last executing test programs: 31.563885286s ago: executing program 1 (id=5879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_ext={0x1c, 0xd, &(0x7f0000001d80)=@raw=[@alu={0x0, 0x0, 0x5, 0x5, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x4, 0xa, 0xa, 0xffffffffffffffff, 0x1c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000001e80)='GPL\x00', 0x602, 0x18, &(0x7f0000001ec0)=""/24, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x16a8, r0, 0x0, &(0x7f0000001f80)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000840), 0x8, 0x54, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB="03000000000000c1b62b91cd2800400000000000000000000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2dadc53178930", @ANYRES32=r2, @ANYRES32, @ANYBLOB="feffffff0500"/21], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x11, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3a56f4fffeffffff"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r2, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, r1, 0x3, 0x0, &(0x7f0000000c00)=[{0x4, 0x1, 0x6, 0x2}, {0x2, 0x1, 0x1}, {0x3, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8818, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x80, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2953}, 0x94) recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000100)}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x8000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002080)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0d0000000000000000000023a611b06e48ca90ce44d59050a38cb5995806d2365cc7647af3aec0ec2b8a5d7cea955e8953c6b37da49ed5fbcce2dd7abc03794151287f6e16f576886250471132f8f148237959960d120154b489c93d50ec028d16c1cdfecd42ff4b6216c0f669cc", @ANYRES32, @ANYBLOB, @ANYRES64=0x0, @ANYRES16=r7, @ANYRES16=r9], 0x20) 30.109304272s ago: executing program 1 (id=5889): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a80035002000014003", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 29.888156324s ago: executing program 1 (id=5892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000180"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 29.850430525s ago: executing program 2 (id=5893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000180"], 0x50) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 29.787780979s ago: executing program 3 (id=5894): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c58650013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 29.703777143s ago: executing program 3 (id=5896): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0x1}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$sock(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=[@txtime={{0x18, 0x1, 0x3d, 0x10}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x913f}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}], 0x90}, 0x8000) setsockopt$sock_attach_bpf(r4, 0x6, 0x24, &(0x7f0000000000)=r5, 0xff7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x21, 0xc4, &(0x7f0000000000)="8c4010717c840f2d6aeaaa7b50b754ed86a19d847df9d6267a17ced0237ac6ca06", &(0x7f0000000040)=""/196, 0x100, 0x0, 0xe7, 0xea, &(0x7f0000000140)="7d7fe49a0d2ef8b78081020d50af562fcd02410b0d51d2a9aa2a22e8774fbc5bd56f1fcb3e32307106aa8e55be03449aefc554887d35b2da527a7920213360567ee0e5dfa481505b4021861a9295f17b878eb7964056319a31980558326d611a526ec812072d72049ec4dbbf5274fb6bf8be7a5e22d03be01591faab4944cc5d65719bfe2343e2d69464276bf5cf8e66b7ca9996af102cc2979ffbd3b23d6791195683d179e0777cf9d45d579e85b35df14eee9c400cc9a457e1ff58c406d2f8c47f25cd9e22606828361bb0477b5ab6150e205bd2c02638c2555bdc8abd5dde36a77556435405", &(0x7f0000000240)="575df87635e37f017cd5f07d9488070a8cf7eb741f7b6839bf29038f6885bbd4304c279f6f75d1c5521bfdc5735772a6d201739640798dfe4eb928126154bcc83eb2d94a6fffe723c5f5f1df1da86263bd2836669e597b4c8e0f452717518c555a56b5ea1f8617ef6225958d5b9cf7db147d7482e6c977814b5d0cb8e3735e83b8c8a1b2da46d7c1ee7e4ecc5878afba60c59858bf545d63d6f36cbaf3f4b0cc2fb7d0bdf3d01aea11051a8b6433e31e15547958e0327cc0476f2d3dd6b093edca3001cfb4e792cdd08122e4fddb16671884fb7a4740f060788fb4aa953d0608f5c7fc226a21fbee0ce8", 0x4, 0x0, 0x4}, 0x50) r7 = socket$kcm(0x22, 0x3, 0x0) close(r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu '], 0xb) sendmsg$kcm(r4, &(0x7f0000001880)={&(0x7f00000003c0)=@ax25={{0x3, @null, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000440)="258452b0eb09f8813412689afef71886700ec3cd907c52f8613b2a1b4df4d2092b696472cb7917cc7eb1c5553cae8b8eca998fe564ea33285c559b2753d5aa6692765d177f88ded4f60689181f4553cdc00a5ad6847090be2dc2d19c05fc8a70538e44db1efae9652ccbb2b4ccb88c59aede628d9d806b2f185d0db0b5f78d2cb17e3d5f233d0f1ec8ddf3ae19b1ec54291f95456e29ec50", 0x98}, {&(0x7f0000000500)="72b100c9b5866be6a5546a38a7e96bd367c133", 0x13}, {&(0x7f0000000540)="5ed708499845fd9e62ea06565ae0d7af94e99ba0f1276bf9f7e63ffe6abe9b5fef8babcf01b33f0bc87fcf9397ec2f2c44660016a82db0e3d71230512338667ba408e3c127e472a02e4710a55b45db9935f788496b8ae20fee4e36987e2e68a4ee28a992eb62bd87070a2d1923c4b6a9d077eb04ab2c9a73bbf23f296e50a4c952a226c72656a18adc8ffcfcb105cee2cf2604cfbb472b9e92391a28d0ab9ae426ff65210c7fc9491682f252df6f565d299015aab4bdb75e9d37a26158178836c6e5b782f0fb", 0xc6}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="ada3efca15c09e35cca8ac1a41eeede7b210f0d22b819f7feb", 0x19}, {&(0x7f0000001900)="3e328080e0c31e07e4935d6789fa0d6b400a6e575904df6a25712a750f15764f838e13752b83b3079a9398b512f02f94629cd320d9fc29c8ac962021eb9edb932298fd25305ad65cfdfce1aaaa1b5034f472be21bae388b3825e51af6f847525532c3f10cc9d6fd91a7f3813ba02d7fb744719451f5e7837b85f844bc5171fb36792e50b0e0f27754d2fb682d926f11365f79659f8330e6cc16f6fa817e6a0f3dfa693fdb14b6615bd0862dfea47aefb64c9c81c751af7bef00ed81ea419ec286d8c02bd639db27e76bed7efb91d1ec438f24e62e16d03eb91061fbef3975c678a0c57a2107190a71f23da", 0xdb}], 0x6, &(0x7f0000001800)=ANY=[], 0xffffffffffffff96}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f0000000340)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) 29.659606776s ago: executing program 1 (id=5897): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 29.599888928s ago: executing program 2 (id=5899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000180"], 0x50) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 29.543399621s ago: executing program 0 (id=5900): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a80035002000014003", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 29.303755834s ago: executing program 2 (id=5901): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r6 = openat$cgroup_pressure(r0, &(0x7f0000000580)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f00000005c0)={'full', 0x20, 0x7, 0x20, 0x80000001}, 0x2f) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) 29.303035814s ago: executing program 3 (id=5902): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0xf8, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474b", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000940)="76a2736c6eae8e740b45f1857d5c074f12f9de6ca24c280272e3a3f88b582385fab5c3e880bbe925b58ef07585831d0d9d82ff63f00412ec0961a706ec37005dcc9d89b53d2272ac801629ceaaf3049c2999ed73f4dc6e5407a892bcbade7f3259c3782fe664b51a8a0d88f7c3f84a2c0c8738bdf4705214b6fadc546347968ced6804c0aa7800edf34b5c321e92cd324764ec6a3d259650871135d3e7a99f682ca0e1d7861df8d2c32e260be016f3091ecb92f1a8625055a2d9334dbbb9acba2b8dc4c0b5a20f6ddc846406d1f11304ae9bab72eb2d56c60796b6cab96f2a8722a80bf2a8", 0xe5}, {&(0x7f0000000a40)="fba9823815baeac9cd836be296768f996ceabc80a9862d35806032442a259e806384fdd66c71d3e44c94ac527ef8afea77071028de94f6d7f700a60702215da89a608ab59e49f6568dd8ef72be71e901110708fde97d2601f8054fb17822e29f6423bf2c8cc26bba3e09032eec7452f7d5d638e3e1999c761ccfa8d0f43a11", 0x7f}, {&(0x7f0000000ac0)="1ea4e1a510c3d0439456901ceee90707585e9a253d31096745f1203475f6bd59b6f48b3544aaf06c051f2380202b36d1d598e3744f38341e42989284ee62eec3399d1ef64d383a1c763ea583b8", 0x4d}], 0x3, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0x8, [{@private=0xa010101, 0x5}, {@broadcast, 0x80}, {@private=0xa010101, 0x6}]}, @timestamp={0x44, 0x1c, 0x69, 0x0, 0xb, [0x5, 0x8, 0x11, 0x1, 0x4, 0x401]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0xd, [0x12, 0x3, 0x80000001, 0xfffff274, 0xb0e, 0x8f, 0xfffffffb, 0x3, 0xfffffff9, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4}, @end, @end, @generic={0x83, 0x5, "ca36f6"}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x108}, 0x48041) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18fefffffe0f0000000000000400000000181aae5c", @ANYRES32=r1, @ANYBLOB="000000000000000018140000", @ANYRES32, @ANYBLOB="00000000000000007e1708000100008018180000", @ANYRES32, @ANYBLOB="0000000000000000185100000500000000000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x68, &(0x7f0000000440)=""/104, 0x41100, 0x48, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x5, 0x4, 0xb}, {0x0, 0x1, 0x6}, {0x4, 0x4, 0xb, 0x3}, {0x1, 0x3, 0x7, 0x6}], 0x10, 0x1352}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.301727084s ago: executing program 0 (id=5909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000180"], 0x50) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 29.226711678s ago: executing program 3 (id=5903): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x5, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8100, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x20000050) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a", 0xa}], 0x1}, 0x4000800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r2, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x42, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000f80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 29.117492134s ago: executing program 1 (id=5904): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xa4, 0x8000}, 0x540c, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000023c0)=ANY=[@ANYBLOB='1-2:'], 0x31) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 29.024116248s ago: executing program 0 (id=5905): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_ext={0x1c, 0xd, &(0x7f0000002080)=ANY=[@ANYBLOB="5075f8fffcffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000faffffff4daaffff1c00000018120000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000001e80)='GPL\x00', 0x602, 0x18, &(0x7f0000001ec0)=""/24, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x16a8, r0, 0x0, &(0x7f0000001f80)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000840), 0x8, 0x54, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB="03000000000000c1b62b91cd2800400000000000000000000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2dadc53178930", @ANYRES32=r2, @ANYRES32, @ANYBLOB="feffffff0500"/21], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x11, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3a56f4fffeffffff"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r2, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, r1, 0x3, 0x0, &(0x7f0000000c00)=[{0x4, 0x1, 0x6, 0x2}, {0x2, 0x1, 0x1}, {0x3, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000ac0)="162e6fb9b77c27f1aea78d1db2e02068193cf8d948fdf272b26f0ac0414cf8bf4e42e7a723e4fcd8b7d34be4097835fd53756a6a3b6327f2c0a9b21f0aa844806edd8333d110a22fd7fe8eafecec7638bfe5fde33aa58ad3c52feec82893699bd57674fed141bbafb6e7b1636e04095ea5a4630ce4831769cd38095644b01bf72af3934b986f3671bad7559f8a7a95c239b78d1c4c152f5dfbdee20ae796a8", 0x9f}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8818, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x80, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYRESDEC=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2953}, 0x94) recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000100)}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 28.969722842s ago: executing program 3 (id=5906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000180"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 27.759291614s ago: executing program 1 (id=5907): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8915, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x4004, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x98001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1d, 0x0, 0x3d) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8902, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x4, 0x0, 0x100, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 27.684191558s ago: executing program 0 (id=5908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000180"], 0x50) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 27.683840508s ago: executing program 2 (id=5910): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a80035002000014003", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 27.616837462s ago: executing program 3 (id=5911): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x18, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) r2 = socket$kcm(0x11, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}, 0xc040005) sendmsg$kcm(r2, 0x0, 0x4000080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x7d}, 0x100c, 0x7, 0x0, 0x9, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2a121, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000e80), 0x1}, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000001940)="4aa8477184a1cda20a6a0e11bcc3c555be4bf2a8a81248fd2c337965e5429e8419478143ce06c46753e8aabedbd67dd652eaa6f22331a6ac0141153d0ec349f19a82ced47f44de1d12d6d131d6c6af675b16a3d0a1444597d25b8b3a509492", 0x20071, r5, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)=""/61, 0x187, 0x3d, 0x0, 0x5}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 27.510838587s ago: executing program 2 (id=5912): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0xf8, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474b", 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000940)="76a2736c6eae8e740b45f1857d5c074f12f9de6ca24c280272e3a3f88b582385fab5c3e880bbe925b58ef07585831d0d9d82ff63f00412ec0961a706ec37005dcc9d89b53d2272ac801629ceaaf3049c2999ed73f4dc6e5407a892bcbade7f3259c3782fe664b51a8a0d88f7c3f84a2c0c8738bdf4705214b6fadc546347968ced6804c0aa7800edf34b5c321e92cd324764ec6a3d259650871135d3e7a99f682ca0e1d7861df8d2c32e260be016f3091ecb92f1a8625055a2d9334dbbb9acba2b8dc4c0b5a20f6ddc846406d1f11304ae9bab72eb2d56c60796b6cab96f2a8722a80bf2a8", 0xe5}, {&(0x7f0000000a40)="fba9823815baeac9cd836be296768f996ceabc80a9862d35806032442a259e806384fdd66c71d3e44c94ac527ef8afea77071028de94f6d7f700a60702215da89a608ab59e49f6568dd8ef72be71e901110708fde97d2601f8054fb17822e29f6423bf2c8cc26bba3e09032eec7452f7d5d638e3e1999c761ccfa8d0f43a11", 0x7f}, {&(0x7f0000000ac0)="1ea4e1a510c3d0439456901ceee90707585e9a253d31096745f1203475f6bd59b6f48b3544aaf06c051f2380202b36d1d598e3744f38341e42989284ee62eec3399d1ef64d383a1c763ea583b8", 0x4d}], 0x3, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0x8, [{@private=0xa010101, 0x5}, {@broadcast, 0x80}, {@private=0xa010101, 0x6}]}, @timestamp={0x44, 0x1c, 0x69, 0x0, 0xb, [0x5, 0x8, 0x11, 0x1, 0x4, 0x401]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0xd, [0x12, 0x3, 0x80000001, 0xfffff274, 0xb0e, 0x8f, 0xfffffffb, 0x3, 0xfffffff9, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4}, @end, @end, @generic={0x83, 0x5, "ca36f6"}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x108}, 0x48041) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18fefffffe0f0000000000000400000000181aae5c", @ANYRES32=r2, @ANYBLOB="000000000000000018140000", @ANYRES32, @ANYBLOB="00000000000000007e1708000100008018180000", @ANYRES32, @ANYBLOB="0000000000000000185100000500000000000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x68, &(0x7f0000000440)=""/104, 0x41100, 0x48, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x5, 0x4, 0xb}, {0x0, 0x1, 0x6}, {0x4, 0x4, 0xb, 0x3}, {0x1, 0x3, 0x7, 0x6}], 0x10, 0x1352}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.388062974s ago: executing program 0 (id=5913): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x800, 0xc8, 0xffff, 0x7, 0x7fffffff, 0xfffffff8, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000fe4133c63afe39b936ffff79a4f0ff00000000b7060000ffffff1d64050000000000650404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22e0ee00000000000000080000000000007fc5f603ff65ec5deb004298f479a79d93014b8e7781c2"], 0xfdef) 27.387316894s ago: executing program 2 (id=5914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000180"], 0x50) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16.396258435s ago: executing program 0 (id=5915): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x5, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8100, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x20000050) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a", 0xa}], 0x1}, 0x4000800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r2, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x42, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000f80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.617308435s ago: executing program 32 (id=5915): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x5, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8100, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x20000050) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a", 0xa}], 0x1}, 0x4000800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r2, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x42, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000f80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 33 (id=5907): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8915, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x4004, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x98001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1d, 0x0, 0x3d) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8902, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x4, 0x0, 0x100, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): arsing attributes in process `syz.1.4935'. [ 928.512977][T20955] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4937'. [ 928.618631][T20957] netlink: 'syz.2.4936': attribute type 8 has an invalid length. [ 928.637881][T20957] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.4936'. [ 928.687357][ T7229] wlan1: Trigger new scan to find an IBSS to join [ 928.917890][ T5780] Bluetooth: hci3: command tx timeout [ 928.990607][T20966] netlink: 'syz.2.4939': attribute type 1 has an invalid length. [ 929.001504][T20966] netlink: 'syz.2.4939': attribute type 4 has an invalid length. [ 929.009986][T20966] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4939'. [ 930.297571][T21005] netlink: 'syz.2.4949': attribute type 1 has an invalid length. [ 930.305380][T21005] netlink: 'syz.2.4949': attribute type 4 has an invalid length. [ 930.314403][T21005] __nla_validate_parse: 3 callbacks suppressed [ 930.314418][T21005] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4949'. [ 930.338918][T20881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 930.360777][T20881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 930.454956][T20881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 930.474872][T20881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 930.530369][T21011] IPv6: Can't replace route, no match found [ 930.991329][ T5780] Bluetooth: hci3: command tx timeout [ 931.056253][T20881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.085705][T20881] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.196537][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.203892][ T7237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.328069][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.335329][ T7237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.401237][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.413885][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.716875][ T49] wlan1: Trigger new scan to find an IBSS to join [ 931.907489][T21031] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4954'. [ 932.778276][ T7233] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 933.077580][ T5780] Bluetooth: hci3: command tx timeout [ 933.471071][T20881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.474250][T21051] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4958'. [ 933.495757][T21054] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4956'. [ 934.117971][T21061] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 934.125832][T21061] netlink: 'syz.1.4959': attribute type 4 has an invalid length. [ 934.134691][T21061] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4959'. [ 934.323440][T20881] veth0_vlan: entered promiscuous mode [ 934.420622][T20881] veth1_vlan: entered promiscuous mode [ 935.093308][T20881] veth0_macvtap: entered promiscuous mode [ 935.140642][T20881] veth1_macvtap: entered promiscuous mode [ 935.149395][T21072] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4963'. [ 935.450563][T20881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.492118][T20881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.527352][T20881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.569701][T20881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.627815][T20881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.675012][T20881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.703253][T20881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.728301][T20881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.798168][T20881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.895553][T20881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.033072][T20881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.050833][T20881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.061594][T20881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.080933][T20881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.468204][T21091] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4968'. [ 937.553032][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.598712][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.625488][T21094] netlink: 'syz.2.4969': attribute type 1 has an invalid length. [ 937.642992][T21094] netlink: 'syz.2.4969': attribute type 4 has an invalid length. [ 937.653939][T21094] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4969'. [ 938.150650][ T7229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.187382][ T7229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.772715][T21102] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4973'. [ 938.860945][T21108] veth1_macvtap: left promiscuous mode [ 938.914915][T21109] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4915'. [ 939.041740][T21109] team0: Port device team_slave_0 removed [ 939.076762][T21109] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 941.342998][T21137] netlink: 'syz.1.4979': attribute type 1 has an invalid length. [ 941.361114][T21137] netlink: 'syz.1.4979': attribute type 4 has an invalid length. [ 941.377325][T21137] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4979'. [ 941.459723][T21135] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4978'. [ 941.758595][T21149] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4983'. [ 942.384238][T21161] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4985'. [ 942.566196][T21161] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 943.776886][T21172] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 943.795091][T21172] netlink: 'syz.3.4989': attribute type 4 has an invalid length. [ 943.827410][T21172] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4989'. [ 944.032390][T21178] netlink: 'syz.0.4991': attribute type 39 has an invalid length. [ 944.240330][T21184] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4992'. [ 944.881329][T21191] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4996'. [ 944.913981][T21191] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 945.230757][T12704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.240776][T12704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.249549][T12704] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.287033][T12704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.297905][T12704] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 945.305271][T12704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 946.239351][ T1090] vlan0: left allmulticast mode [ 946.279187][ T1090] veth0_vlan: left allmulticast mode [ 946.306916][ T1090] vlan0: left promiscuous mode [ 946.341356][ T1090] À: port 1(vlan0) entered disabled state [ 946.551677][ T1090] bridge_slave_1: left allmulticast mode [ 946.582890][ T1090] bridge_slave_1: left promiscuous mode [ 946.626853][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.802293][ T1090] bridge_slave_0: left allmulticast mode [ 946.858964][ T1090] bridge_slave_0: left promiscuous mode [ 946.864770][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.053803][ T1090] veth1_vlan: left allmulticast mode [ 947.090865][ T1090] veth1_vlan: left promiscuous mode [ 947.096250][ T1090] veth0_vlan: left promiscuous mode [ 947.392464][T12704] Bluetooth: hci4: command tx timeout [ 948.585973][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.151884][ T1090] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 949.169858][ T1090] bond0 (unregistering): Released all slaves [ 949.277943][T21234] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5007'. [ 949.297410][T21234] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 949.381054][T21247] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5011'. [ 949.441166][T21199] chnl_net:caif_netlink_parms(): no params data found [ 949.467593][T12704] Bluetooth: hci4: command tx timeout [ 949.877926][T21199] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.885138][T21199] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.908658][T21199] bridge_slave_0: entered allmulticast mode [ 949.916075][T21199] bridge_slave_0: entered promiscuous mode [ 949.933891][T21199] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.951774][T21199] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.964462][T21199] bridge_slave_1: entered allmulticast mode [ 949.982777][T21199] bridge_slave_1: entered promiscuous mode [ 950.052990][T21199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.083139][T21199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.190028][T21199] team0: Port device team_slave_0 added [ 950.199888][T21199] team0: Port device team_slave_1 added [ 950.330824][ T1090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.383005][T21199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.402970][T21199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.453167][T21199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.473513][T21262] FAULT_INJECTION: forcing a failure. [ 950.473513][T21262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.476357][T21199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.500835][T21262] CPU: 0 PID: 21262 Comm: syz.0.5012 Not tainted syzkaller #0 [ 950.508357][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 950.518450][T21262] Call Trace: [ 950.521765][T21262] [ 950.524726][T21262] dump_stack_lvl+0x18c/0x250 [ 950.529446][T21262] ? show_regs_print_info+0x20/0x20 [ 950.534699][T21262] ? load_image+0x420/0x420 [ 950.539249][T21262] ? __might_fault+0xaa/0x120 [ 950.543321][T21199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.543949][T21262] ? __lock_acquire+0x7d40/0x7d40 [ 950.574943][T21262] should_fail_ex+0x39d/0x4d0 [ 950.579667][T21262] _copy_from_user+0x2f/0xe0 [ 950.584298][T21262] csum_and_copy_from_iter+0x476/0x14a0 [ 950.589897][T21262] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 950.595561][T21262] ? __alloc_pages+0x27a/0x460 [ 950.600365][T21262] ? zone_statistics+0x170/0x170 [ 950.605338][T21262] ? rcu_is_watching+0x15/0xb0 [ 950.610153][T21262] ip_generic_getfrag+0x163/0x2f0 [ 950.615209][T21262] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 950.620093][T21262] ? skb_page_frag_refill+0x199/0x310 [ 950.625516][T21262] __ip_append_data+0x1f30/0x3d40 [ 950.630607][T21262] ? raw_send_hdrinc+0x1170/0x1170 [ 950.635762][T21262] ? ip_setup_cork+0x860/0x860 [ 950.640606][T21262] ? ip_setup_cork+0x530/0x860 [ 950.643681][T21199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.645390][T21262] ip_append_data+0x10d/0x180 [ 950.645418][T21262] ? raw_send_hdrinc+0x1170/0x1170 [ 950.665734][T21262] raw_sendmsg+0x15c1/0x1c00 [ 950.670378][T21262] ? compat_raw_ioctl+0x70/0x70 [ 950.675268][T21262] ? __lock_acquire+0x1273/0x7d40 [ 950.680346][T21262] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 950.686801][T21262] ? sock_rps_record_flow+0x19/0x3f0 [ 950.692124][T21262] ? inet_sendmsg+0x7c/0x2f0 [ 950.696744][T21262] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 950.702067][T21262] ? security_socket_sendmsg+0x80/0xa0 [ 950.707555][T21262] ? inet_send_prepare+0x260/0x260 [ 950.712701][T21262] ____sys_sendmsg+0x5ba/0x960 [ 950.717480][T21262] ? __lock_acquire+0x7d40/0x7d40 [ 950.722539][T21262] ? __asan_memset+0x22/0x40 [ 950.727164][T21262] ? __sys_sendmsg_sock+0x30/0x30 [ 950.732198][T21262] ? __import_iovec+0x3fa/0x850 [ 950.737069][T21262] ? import_iovec+0x73/0xa0 [ 950.741607][T21262] ___sys_sendmsg+0x2a6/0x360 [ 950.746304][T21262] ? get_pid_task+0x20/0x1e0 [ 950.750921][T21262] ? __sys_sendmsg+0x2a0/0x2a0 [ 950.755719][T21262] ? __lock_acquire+0x7d40/0x7d40 [ 950.760775][T21262] __se_sys_sendmsg+0x1c2/0x2b0 [ 950.765645][T21262] ? __x64_sys_sendmsg+0x80/0x80 [ 950.770613][T21262] ? lockdep_hardirqs_on+0x98/0x150 [ 950.775829][T21262] do_syscall_64+0x55/0xa0 [ 950.780262][T21262] ? clear_bhb_loop+0x40/0x90 [ 950.784958][T21262] ? clear_bhb_loop+0x40/0x90 [ 950.789653][T21262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.795562][T21262] RIP: 0033:0x7f5d85b9cdd9 [ 950.799993][T21262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.819617][T21262] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.828044][T21262] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 950.836024][T21262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 950.844004][T21262] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 950.851983][T21262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.859966][T21262] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 950.867976][T21262] [ 950.971877][ T1090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.118952][ T1090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.203576][T21199] hsr_slave_0: entered promiscuous mode [ 951.239216][T21199] hsr_slave_1: entered promiscuous mode [ 951.255361][T21199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.266878][T21199] Cannot create hsr debugfs directory [ 951.294452][ T1090] bond0: (slave netdevsim0): Releasing backup interface [ 951.361238][ T1090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.442521][T21274] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5021'. [ 951.481952][T21279] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5020'. [ 951.523936][T21279] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 951.557307][T12704] Bluetooth: hci4: command tx timeout [ 952.237615][T21291] netlink: 'syz.3.5023': attribute type 21 has an invalid length. [ 952.245505][T21291] netlink: 'syz.3.5023': attribute type 1 has an invalid length. [ 952.259912][T21291] netlink: 16050 bytes leftover after parsing attributes in process `syz.3.5023'. [ 952.329560][T21295] FAULT_INJECTION: forcing a failure. [ 952.329560][T21295] name failslab, interval 1, probability 0, space 0, times 0 [ 952.342233][T21295] CPU: 0 PID: 21295 Comm: syz.1.5024 Not tainted syzkaller #0 [ 952.349721][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 952.359804][T21295] Call Trace: [ 952.363120][T21295] [ 952.366085][T21295] dump_stack_lvl+0x18c/0x250 [ 952.370806][T21295] ? show_regs_print_info+0x20/0x20 [ 952.376051][T21295] ? load_image+0x420/0x420 [ 952.380601][T21295] ? netdev_core_pick_tx+0x340/0x340 [ 952.385928][T21295] should_fail_ex+0x39d/0x4d0 [ 952.390651][T21295] should_failslab+0x9/0x20 [ 952.395196][T21295] slab_pre_alloc_hook+0x59/0x310 [ 952.400267][T21295] kmem_cache_alloc+0x5a/0x2d0 [ 952.405067][T21295] ? skb_clone+0x1eb/0x370 [ 952.409514][T21295] skb_clone+0x1eb/0x370 [ 952.413775][T21295] bpf_clone_redirect+0x167/0x4a0 [ 952.418832][T21295] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 952.424315][T21295] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 952.430318][T21295] ? perf_trace_preemptirq_template+0xac/0x330 [ 952.436495][T21295] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 952.442506][T21295] ? lockdep_softirqs_on+0x580/0x580 [ 952.447823][T21295] ? lock_chain_count+0x20/0x20 [ 952.452698][T21295] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 952.458963][T21295] ? __local_bh_disable_ip+0x108/0x1a0 [ 952.464449][T21295] ? __cant_sleep+0x220/0x220 [ 952.469161][T21295] ? __local_bh_enable_ip+0x13a/0x1c0 [ 952.474549][T21295] ? _local_bh_enable+0xa0/0xa0 [ 952.479415][T21295] ? bpf_test_timer_continue+0x135/0x380 [ 952.485070][T21295] ? bpf_test_run+0x174/0x870 [ 952.489765][T21295] bpf_test_run+0x2df/0x870 [ 952.494290][T21295] ? bpf_test_run+0x174/0x870 [ 952.498987][T21295] ? convert___skb_to_skb+0x590/0x590 [ 952.504377][T21295] ? eth_get_headlen+0x210/0x210 [ 952.509345][T21295] ? slab_build_skb+0x25f/0x3f0 [ 952.514304][T21295] ? convert___skb_to_skb+0x3d/0x590 [ 952.519609][T21295] bpf_prog_test_run_skb+0xad2/0x12b0 [ 952.525011][T21295] ? cpu_online+0x60/0x60 [ 952.529354][T21295] bpf_prog_test_run+0x321/0x390 [ 952.534319][T21295] __sys_bpf+0x49d/0x890 [ 952.538577][T21295] ? bpf_link_show_fdinfo+0x390/0x390 [ 952.543982][T21295] ? lock_chain_count+0x20/0x20 [ 952.548888][T21295] __x64_sys_bpf+0x7c/0x90 [ 952.553321][T21295] do_syscall_64+0x55/0xa0 [ 952.557751][T21295] ? clear_bhb_loop+0x40/0x90 [ 952.562462][T21295] ? clear_bhb_loop+0x40/0x90 [ 952.567158][T21295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 952.573086][T21295] RIP: 0033:0x7f5b30f9cdd9 [ 952.577518][T21295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.597134][T21295] RSP: 002b:00007f5b31ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 952.605562][T21295] RAX: ffffffffffffffda RBX: 00007f5b31215fa0 RCX: 00007f5b30f9cdd9 [ 952.613567][T21295] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 952.621554][T21295] RBP: 00007f5b31ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 952.629538][T21295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.637535][T21295] R13: 00007f5b31216038 R14: 00007f5b31215fa0 R15: 00007fff77081c68 [ 952.645530][T21295] [ 953.184354][T21314] veth1_macvtap: left promiscuous mode [ 953.514699][T21314] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5030'. [ 953.592183][T21314] team0: Port device team_slave_0 removed [ 953.609533][T21314] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 953.627921][T12704] Bluetooth: hci4: command tx timeout [ 953.693823][T21330] syz.3.5035[21330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.694047][T21330] syz.3.5035[21330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.717764][T21199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 953.763897][T21199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 953.782096][T21199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.799369][T21199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 954.160198][T21199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.210766][T21199] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.253595][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.260826][ T7229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.335145][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.342513][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.655963][T21355] FAULT_INJECTION: forcing a failure. [ 954.655963][T21355] name failslab, interval 1, probability 0, space 0, times 0 [ 954.737525][T21355] CPU: 0 PID: 21355 Comm: syz.0.5041 Not tainted syzkaller #0 [ 954.745067][T21355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.755165][T21355] Call Trace: [ 954.758469][T21355] [ 954.761424][T21355] dump_stack_lvl+0x18c/0x250 [ 954.766207][T21355] ? show_regs_print_info+0x20/0x20 [ 954.771477][T21355] ? load_image+0x420/0x420 [ 954.776031][T21355] ? __might_sleep+0xe0/0xe0 [ 954.780665][T21355] ? __lock_acquire+0x7d40/0x7d40 [ 954.785752][T21355] should_fail_ex+0x39d/0x4d0 [ 954.790460][T21355] should_failslab+0x9/0x20 [ 954.794994][T21355] slab_pre_alloc_hook+0x59/0x310 [ 954.800132][T21355] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 954.805706][T21355] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 954.811282][T21355] __kmem_cache_alloc_node+0x53/0x250 [ 954.816682][T21355] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 954.822249][T21355] __kmalloc+0xa4/0x230 [ 954.826431][T21355] bpf_prog_test_run_skb+0x238/0x12b0 [ 954.831828][T21355] ? __fget_files+0x28/0x4b0 [ 954.836450][T21355] ? __fget_files+0x28/0x4b0 [ 954.841059][T21355] ? __fget_files+0x43d/0x4b0 [ 954.845758][T21355] ? cpu_online+0x60/0x60 [ 954.850109][T21355] bpf_prog_test_run+0x321/0x390 [ 954.855103][T21355] __sys_bpf+0x49d/0x890 [ 954.859370][T21355] ? bpf_link_show_fdinfo+0x390/0x390 [ 954.864770][T21355] ? lock_chain_count+0x20/0x20 [ 954.869648][T21355] __x64_sys_bpf+0x7c/0x90 [ 954.874113][T21355] do_syscall_64+0x55/0xa0 [ 954.878553][T21355] ? clear_bhb_loop+0x40/0x90 [ 954.883260][T21355] ? clear_bhb_loop+0x40/0x90 [ 954.887976][T21355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.893890][T21355] RIP: 0033:0x7f5d85b9cdd9 [ 954.898332][T21355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.917960][T21355] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 954.926391][T21355] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 954.934378][T21355] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 954.942373][T21355] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 954.950371][T21355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.958359][T21355] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 954.966362][T21355] [ 955.602795][T21199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.813599][T21199] veth0_vlan: entered promiscuous mode [ 955.849708][T21199] veth1_vlan: entered promiscuous mode [ 956.245117][T21199] veth0_macvtap: entered promiscuous mode [ 956.330245][T21199] veth1_macvtap: entered promiscuous mode [ 956.450318][T21199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.497453][T21199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.515267][T21199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.538707][T21199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.554562][T21199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.565466][T21199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.589332][T21199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.610785][T21199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.626286][T21199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.637388][T21199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.648473][T21199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.658603][T21199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.669489][T21199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.681748][T21199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.714834][T21199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.724581][T21199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.735760][T21199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.747126][T21199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.060028][T21394] netlink: 'syz.0.5054': attribute type 10 has an invalid length. [ 957.105137][T21394] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.139153][T21398] netlink: 'syz.3.5056': attribute type 29 has an invalid length. [ 957.150158][T21394] bond0: (slave team0): Enslaving as an active interface with an up link [ 957.162079][ T7234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.174694][ T7234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.197675][T21398] netlink: 'syz.3.5056': attribute type 29 has an invalid length. [ 957.246362][T21399] netlink: 'syz.3.5056': attribute type 29 has an invalid length. [ 957.277045][ T7233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.286624][ T7233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.046919][T21405] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4994'. [ 960.423780][T21447] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5071'. [ 960.447172][T21447] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5071'. [ 960.467078][T21447] bond0: (slave bond_slave_0): Releasing backup interface [ 960.483441][T21447] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 960.519615][T21449] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5070'. [ 961.150321][T21465] netlink: 'syz.1.5076': attribute type 10 has an invalid length. [ 961.195714][T21465] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.232881][T21465] bond0: (slave team0): Enslaving as an active interface with an up link [ 961.389010][ T1090] ªªªªªªÿÿ: left allmulticast mode [ 961.401859][ T1090] ªªªªªªÿÿ: left promiscuous mode [ 961.416277][ T1090] À: port 1(ªªªªªªÿÿ) entered disabled state [ 961.473902][ T1090] veth0_macvtap: left promiscuous mode [ 961.488531][ T1090] veth1_vlan: left promiscuous mode [ 962.215552][ T1090] team0 (unregistering): Port device geneve1 removed [ 962.776264][ T1090] bond0 (unregistering): (slave hsr_slave_0): Releasing backup interface [ 963.004681][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 963.085671][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.509429][ T1090] team0 (unregistering): Port device bond0 removed [ 963.563887][ T1090] bond0 (unregistering): Released all slaves [ 963.625873][T21471] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5081'. [ 963.894274][T21513] netlink: 'syz.3.5096': attribute type 10 has an invalid length. [ 963.931211][T21513] team0: Device veth1_macvtap failed to register rx_handler [ 964.051610][T21511] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5103'. [ 965.170796][T21530] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5102'. [ 965.378981][T21541] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5107'. [ 965.419505][T21539] netlink: 'syz.3.5106': attribute type 3 has an invalid length. [ 965.465673][T21537] sit0: entered promiscuous mode [ 966.130975][T21554] delete_channel: no stack [ 966.365091][T21572] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5119'. [ 966.415799][T21567] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5117'. [ 966.682602][T21581] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5121'. [ 966.705231][T21581] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 967.976652][T21611] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5132'. [ 968.628130][T21625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5139'. [ 968.768636][T21632] veth1_macvtap: left promiscuous mode [ 968.798785][T21632] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5141'. [ 968.832499][T21632] team0: Port device team_slave_0 removed [ 968.860957][T21632] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 969.013219][T21640] netlink: 'syz.1.5144': attribute type 2 has an invalid length. [ 969.021324][T21640] netlink: 'syz.1.5144': attribute type 1 has an invalid length. [ 969.031604][T21640] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.5144'. [ 970.002465][T21653] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5148'. [ 970.537035][T21665] netlink: 'syz.2.5154': attribute type 2 has an invalid length. [ 970.546676][T21665] netlink: 'syz.2.5154': attribute type 1 has an invalid length. [ 970.558516][T21665] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.5154'. [ 970.762189][T21677] FAULT_INJECTION: forcing a failure. [ 970.762189][T21677] name failslab, interval 1, probability 0, space 0, times 0 [ 970.818505][T21677] CPU: 1 PID: 21677 Comm: syz.2.5160 Not tainted syzkaller #0 [ 970.826125][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.836214][T21677] Call Trace: [ 970.839535][T21677] [ 970.842526][T21677] dump_stack_lvl+0x18c/0x250 [ 970.847266][T21677] ? show_regs_print_info+0x20/0x20 [ 970.852517][T21677] ? load_image+0x420/0x420 [ 970.857059][T21677] ? __might_sleep+0xe0/0xe0 [ 970.861681][T21677] ? __lock_acquire+0x7d40/0x7d40 [ 970.866747][T21677] should_fail_ex+0x39d/0x4d0 [ 970.871466][T21677] should_failslab+0x9/0x20 [ 970.876003][T21677] slab_pre_alloc_hook+0x59/0x310 [ 970.881069][T21677] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 970.887255][T21677] ? __get_vm_area_node+0x125/0x370 [ 970.892490][T21677] __kmem_cache_alloc_node+0x53/0x250 [ 970.897908][T21677] ? __get_vm_area_node+0x125/0x370 [ 970.903149][T21677] kmalloc_node_trace+0x26/0xe0 [ 970.908043][T21677] __get_vm_area_node+0x125/0x370 [ 970.913114][T21677] __vmalloc_node_range+0x36e/0x1330 [ 970.918432][T21677] ? netlink_sendmsg+0x602/0xbf0 [ 970.923409][T21677] ? netlink_insert+0x109f/0x13a0 [ 970.928487][T21677] ? netlink_data_ready+0x10/0x10 [ 970.933556][T21677] ? free_vm_area+0x50/0x50 [ 970.938121][T21677] ? netlink_sendmsg+0x602/0xbf0 [ 970.943094][T21677] vmalloc+0x79/0x90 [ 970.947031][T21677] ? netlink_sendmsg+0x602/0xbf0 [ 970.952011][T21677] netlink_sendmsg+0x602/0xbf0 [ 970.956802][T21677] ? netlink_getsockopt+0x590/0x590 [ 970.962034][T21677] ? aa_sock_msg_perm+0x94/0x150 [ 970.967004][T21677] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 970.972307][T21677] ? security_socket_sendmsg+0x80/0xa0 [ 970.977808][T21677] sock_write_iter+0x2df/0x420 [ 970.982605][T21677] ? sock_read_iter+0x3e0/0x3e0 [ 970.987479][T21677] ? common_file_perm+0x198/0x1f0 [ 970.992536][T21677] vfs_write+0x46c/0x990 [ 970.996804][T21677] ? file_end_write+0x250/0x250 [ 971.001674][T21677] ? __fget_files+0x43d/0x4b0 [ 971.006370][T21677] ? __fdget_pos+0x1d8/0x330 [ 971.010989][T21677] ? ksys_write+0x75/0x260 [ 971.015421][T21677] ksys_write+0x150/0x260 [ 971.019839][T21677] ? __ia32_sys_read+0x90/0x90 [ 971.024679][T21677] ? lockdep_hardirqs_on+0x98/0x150 [ 971.029903][T21677] do_syscall_64+0x55/0xa0 [ 971.034350][T21677] ? clear_bhb_loop+0x40/0x90 [ 971.039149][T21677] ? clear_bhb_loop+0x40/0x90 [ 971.043864][T21677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.049780][T21677] RIP: 0033:0x7fedb9b9cdd9 [ 971.054214][T21677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.073831][T21677] RSP: 002b:00007fedba97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 971.082260][T21677] RAX: ffffffffffffffda RBX: 00007fedb9e15fa0 RCX: 00007fedb9b9cdd9 [ 971.090257][T21677] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000005 [ 971.098249][T21677] RBP: 00007fedba97e090 R08: 0000000000000000 R09: 0000000000000000 [ 971.106232][T21677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.114224][T21677] R13: 00007fedb9e16038 R14: 00007fedb9e15fa0 R15: 00007ffd0ca1c9c8 [ 971.122222][T21677] [ 971.165739][T21677] syz.2.5160: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 971.244973][T21677] CPU: 0 PID: 21677 Comm: syz.2.5160 Not tainted syzkaller #0 [ 971.252501][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 971.262586][T21677] Call Trace: [ 971.265896][T21677] [ 971.268851][T21677] dump_stack_lvl+0x18c/0x250 [ 971.273576][T21677] ? show_regs_print_info+0x20/0x20 [ 971.278811][T21677] ? load_image+0x420/0x420 [ 971.283353][T21677] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 971.289813][T21677] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 971.296377][T21677] warn_alloc+0x246/0x340 [ 971.300771][T21677] ? __get_vm_area_node+0x125/0x370 [ 971.306020][T21677] ? zone_watermark_ok_safe+0x230/0x230 [ 971.311645][T21677] ? rcu_is_watching+0x15/0xb0 [ 971.316436][T21677] ? __get_vm_area_node+0x356/0x370 [ 971.321661][T21677] __vmalloc_node_range+0x393/0x1330 [ 971.326963][T21677] ? netlink_insert+0x109f/0x13a0 [ 971.332050][T21677] ? netlink_data_ready+0x10/0x10 [ 971.337097][T21677] ? free_vm_area+0x50/0x50 [ 971.341627][T21677] ? netlink_sendmsg+0x602/0xbf0 [ 971.346603][T21677] vmalloc+0x79/0x90 [ 971.350523][T21677] ? netlink_sendmsg+0x602/0xbf0 [ 971.355500][T21677] netlink_sendmsg+0x602/0xbf0 [ 971.360299][T21677] ? netlink_getsockopt+0x590/0x590 [ 971.365518][T21677] ? aa_sock_msg_perm+0x94/0x150 [ 971.370480][T21677] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 971.375783][T21677] ? security_socket_sendmsg+0x80/0xa0 [ 971.381260][T21677] sock_write_iter+0x2df/0x420 [ 971.386039][T21677] ? sock_read_iter+0x3e0/0x3e0 [ 971.390910][T21677] ? common_file_perm+0x198/0x1f0 [ 971.395960][T21677] vfs_write+0x46c/0x990 [ 971.400228][T21677] ? file_end_write+0x250/0x250 [ 971.405096][T21677] ? __fget_files+0x43d/0x4b0 [ 971.409808][T21677] ? __fdget_pos+0x1d8/0x330 [ 971.414423][T21677] ? ksys_write+0x75/0x260 [ 971.418856][T21677] ksys_write+0x150/0x260 [ 971.423207][T21677] ? __ia32_sys_read+0x90/0x90 [ 971.427995][T21677] ? lockdep_hardirqs_on+0x98/0x150 [ 971.433215][T21677] do_syscall_64+0x55/0xa0 [ 971.437644][T21677] ? clear_bhb_loop+0x40/0x90 [ 971.442337][T21677] ? clear_bhb_loop+0x40/0x90 [ 971.447029][T21677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.452937][T21677] RIP: 0033:0x7fedb9b9cdd9 [ 971.457367][T21677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.476992][T21677] RSP: 002b:00007fedba97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 971.485503][T21677] RAX: ffffffffffffffda RBX: 00007fedb9e15fa0 RCX: 00007fedb9b9cdd9 [ 971.493495][T21677] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000005 [ 971.501486][T21677] RBP: 00007fedba97e090 R08: 0000000000000000 R09: 0000000000000000 [ 971.509471][T21677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.517463][T21677] R13: 00007fedb9e16038 R14: 00007fedb9e15fa0 R15: 00007ffd0ca1c9c8 [ 971.525461][T21677] [ 971.586983][T21677] Mem-Info: [ 971.590398][T21677] active_anon:5816 inactive_anon:0 isolated_anon:0 [ 971.590398][T21677] active_file:23090 inactive_file:40295 isolated_file:0 [ 971.590398][T21677] unevictable:768 dirty:412 writeback:0 [ 971.590398][T21677] slab_reclaimable:13275 slab_unreclaimable:97049 [ 971.590398][T21677] mapped:25148 shmem:1361 pagetables:573 [ 971.590398][T21677] sec_pagetables:0 bounce:0 [ 971.590398][T21677] kernel_misc_reclaimable:0 [ 971.590398][T21677] free:1333099 free_pcp:9035 free_cma:0 [ 971.639917][T21677] Node 0 active_anon:23264kB inactive_anon:0kB active_file:92360kB inactive_file:160980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100592kB dirty:1644kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10208kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no [ 971.679662][T21677] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 971.836463][T21677] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.935036][T21677] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 971.973651][T21677] Node 0 DMA32 free:1408508kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23096kB inactive_anon:0kB active_file:92360kB inactive_file:160148kB unevictable:1536kB writepending:1712kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:24072kB local_pcp:9060kB free_cma:0kB [ 972.072297][T21677] lowmem_reserve[]: 0 0 0 0 0 [ 972.077147][T21677] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 972.143281][T21677] lowmem_reserve[]: 0 0 0 0 0 [ 972.156794][T21677] Node 1 Normal free:3908588kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9856kB local_pcp:9856kB free_cma:0kB [ 972.247793][T21677] lowmem_reserve[]: 0 0 0 0 0 [ 972.257372][T21677] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 972.290397][T21677] Node 0 DMA32: 1813*4kB (UME) 2407*8kB (UME) 1637*16kB (UME) 705*32kB (ME) 1138*64kB (UME) 865*128kB (UME) 105*256kB (UM) 99*512kB (UME) 33*1024kB (UME) 19*2048kB (UME) 244*4096kB (UM) = 1408508kB [ 972.314289][T21677] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 972.326598][T21693] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5164'. [ 972.342342][T21677] Node 1 Normal: 245*4kB (UME) 59*8kB (UME) 42*16kB (UME) 229*32kB (UME) 72*64kB (UME) 14*128kB (UE) 2*256kB (U) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3908588kB [ 972.397528][T21677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.418079][T21677] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.433416][T21677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.457391][T21677] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.466744][T21677] 64746 total pagecache pages [ 972.485365][T21677] 0 pages in swap cache [ 972.496619][T21677] Free swap = 124996kB [ 972.504742][T21677] Total swap = 124996kB [ 972.509382][T21677] 2097051 pages RAM [ 972.513367][T21677] 0 pages HighMem/MovableOnly [ 972.519350][T21677] 416927 pages reserved [ 972.523682][T21677] 0 pages cma reserved [ 972.704742][T21702] netlink: 'syz.2.5168': attribute type 29 has an invalid length. [ 972.713408][T21702] netlink: 'syz.2.5168': attribute type 29 has an invalid length. [ 972.722120][T21702] netlink: 'syz.2.5168': attribute type 29 has an invalid length. [ 972.843879][T21704] netlink: 'syz.3.5169': attribute type 2 has an invalid length. [ 972.852023][T21704] netlink: 'syz.3.5169': attribute type 1 has an invalid length. [ 972.869535][T21704] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5169'. [ 973.007892][T21712] netlink: 'syz.1.5172': attribute type 3 has an invalid length. [ 973.324754][T21708] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5171'. [ 973.475002][T21723] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5175'. [ 973.568482][T21725] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5176'. [ 973.866303][T21734] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5180'. [ 975.459166][T21755] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5187'. [ 975.468502][T21755] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5187'. [ 975.483400][T21755] bond0: (slave bond_slave_0): Releasing backup interface [ 975.515020][T21755] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 975.603718][T21762] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5189'. [ 975.764348][T21767] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.5192'. [ 975.815448][T21769] FAULT_INJECTION: forcing a failure. [ 975.815448][T21769] name failslab, interval 1, probability 0, space 0, times 0 [ 975.828592][T21769] CPU: 0 PID: 21769 Comm: syz.0.5193 Not tainted syzkaller #0 [ 975.836076][T21769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 975.846159][T21769] Call Trace: [ 975.849470][T21769] [ 975.852422][T21769] dump_stack_lvl+0x18c/0x250 [ 975.857155][T21769] ? show_regs_print_info+0x20/0x20 [ 975.862397][T21769] ? load_image+0x420/0x420 [ 975.866944][T21769] should_fail_ex+0x39d/0x4d0 [ 975.871662][T21769] should_failslab+0x9/0x20 [ 975.876205][T21769] slab_pre_alloc_hook+0x59/0x310 [ 975.881269][T21769] kmem_cache_alloc+0x5a/0x2d0 [ 975.886075][T21769] ? sctp_get_port_local+0x6d4/0x1620 [ 975.891485][T21769] sctp_get_port_local+0x6d4/0x1620 [ 975.896717][T21769] ? sctp_do_bind+0x990/0x990 [ 975.901407][T21769] ? sctp_bind_addr_match+0x30/0x2a0 [ 975.906711][T21769] sctp_do_bind+0x555/0x990 [ 975.911234][T21769] sctp_connect_new_asoc+0x26a/0x6a0 [ 975.916533][T21769] ? __sctp_connect+0xd80/0xd80 [ 975.921401][T21769] ? __local_bh_enable_ip+0x13a/0x1c0 [ 975.926786][T21769] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 975.932348][T21769] ? security_sctp_bind_connect+0x89/0xb0 [ 975.938086][T21769] sctp_sendmsg+0x1575/0x28c0 [ 975.942783][T21769] ? sctp_getsockopt+0xb60/0xb60 [ 975.947739][T21769] ? aa_sk_perm+0x83c/0x970 [ 975.952280][T21769] ? aa_af_perm+0x330/0x330 [ 975.956797][T21769] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 975.963231][T21769] ? sock_rps_record_flow+0x19/0x3f0 [ 975.968534][T21769] ? inet_sendmsg+0xe9/0x2f0 [ 975.973136][T21769] ? inet_send_prepare+0x260/0x260 [ 975.978269][T21769] ____sys_sendmsg+0x5ba/0x960 [ 975.983042][T21769] ? __lock_acquire+0x7d40/0x7d40 [ 975.988092][T21769] ? __asan_memset+0x22/0x40 [ 975.992697][T21769] ? __sys_sendmsg_sock+0x30/0x30 [ 975.997733][T21769] ? __import_iovec+0x5f2/0x850 [ 976.002595][T21769] ? import_iovec+0x73/0xa0 [ 976.007107][T21769] ___sys_sendmsg+0x2a6/0x360 [ 976.011799][T21769] ? __sys_sendmsg+0x2a0/0x2a0 [ 976.016585][T21769] ? trace_call_bpf+0xc3/0x6c0 [ 976.021387][T21769] __se_sys_sendmsg+0x1c2/0x2b0 [ 976.026250][T21769] ? __x64_sys_sendmsg+0x80/0x80 [ 976.031222][T21769] ? lockdep_hardirqs_on+0x98/0x150 [ 976.036452][T21769] do_syscall_64+0x55/0xa0 [ 976.040883][T21769] ? clear_bhb_loop+0x40/0x90 [ 976.045579][T21769] ? clear_bhb_loop+0x40/0x90 [ 976.050279][T21769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.056187][T21769] RIP: 0033:0x7f5d85b9cdd9 [ 976.060624][T21769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.080262][T21769] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.088704][T21769] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 976.096703][T21769] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 976.104697][T21769] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 976.112704][T21769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.120702][T21769] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 976.128709][T21769] [ 977.133779][T21783] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5197'. [ 977.706502][T21795] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5201'. [ 977.929788][T21802] sit0: entered promiscuous mode [ 979.342990][T21818] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5210'. [ 979.645461][T21825] validate_nla: 4 callbacks suppressed [ 979.645477][T21825] netlink: 'syz.1.5213': attribute type 29 has an invalid length. [ 979.688044][T21825] netlink: 'syz.1.5213': attribute type 29 has an invalid length. [ 979.712090][T21827] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5214'. [ 979.742631][T21825] netlink: 'syz.1.5213': attribute type 29 has an invalid length. [ 979.951082][T21831] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5216'. [ 980.420634][T21844] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.5222'. [ 980.532530][T21849] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5221'. [ 980.597492][T21849] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 980.698699][T21854] netlink: 'syz.1.5224': attribute type 21 has an invalid length. [ 980.727138][T21854] netlink: 'syz.1.5224': attribute type 1 has an invalid length. [ 980.756824][T21854] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.5224'. [ 981.090618][T21859] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5225'. [ 981.385499][T21863] À: port 1(vlan0) entered blocking state [ 981.399520][T21863] À: port 1(vlan0) entered disabled state [ 981.406040][T21863] vlan0: entered allmulticast mode [ 981.414278][T21863] veth0_vlan: entered allmulticast mode [ 981.425139][T21863] vlan0: entered promiscuous mode [ 981.691515][T21877] netlink: 'syz.2.5230': attribute type 10 has an invalid length. [ 981.833923][T21877] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.873738][T21877] bond0: (slave team0): Enslaving as an active interface with an up link [ 981.982980][T21884] netlink: 'syz.2.5234': attribute type 13 has an invalid length. [ 981.996643][T21884] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5234'. [ 982.040139][T21884] erspan0: refused to change device tx_queue_len [ 982.046599][T21884] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 982.090076][T21885] sit0: entered promiscuous mode [ 982.229429][T21895] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5236'. [ 982.243019][T21895] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 982.594521][T21904] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5240'. [ 982.691595][T21908] FAULT_INJECTION: forcing a failure. [ 982.691595][T21908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.741161][T21908] CPU: 0 PID: 21908 Comm: syz.1.5239 Not tainted syzkaller #0 [ 982.748703][T21908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 982.758797][T21908] Call Trace: [ 982.762113][T21908] [ 982.765077][T21908] dump_stack_lvl+0x18c/0x250 [ 982.769804][T21908] ? show_regs_print_info+0x20/0x20 [ 982.775051][T21908] ? load_image+0x420/0x420 [ 982.779595][T21908] ? __might_fault+0xaa/0x120 [ 982.784331][T21908] ? __lock_acquire+0x7d40/0x7d40 [ 982.789395][T21908] should_fail_ex+0x39d/0x4d0 [ 982.794124][T21908] _copy_from_iter+0x1d9/0x12e0 [ 982.799025][T21908] ? slab_post_alloc_hook+0x8a/0x4b0 [ 982.804354][T21908] ? __virt_addr_valid+0x18c/0x540 [ 982.809503][T21908] ? __lock_acquire+0x7d40/0x7d40 [ 982.814593][T21908] ? rcu_is_watching+0x15/0xb0 [ 982.819415][T21908] ? copyout_mc+0x70/0x70 [ 982.823792][T21908] ? __virt_addr_valid+0x18c/0x540 [ 982.828963][T21908] ? __virt_addr_valid+0x18c/0x540 [ 982.834127][T21908] ? __virt_addr_valid+0x469/0x540 [ 982.839280][T21908] ? __check_object_size+0x506/0xa20 [ 982.844600][T21908] netlink_sendmsg+0x76b/0xbf0 [ 982.849402][T21908] ? netlink_getsockopt+0x590/0x590 [ 982.854653][T21908] ? aa_sock_msg_perm+0x94/0x150 [ 982.859622][T21908] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 982.864922][T21908] ? security_socket_sendmsg+0x80/0xa0 [ 982.870398][T21908] ? netlink_getsockopt+0x590/0x590 [ 982.875623][T21908] ____sys_sendmsg+0x5ba/0x960 [ 982.880415][T21908] ? __asan_memset+0x22/0x40 [ 982.885028][T21908] ? __sys_sendmsg_sock+0x30/0x30 [ 982.890070][T21908] ? __import_iovec+0x5f2/0x850 [ 982.894956][T21908] ? import_iovec+0x73/0xa0 [ 982.899484][T21908] ___sys_sendmsg+0x2a6/0x360 [ 982.904182][T21908] ? __sys_sendmsg+0x2a0/0x2a0 [ 982.908980][T21908] ? trace_call_bpf+0xc3/0x6c0 [ 982.913789][T21908] __se_sys_sendmsg+0x1c2/0x2b0 [ 982.918658][T21908] ? __x64_sys_sendmsg+0x80/0x80 [ 982.923624][T21908] ? lockdep_hardirqs_on+0x98/0x150 [ 982.928838][T21908] do_syscall_64+0x55/0xa0 [ 982.933264][T21908] ? clear_bhb_loop+0x40/0x90 [ 982.937968][T21908] ? clear_bhb_loop+0x40/0x90 [ 982.942661][T21908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 982.948574][T21908] RIP: 0033:0x7f5b30f9cdd9 [ 982.953001][T21908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.972616][T21908] RSP: 002b:00007f5b31ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.981045][T21908] RAX: ffffffffffffffda RBX: 00007f5b31215fa0 RCX: 00007f5b30f9cdd9 [ 982.989043][T21908] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 982.997045][T21908] RBP: 00007f5b31ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 983.005036][T21908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.013020][T21908] R13: 00007f5b31216038 R14: 00007f5b31215fa0 R15: 00007fff77081c68 [ 983.021021][T21908] [ 984.408476][T21946] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5250'. [ 984.467555][T21946] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 984.806406][T21949] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5253'. [ 989.610705][T21986] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5262'. [ 989.774600][T21993] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5263'. [ 989.797867][T21993] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 990.435555][T21999] FAULT_INJECTION: forcing a failure. [ 990.435555][T21999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.495515][T21999] CPU: 1 PID: 21999 Comm: syz.0.5265 Not tainted syzkaller #0 [ 990.503032][T21999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.513116][T21999] Call Trace: [ 990.516420][T21999] [ 990.519378][T21999] dump_stack_lvl+0x18c/0x250 [ 990.524093][T21999] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 990.530288][T21999] ? show_regs_print_info+0x20/0x20 [ 990.535527][T21999] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 990.541729][T21999] should_fail_ex+0x39d/0x4d0 [ 990.546454][T21999] _copy_from_user+0x2f/0xe0 [ 990.551083][T21999] __sys_bpf+0x23e/0x890 [ 990.555359][T21999] ? bpf_link_show_fdinfo+0x390/0x390 [ 990.560781][T21999] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 990.567001][T21999] __x64_sys_bpf+0x7c/0x90 [ 990.571447][T21999] do_syscall_64+0x55/0xa0 [ 990.575880][T21999] ? clear_bhb_loop+0x40/0x90 [ 990.580574][T21999] ? clear_bhb_loop+0x40/0x90 [ 990.585265][T21999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.591170][T21999] RIP: 0033:0x7f5d85b9cdd9 [ 990.595605][T21999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.615226][T21999] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.623652][T21999] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 990.631632][T21999] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 990.639611][T21999] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 990.647589][T21999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.655567][T21999] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 990.663555][T21999] [ 991.059535][T22006] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5268'. [ 991.828300][T22028] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5277'. [ 991.869847][T22025] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5275'. [ 991.987106][T22032] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5276'. [ 992.036159][T22032] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 992.537751][T22047] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5281'. [ 992.832167][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.839620][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.301982][T22054] mac80211_hwsim hwsim249 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 993.318523][T22056] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5287'. [ 993.843241][T22067] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5289'. [ 994.010542][T22074] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5292'. [ 994.041548][T22064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.054298][T22064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.063917][T22064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.075517][T22064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.138472][T12704] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 994.176264][T22074] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 994.632773][T22088] __nla_validate_parse: 1 callbacks suppressed [ 994.632788][T22088] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5296'. [ 995.359859][T22110] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5303'. [ 995.475828][T22116] netlink: 'syz.0.5305': attribute type 28 has an invalid length. [ 995.492883][T22116] netlink: 'syz.0.5305': attribute type 4 has an invalid length. [ 995.502045][T22116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5305'. [ 995.593323][T22114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.708892][ T7237] wlan1: Trigger new scan to find an IBSS to join [ 995.726265][T22122] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5308'. [ 995.914337][T22129] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5309'. [ 995.933544][T22129] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 995.952189][T22130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5311'. [ 995.979071][T22130] veth0_macvtap: left promiscuous mode [ 996.768660][T22147] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5315'. [ 997.316691][T22156] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5318'. [ 997.397671][T12704] Bluetooth: hci4: ISO packet for unknown connection handle 4095 [ 997.423595][T22156] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5318'. [ 997.448506][T22156] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 997.519746][T22161] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5319'. [ 998.629087][T22195] FAULT_INJECTION: forcing a failure. [ 998.629087][T22195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.730326][T22195] CPU: 1 PID: 22195 Comm: syz.0.5330 Not tainted syzkaller #0 [ 998.737846][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 998.747936][T22195] Call Trace: [ 998.751275][T22195] [ 998.754239][T22195] dump_stack_lvl+0x18c/0x250 [ 998.758971][T22195] ? show_regs_print_info+0x20/0x20 [ 998.764227][T22195] ? load_image+0x420/0x420 [ 998.768792][T22195] ? __might_fault+0xaa/0x120 [ 998.773508][T22195] should_fail_ex+0x39d/0x4d0 [ 998.778238][T22195] copyin+0x1a/0x90 [ 998.782091][T22195] _copy_from_iter+0x404/0x12e0 [ 998.786996][T22195] ? copyin+0x70/0x90 [ 998.791032][T22195] ? copyout_mc+0x70/0x70 [ 998.795406][T22195] ? copyout_mc+0x70/0x70 [ 998.799770][T22195] ? __virt_addr_valid+0x18c/0x540 [ 998.804925][T22195] ? page_copy_sane+0x16a/0x270 [ 998.809829][T22195] copy_page_from_iter+0x7b/0x100 [ 998.814903][T22195] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 998.820761][T22195] packet_sendmsg+0x3566/0x4d70 [ 998.825679][T22195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.831897][T22195] ? debug_lockdep_rcu_enabled+0x4/0x30 [ 998.837490][T22195] ? aa_sk_perm+0x83c/0x970 [ 998.842037][T22195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.848244][T22195] ? packet_getsockopt+0xad0/0xad0 [ 998.853409][T22195] ? trace_stack_print+0x100/0x3b0 [ 998.858559][T22195] ? irqentry_enter+0x37/0x50 [ 998.863274][T22195] ? aa_sock_msg_perm+0x94/0x150 [ 998.868262][T22195] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 998.873600][T22195] ? security_socket_sendmsg+0x80/0xa0 [ 998.879096][T22195] ? packet_getsockopt+0xad0/0xad0 [ 998.884252][T22195] ____sys_sendmsg+0x5ba/0x960 [ 998.889058][T22195] ? lockdep_hardirqs_on+0x98/0x150 [ 998.894310][T22195] ? __sys_sendmsg_sock+0x30/0x30 [ 998.899371][T22195] ? ___sys_sendmsg+0x28b/0x360 [ 998.904260][T22195] ___sys_sendmsg+0x2a6/0x360 [ 998.908977][T22195] ? __sys_sendmsg+0x2a0/0x2a0 [ 998.913796][T22195] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 998.920098][T22195] __se_sys_sendmsg+0x1c2/0x2b0 [ 998.925002][T22195] ? __x64_sys_sendmsg+0x80/0x80 [ 998.929964][T22195] ? lockdep_hardirqs_on+0x98/0x150 [ 998.935211][T22195] ? __x64_sys_sendmsg+0x1d/0x80 [ 998.940189][T22195] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 998.945701][T22195] do_syscall_64+0x55/0xa0 [ 998.950167][T22195] ? clear_bhb_loop+0x40/0x90 [ 998.954883][T22195] ? clear_bhb_loop+0x40/0x90 [ 998.959600][T22195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.965531][T22195] RIP: 0033:0x7f5d85b9cdd9 [ 998.969978][T22195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.989618][T22195] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.998075][T22195] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 999.006086][T22195] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 999.014111][T22195] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 999.022119][T22195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.030125][T22195] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 999.038153][T22195] [ 999.602735][T12704] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 999.671887][T22205] __nla_validate_parse: 3 callbacks suppressed [ 999.671902][T22205] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5331'. [ 999.688399][T22205] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1000.049669][T22219] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5338'. [ 1000.069582][T22219] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1000.669025][ T1090] wlan1: Trigger new scan to find an IBSS to join [ 1001.092288][T22224] netlink: 'syz.0.5339': attribute type 1 has an invalid length. [ 1001.111113][T22224] netlink: 'syz.0.5339': attribute type 4 has an invalid length. [ 1001.141924][T22224] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5339'. [ 1001.174284][T22228] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5342'. [ 1001.671034][ T7234] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1001.889378][T22254] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5350'. [ 1001.920603][T22254] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1002.439576][T22264] netlink: 'syz.2.5353': attribute type 1 has an invalid length. [ 1002.467547][T22264] netlink: 'syz.2.5353': attribute type 4 has an invalid length. [ 1002.508826][T22264] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1002.744164][T22266] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5354'. [ 1002.905606][T22275] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1003.394146][T22290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5364'. [ 1003.546259][T22295] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1004.040093][T22309] syzkaller0: entered promiscuous mode [ 1004.045777][T22309] syzkaller0: entered allmulticast mode [ 1005.151623][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 1005.182786][T22338] __nla_validate_parse: 2 callbacks suppressed [ 1005.182803][T22338] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1006.185059][T22335] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 1006.192920][T22335] netlink: 'syz.1.5381': attribute type 4 has an invalid length. [ 1006.201162][T22335] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5381'. [ 1007.057146][T22362] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1007.222075][T22366] netlink: 'syz.0.5392': attribute type 1 has an invalid length. [ 1007.267084][T22366] netlink: 'syz.0.5392': attribute type 4 has an invalid length. [ 1007.314609][T22366] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5392'. [ 1007.613616][T22370] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5393'. [ 1008.499066][T22394] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 1008.506874][T22394] netlink: 'syz.3.5402': attribute type 4 has an invalid length. [ 1008.651276][T22394] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1009.221941][T22412] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5408'. [ 1009.479735][T22421] netlink: 'syz.3.5413': attribute type 1 has an invalid length. [ 1009.487793][T22421] netlink: 'syz.3.5413': attribute type 4 has an invalid length. [ 1009.505633][T22421] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5413'. [ 1009.588936][T22426] netlink: 'syz.2.5412': attribute type 21 has an invalid length. [ 1009.638741][T22426] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1010.922041][T22451] netlink: 'syz.0.5422': attribute type 1 has an invalid length. [ 1010.930101][T22451] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1011.079466][T22457] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5425'. [ 1012.235600][T22480] validate_nla: 1 callbacks suppressed [ 1012.235619][T22480] netlink: 'syz.1.5433': attribute type 1 has an invalid length. [ 1012.249583][T22480] netlink: 'syz.1.5433': attribute type 4 has an invalid length. [ 1012.257843][T22480] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1012.622423][T22486] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1013.879773][T22496] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5439'. [ 1013.986330][T22505] FAULT_INJECTION: forcing a failure. [ 1013.986330][T22505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.022797][T22505] CPU: 0 PID: 22505 Comm: syz.1.5441 Not tainted syzkaller #0 [ 1014.030342][T22505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.040440][T22505] Call Trace: [ 1014.043742][T22505] [ 1014.046694][T22505] dump_stack_lvl+0x18c/0x250 [ 1014.051431][T22505] ? show_regs_print_info+0x20/0x20 [ 1014.056677][T22505] ? load_image+0x420/0x420 [ 1014.061214][T22505] ? __might_fault+0xaa/0x120 [ 1014.065952][T22505] ? __lock_acquire+0x7d40/0x7d40 [ 1014.071021][T22505] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1014.076702][T22505] should_fail_ex+0x39d/0x4d0 [ 1014.081459][T22505] _copy_from_user+0x2f/0xe0 [ 1014.086104][T22505] sock_do_ioctl+0x190/0x310 [ 1014.090750][T22505] ? sock_show_fdinfo+0xb0/0xb0 [ 1014.095671][T22505] sock_ioctl+0x5ba/0x7e0 [ 1014.100047][T22505] ? sock_poll+0x3e0/0x3e0 [ 1014.104523][T22505] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1014.109505][T22505] ? security_file_ioctl+0x80/0xa0 [ 1014.114665][T22505] ? sock_poll+0x3e0/0x3e0 [ 1014.119135][T22505] __se_sys_ioctl+0xfd/0x170 [ 1014.123777][T22505] do_syscall_64+0x55/0xa0 [ 1014.128253][T22505] ? clear_bhb_loop+0x40/0x90 [ 1014.132973][T22505] ? clear_bhb_loop+0x40/0x90 [ 1014.137700][T22505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.143665][T22505] RIP: 0033:0x7f5b30f9cdd9 [ 1014.148128][T22505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.167785][T22505] RSP: 002b:00007f5b31ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.176253][T22505] RAX: ffffffffffffffda RBX: 00007f5b31215fa0 RCX: 00007f5b30f9cdd9 [ 1014.184261][T22505] RDX: 0000200000000200 RSI: 0000000000008995 RDI: 0000000000000003 [ 1014.192272][T22505] RBP: 00007f5b31ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.200277][T22505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.208272][T22505] R13: 00007f5b31216038 R14: 00007f5b31215fa0 R15: 00007fff77081c68 [ 1014.216284][T22505] [ 1014.383041][T22513] netlink: 'syz.0.5445': attribute type 6 has an invalid length. [ 1014.393652][T22513] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1014.489212][T22516] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1015.259174][T22522] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1015.764028][T22542] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1015.999496][T22541] syzkaller0: entered promiscuous mode [ 1016.006513][T22541] syzkaller0: entered allmulticast mode [ 1016.593111][T22566] netlink: 'syz.2.5462': attribute type 28 has an invalid length. [ 1016.602192][T22566] netlink: 'syz.2.5462': attribute type 3 has an invalid length. [ 1016.615803][T22566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5462'. [ 1019.286415][T22563] netlink: 'syz.2.5462': attribute type 28 has an invalid length. [ 1019.559558][T22576] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5463'. [ 1021.254353][T22575] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1021.522147][ T7234] tipc: Subscription rejected, illegal request [ 1022.690963][T22610] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1022.887010][T22618] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5479'. [ 1023.331175][T22626] syzkaller0: entered promiscuous mode [ 1023.336909][T22626] syzkaller0: entered allmulticast mode [ 1023.347022][T22627] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1023.356588][T22627] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1023.692464][T22634] FAULT_INJECTION: forcing a failure. [ 1023.692464][T22634] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.705839][T22634] CPU: 0 PID: 22634 Comm: syz.2.5482 Not tainted syzkaller #0 [ 1023.713358][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.723478][T22634] Call Trace: [ 1023.726807][T22634] [ 1023.729786][T22634] dump_stack_lvl+0x18c/0x250 [ 1023.734537][T22634] ? show_regs_print_info+0x20/0x20 [ 1023.739807][T22634] ? load_image+0x420/0x420 [ 1023.744390][T22634] ? __might_sleep+0xe0/0xe0 [ 1023.749035][T22634] ? __lock_acquire+0x7d40/0x7d40 [ 1023.754115][T22634] ? unwind_get_return_address+0x91/0xc0 [ 1023.759798][T22634] ? stack_trace_save+0x100/0x100 [ 1023.764896][T22634] should_fail_ex+0x39d/0x4d0 [ 1023.769652][T22634] should_failslab+0x9/0x20 [ 1023.774216][T22634] slab_pre_alloc_hook+0x59/0x310 [ 1023.779303][T22634] ? stack_trace_save+0xaa/0x100 [ 1023.784301][T22634] kmem_cache_alloc_node+0x60/0x320 [ 1023.789560][T22634] ? __alloc_skb+0x103/0x2c0 [ 1023.794220][T22634] __alloc_skb+0x103/0x2c0 [ 1023.798704][T22634] __ip_append_data+0x2b73/0x3d40 [ 1023.803772][T22634] ? do_syscall_64+0x55/0xa0 [ 1023.808408][T22634] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.814604][T22634] ? raw_send_hdrinc+0x1170/0x1170 [ 1023.819805][T22634] ? ip_setup_cork+0x860/0x860 [ 1023.824634][T22634] ? ip_setup_cork+0x530/0x860 [ 1023.829477][T22634] ip_append_data+0x10d/0x180 [ 1023.834242][T22634] ? raw_send_hdrinc+0x1170/0x1170 [ 1023.839423][T22634] raw_sendmsg+0x15c1/0x1c00 [ 1023.844119][T22634] ? compat_raw_ioctl+0x70/0x70 [ 1023.849081][T22634] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1023.855542][T22634] ? sock_rps_record_flow+0x19/0x3f0 [ 1023.860869][T22634] ? inet_sendmsg+0x7c/0x2f0 [ 1023.865487][T22634] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1023.870800][T22634] ? security_socket_sendmsg+0x80/0xa0 [ 1023.876296][T22634] ? inet_send_prepare+0x260/0x260 [ 1023.881448][T22634] ____sys_sendmsg+0x5ba/0x960 [ 1023.886247][T22634] ? __lock_acquire+0x7d40/0x7d40 [ 1023.891313][T22634] ? __sys_sendmsg_sock+0x30/0x30 [ 1023.896358][T22634] ? __import_iovec+0x3fa/0x850 [ 1023.901253][T22634] ? import_iovec+0x73/0xa0 [ 1023.905794][T22634] ___sys_sendmsg+0x2a6/0x360 [ 1023.910525][T22634] ? __sys_sendmsg+0x2a0/0x2a0 [ 1023.915371][T22634] ? __lock_acquire+0x7d40/0x7d40 [ 1023.920479][T22634] __se_sys_sendmsg+0x1c2/0x2b0 [ 1023.925370][T22634] ? __x64_sys_sendmsg+0x80/0x80 [ 1023.930375][T22634] ? lockdep_hardirqs_on+0x98/0x150 [ 1023.935612][T22634] do_syscall_64+0x55/0xa0 [ 1023.940049][T22634] ? clear_bhb_loop+0x40/0x90 [ 1023.944772][T22634] ? clear_bhb_loop+0x40/0x90 [ 1023.949505][T22634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.955430][T22634] RIP: 0033:0x7fedb9b9cdd9 [ 1023.959883][T22634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.979531][T22634] RSP: 002b:00007fedba97e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.987984][T22634] RAX: ffffffffffffffda RBX: 00007fedb9e15fa0 RCX: 00007fedb9b9cdd9 [ 1023.995983][T22634] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 000000000000000f [ 1024.003986][T22634] RBP: 00007fedba97e090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.011980][T22634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.019987][T22634] R13: 00007fedb9e16038 R14: 00007fedb9e15fa0 R15: 00007ffd0ca1c9c8 [ 1024.028025][T22634] [ 1024.228389][T22641] netlink: 'syz.2.5486': attribute type 1 has an invalid length. [ 1024.236176][T22641] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.5486'. [ 1025.733494][T22645] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1025.743390][T22651] bond0: entered promiscuous mode [ 1025.748528][T22651] bond_slave_1: entered promiscuous mode [ 1025.754443][T22651] team0: entered promiscuous mode [ 1025.759720][T22651] team_slave_1: entered promiscuous mode [ 1025.765780][T22651] bond0: entered allmulticast mode [ 1025.771315][T22651] bond_slave_1: entered allmulticast mode [ 1025.777147][T22651] team0: entered allmulticast mode [ 1025.782426][T22651] team_slave_1: entered allmulticast mode [ 1025.828292][T22646] syzkaller0: entered promiscuous mode [ 1025.833940][T22646] syzkaller0: entered allmulticast mode [ 1026.032152][T22664] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1027.616012][T22667] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5493'. [ 1027.625860][T22667] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1027.915251][T22684] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5498'. [ 1028.019222][T22691] FAULT_INJECTION: forcing a failure. [ 1028.019222][T22691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.042526][T22691] CPU: 1 PID: 22691 Comm: syz.3.5500 Not tainted syzkaller #0 [ 1028.050053][T22691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1028.060138][T22691] Call Trace: [ 1028.063452][T22691] [ 1028.066410][T22691] dump_stack_lvl+0x18c/0x250 [ 1028.071134][T22691] ? show_regs_print_info+0x20/0x20 [ 1028.076381][T22691] ? load_image+0x420/0x420 [ 1028.080940][T22691] ? __might_fault+0xaa/0x120 [ 1028.085647][T22691] ? __lock_acquire+0x7d40/0x7d40 [ 1028.090752][T22691] should_fail_ex+0x39d/0x4d0 [ 1028.095491][T22691] _copy_from_user+0x2f/0xe0 [ 1028.100131][T22691] csum_and_copy_from_iter+0x662/0x14a0 [ 1028.105719][T22691] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1028.111390][T22691] ? __alloc_pages+0x27a/0x460 [ 1028.116200][T22691] ? zone_statistics+0x170/0x170 [ 1028.121184][T22691] ? rcu_is_watching+0x15/0xb0 [ 1028.126035][T22691] ip_generic_getfrag+0x163/0x2f0 [ 1028.131103][T22691] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1028.136001][T22691] ? skb_page_frag_refill+0x199/0x310 [ 1028.141420][T22691] __ip_append_data+0x1f30/0x3d40 [ 1028.146514][T22691] ? raw_send_hdrinc+0x1170/0x1170 [ 1028.151689][T22691] ? ip_setup_cork+0x860/0x860 [ 1028.156498][T22691] ? ip_setup_cork+0x530/0x860 [ 1028.161306][T22691] ip_append_data+0x10d/0x180 [ 1028.166027][T22691] ? raw_send_hdrinc+0x1170/0x1170 [ 1028.171194][T22691] raw_sendmsg+0x15c1/0x1c00 [ 1028.175854][T22691] ? compat_raw_ioctl+0x70/0x70 [ 1028.180742][T22691] ? __lock_acquire+0x1273/0x7d40 [ 1028.185839][T22691] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1028.192314][T22691] ? sock_rps_record_flow+0x19/0x3f0 [ 1028.197653][T22691] ? inet_sendmsg+0x7c/0x2f0 [ 1028.202275][T22691] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1028.207602][T22691] ? security_socket_sendmsg+0x80/0xa0 [ 1028.213098][T22691] ? inet_send_prepare+0x260/0x260 [ 1028.218262][T22691] ____sys_sendmsg+0x5ba/0x960 [ 1028.223101][T22691] ? __lock_acquire+0x7d40/0x7d40 [ 1028.228167][T22691] ? __asan_memset+0x22/0x40 [ 1028.232803][T22691] ? __sys_sendmsg_sock+0x30/0x30 [ 1028.237879][T22691] ? __import_iovec+0x3fa/0x850 [ 1028.242771][T22691] ? import_iovec+0x73/0xa0 [ 1028.247320][T22691] ___sys_sendmsg+0x2a6/0x360 [ 1028.252045][T22691] ? get_pid_task+0x20/0x1e0 [ 1028.256688][T22691] ? __sys_sendmsg+0x2a0/0x2a0 [ 1028.261518][T22691] ? __lock_acquire+0x7d40/0x7d40 [ 1028.266631][T22691] __se_sys_sendmsg+0x1c2/0x2b0 [ 1028.271532][T22691] ? __x64_sys_sendmsg+0x80/0x80 [ 1028.276530][T22691] ? lockdep_hardirqs_on+0x98/0x150 [ 1028.281796][T22691] do_syscall_64+0x55/0xa0 [ 1028.286257][T22691] ? clear_bhb_loop+0x40/0x90 [ 1028.290967][T22691] ? clear_bhb_loop+0x40/0x90 [ 1028.295690][T22691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1028.301643][T22691] RIP: 0033:0x7f1d9319cdd9 [ 1028.306128][T22691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.325767][T22691] RSP: 002b:00007f1d94038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.334233][T22691] RAX: ffffffffffffffda RBX: 00007f1d93415fa0 RCX: 00007f1d9319cdd9 [ 1028.342252][T22691] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1028.350266][T22691] RBP: 00007f1d94038090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.358281][T22691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.366284][T22691] R13: 00007f1d93416038 R14: 00007f1d93415fa0 R15: 00007ffec08eb458 [ 1028.374295][T22691] [ 1028.402660][T22693] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 1028.410995][T22693] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 1028.423899][T22693] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 1028.434534][T22693] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 1028.461105][T22701] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5503'. [ 1028.474134][T22701] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.501098][T22693] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1028.523370][T22693] netlink: zone id is out of range [ 1028.538860][T22693] netlink: zone id is out of range [ 1028.544027][T22693] netlink: zone id is out of range [ 1028.559754][T22693] netlink: zone id is out of range [ 1028.577363][T22693] netlink: zone id is out of range [ 1028.583770][T22693] netlink: zone id is out of range [ 1028.595040][T22693] netlink: zone id is out of range [ 1028.611931][T22693] netlink: zone id is out of range [ 1028.624004][T22693] netlink: zone id is out of range [ 1028.636697][T22705] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5504'. [ 1029.456500][T22718] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5510'. [ 1029.750095][T22730] À: port 1(vlan0) entered blocking state [ 1029.758635][T22730] À: port 1(vlan0) entered disabled state [ 1029.765884][T22730] vlan0: entered allmulticast mode [ 1029.772019][T22730] veth0_vlan: entered allmulticast mode [ 1029.801884][T22730] vlan0: entered promiscuous mode [ 1030.299367][T22748] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5517'. [ 1030.360641][T22750] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1030.667043][T22761] netlink: 'syz.0.5522': attribute type 25 has an invalid length. [ 1031.369977][T22780] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1031.762097][ T7237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1034.505151][T22794] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.5534'. [ 1034.537138][T22793] delete_channel: no stack [ 1034.554836][T22796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1034.795360][T22805] syzkaller0: entered promiscuous mode [ 1034.803217][T22805] syzkaller0: entered allmulticast mode [ 1035.195844][T22820] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1035.881916][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 1036.822505][T22808] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5538'. [ 1036.832042][T22808] net_ratelimit: 48 callbacks suppressed [ 1036.832063][T22808] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.957421][T22827] netlink: 'syz.3.5545': attribute type 10 has an invalid length. [ 1036.965297][T22827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5545'. [ 1037.021664][T22827] bridge0: port 3(veth0_vlan) entered blocking state [ 1037.030988][T22827] bridge0: port 3(veth0_vlan) entered disabled state [ 1037.042650][T22827] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1037.111376][T22833] netlink: 'syz.1.5547': attribute type 3 has an invalid length. [ 1037.112703][T22834] À: port 1(vlan0) entered blocking state [ 1037.119367][T22833] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.5547'. [ 1037.137445][T22834] À: port 1(vlan0) entered disabled state [ 1037.143379][T22834] vlan0: entered allmulticast mode [ 1037.176235][T22834] veth0_vlan: entered allmulticast mode [ 1037.183154][T22834] vlan0: entered promiscuous mode [ 1037.211432][T22837] FAULT_INJECTION: forcing a failure. [ 1037.211432][T22837] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.244518][T22837] CPU: 0 PID: 22837 Comm: syz.2.5548 Not tainted syzkaller #0 [ 1037.252027][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.262112][T22837] Call Trace: [ 1037.265422][T22837] [ 1037.268378][T22837] dump_stack_lvl+0x18c/0x250 [ 1037.273106][T22837] ? show_regs_print_info+0x20/0x20 [ 1037.278341][T22837] ? load_image+0x420/0x420 [ 1037.282911][T22837] ? __might_sleep+0xe0/0xe0 [ 1037.287539][T22837] ? __lock_acquire+0x7d40/0x7d40 [ 1037.292613][T22837] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 1037.298302][T22837] should_fail_ex+0x39d/0x4d0 [ 1037.303041][T22837] should_failslab+0x9/0x20 [ 1037.307582][T22837] slab_pre_alloc_hook+0x59/0x310 [ 1037.312649][T22837] kmem_cache_alloc_node+0x60/0x320 [ 1037.317886][T22837] ? __alloc_skb+0x103/0x2c0 [ 1037.322523][T22837] __alloc_skb+0x103/0x2c0 [ 1037.326974][T22837] rtmsg_fib+0xeb/0x4c0 [ 1037.331164][T22837] ? atomic_notifier_call_chain+0x16e/0x180 [ 1037.337088][T22837] fib_table_delete+0xd04/0xff0 [ 1037.341977][T22837] ? nexthop_get_nhc_lookup+0x400/0x400 [ 1037.347546][T22837] ? l3mdev_fib_table+0x18/0x160 [ 1037.352525][T22837] ? fib_new_table+0x10a/0x2d0 [ 1037.357312][T22837] fib_magic+0x305/0x3c0 [ 1037.361564][T22837] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.366787][T22837] ? fib_add_ifaddr+0x5e0/0x5e0 [ 1037.371678][T22837] fib_del_ifaddr+0x1082/0x1480 [ 1037.376547][T22837] ? inetaddr_event+0xf0/0x150 [ 1037.381334][T22837] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 1037.387953][T22837] ? netlink_broadcast_filtered+0x10a4/0x1110 [ 1037.394049][T22837] fib_inetaddr_event+0xbb/0x1d0 [ 1037.399015][T22837] notifier_call_chain+0x197/0x380 [ 1037.404159][T22837] blocking_notifier_call_chain+0x6a/0x90 [ 1037.409907][T22837] __inet_del_ifa+0x879/0x1020 [ 1037.414707][T22837] inetdev_event+0x671/0x1630 [ 1037.419407][T22837] ? devinet_exit_net+0x220/0x220 [ 1037.424461][T22837] notifier_call_chain+0x197/0x380 [ 1037.429603][T22837] dev_set_mtu_ext+0x463/0x680 [ 1037.434395][T22837] ? deref_stack_reg+0x1bd/0x240 [ 1037.439350][T22837] ? dev_validate_mtu+0x170/0x170 [ 1037.444424][T22837] ? is_bpf_text_address+0x28f/0x2a0 [ 1037.449730][T22837] ? is_bpf_text_address+0x26/0x2a0 [ 1037.454962][T22837] do_setlink+0x92f/0x4130 [ 1037.459397][T22837] ? arch_stack_walk+0x160/0x190 [ 1037.464363][T22837] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1037.470534][T22837] ? stack_trace_save+0xaa/0x100 [ 1037.475505][T22837] ? __nla_validate_parse+0x2522/0x2ea0 [ 1037.481097][T22837] ? __nla_validate+0x50/0x50 [ 1037.485810][T22837] ? validate_linkmsg+0x719/0x910 [ 1037.490854][T22837] rtnl_newlink+0x17da/0x20a0 [ 1037.495555][T22837] ? rtnl_newlink+0x481/0x20a0 [ 1037.500339][T22837] ? rtnl_setlink+0x4e0/0x4e0 [ 1037.505039][T22837] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1037.511216][T22837] ? rcu_is_watching+0x15/0xb0 [ 1037.515999][T22837] ? trace_contention_end+0x39/0xe0 [ 1037.521212][T22837] ? __mutex_lock+0x315/0xcc0 [ 1037.525921][T22837] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1037.531056][T22837] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1037.536180][T22837] ? rtnl_setlink+0x4e0/0x4e0 [ 1037.540879][T22837] rtnetlink_rcv_msg+0x869/0xfa0 [ 1037.545838][T22837] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.551062][T22837] ? rtnetlink_bind+0x80/0x80 [ 1037.555760][T22837] ? perf_trace_preemptirq_template+0xac/0x330 [ 1037.561946][T22837] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1037.567947][T22837] ? lock_chain_count+0x20/0x20 [ 1037.572822][T22837] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1037.578207][T22837] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.583423][T22837] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1037.588820][T22837] ? _local_bh_enable+0xa0/0xa0 [ 1037.593694][T22837] ? __dev_queue_xmit+0x265/0x3660 [ 1037.598829][T22837] ? __dev_queue_xmit+0x265/0x3660 [ 1037.603967][T22837] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1037.609200][T22837] ? __dev_queue_xmit+0x265/0x3660 [ 1037.614343][T22837] ? ref_tracker_free+0x690/0x840 [ 1037.619393][T22837] netlink_rcv_skb+0x241/0x4d0 [ 1037.624192][T22837] ? rtnetlink_bind+0x80/0x80 [ 1037.628893][T22837] ? netlink_ack+0x1180/0x1180 [ 1037.633696][T22837] ? __lock_acquire+0x7d40/0x7d40 [ 1037.638768][T22837] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.644002][T22837] netlink_unicast+0x751/0x8d0 [ 1037.648795][T22837] netlink_sendmsg+0x8d0/0xbf0 [ 1037.653595][T22837] ? netlink_getsockopt+0x590/0x590 [ 1037.658824][T22837] ? aa_sock_msg_perm+0x94/0x150 [ 1037.663786][T22837] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1037.669088][T22837] ? security_socket_sendmsg+0x80/0xa0 [ 1037.674559][T22837] ? netlink_getsockopt+0x590/0x590 [ 1037.679787][T22837] ____sys_sendmsg+0x5ba/0x960 [ 1037.684577][T22837] ? __asan_memset+0x22/0x40 [ 1037.689199][T22837] ? __sys_sendmsg_sock+0x30/0x30 [ 1037.694257][T22837] ? __import_iovec+0x5f2/0x850 [ 1037.699131][T22837] ? import_iovec+0x73/0xa0 [ 1037.703668][T22837] ___sys_sendmsg+0x2a6/0x360 [ 1037.708362][T22837] ? get_pid_task+0x20/0x1e0 [ 1037.712975][T22837] ? __sys_sendmsg+0x2a0/0x2a0 [ 1037.717777][T22837] ? __lock_acquire+0x7d40/0x7d40 [ 1037.722848][T22837] __se_sys_sendmsg+0x1c2/0x2b0 [ 1037.727719][T22837] ? __x64_sys_sendmsg+0x80/0x80 [ 1037.732691][T22837] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.737918][T22837] do_syscall_64+0x55/0xa0 [ 1037.742343][T22837] ? clear_bhb_loop+0x40/0x90 [ 1037.747030][T22837] ? clear_bhb_loop+0x40/0x90 [ 1037.751760][T22837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.757669][T22837] RIP: 0033:0x7fedb9b9cdd9 [ 1037.762102][T22837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.781730][T22837] RSP: 002b:00007fedba97e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.790181][T22837] RAX: ffffffffffffffda RBX: 00007fedb9e15fa0 RCX: 00007fedb9b9cdd9 [ 1037.798170][T22837] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 0000000000000003 [ 1037.806155][T22837] RBP: 00007fedba97e090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.814149][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.822144][T22837] R13: 00007fedb9e16038 R14: 00007fedb9e15fa0 R15: 00007ffd0ca1c9c8 [ 1037.830137][T22837] [ 1037.875160][T22837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.137421][T22852] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5552'. [ 1038.154877][T22847] FAULT_INJECTION: forcing a failure. [ 1038.154877][T22847] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.180536][T22847] CPU: 1 PID: 22847 Comm: syz.0.5553 Not tainted syzkaller #0 [ 1038.188066][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1038.196632][T22852] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1038.198158][T22847] Call Trace: [ 1038.198169][T22847] [ 1038.198178][T22847] dump_stack_lvl+0x18c/0x250 [ 1038.198218][T22847] ? show_regs_print_info+0x20/0x20 [ 1038.198249][T22847] ? load_image+0x420/0x420 [ 1038.198273][T22847] ? lockdep_hardirqs_on+0x98/0x150 [ 1038.240244][T22847] should_fail_ex+0x39d/0x4d0 [ 1038.244992][T22847] should_failslab+0x9/0x20 [ 1038.249547][T22847] slab_pre_alloc_hook+0x59/0x310 [ 1038.254624][T22847] ? __lock_acquire+0x7d40/0x7d40 [ 1038.259695][T22847] kmem_cache_alloc_node+0x60/0x320 [ 1038.264960][T22847] ? __alloc_skb+0x103/0x2c0 [ 1038.269640][T22847] __alloc_skb+0x103/0x2c0 [ 1038.274094][T22847] netlink_sendmsg+0x66a/0xbf0 [ 1038.278936][T22847] ? netlink_getsockopt+0x590/0x590 [ 1038.284178][T22847] ? aa_sock_msg_perm+0x94/0x150 [ 1038.289172][T22847] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1038.294509][T22847] ? security_socket_sendmsg+0x80/0xa0 [ 1038.300006][T22847] ? netlink_getsockopt+0x590/0x590 [ 1038.305264][T22847] ____sys_sendmsg+0x5ba/0x960 [ 1038.310084][T22847] ? __asan_memset+0x22/0x40 [ 1038.314724][T22847] ? __sys_sendmsg_sock+0x30/0x30 [ 1038.319773][T22847] ? __import_iovec+0x5f2/0x850 [ 1038.324661][T22847] ? import_iovec+0x73/0xa0 [ 1038.329202][T22847] ___sys_sendmsg+0x2a6/0x360 [ 1038.333923][T22847] ? get_pid_task+0x20/0x1e0 [ 1038.338579][T22847] ? __sys_sendmsg+0x2a0/0x2a0 [ 1038.343441][T22847] __se_sys_sendmsg+0x1c2/0x2b0 [ 1038.348332][T22847] ? __x64_sys_sendmsg+0x80/0x80 [ 1038.353316][T22847] ? lockdep_hardirqs_on+0x98/0x150 [ 1038.358560][T22847] do_syscall_64+0x55/0xa0 [ 1038.363008][T22847] ? clear_bhb_loop+0x40/0x90 [ 1038.363292][T22850] netlink: 'syz.1.5554': attribute type 29 has an invalid length. [ 1038.367703][T22847] ? clear_bhb_loop+0x40/0x90 [ 1038.367732][T22847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.367755][T22847] RIP: 0033:0x7f5d85b9cdd9 [ 1038.367773][T22847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.367789][T22847] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.367811][T22847] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 1038.367825][T22847] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 1038.367836][T22847] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.367848][T22847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.367859][T22847] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 1038.367888][T22847] [ 1038.432003][T22850] netlink: 'syz.1.5554': attribute type 29 has an invalid length. [ 1038.594646][T22861] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5555'. [ 1040.225227][T22888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5567'. [ 1040.390306][T22891] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5568'. [ 1041.826420][T22910] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1041.872028][T22910] netlink: zone id is out of range [ 1041.883528][T22910] netlink: zone id is out of range [ 1041.896281][T22910] netlink: zone id is out of range [ 1041.909952][T22910] netlink: zone id is out of range [ 1041.930312][T22910] netlink: zone id is out of range [ 1041.952786][T22910] netlink: zone id is out of range [ 1041.975507][T22910] netlink: zone id is out of range [ 1042.005272][T22910] netlink: zone id is out of range [ 1042.026568][T22910] netlink: zone id is out of range [ 1042.051491][T22910] netlink: zone id is out of range [ 1042.196234][T22913] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1042.762888][T22921] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5579'. [ 1043.306989][T22941] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5585'. [ 1043.498920][T22945] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1043.898296][T22954] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1044.142137][T22963] netlink: 'syz.3.5595': attribute type 4 has an invalid length. [ 1044.177318][T22963] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5595'. [ 1044.418068][T22975] FAULT_INJECTION: forcing a failure. [ 1044.418068][T22975] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.435484][T22975] CPU: 1 PID: 22975 Comm: syz.1.5599 Not tainted syzkaller #0 [ 1044.442998][T22975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1044.453086][T22975] Call Trace: [ 1044.456397][T22975] [ 1044.459365][T22975] dump_stack_lvl+0x18c/0x250 [ 1044.464102][T22975] ? show_regs_print_info+0x20/0x20 [ 1044.469363][T22975] ? load_image+0x420/0x420 [ 1044.473915][T22975] ? __lock_acquire+0x7d40/0x7d40 [ 1044.478978][T22975] ? kobject_set_name_vargs+0x61/0x110 [ 1044.484480][T22975] ? rcu_is_watching+0x15/0xb0 [ 1044.489291][T22975] should_fail_ex+0x39d/0x4d0 [ 1044.494011][T22975] should_failslab+0x9/0x20 [ 1044.498560][T22975] slab_pre_alloc_hook+0x59/0x310 [ 1044.503638][T22975] ? device_add+0xbe/0xc20 [ 1044.508095][T22975] __kmem_cache_alloc_node+0x53/0x250 [ 1044.513523][T22975] ? device_add+0xbe/0xc20 [ 1044.517981][T22975] kmalloc_trace+0x2a/0xe0 [ 1044.522479][T22975] device_add+0xbe/0xc20 [ 1044.526772][T22975] ? device_initialize+0x24b/0x440 [ 1044.531924][T22975] netdev_register_kobject+0x188/0x320 [ 1044.537431][T22975] register_netdevice+0x12ee/0x1bb0 [ 1044.542680][T22975] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1044.549138][T22975] ? dev_addr_mod+0x2b9/0x3b0 [ 1044.553866][T22975] ? tun_net_initialize+0x158/0x480 [ 1044.559102][T22975] ? tun_not_capable+0x1f0/0x1f0 [ 1044.564085][T22975] ? alloc_netdev_mqs+0xc34/0x1040 [ 1044.569249][T22975] tun_set_iff+0x848/0xed0 [ 1044.573736][T22975] __tun_chr_ioctl+0x7ee/0x2000 [ 1044.578632][T22975] ? tun_flow_create+0x310/0x310 [ 1044.583641][T22975] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1044.588612][T22975] ? security_file_ioctl+0x80/0xa0 [ 1044.593756][T22975] ? tun_chr_poll+0x630/0x630 [ 1044.598467][T22975] __se_sys_ioctl+0xfd/0x170 [ 1044.603100][T22975] do_syscall_64+0x55/0xa0 [ 1044.607554][T22975] ? clear_bhb_loop+0x40/0x90 [ 1044.612271][T22975] ? clear_bhb_loop+0x40/0x90 [ 1044.616989][T22975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.622965][T22975] RIP: 0033:0x7f5b30f9cdd9 [ 1044.627415][T22975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.647060][T22975] RSP: 002b:00007f5b31ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.655510][T22975] RAX: ffffffffffffffda RBX: 00007f5b31215fa0 RCX: 00007f5b30f9cdd9 [ 1044.663516][T22975] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 1044.671522][T22975] RBP: 00007f5b31ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.679523][T22975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1044.687523][T22975] R13: 00007f5b31216038 R14: 00007f5b31215fa0 R15: 00007fff77081c68 [ 1044.695544][T22975] [ 1044.822047][T22977] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1045.099659][T22986] netlink: 'syz.2.5603': attribute type 10 has an invalid length. [ 1045.691651][T22986] team0: Port device geneve1 added [ 1045.714126][T22995] __nla_validate_parse: 1 callbacks suppressed [ 1045.714142][T22995] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1046.071359][T23007] : renamed from veth0_to_bond (while UP) [ 1046.133060][T23013] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5612'. [ 1046.461244][T23021] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5614'. [ 1046.566903][T23023] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1046.779904][T23032] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1046.803451][T23035] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5619'. [ 1047.082570][T23047] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5623'. [ 1047.490949][T23064] netlink: 'syz.2.5630': attribute type 10 has an invalid length. [ 1047.704943][T23068] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1047.758800][T23072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5633'. [ 1048.288075][T23082] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5635'. [ 1048.318147][T23082] net_ratelimit: 53 callbacks suppressed [ 1048.318163][T23082] netlink: zone id is out of range [ 1048.331370][T23082] netlink: zone id is out of range [ 1048.336585][T23082] netlink: zone id is out of range [ 1048.352987][T23082] netlink: zone id is out of range [ 1048.375591][T23089] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1048.397274][T23082] netlink: zone id is out of range [ 1048.402576][T23082] netlink: zone id is out of range [ 1048.452772][T23082] netlink: zone id is out of range [ 1048.483984][T23082] netlink: zone id is out of range [ 1048.515660][T23082] netlink: zone id is out of range [ 1051.239064][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.571967][T23102] __nla_validate_parse: 1 callbacks suppressed [ 1051.571985][T23102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1052.315685][T23125] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5653'. [ 1052.548467][T23134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5657'. [ 1052.935382][T23145] netlink: 'syz.2.5662': attribute type 27 has an invalid length. [ 1052.955587][T23145] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5662'. [ 1053.193352][T23147] netlink: 'syz.2.5663': attribute type 10 has an invalid length. [ 1053.214243][T23147] team0: Device ipvlan1 failed to register rx_handler [ 1053.446711][T23158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5667'. [ 1054.080249][T23174] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1054.102267][T23174] net_ratelimit: 52 callbacks suppressed [ 1054.102283][T23174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1054.272319][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.286040][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.475711][T23194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5680'. [ 1054.791043][T23205] netlink: 'syz.3.5684': attribute type 6 has an invalid length. [ 1056.655571][T23226] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1056.674961][T23224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1056.991887][T23238] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1057.021125][T23238] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1057.142729][T23242] netlink: 'syz.1.5699': attribute type 2 has an invalid length. [ 1057.166960][T23242] netlink: 'syz.1.5699': attribute type 1 has an invalid length. [ 1057.183920][T23242] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5699'. [ 1057.535629][T23253] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5703'. [ 1057.712428][T23260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1057.760208][T23263] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5708'. [ 1058.068167][T23266] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1058.218035][T23279] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5713'. [ 1058.651845][T23280] netlink: 'syz.0.5714': attribute type 10 has an invalid length. [ 1058.670870][T23292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5718'. [ 1058.690303][T23294] FAULT_INJECTION: forcing a failure. [ 1058.690303][T23294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.706445][T23280] team0: Device ipvlan1 failed to register rx_handler [ 1058.719025][T23294] CPU: 1 PID: 23294 Comm: syz.2.5719 Not tainted syzkaller #0 [ 1058.726560][T23294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1058.736643][T23294] Call Trace: [ 1058.739952][T23294] [ 1058.742924][T23294] dump_stack_lvl+0x18c/0x250 [ 1058.747652][T23294] ? show_regs_print_info+0x20/0x20 [ 1058.752896][T23294] ? load_image+0x420/0x420 [ 1058.757439][T23294] ? __might_fault+0xaa/0x120 [ 1058.762157][T23294] ? __lock_acquire+0x7d40/0x7d40 [ 1058.767215][T23294] ? unix_ioctl+0x261/0x670 [ 1058.771754][T23294] should_fail_ex+0x39d/0x4d0 [ 1058.776476][T23294] _copy_from_user+0x2f/0xe0 [ 1058.781108][T23294] sock_do_ioctl+0x190/0x310 [ 1058.785736][T23294] ? sock_show_fdinfo+0xb0/0xb0 [ 1058.790632][T23294] sock_ioctl+0x5ba/0x7e0 [ 1058.795019][T23294] ? sock_poll+0x3e0/0x3e0 [ 1058.799483][T23294] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1058.804446][T23294] ? security_file_ioctl+0x80/0xa0 [ 1058.809584][T23294] ? sock_poll+0x3e0/0x3e0 [ 1058.814033][T23294] __se_sys_ioctl+0xfd/0x170 [ 1058.818666][T23294] do_syscall_64+0x55/0xa0 [ 1058.823134][T23294] ? clear_bhb_loop+0x40/0x90 [ 1058.827861][T23294] ? clear_bhb_loop+0x40/0x90 [ 1058.832586][T23294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.838512][T23294] RIP: 0033:0x7fedb9b9cdd9 [ 1058.842960][T23294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.862600][T23294] RSP: 002b:00007fedba97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.871048][T23294] RAX: ffffffffffffffda RBX: 00007fedb9e15fa0 RCX: 00007fedb9b9cdd9 [ 1058.879051][T23294] RDX: 0000200000000080 RSI: 0000000000008932 RDI: 0000000000000004 [ 1058.887057][T23294] RBP: 00007fedba97e090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.895086][T23294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.903091][T23294] R13: 00007fedb9e16038 R14: 00007fedb9e15fa0 R15: 00007ffd0ca1c9c8 [ 1058.911111][T23294] [ 1060.130478][T23337] netlink: 'syz.3.5736': attribute type 10 has an invalid length. [ 1060.195854][T23337] team0: Device ipvlan1 failed to register rx_handler [ 1060.586477][T23363] netlink: 'syz.1.5745': attribute type 21 has an invalid length. [ 1060.798553][T23363] Ÿë: port 1(ip6gretap0) entered blocking state [ 1060.812878][T23363] Ÿë: port 1(ip6gretap0) entered disabled state [ 1060.833232][T23363] ip6gretap0: entered allmulticast mode [ 1060.857935][T23363] ip6gretap0: entered promiscuous mode [ 1061.166083][T23380] sctp: [Deprecated]: syz.3.5753 (pid 23380) Use of int in maxseg socket option. [ 1061.166083][T23380] Use struct sctp_assoc_value instead [ 1061.710526][T12704] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1061.922010][T23408] __nla_validate_parse: 12 callbacks suppressed [ 1061.922045][T23408] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5765'. [ 1061.988018][T12704] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1062.191729][T23414] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1062.269862][T23416] ªªªªª»: renamed from ip6gretap0 (while UP) [ 1062.344129][T23422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1062.704861][T23444] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1062.791652][T12704] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1062.847985][T23451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5783'. [ 1062.975986][T23460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5787'. [ 1062.997479][T23460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5787'. [ 1063.023811][T23460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5787'. [ 1063.035349][T23460] FAULT_INJECTION: forcing a failure. [ 1063.035349][T23460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.051895][T23460] CPU: 1 PID: 23460 Comm: syz.3.5787 Not tainted syzkaller #0 [ 1063.059403][T23460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1063.069491][T23460] Call Trace: [ 1063.072808][T23460] [ 1063.075769][T23460] dump_stack_lvl+0x18c/0x250 [ 1063.080502][T23460] ? show_regs_print_info+0x20/0x20 [ 1063.085756][T23460] ? load_image+0x420/0x420 [ 1063.090303][T23460] ? __lock_acquire+0x7d40/0x7d40 [ 1063.095363][T23460] ? snprintf+0xe9/0x140 [ 1063.099657][T23460] should_fail_ex+0x39d/0x4d0 [ 1063.104387][T23460] _copy_to_user+0x2f/0xa0 [ 1063.108842][T23460] simple_read_from_buffer+0xe7/0x150 [ 1063.114261][T23460] proc_fail_nth_read+0x1e8/0x260 [ 1063.119326][T23460] ? proc_fault_inject_write+0x360/0x360 [ 1063.124999][T23460] ? fsnotify_perm+0x271/0x5e0 [ 1063.129801][T23460] ? proc_fault_inject_write+0x360/0x360 [ 1063.135471][T23460] vfs_read+0x28b/0x970 [ 1063.139674][T23460] ? kernel_read+0x1e0/0x1e0 [ 1063.144305][T23460] ? __fget_files+0x28/0x4b0 [ 1063.148928][T23460] ? __fget_files+0x28/0x4b0 [ 1063.153561][T23460] ? __fget_files+0x43d/0x4b0 [ 1063.158284][T23460] ? __fdget_pos+0x2a3/0x330 [ 1063.162913][T23460] ? ksys_read+0x75/0x260 [ 1063.167281][T23460] ksys_read+0x150/0x260 [ 1063.171572][T23460] ? vfs_write+0x990/0x990 [ 1063.176032][T23460] ? lockdep_hardirqs_on+0x98/0x150 [ 1063.181265][T23460] do_syscall_64+0x55/0xa0 [ 1063.185716][T23460] ? clear_bhb_loop+0x40/0x90 [ 1063.190434][T23460] ? clear_bhb_loop+0x40/0x90 [ 1063.195155][T23460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1063.201089][T23460] RIP: 0033:0x7f1d9315d60e [ 1063.205539][T23460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1063.225182][T23460] RSP: 002b:00007f1d94037fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.233637][T23460] RAX: ffffffffffffffda RBX: 00007f1d940386c0 RCX: 00007f1d9315d60e [ 1063.241655][T23460] RDX: 000000000000000f RSI: 00007f1d940380a0 RDI: 0000000000000004 [ 1063.249655][T23460] RBP: 00007f1d94038090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.257653][T23460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.265661][T23460] R13: 00007f1d93416038 R14: 00007f1d93415fa0 R15: 00007ffec08eb458 [ 1063.273697][T23460] [ 1063.399479][T23470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1063.420884][T23470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1063.883155][T23478] netlink: 'syz.0.5793': attribute type 6 has an invalid length. [ 1064.015373][ T7233] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1064.830244][T23489] netlink: 'syz.1.5795': attribute type 2 has an invalid length. [ 1064.847273][T23489] netlink: 'syz.1.5795': attribute type 4 has an invalid length. [ 1064.951685][T23493] netlink: 'syz.2.5807': attribute type 10 has an invalid length. [ 1064.972968][T23493] hsr_slave_0: left promiscuous mode [ 1064.982114][T23493] hsr_slave_1: left promiscuous mode [ 1066.874583][T23556] netlink: set zone limit has 4 unknown bytes [ 1067.200186][T23572] __nla_validate_parse: 16 callbacks suppressed [ 1067.200201][T23572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5833'. [ 1067.304234][T23576] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5835'. [ 1067.503001][T23585] netlink: 'syz.3.5839': attribute type 10 has an invalid length. [ 1067.511567][T23585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5839'. [ 1067.528449][T23585] caif0: entered promiscuous mode [ 1067.541657][T23585] caif0: entered allmulticast mode [ 1067.561878][T23585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1067.694219][T23595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1067.701733][T23595] IPv6: NLM_F_CREATE should be set when creating new route [ 1067.709393][T23595] IPv6: NLM_F_CREATE should be set when creating new route [ 1067.716878][T23595] IPv6: NLM_F_CREATE should be set when creating new route [ 1067.937621][T23604] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1068.747166][T23612] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1068.762477][T23613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5849'. [ 1068.774028][T23613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5849'. [ 1068.790777][T23613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5849'. [ 1068.968087][T23620] FAULT_INJECTION: forcing a failure. [ 1068.968087][T23620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.981757][T23620] CPU: 1 PID: 23620 Comm: syz.1.5852 Not tainted syzkaller #0 [ 1068.989256][T23620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.999346][T23620] Call Trace: [ 1069.002663][T23620] [ 1069.005625][T23620] dump_stack_lvl+0x18c/0x250 [ 1069.010357][T23620] ? show_regs_print_info+0x20/0x20 [ 1069.015597][T23620] ? load_image+0x420/0x420 [ 1069.020155][T23620] ? __might_fault+0xaa/0x120 [ 1069.024880][T23620] ? __lock_acquire+0x7d40/0x7d40 [ 1069.029954][T23620] should_fail_ex+0x39d/0x4d0 [ 1069.034689][T23620] _copy_from_user+0x2f/0xe0 [ 1069.039323][T23620] do_ipv6_setsockopt+0x3a2/0x3e20 [ 1069.044490][T23620] ? sk_dst_reset+0xa0/0xa0 [ 1069.049053][T23620] ? verify_lock_unused+0x140/0x140 [ 1069.054303][T23620] ? mark_lock+0x94/0x320 [ 1069.058660][T23620] ? __lock_acquire+0x1273/0x7d40 [ 1069.063722][T23620] ? aa_label_sk_perm+0x463/0x5c0 [ 1069.068782][T23620] ? aa_sk_perm+0x970/0x970 [ 1069.073325][T23620] ? __might_sleep+0xe0/0xe0 [ 1069.077937][T23620] ? ksys_write+0x1c4/0x260 [ 1069.082493][T23620] ? aa_sk_perm+0x83c/0x970 [ 1069.087027][T23620] ? __fget_files+0x28/0x4b0 [ 1069.091646][T23620] ? aa_af_perm+0x330/0x330 [ 1069.096178][T23620] ? __fget_files+0x28/0x4b0 [ 1069.100787][T23620] ? __fget_files+0x28/0x4b0 [ 1069.105421][T23620] ? aa_sock_opt_perm+0x74/0x100 [ 1069.110388][T23620] ipv6_setsockopt+0x59/0x190 [ 1069.115077][T23620] ? sock_common_recvmsg+0x190/0x190 [ 1069.120385][T23620] do_sock_setsockopt+0x175/0x1a0 [ 1069.125424][T23620] ? __fdget+0x180/0x210 [ 1069.129694][T23620] __x64_sys_setsockopt+0x182/0x200 [ 1069.134921][T23620] do_syscall_64+0x55/0xa0 [ 1069.139359][T23620] ? clear_bhb_loop+0x40/0x90 [ 1069.144051][T23620] ? clear_bhb_loop+0x40/0x90 [ 1069.148751][T23620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.154678][T23620] RIP: 0033:0x7f5b30f9cdd9 [ 1069.159121][T23620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.178761][T23620] RSP: 002b:00007f5b31ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1069.187196][T23620] RAX: ffffffffffffffda RBX: 00007f5b31215fa0 RCX: 00007f5b30f9cdd9 [ 1069.195197][T23620] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 1069.203182][T23620] RBP: 00007f5b31ee8090 R08: 00000000000000a1 R09: 0000000000000000 [ 1069.211174][T23620] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1069.219189][T23620] R13: 00007f5b31216038 R14: 00007f5b31215fa0 R15: 00007fff77081c68 [ 1069.227187][T23620] [ 1069.372147][T23630] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5855'. [ 1069.498485][T23638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1069.894946][T23650] FAULT_INJECTION: forcing a failure. [ 1069.894946][T23650] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.912998][T23650] CPU: 0 PID: 23650 Comm: syz.0.5862 Not tainted syzkaller #0 [ 1069.920523][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1069.930601][T23650] Call Trace: [ 1069.933897][T23650] [ 1069.936853][T23650] dump_stack_lvl+0x18c/0x250 [ 1069.941558][T23650] ? sctp_sendmsg+0x1575/0x28c0 [ 1069.946442][T23650] ? ___sys_sendmsg+0x2a6/0x360 [ 1069.951314][T23650] ? show_regs_print_info+0x20/0x20 [ 1069.956539][T23650] ? load_image+0x420/0x420 [ 1069.961081][T23650] should_fail_ex+0x39d/0x4d0 [ 1069.965786][T23650] should_failslab+0x9/0x20 [ 1069.970314][T23650] slab_pre_alloc_hook+0x59/0x310 [ 1069.975361][T23650] ? sctp_add_bind_addr+0x8c/0x360 [ 1069.980490][T23650] __kmem_cache_alloc_node+0x53/0x250 [ 1069.985890][T23650] ? sctp_add_bind_addr+0x8c/0x360 [ 1069.991024][T23650] kmalloc_trace+0x2a/0xe0 [ 1069.995467][T23650] sctp_add_bind_addr+0x8c/0x360 [ 1070.000426][T23650] sctp_copy_local_addr_list+0x315/0x4f0 [ 1070.006076][T23650] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1070.011818][T23650] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1070.017907][T23650] ? sctp_v4_is_any+0x35/0x60 [ 1070.022615][T23650] ? sctp_copy_one_addr+0x8c/0x350 [ 1070.027748][T23650] sctp_bind_addr_copy+0xb3/0x3c0 [ 1070.032795][T23650] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1070.039145][T23650] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1070.044445][T23650] ? __sctp_connect+0xd80/0xd80 [ 1070.049314][T23650] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1070.054709][T23650] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1070.060276][T23650] ? security_sctp_bind_connect+0x89/0xb0 [ 1070.066014][T23650] sctp_sendmsg+0x1575/0x28c0 [ 1070.070712][T23650] ? sctp_getsockopt+0xb60/0xb60 [ 1070.075669][T23650] ? aa_sk_perm+0x83c/0x970 [ 1070.080196][T23650] ? aa_af_perm+0x330/0x330 [ 1070.084729][T23650] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1070.091172][T23650] ? sock_rps_record_flow+0x19/0x3f0 [ 1070.096474][T23650] ? inet_sendmsg+0xe9/0x2f0 [ 1070.101258][T23650] ? inet_send_prepare+0x260/0x260 [ 1070.106386][T23650] ____sys_sendmsg+0x5ba/0x960 [ 1070.111165][T23650] ? __lock_acquire+0x7d40/0x7d40 [ 1070.116216][T23650] ? __asan_memset+0x22/0x40 [ 1070.120825][T23650] ? __sys_sendmsg_sock+0x30/0x30 [ 1070.125860][T23650] ? __import_iovec+0x5f2/0x850 [ 1070.130733][T23650] ? import_iovec+0x73/0xa0 [ 1070.135247][T23650] ___sys_sendmsg+0x2a6/0x360 [ 1070.139942][T23650] ? get_pid_task+0x20/0x1e0 [ 1070.144567][T23650] ? __sys_sendmsg+0x2a0/0x2a0 [ 1070.149363][T23650] ? __lock_acquire+0x7d40/0x7d40 [ 1070.154425][T23650] __se_sys_sendmsg+0x1c2/0x2b0 [ 1070.159293][T23650] ? __x64_sys_sendmsg+0x80/0x80 [ 1070.164263][T23650] ? lockdep_hardirqs_on+0x98/0x150 [ 1070.169483][T23650] do_syscall_64+0x55/0xa0 [ 1070.173913][T23650] ? clear_bhb_loop+0x40/0x90 [ 1070.178609][T23650] ? clear_bhb_loop+0x40/0x90 [ 1070.183305][T23650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1070.189219][T23650] RIP: 0033:0x7f5d85b9cdd9 [ 1070.193657][T23650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.213298][T23650] RSP: 002b:00007f5d86b0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.221731][T23650] RAX: ffffffffffffffda RBX: 00007f5d85e15fa0 RCX: 00007f5d85b9cdd9 [ 1070.229731][T23650] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1070.237718][T23650] RBP: 00007f5d86b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.245711][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.253692][T23650] R13: 00007f5d85e16038 R14: 00007f5d85e15fa0 R15: 00007ffff50c8eb8 [ 1070.261701][T23650] [ 1070.411344][T23659] netlink: 'syz.2.5866': attribute type 10 has an invalid length. [ 1071.715390][T12704] Bluetooth: hci4: command 0x0406 tx timeout [ 1071.858032][T23706] netlink: 'syz.1.5879': attribute type 10 has an invalid length. [ 1071.968794][T23706] team0: Port device geneve1 added [ 1072.225958][T23715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1072.233569][T23715] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.241179][T23715] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.248718][T23715] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.211700][T23732] __nla_validate_parse: 8 callbacks suppressed [ 1073.211719][T23732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5889'. [ 1073.302576][T23734] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1073.652384][T23747] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1073.760481][T23754] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5900'. [ 1074.086524][T23764] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5903'. [ 1074.121615][T23762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1074.129206][T23762] IPv6: NLM_F_CREATE should be set when creating new route [ 1074.136761][T23762] IPv6: NLM_F_CREATE should be set when creating new route [ 1074.144303][T23762] IPv6: NLM_F_CREATE should be set when creating new route [ 1074.294044][T23768] netlink: 'syz.0.5905': attribute type 10 has an invalid length. [ 1075.447398][T23768] geneve1: entered promiscuous mode [ 1075.473126][T23768] geneve1: entered allmulticast mode [ 1075.502396][T23768] team0: Port device geneve1 added [ 1075.621024][T23778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5910'. [ 1075.992699][T23792] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5915'. [ 1103.491599][T12704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1103.501672][T12704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1103.510092][T12704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1103.519164][T12704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1103.535078][T12704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1103.543483][T12704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1104.207001][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1104.216583][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1104.232612][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1104.242258][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1104.252269][ T5780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1104.261187][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1104.478879][T23795] chnl_net:caif_netlink_parms(): no params data found [ 1104.579428][T19870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1104.589656][T19870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1104.600156][T19870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1104.608297][T19870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1104.616346][T19870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1104.624546][T19870] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1104.632080][T19870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1104.658269][T19870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1104.667622][T19870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1104.676484][T19870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1104.690500][T19870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1104.698275][T19870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1104.936682][T23795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.948990][T23795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.956619][T23795] bridge_slave_0: entered allmulticast mode [ 1104.967643][T23795] bridge_slave_0: entered promiscuous mode [ 1105.003222][T23795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.010681][T23795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.023099][T23795] bridge_slave_1: entered allmulticast mode [ 1105.030832][T23795] bridge_slave_1: entered promiscuous mode [ 1105.138359][T23795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.627585][T23814] Bluetooth: hci0: command tx timeout [ 1106.118144][ T7233] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1106.347660][T23814] Bluetooth: hci5: command tx timeout [ 1106.667580][T23814] Bluetooth: hci7: command tx timeout [ 1106.747404][T23814] Bluetooth: hci6: command tx timeout [ 1107.707400][T23814] Bluetooth: hci0: command tx timeout [ 1108.437873][T23814] Bluetooth: hci5: command tx timeout [ 1108.747430][T23814] Bluetooth: hci7: command tx timeout [ 1108.837429][T23814] Bluetooth: hci6: command tx timeout [ 1109.787268][T23814] Bluetooth: hci0: command tx timeout [ 1110.507742][T23814] Bluetooth: hci5: command tx timeout [ 1110.837517][T23814] Bluetooth: hci7: command tx timeout [ 1110.921668][T23814] Bluetooth: hci6: command tx timeout [ 1137.365441][T23814] Bluetooth: hci0: command tx timeout [ 1137.371030][T23814] Bluetooth: hci5: command tx timeout [ 1137.376449][T23814] Bluetooth: hci7: command tx timeout [ 1137.382765][T23810] Bluetooth: hci6: command tx timeout [ 1157.878167][T23814] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1157.888535][T23814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1157.901568][T23814] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1157.909875][T23814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1157.917921][T23814] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1157.925389][T23814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1157.941154][T23814] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1157.949663][T23814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1157.957045][T23814] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1157.965794][T23814] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1157.973368][T23814] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1157.982127][T23814] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1160.037484][T23810] Bluetooth: hci9: command tx timeout [ 1160.044593][T23814] Bluetooth: hci8: command tx timeout [ 1162.117466][T23814] Bluetooth: hci8: command tx timeout [ 1162.122950][T23814] Bluetooth: hci9: command tx timeout [ 1163.648048][T23810] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1163.657386][T23810] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1163.669929][T23810] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1163.678703][T23810] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1163.686845][T23810] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1163.697330][T23810] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1164.197601][T23810] Bluetooth: hci9: command tx timeout [ 1164.203066][T23810] Bluetooth: hci8: command tx timeout [ 1164.788244][T23814] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1164.803421][T23814] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1164.811386][T23814] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1164.826490][T23814] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1164.843996][T23814] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1164.856783][T23814] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1165.787464][T23810] Bluetooth: hci10: command tx timeout [ 1166.267690][T23810] Bluetooth: hci8: command tx timeout [ 1166.273199][T23810] Bluetooth: hci9: command tx timeout [ 1166.909457][T23810] Bluetooth: hci11: command tx timeout [ 1167.877596][T23810] Bluetooth: hci10: command tx timeout [ 1169.007181][T23810] Bluetooth: hci11: command tx timeout [ 1169.947269][T23810] Bluetooth: hci10: command tx timeout [ 1171.076116][T23810] Bluetooth: hci11: command tx timeout [ 1172.030137][T23810] Bluetooth: hci10: command tx timeout [ 1173.147760][T23810] Bluetooth: hci11: command tx timeout [ 1180.847166][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1180.853958][ C0] rcu: 0-....: (1 GPs behind) idle=86d4/1/0x4000000000000000 softirq=109521/109522 fqs=2264 [ 1180.865121][ C0] rcu: hardirqs softirqs csw/system [ 1180.871550][ C0] rcu: number: 1046610 0 0 [ 1180.877973][ C0] rcu: cputime: 12585 30870 54 ==> 43460(ms) [ 1180.885789][ C0] rcu: (t=10500 jiffies g=136677 q=2201 ncpus=2) [ 1180.892221][ C0] CPU: 0 PID: 23782 Comm: syz.3.5911 Not tainted syzkaller #0 [ 1180.899691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1180.909761][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 1180.916634][ C0] Code: 00 4d 85 e4 75 16 e8 95 c6 0f 00 eb 15 e8 8e c6 0f 00 e8 69 ef 0e 09 4d 85 e4 74 ea e8 7f c6 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 1180.936271][ C0] RSP: 0018:ffffc90000006280 EFLAGS: 00000246 [ 1180.942361][ C0] RAX: ffffffff81775b81 RBX: 0000000000000000 RCX: ffff88802c0eda00 [ 1180.950346][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.958330][ C0] RBP: ffffc90000006338 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 1180.966324][ C0] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000200 [ 1180.974308][ C0] R13: 000001fb63109b96 R14: 1ffff92000000c50 R15: dffffc0000000000 [ 1180.982292][ C0] FS: 00007f1d940386c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1180.991243][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1180.997846][ C0] CR2: 000000110c293293 CR3: 000000005e632000 CR4: 00000000003506f0 [ 1181.005841][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1181.013828][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1181.021813][ C0] Call Trace: [ 1181.025107][ C0] [ 1181.027965][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1181.033280][ C0] ? __skb_clone+0x480/0x790 [ 1181.037890][ C0] ktime_get_with_offset+0x103/0x330 [ 1181.043200][ C0] dev_queue_xmit_nit+0x8ce/0xbb0 [ 1181.048260][ C0] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 1181.053401][ C0] dev_hard_start_xmit+0x148/0x740 [ 1181.058544][ C0] sch_direct_xmit+0x25e/0x4c0 [ 1181.063326][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 1181.069333][ C0] __dev_queue_xmit+0x165d/0x3660 [ 1181.074377][ C0] ? lapic_next_event+0x11/0x20 [ 1181.079248][ C0] ? clockevents_program_event+0x230/0x310 [ 1181.085076][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 1181.090205][ C0] ? mark_lock+0x94/0x320 [ 1181.094567][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1181.100602][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 1181.105926][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1181.112109][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1181.117329][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1181.123517][ C0] ? ip_finish_output2+0xb04/0x11e0 [ 1181.128741][ C0] ? ip_finish_output2+0x457/0x11e0 [ 1181.133957][ C0] ip_finish_output2+0xcec/0x11e0 [ 1181.138995][ C0] ? ip_finish_output2+0x457/0x11e0 [ 1181.144214][ C0] ? ip_fragment+0x210/0x210 [ 1181.148822][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 1181.153694][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 1181.158737][ C0] ip_output+0x2a1/0x3b0 [ 1181.162999][ C0] ? ip_output+0x60/0x3b0 [ 1181.167343][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 1181.172291][ C0] __ip_queue_xmit+0x1049/0x1950 [ 1181.177253][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 1181.182204][ C0] __tcp_transmit_skb+0x1d6b/0x33f0 [ 1181.187437][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 1181.192307][ C0] ? __build_skb_around+0x255/0x3d0 [ 1181.197534][ C0] ? __tcp_send_ack+0x176/0x5a0 [ 1181.202406][ C0] tcp_validate_incoming+0xf13/0x2250 [ 1181.207808][ C0] ? inet_sk_rx_dst_set+0x105/0x1d0 [ 1181.213034][ C0] tcp_rcv_established+0x7de/0x1d20 [ 1181.218258][ C0] ? rcuref_put+0x1cc/0x220 [ 1181.222780][ C0] ? tcp_check_space+0xad0/0xad0 [ 1181.227740][ C0] ? rt_is_expired+0x1c/0x2d0 [ 1181.232443][ C0] ? dst_release+0x79/0x1a0 [ 1181.236964][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 1181.241589][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 1181.246120][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1181.251163][ C0] ? tcp_v4_rcv+0x1021/0x2af0 [ 1181.255885][ C0] ? tcp_filter+0x90/0x90 [ 1181.260265][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 1181.265751][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 1181.271449][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 1181.276938][ C0] NF_HOOK+0x32d/0x3b0 [ 1181.281029][ C0] ? fib_multipath_hash+0x1b10/0x1b10 [ 1181.286415][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1181.290703][ C0] ? NF_HOOK+0x9f/0x3b0 [ 1181.294881][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 1181.299930][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1181.304188][ C0] ? ip_rcv_finish_core+0xd92/0x1bd0 [ 1181.309505][ C0] ? ip_local_deliver+0x122/0x1b0 [ 1181.314612][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 1181.319310][ C0] ? packet_rcv+0x16b/0x13d0 [ 1181.323935][ C0] ? ip_list_rcv+0x440/0x440 [ 1181.328548][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 1181.333168][ C0] ip_list_rcv+0x3f2/0x440 [ 1181.337624][ C0] ? ip_rcv_finish+0x250/0x250 [ 1181.342413][ C0] ? ip_rcv_finish+0x250/0x250 [ 1181.347202][ C0] __netif_receive_skb_list_core+0x583/0x750 [ 1181.353213][ C0] ? __pskb_pull_tail+0xa17/0x1790 [ 1181.358360][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 1181.362966][ C0] ? read_tsc+0x9/0x20 [ 1181.367058][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 1181.373249][ C0] ? tcp_gro_receive+0x6fa/0x12b0 [ 1181.378292][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 1181.384637][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1181.390202][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 1181.395328][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1181.400388][ C0] napi_gro_complete+0x2db/0x6f0 [ 1181.405351][ C0] dev_gro_receive+0x19cd/0x22c0 [ 1181.410305][ C0] ? dev_gro_receive+0x1000/0x22c0 [ 1181.415441][ C0] napi_gro_receive+0x381/0xb00 [ 1181.420316][ C0] receive_buf+0x2203/0x3820 [ 1181.424944][ C0] ? virtnet_poll_tx+0x530/0x530 [ 1181.429900][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 1181.435379][ C0] virtnet_poll+0x5dd/0x1280 [ 1181.439988][ C0] ? refill_work+0x220/0x220 [ 1181.444594][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1181.450766][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1181.455991][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1181.462171][ C0] __napi_poll+0xc0/0x460 [ 1181.466519][ C0] net_rx_action+0x616/0xc40 [ 1181.471132][ C0] ? net_tx_action+0x980/0x980 [ 1181.475920][ C0] ? detach_timer+0x2b0/0x2b0 [ 1181.480631][ C0] handle_softirqs+0x280/0x820 [ 1181.485415][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1181.490196][ C0] ? do_softirq+0x1a0/0x1a0 [ 1181.494724][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1181.499983][ C0] __irq_exit_rcu+0xd3/0x190 [ 1181.504593][ C0] ? irq_exit_rcu+0x20/0x20 [ 1181.509115][ C0] irq_exit_rcu+0x9/0x20 [ 1181.513376][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1181.519026][ C0] [ 1181.521976][ C0] [ 1181.524918][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1181.530914][ C0] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 1181.536645][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1181.556262][ C0] RSP: 0018:ffffc9000c587778 EFLAGS: 00000206 [ 1181.562347][ C0] RAX: 95e84d4e49a38900 RBX: ffff88802c0eda00 RCX: 95e84d4e49a38900 [ 1181.570330][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 1181.578353][ C0] RBP: 0000000000000000 R08: ffffc9000c58795f R09: 0000000000000000 [ 1181.586340][ C0] R10: ffffc9000c587950 R11: fffff520018b0f2c R12: 0000000000000002 [ 1181.594330][ C0] R13: 0000000000000246 R14: ffffffff8d132140 R15: ffff88802c0ee530 [ 1181.602336][ C0] __schedule+0x1db/0x45a0 [ 1181.606783][ C0] ? mark_lock+0x94/0x320 [ 1181.611149][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1181.617197][ C0] ? lock_chain_count+0x20/0x20 [ 1181.622061][ C0] ? asan.module_dtor+0x20/0x20 [ 1181.626937][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1181.633108][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1181.638334][ C0] ? preempt_schedule+0xc0/0xd0 [ 1181.643357][ C0] preempt_schedule_common+0x82/0xc0 [ 1181.648678][ C0] preempt_schedule+0xc0/0xd0 [ 1181.653391][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1181.659048][ C0] ? event_function+0x300/0x300 [ 1181.663921][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1181.669662][ C0] ? percpu_counter_add_batch+0x24f/0x2a0 [ 1181.675423][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1181.680648][ C0] ? smp_call_function_single+0x488/0x5a0 [ 1181.686386][ C0] smp_call_function_single+0x48d/0x5a0 [ 1181.691960][ C0] ? event_function+0x300/0x300 [ 1181.696838][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1181.703027][ C0] ? event_function+0x300/0x300 [ 1181.707918][ C0] perf_install_in_context+0x5be/0x920 [ 1181.713411][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1181.719413][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 1181.724645][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1181.729890][ C0] ? perf_event__header_size+0x165/0x220 [ 1181.735550][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 1181.741400][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1181.747057][ C0] ? lock_chain_count+0x20/0x20 [ 1181.751924][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1181.757931][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1181.763142][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1181.768810][ C0] do_syscall_64+0x55/0xa0 [ 1181.773275][ C0] ? clear_bhb_loop+0x40/0x90 [ 1181.777963][ C0] ? clear_bhb_loop+0x40/0x90 [ 1181.782655][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.788562][ C0] RIP: 0033:0x7f1d9319cdd9 [ 1181.792989][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.812608][ C0] RSP: 002b:00007f1d94038028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1181.821056][ C0] RAX: ffffffffffffffda RBX: 00007f1d93415fa0 RCX: 00007f1d9319cdd9 [ 1181.829063][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000008c0 [ 1181.837055][ C0] RBP: 00007f1d93232d69 R08: 0000000000000002 R09: 0000000000000000 SYZFAIL: failed to recv rpc [ 1181.845060][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1181.853056][ C0] R13: 00007f1d93416038 R14: 00007f1d93415fa0 R15: 00007ffec08eb458 [ 1181.861060][ C0] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1181.910232][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.916801][ T1282] ieee802154 phy1 wpan1: encryption failed: -22