 'syz.2.7455': attribute type 4 has an invalid length. [ 1113.328396][T25782] netlink: 'syz.2.7455': attribute type 5 has an invalid length. [ 1113.336451][T25782] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7455'. [ 1114.022627][T25803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1115.730343][T25789] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7456'. [ 1115.739550][T25789] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1115.755291][T25787] netlink: 'syz.0.7466': attribute type 10 has an invalid length. [ 1115.767355][T25787] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7466'. [ 1115.921473][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.928737][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.294207][T25821] FAULT_INJECTION: forcing a failure. [ 1116.294207][T25821] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.300524][T25800] device syzkaller0 entered promiscuous mode [ 1116.313475][T25821] CPU: 1 PID: 25821 Comm: syz.4.7462 Not tainted syzkaller #0 [ 1116.321057][T25821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1116.331393][T25821] Call Trace: [ 1116.334697][T25821] [ 1116.337639][T25821] dump_stack_lvl+0x188/0x24e [ 1116.342345][T25821] ? show_regs_print_info+0x12/0x12 [ 1116.347559][T25821] ? load_image+0x400/0x400 [ 1116.352065][T25821] ? mark_lock+0x94/0x320 [ 1116.356401][T25821] should_fail_ex+0x399/0x4d0 [ 1116.361543][T25821] should_failslab+0x5/0x20 [ 1116.366072][T25821] slab_pre_alloc_hook+0x59/0x310 [ 1116.371130][T25821] kmem_cache_alloc_node+0x5a/0x320 [ 1116.376361][T25821] ? __alloc_skb+0xfc/0x7e0 [ 1116.380903][T25821] __alloc_skb+0xfc/0x7e0 [ 1116.385270][T25821] tipc_msg_create+0x4b/0x4d0 [ 1116.389973][T25821] ? tipc_own_addr+0x45/0x2a0 [ 1116.394669][T25821] tipc_group_proto_xmit+0xcd/0x870 [ 1116.399977][T25821] tipc_group_delete+0x15b/0x4c0 [ 1116.404945][T25821] ? tipc_group_update_member+0x3c0/0x3c0 [ 1116.410694][T25821] ? tipc_group_self+0x22/0x1c0 [ 1116.415633][T25821] tipc_sk_leave+0x142/0x4d0 [ 1116.420245][T25821] ? __tipc_shutdown+0x1530/0x1530 [ 1116.425542][T25821] ? _local_bh_enable+0xa0/0xa0 [ 1116.430396][T25821] tipc_release+0x34d/0x2270 [ 1116.435079][T25821] ? tipc_sock_destruct+0x170/0x170 [ 1116.440376][T25821] sock_close+0xd5/0x240 [ 1116.444634][T25821] ? sock_mmap+0x90/0x90 [ 1116.448864][T25821] __fput+0x22c/0x920 [ 1116.452844][T25821] task_work_run+0x1d0/0x260 [ 1116.457430][T25821] ? task_work_cancel+0x220/0x220 [ 1116.462523][T25821] ? exit_to_user_mode_loop+0x3b/0x110 [ 1116.468001][T25821] exit_to_user_mode_loop+0xe6/0x110 [ 1116.473397][T25821] exit_to_user_mode_prepare+0xee/0x180 [ 1116.478979][T25821] syscall_exit_to_user_mode+0x16/0x40 [ 1116.484528][T25821] do_syscall_64+0x58/0xa0 [ 1116.488978][T25821] ? clear_bhb_loop+0x60/0xb0 [ 1116.493693][T25821] ? clear_bhb_loop+0x60/0xb0 [ 1116.498402][T25821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.504404][T25821] RIP: 0033:0x7fbcd959c629 [ 1116.508938][T25821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.528827][T25821] RSP: 002b:00007fbcda52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1116.537350][T25821] RAX: 0000000000000000 RBX: 00007fbcd9815fa0 RCX: 00007fbcd959c629 [ 1116.545341][T25821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1116.553338][T25821] RBP: 00007fbcda52c090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.561319][T25821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.569492][T25821] R13: 00007fbcd9816038 R14: 00007fbcd9815fa0 R15: 00007ffe96b5c618 [ 1116.577831][T25821] [ 1116.662225][T25810] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7459'. [ 1116.678465][T25810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1119.138349][T25836] netlink: 'syz.1.7469': attribute type 21 has an invalid length. [ 1119.146330][T25836] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7469'. [ 1119.161582][T25836] netlink: 'syz.1.7469': attribute type 4 has an invalid length. [ 1119.173762][T25836] netlink: 'syz.1.7469': attribute type 5 has an invalid length. [ 1119.227324][T25836] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7469'. [ 1119.267701][T25843] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7472'. [ 1119.294732][T25854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7475'. [ 1119.304095][T25843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1119.671672][T25864] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7476'. [ 1119.694234][T25864] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1119.738556][T25865] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7479'. [ 1119.825965][T25865] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1120.517869][T25880] netlink: 'syz.2.7481': attribute type 4 has an invalid length. [ 1120.581432][T25884] FAULT_INJECTION: forcing a failure. [ 1120.581432][T25884] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.631210][T25884] CPU: 0 PID: 25884 Comm: syz.0.7480 Not tainted syzkaller #0 [ 1120.638750][T25884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1120.648824][T25884] Call Trace: [ 1120.652124][T25884] [ 1120.655071][T25884] dump_stack_lvl+0x188/0x24e [ 1120.659777][T25884] ? show_regs_print_info+0x12/0x12 [ 1120.665093][T25884] ? load_image+0x400/0x400 [ 1120.669637][T25884] should_fail_ex+0x399/0x4d0 [ 1120.674352][T25884] should_failslab+0x5/0x20 [ 1120.678885][T25884] slab_pre_alloc_hook+0x59/0x310 [ 1120.683960][T25884] kmem_cache_alloc+0x56/0x2f0 [ 1120.688839][T25884] ? __nf_conntrack_alloc+0x99/0x380 [ 1120.694242][T25884] __nf_conntrack_alloc+0x99/0x380 [ 1120.699364][T25884] init_conntrack+0x25b/0x11a0 [ 1120.704143][T25884] ? early_drop+0x870/0x870 [ 1120.708648][T25884] ? nf_conntrack_find_get+0x670/0x670 [ 1120.714110][T25884] ? __siphash_unaligned+0x25b/0x3a0 [ 1120.719400][T25884] nf_conntrack_in+0xd3e/0x17b0 [ 1120.724260][T25884] ? nf_ct_pernet+0x270/0x270 [ 1120.728950][T25884] ? ipt_do_table+0x2bd/0x15a0 [ 1120.733736][T25884] ? get_random_u32+0x4cd/0x910 [ 1120.738613][T25884] ? read_lock_is_recursive+0x10/0x10 [ 1120.744001][T25884] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 1120.749641][T25884] ? get_random_u32+0x16b/0x910 [ 1120.754489][T25884] ? ipv4_conntrack_local+0x11f/0x200 [ 1120.760049][T25884] ? ipv4_conntrack_in+0x20/0x20 [ 1120.765005][T25884] nf_hook_slow+0xb9/0x200 [ 1120.769445][T25884] ? nf_hook+0x390/0x390 [ 1120.773701][T25884] nf_hook+0x224/0x390 [ 1120.777771][T25884] ? nf_hook+0x9e/0x390 [ 1120.781920][T25884] ? __ip_local_out+0x5d0/0x5d0 [ 1120.786765][T25884] ? nf_hook+0x390/0x390 [ 1120.791009][T25884] ? ip_fast_csum+0x1ea/0x2b0 [ 1120.795695][T25884] __ip_local_out+0x49c/0x5d0 [ 1120.800401][T25884] ? nf_hook+0x390/0x390 [ 1120.804999][T25884] ip_send_skb+0x48/0x1c0 [ 1120.809367][T25884] udp_send_skb+0xa88/0x1580 [ 1120.813968][T25884] udp_sendmsg+0x73f/0x23b0 [ 1120.818484][T25884] ? udp_sendmsg+0x23b0/0x23b0 [ 1120.823281][T25884] ? __lock_acquire+0x12f4/0x7d10 [ 1120.828310][T25884] ? udp_cmsg_send+0x350/0x350 [ 1120.833092][T25884] ? mark_lock+0x94/0x320 [ 1120.837429][T25884] ? __lock_acquire+0x12f4/0x7d10 [ 1120.842535][T25884] ? aa_label_sk_perm+0x456/0x5b0 [ 1120.847730][T25884] udpv6_sendmsg+0xa00/0x2420 [ 1120.852415][T25884] ? udpv6_sendmsg+0x2420/0x2420 [ 1120.857447][T25884] ? udp_v6_early_demux+0xf80/0xf80 [ 1120.862737][T25884] ? verify_lock_unused+0x140/0x140 [ 1120.867954][T25884] ? inet_send_prepare+0x58/0x260 [ 1120.873066][T25884] ? inet6_sendmsg+0x5b/0xd0 [ 1120.877741][T25884] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1120.882932][T25884] ____sys_sendmsg+0x5be/0x970 [ 1120.887710][T25884] ? __sys_sendmsg_sock+0x30/0x30 [ 1120.892780][T25884] ? __import_iovec+0x315/0x500 [ 1120.897632][T25884] ? import_iovec+0x6f/0xa0 [ 1120.902225][T25884] ___sys_sendmsg+0x2a2/0x360 [ 1120.906926][T25884] ? __sys_sendmsg+0x290/0x290 [ 1120.911720][T25884] ? trace_call_bpf+0xbf/0x6b0 [ 1120.916525][T25884] __se_sys_sendmsg+0x1bb/0x2a0 [ 1120.921383][T25884] ? __x64_sys_sendmsg+0x80/0x80 [ 1120.926420][T25884] ? lockdep_hardirqs_on+0x94/0x140 [ 1120.931622][T25884] do_syscall_64+0x4c/0xa0 [ 1120.936146][T25884] ? clear_bhb_loop+0x60/0xb0 [ 1120.940830][T25884] ? clear_bhb_loop+0x60/0xb0 [ 1120.945675][T25884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1120.951574][T25884] RIP: 0033:0x7fa18a39c629 [ 1120.956017][T25884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.975628][T25884] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.984152][T25884] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 1120.992294][T25884] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 1121.000262][T25884] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.008312][T25884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.016366][T25884] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1121.024360][T25884] [ 1121.197732][T25891] FAULT_INJECTION: forcing a failure. [ 1121.197732][T25891] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.219153][T25893] netlink: 'syz.3.7484': attribute type 10 has an invalid length. [ 1121.238550][T25891] CPU: 0 PID: 25891 Comm: syz.0.7486 Not tainted syzkaller #0 [ 1121.246272][T25891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.256451][T25891] Call Trace: [ 1121.260013][T25891] [ 1121.262959][T25891] dump_stack_lvl+0x188/0x24e [ 1121.267675][T25891] ? show_regs_print_info+0x12/0x12 [ 1121.272909][T25891] ? load_image+0x400/0x400 [ 1121.277710][T25891] ? __might_sleep+0xd0/0xd0 [ 1121.282325][T25891] ? __lock_acquire+0x7d10/0x7d10 [ 1121.287378][T25891] should_fail_ex+0x399/0x4d0 [ 1121.292091][T25891] should_failslab+0x5/0x20 [ 1121.296623][T25891] slab_pre_alloc_hook+0x59/0x310 [ 1121.301780][T25891] ? tomoyo_encode+0x27e/0x540 [ 1121.306587][T25891] __kmem_cache_alloc_node+0x4f/0x260 [ 1121.311994][T25891] ? tomoyo_encode+0x27e/0x540 [ 1121.316778][T25891] __kmalloc+0xa0/0x240 [ 1121.320955][T25891] tomoyo_encode+0x27e/0x540 [ 1121.325580][T25891] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1121.331340][T25891] ? tomoyo_path_number_perm+0x205/0x650 [ 1121.337091][T25891] tomoyo_path_number_perm+0x22f/0x650 [ 1121.342682][T25891] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1121.348165][T25891] ? ksys_write+0x1c0/0x250 [ 1121.352787][T25891] ? common_file_perm+0x171/0x1c0 [ 1121.357981][T25891] ? __fget_files+0x28/0x4b0 [ 1121.362597][T25891] ? __fget_files+0x28/0x4b0 [ 1121.367239][T25891] security_file_ioctl+0x6c/0xa0 [ 1121.372342][T25891] __se_sys_ioctl+0x48/0x170 [ 1121.377052][T25891] do_syscall_64+0x4c/0xa0 [ 1121.381510][T25891] ? clear_bhb_loop+0x60/0xb0 [ 1121.386203][T25891] ? clear_bhb_loop+0x60/0xb0 [ 1121.390956][T25891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1121.396862][T25891] RIP: 0033:0x7fa18a39c629 [ 1121.401293][T25891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.421180][T25891] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.429639][T25891] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 1121.437815][T25891] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 1121.445893][T25891] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.453889][T25891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.461980][T25891] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1121.469984][T25891] [ 1121.582566][T25889] device syzkaller0 entered promiscuous mode [ 1121.604786][T25893] netlink: 'syz.3.7484': attribute type 10 has an invalid length. [ 1121.605061][T25891] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1121.617494][T25896] netlink: 'syz.3.7484': attribute type 10 has an invalid length. [ 1123.658173][T25912] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1123.667237][T25912] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1123.810490][T25920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1124.094839][T25929] netlink: 'syz.0.7490': attribute type 21 has an invalid length. [ 1124.143848][T25929] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7490'. [ 1124.170079][T25929] netlink: 'syz.0.7490': attribute type 4 has an invalid length. [ 1124.231122][T25929] netlink: 'syz.0.7490': attribute type 5 has an invalid length. [ 1124.350693][T25929] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7490'. [ 1124.406270][T25927] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7494'. [ 1124.447613][T25927] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1125.316596][T25952] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7501'. [ 1125.359034][T25952] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1125.476777][T25956] device syzkaller0 entered promiscuous mode [ 1126.189320][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7507'. [ 1128.187017][T25964] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1128.197428][T25964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1128.348787][T25985] FAULT_INJECTION: forcing a failure. [ 1128.348787][T25985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.383265][T25985] CPU: 1 PID: 25985 Comm: syz.3.7511 Not tainted syzkaller #0 [ 1128.390790][T25985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1128.400954][T25985] Call Trace: [ 1128.404264][T25985] [ 1128.407219][T25985] dump_stack_lvl+0x188/0x24e [ 1128.411928][T25985] ? show_regs_print_info+0x12/0x12 [ 1128.417155][T25985] ? load_image+0x400/0x400 [ 1128.421678][T25985] ? __lock_acquire+0x7d10/0x7d10 [ 1128.426737][T25985] should_fail_ex+0x399/0x4d0 [ 1128.431634][T25985] _copy_from_user+0x2c/0x170 [ 1128.436335][T25985] __copy_msghdr+0x3b7/0x580 [ 1128.440963][T25985] ___sys_sendmsg+0x210/0x360 [ 1128.445677][T25985] ? __sys_sendmsg+0x290/0x290 [ 1128.450485][T25985] ? __lock_acquire+0x7d10/0x7d10 [ 1128.453348][T25993] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7512'. [ 1128.455634][T25985] __se_sys_sendmsg+0x1bb/0x2a0 [ 1128.455669][T25985] ? __x64_sys_sendmsg+0x80/0x80 [ 1128.474487][T25985] ? lockdep_hardirqs_on+0x94/0x140 [ 1128.479801][T25985] do_syscall_64+0x4c/0xa0 [ 1128.484325][T25985] ? clear_bhb_loop+0x60/0xb0 [ 1128.489020][T25985] ? clear_bhb_loop+0x60/0xb0 [ 1128.493719][T25985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.499748][T25985] RIP: 0033:0x7f09ab39c629 [ 1128.504180][T25985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.523811][T25985] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.532282][T25985] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 1128.536066][T25993] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1128.540254][T25985] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1128.540274][T25985] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.540285][T25985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.540296][T25985] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 1128.540321][T25985] [ 1128.703224][T25999] netlink: 'syz.2.7514': attribute type 21 has an invalid length. [ 1129.423674][T26017] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7518'. [ 1129.478355][T26017] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1129.673681][T26019] device syzkaller0 entered promiscuous mode [ 1129.720092][T26027] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7522'. [ 1129.801293][T26027] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1130.030250][T26037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7523'. [ 1132.802249][T26065] netlink: 'syz.4.7534': attribute type 25 has an invalid length. [ 1132.930482][T26073] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1132.940911][T26073] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1133.056062][T26078] FAULT_INJECTION: forcing a failure. [ 1133.056062][T26078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.141910][T26078] CPU: 0 PID: 26078 Comm: syz.2.7539 Not tainted syzkaller #0 [ 1133.149452][T26078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.159532][T26078] Call Trace: [ 1133.162825][T26078] [ 1133.165868][T26078] dump_stack_lvl+0x188/0x24e [ 1133.170581][T26078] ? show_regs_print_info+0x12/0x12 [ 1133.175804][T26078] ? load_image+0x400/0x400 [ 1133.180341][T26078] ? __lock_acquire+0x7d10/0x7d10 [ 1133.185395][T26078] should_fail_ex+0x399/0x4d0 [ 1133.190122][T26078] _copy_from_user+0x2c/0x170 [ 1133.194831][T26078] iovec_from_user+0x143/0x360 [ 1133.199701][T26078] __import_iovec+0x6d/0x500 [ 1133.204318][T26078] import_iovec+0x6f/0xa0 [ 1133.208668][T26078] ___sys_sendmsg+0x252/0x360 [ 1133.213459][T26078] ? __sys_sendmsg+0x290/0x290 [ 1133.218268][T26078] ? __lock_acquire+0x7d10/0x7d10 [ 1133.223350][T26078] __se_sys_sendmsg+0x1bb/0x2a0 [ 1133.228236][T26078] ? __x64_sys_sendmsg+0x80/0x80 [ 1133.233207][T26078] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.238516][T26078] do_syscall_64+0x4c/0xa0 [ 1133.242961][T26078] ? clear_bhb_loop+0x60/0xb0 [ 1133.247660][T26078] ? clear_bhb_loop+0x60/0xb0 [ 1133.252355][T26078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.258270][T26078] RIP: 0033:0x7f4e7c59c629 [ 1133.262708][T26078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.282433][T26078] RSP: 002b:00007f4e7d485028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.290959][T26078] RAX: ffffffffffffffda RBX: 00007f4e7c815fa0 RCX: 00007f4e7c59c629 [ 1133.298959][T26078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1133.307126][T26078] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.315118][T26078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.323109][T26078] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 1133.331126][T26078] [ 1134.448527][T26100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7549'. [ 1134.481010][T26101] FAULT_INJECTION: forcing a failure. [ 1134.481010][T26101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.568016][T26101] CPU: 1 PID: 26101 Comm: syz.2.7547 Not tainted syzkaller #0 [ 1134.575536][T26101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1134.585604][T26101] Call Trace: [ 1134.588882][T26101] [ 1134.591803][T26101] dump_stack_lvl+0x188/0x24e [ 1134.596483][T26101] ? show_regs_print_info+0x12/0x12 [ 1134.601680][T26101] ? load_image+0x400/0x400 [ 1134.606264][T26101] ? __lock_acquire+0x7d10/0x7d10 [ 1134.611289][T26101] ? snprintf+0xe5/0x140 [ 1134.615524][T26101] should_fail_ex+0x399/0x4d0 [ 1134.620219][T26101] _copy_to_user+0x2c/0x130 [ 1134.624867][T26101] simple_read_from_buffer+0xe3/0x150 [ 1134.630253][T26101] proc_fail_nth_read+0x1a6/0x220 [ 1134.635272][T26101] ? proc_fault_inject_write+0x310/0x310 [ 1134.640903][T26101] ? fsnotify_perm+0x248/0x550 [ 1134.645748][T26101] ? proc_fault_inject_write+0x310/0x310 [ 1134.651383][T26101] vfs_read+0x2de/0xa00 [ 1134.655542][T26101] ? kernel_read+0x1e0/0x1e0 [ 1134.660130][T26101] ? __fget_files+0x28/0x4b0 [ 1134.664716][T26101] ? __fget_files+0x28/0x4b0 [ 1134.669301][T26101] ? __fget_files+0x43d/0x4b0 [ 1134.673978][T26101] ? __fdget_pos+0x2ae/0x360 [ 1134.678563][T26101] ? ksys_read+0x71/0x250 [ 1134.682898][T26101] ksys_read+0x14c/0x250 [ 1134.687139][T26101] ? vfs_write+0xa30/0xa30 [ 1134.691560][T26101] ? lockdep_hardirqs_on+0x94/0x140 [ 1134.696752][T26101] do_syscall_64+0x4c/0xa0 [ 1134.701167][T26101] ? clear_bhb_loop+0x60/0xb0 [ 1134.705869][T26101] ? clear_bhb_loop+0x60/0xb0 [ 1134.710536][T26101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.716433][T26101] RIP: 0033:0x7f4e7c55cece [ 1134.720853][T26101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1134.740447][T26101] RSP: 002b:00007f4e7d484fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1134.748854][T26101] RAX: ffffffffffffffda RBX: 00007f4e7d4856c0 RCX: 00007f4e7c55cece [ 1134.756816][T26101] RDX: 000000000000000f RSI: 00007f4e7d4850a0 RDI: 0000000000000004 [ 1134.764783][T26101] RBP: 00007f4e7d485090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.772747][T26101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.780718][T26101] R13: 00007f4e7c816038 R14: 00007f4e7c815fa0 R15: 00007fffbc9b8908 [ 1134.788697][T26101] [ 1135.113157][T26102] device syzkaller0 entered promiscuous mode [ 1135.143012][T26109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7551'. [ 1137.922559][T26112] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1137.932126][T26119] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7555'. [ 1137.947109][T26119] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1138.052725][T26124] device syzkaller0 entered promiscuous mode [ 1138.085436][T26137] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7559'. [ 1138.106645][T26145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7562'. [ 1138.115374][T26137] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1138.124912][T26147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1140.494651][T26169] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7570'. [ 1140.569524][T26169] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1140.720715][T26174] netlink: 'syz.2.7572': attribute type 2 has an invalid length. [ 1140.746153][T26174] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.7572'. [ 1141.036621][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7575'. [ 1141.055919][T26172] device syzkaller0 entered promiscuous mode [ 1141.083071][T26179] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7573'. [ 1141.129341][T26179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1141.715236][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7580'. [ 1143.509479][T26216] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1143.546531][T26216] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1143.758759][T26230] netlink: 'syz.1.7586': attribute type 2 has an invalid length. [ 1143.775926][T26230] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.7586'. [ 1144.072989][T26234] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7589'. [ 1144.084879][T26234] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1144.103502][T26237] FAULT_INJECTION: forcing a failure. [ 1144.103502][T26237] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.166011][T26237] CPU: 1 PID: 26237 Comm: syz.3.7590 Not tainted syzkaller #0 [ 1144.173535][T26237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1144.183623][T26237] Call Trace: [ 1144.186913][T26237] [ 1144.189891][T26237] dump_stack_lvl+0x188/0x24e [ 1144.194614][T26237] ? show_regs_print_info+0x12/0x12 [ 1144.199928][T26237] ? load_image+0x400/0x400 [ 1144.204454][T26237] ? __might_sleep+0xd0/0xd0 [ 1144.209079][T26237] ? __lock_acquire+0x7d10/0x7d10 [ 1144.214255][T26237] should_fail_ex+0x399/0x4d0 [ 1144.218979][T26237] should_failslab+0x5/0x20 [ 1144.223506][T26237] slab_pre_alloc_hook+0x59/0x310 [ 1144.228555][T26237] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1144.234113][T26237] __kmem_cache_alloc_node+0x4f/0x260 [ 1144.239499][T26237] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1144.245054][T26237] __kmalloc+0xa0/0x240 [ 1144.249225][T26237] bpf_prog_test_run_skb+0x234/0x12a0 [ 1144.254690][T26237] ? __fget_files+0x28/0x4b0 [ 1144.259286][T26237] ? __fget_files+0x28/0x4b0 [ 1144.263886][T26237] ? __fget_files+0x43d/0x4b0 [ 1144.268838][T26237] ? cpu_online+0xa0/0xa0 [ 1144.273168][T26237] bpf_prog_test_run+0x31e/0x390 [ 1144.278120][T26237] __sys_bpf+0x62b/0x780 [ 1144.282375][T26237] ? bpf_link_show_fdinfo+0x380/0x380 [ 1144.287764][T26237] ? lock_chain_count+0x20/0x20 [ 1144.292631][T26237] __x64_sys_bpf+0x78/0x90 [ 1144.297067][T26237] do_syscall_64+0x4c/0xa0 [ 1144.301493][T26237] ? clear_bhb_loop+0x60/0xb0 [ 1144.306180][T26237] ? clear_bhb_loop+0x60/0xb0 [ 1144.310865][T26237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.316786][T26237] RIP: 0033:0x7f09ab39c629 [ 1144.321220][T26237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.340934][T26237] RSP: 002b:00007f09a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.349453][T26237] RAX: ffffffffffffffda RBX: 00007f09ab615fa0 RCX: 00007f09ab39c629 [ 1144.357695][T26237] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 1144.365671][T26237] RBP: 00007f09a95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.373741][T26237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.381712][T26237] R13: 00007f09ab616038 R14: 00007f09ab615fa0 R15: 00007ffdbc41ab48 [ 1144.389788][T26237] [ 1144.578656][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7593'. [ 1145.655725][T26266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7608'. [ 1145.671016][T26256] device syzkaller0 entered promiscuous mode [ 1145.753603][T26264] device syzkaller0 entered promiscuous mode [ 1150.538199][T26285] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7604'. [ 1150.547286][T26285] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1150.578712][T26297] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7607'. [ 1150.587843][T26297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1150.858973][T26309] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7610'. [ 1150.966079][T26309] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1151.350987][T26324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7615'. [ 1151.874251][T26327] device syzkaller0 entered promiscuous mode [ 1154.075791][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7638'. [ 1155.458226][T26366] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7633'. [ 1155.467330][T26366] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1155.679166][T26390] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7652'. [ 1155.724424][T26390] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1157.947618][T26413] device syzkaller0 entered promiscuous mode [ 1158.094891][T26425] device syzkaller0 entered promiscuous mode [ 1158.198674][T26435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7654'. [ 1158.493285][T26440] netlink: 'syz.3.7657': attribute type 11 has an invalid length. [ 1158.508352][T26440] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1159.313488][T26439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1162.378174][T26440] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1162.387187][T26440] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1162.410146][T26443] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7658'. [ 1162.463748][T26443] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1162.518351][T26462] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7664'. [ 1162.560332][T26462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1163.348566][T26491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7675'. [ 1163.400071][T26482] device syzkaller0 entered promiscuous mode [ 1165.791534][T26506] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7679'. [ 1165.800798][T26506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1165.897073][T26497] device syzkaller0 entered promiscuous mode [ 1167.274135][T26548] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.7691'. [ 1168.613220][T26527] device syzkaller0 entered promiscuous mode [ 1168.645938][T26548] netlink: 'syz.1.7691': attribute type 13 has an invalid length. [ 1168.666069][T26548] netlink: 'syz.1.7691': attribute type 58 has an invalid length. [ 1168.674924][T26548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7691'. [ 1168.686981][T26551] tipc: Started in network mode [ 1168.693198][T26551] tipc: Node identity 9215a268, cluster identity 4711 [ 1168.701198][T26551] tipc: Node number set to 2450891368 [ 1168.707669][T26550] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1168.724008][T26550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1171.832983][T26574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1171.842311][T26574] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1171.983735][T26591] device syzkaller0 entered promiscuous mode [ 1172.196869][T26598] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1172.208478][T26598] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1172.214236][T26610] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7706'. [ 1172.868818][T26624] FAULT_INJECTION: forcing a failure. [ 1172.868818][T26624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.889703][T26624] CPU: 0 PID: 26624 Comm: syz.1.7715 Not tainted syzkaller #0 [ 1172.897320][T26624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.907578][T26624] Call Trace: [ 1172.910872][T26624] [ 1172.913816][T26624] dump_stack_lvl+0x188/0x24e [ 1172.918529][T26624] ? show_regs_print_info+0x12/0x12 [ 1172.923770][T26624] ? load_image+0x400/0x400 [ 1172.928445][T26624] ? __lock_acquire+0x7d10/0x7d10 [ 1172.933510][T26624] ? snprintf+0xe5/0x140 [ 1172.937776][T26624] should_fail_ex+0x399/0x4d0 [ 1172.942479][T26624] _copy_to_user+0x2c/0x130 [ 1172.946987][T26624] simple_read_from_buffer+0xe3/0x150 [ 1172.952454][T26624] proc_fail_nth_read+0x1a6/0x220 [ 1172.957485][T26624] ? proc_fault_inject_write+0x310/0x310 [ 1172.963117][T26624] ? fsnotify_perm+0x248/0x550 [ 1172.967909][T26624] ? proc_fault_inject_write+0x310/0x310 [ 1172.973559][T26624] vfs_read+0x2de/0xa00 [ 1172.977755][T26624] ? kernel_read+0x1e0/0x1e0 [ 1172.982388][T26624] ? __fget_files+0x28/0x4b0 [ 1172.986997][T26624] ? __fget_files+0x28/0x4b0 [ 1172.991596][T26624] ? __fget_files+0x43d/0x4b0 [ 1172.996299][T26624] ? __fdget_pos+0x2ae/0x360 [ 1173.000911][T26624] ? ksys_read+0x71/0x250 [ 1173.005243][T26624] ksys_read+0x14c/0x250 [ 1173.009487][T26624] ? vfs_write+0xa30/0xa30 [ 1173.013917][T26624] ? lockdep_hardirqs_on+0x94/0x140 [ 1173.019120][T26624] do_syscall_64+0x4c/0xa0 [ 1173.023537][T26624] ? clear_bhb_loop+0x60/0xb0 [ 1173.028210][T26624] ? clear_bhb_loop+0x60/0xb0 [ 1173.032882][T26624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.038771][T26624] RIP: 0033:0x7f8f4655cece [ 1173.043193][T26624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1173.062798][T26624] RSP: 002b:00007f8f4744ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1173.071297][T26624] RAX: ffffffffffffffda RBX: 00007f8f474506c0 RCX: 00007f8f4655cece [ 1173.079267][T26624] RDX: 000000000000000f RSI: 00007f8f474500a0 RDI: 0000000000000004 [ 1173.087323][T26624] RBP: 00007f8f47450090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.095389][T26624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.103479][T26624] R13: 00007f8f46816038 R14: 00007f8f46815fa0 R15: 00007ffce6adabc8 [ 1173.111574][T26624] [ 1175.127600][T26596] netlink: 'syz.3.7706': attribute type 13 has an invalid length. [ 1175.138356][T26596] netlink: 'syz.3.7706': attribute type 58 has an invalid length. [ 1175.146382][T26596] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7706'. [ 1175.156325][T26603] tipc: Started in network mode [ 1175.171837][T26603] tipc: Node identity 9215a268, cluster identity 4711 [ 1175.192083][T26603] tipc: Node number set to 2450891368 [ 1175.206669][T26639] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7720'. [ 1175.218287][T26639] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1175.314130][T26632] device syzkaller0 entered promiscuous mode [ 1175.384996][T26647] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7723'. [ 1175.431048][T26647] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1177.365245][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.372201][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.063508][T26661] netlink: 'syz.4.7726': attribute type 39 has an invalid length. [ 1178.134195][T26660] netlink: 'syz.1.7727': attribute type 21 has an invalid length. [ 1178.151189][T26660] netlink: 'syz.1.7727': attribute type 2 has an invalid length. [ 1178.160401][T26660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1178.175654][T26666] IPv6: Can't replace route, no match found [ 1178.223896][T26677] device syzkaller0 entered promiscuous mode [ 1178.383660][T26688] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1178.414699][T26688] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1179.338124][T26710] FAULT_INJECTION: forcing a failure. [ 1179.338124][T26710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.389141][T26710] CPU: 0 PID: 26710 Comm: syz.0.7742 Not tainted syzkaller #0 [ 1179.396774][T26710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.406883][T26710] Call Trace: [ 1179.410198][T26710] [ 1179.413259][T26710] dump_stack_lvl+0x188/0x24e [ 1179.417960][T26710] ? show_regs_print_info+0x12/0x12 [ 1179.423210][T26710] ? load_image+0x400/0x400 [ 1179.427858][T26710] ? __lock_acquire+0x7d10/0x7d10 [ 1179.432954][T26710] ? snprintf+0xe5/0x140 [ 1179.437259][T26710] should_fail_ex+0x399/0x4d0 [ 1179.442008][T26710] _copy_to_user+0x2c/0x130 [ 1179.446567][T26710] simple_read_from_buffer+0xe3/0x150 [ 1179.452003][T26710] proc_fail_nth_read+0x1a6/0x220 [ 1179.457090][T26710] ? proc_fault_inject_write+0x310/0x310 [ 1179.462802][T26710] ? fsnotify_perm+0x248/0x550 [ 1179.467616][T26710] ? proc_fault_inject_write+0x310/0x310 [ 1179.473307][T26710] vfs_read+0x2de/0xa00 [ 1179.477531][T26710] ? kernel_read+0x1e0/0x1e0 [ 1179.482186][T26710] ? __fget_files+0x28/0x4b0 [ 1179.486834][T26710] ? __fget_files+0x28/0x4b0 [ 1179.491491][T26710] ? __fget_files+0x43d/0x4b0 [ 1179.496253][T26710] ? __fdget_pos+0x2ae/0x360 [ 1179.500880][T26710] ? ksys_read+0x71/0x250 [ 1179.505249][T26710] ksys_read+0x14c/0x250 [ 1179.509515][T26710] ? vfs_write+0xa30/0xa30 [ 1179.513955][T26710] ? lockdep_hardirqs_on+0x94/0x140 [ 1179.519169][T26710] do_syscall_64+0x4c/0xa0 [ 1179.523598][T26710] ? clear_bhb_loop+0x60/0xb0 [ 1179.528297][T26710] ? clear_bhb_loop+0x60/0xb0 [ 1179.532989][T26710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.538899][T26710] RIP: 0033:0x7fa18a35cece [ 1179.543326][T26710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.563033][T26710] RSP: 002b:00007fa18b2aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1179.571465][T26710] RAX: ffffffffffffffda RBX: 00007fa18b2ab6c0 RCX: 00007fa18a35cece [ 1179.579447][T26710] RDX: 000000000000000f RSI: 00007fa18b2ab0a0 RDI: 0000000000000006 [ 1179.587422][T26710] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.595482][T26710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.603557][T26710] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1179.611666][T26710] [ 1180.227477][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7747'. [ 1181.517585][T26700] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7740'. [ 1181.527629][T26700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1181.550176][T26715] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 1181.556220][T26719] netlink: 'syz.3.7745': attribute type 10 has an invalid length. [ 1181.578129][T26719] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7745'. [ 1181.784718][T26737] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1181.826954][T26737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1182.405558][T26758] netlink: 'syz.0.7760': attribute type 10 has an invalid length. [ 1182.491223][T26758] team0: Device hsr_slave_0 failed to register rx_handler [ 1182.576126][T26760] netlink: 'syz.0.7760': attribute type 1 has an invalid length. [ 1182.618235][T26760] netlink: 'syz.0.7760': attribute type 3 has an invalid length. [ 1182.650998][T26760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7760'. [ 1182.824307][T26775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7765'. [ 1183.081420][T26767] device syzkaller0 entered promiscuous mode [ 1183.813514][T26794] FAULT_INJECTION: forcing a failure. [ 1183.813514][T26794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.826814][T26794] CPU: 1 PID: 26794 Comm: syz.0.7771 Not tainted syzkaller #0 [ 1183.834532][T26794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1183.844719][T26794] Call Trace: [ 1183.848354][T26794] [ 1183.851293][T26794] dump_stack_lvl+0x188/0x24e [ 1183.855975][T26794] ? show_regs_print_info+0x12/0x12 [ 1183.861256][T26794] ? load_image+0x400/0x400 [ 1183.865757][T26794] ? __lock_acquire+0x7d10/0x7d10 [ 1183.870879][T26794] should_fail_ex+0x399/0x4d0 [ 1183.875565][T26794] _copy_from_user+0x2c/0x170 [ 1183.880363][T26794] iovec_from_user+0x143/0x360 [ 1183.885150][T26794] __import_iovec+0x6d/0x500 [ 1183.889758][T26794] import_iovec+0x6f/0xa0 [ 1183.894174][T26794] ___sys_sendmsg+0x252/0x360 [ 1183.898879][T26794] ? __sys_sendmsg+0x290/0x290 [ 1183.903789][T26794] ? trace_call_bpf+0xbf/0x6b0 [ 1183.908659][T26794] __se_sys_sendmsg+0x1bb/0x2a0 [ 1183.913532][T26794] ? __x64_sys_sendmsg+0x80/0x80 [ 1183.918478][T26794] ? lockdep_hardirqs_on+0x94/0x140 [ 1183.923681][T26794] do_syscall_64+0x4c/0xa0 [ 1183.928115][T26794] ? clear_bhb_loop+0x60/0xb0 [ 1183.932813][T26794] ? clear_bhb_loop+0x60/0xb0 [ 1183.937507][T26794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.943402][T26794] RIP: 0033:0x7fa18a39c629 [ 1183.947820][T26794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.967439][T26794] RSP: 002b:00007fa18b2ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.975854][T26794] RAX: ffffffffffffffda RBX: 00007fa18a615fa0 RCX: 00007fa18a39c629 [ 1183.983833][T26794] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1183.991923][T26794] RBP: 00007fa18b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.999896][T26794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.007880][T26794] R13: 00007fa18a616038 R14: 00007fa18a615fa0 R15: 00007ffdf46b9478 [ 1184.015894][T26794] [ 1185.714041][T26786] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7768'. [ 1185.723347][T26786] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1185.740209][T26800] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7773'. [ 1185.784740][T26800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1186.083593][T26817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7778'. [ 1186.115766][T26818] netlink: 'syz.4.7780': attribute type 10 has an invalid length. [ 1186.292336][T26818] team0: Device hsr_slave_0 failed to register rx_handler [ 1186.292486][T26821] netlink: 'syz.4.7780': attribute type 1 has an invalid length. [ 1186.312180][T26821] netlink: 'syz.4.7780': attribute type 3 has an invalid length. [ 1186.343939][T26821] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7780'. [ 1186.416936][T26820] netlink: 'syz.3.7781': attribute type 10 has an invalid length. [ 1186.436618][T26820] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7781'. [ 1186.608843][T26829] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7783'. [ 1186.636331][T26829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1186.786835][T26833] netlink: 'syz.1.7784': attribute type 10 has an invalid length. [ 1187.166533][T26843] device syzkaller0 entered promiscuous mode [ 1187.647796][T26867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7796'. [ 1188.044289][T26876] netlink: 'syz.1.7798': attribute type 1 has an invalid length. [ 1188.062346][T26876] netlink: 'syz.1.7798': attribute type 3 has an invalid length. [ 1188.075651][T26876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1189.892946][T26874] netlink: 'syz.1.7798': attribute type 10 has an invalid length. [ 1189.911398][T26874] team0: Port device hsr_slave_0 added [ 1189.917478][T26868] netlink: 'syz.0.7797': attribute type 21 has an invalid length. [ 1189.933461][T26868] netlink: 'syz.0.7797': attribute type 6 has an invalid length. [ 1189.958655][T26868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7797'. [ 1189.976864][T26880] netlink: 'syz.2.7801': attribute type 10 has an invalid length. [ 1190.114251][T26885] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7804'. [ 1190.159080][T26885] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1190.859109][T26914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7813'. [ 1191.516113][T26924] device syzkaller0 entered promiscuous mode [ 1192.370080][T26934] netlink: 'syz.4.7816': attribute type 21 has an invalid length. [ 1192.393533][T26934] netlink: 'syz.4.7816': attribute type 6 has an invalid length. [ 1192.410773][T26934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1193.335849][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7829'. [ 1194.883175][T26940] netlink: 'syz.0.7820': attribute type 10 has an invalid length. [ 1196.506917][T27004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7843'. Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe