last executing test programs: 5.602519205s ago: executing program 0 (id=9223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000002c0)=r1}, 0x20) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xde3c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_clone(0x40000000, &(0x7f0000000040)="5e402f46b838eff556b76a33daf3e44d8b2ec24e805f3770c159d4609f55cb21d9b609447b73874e", 0x28, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="71f325ecb456d7a99949a1a87f25934ab648ec64dcf6a45a12154ff8118ae3a2ce8e4e69755578e5a2fe19494fb7e41207b36150c699c6292e1b35f61a20d2749921be59d3a454837dedeb0d8460134b05a4b12625552ca5174ec2996d0032d547515d1784b79e2223b2d88b2b4b6bea25345fcc9299d0a1475315cae0f0199f43652d4bb9ba812dd7b961e1b1") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) 4.616650323s ago: executing program 4 (id=9233): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) (fail_nth: 8) 4.124916157s ago: executing program 0 (id=9234): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xde, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0x7, &(0x7f00000005c0)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x196, 0x1f, &(0x7f0000000880)=""/31, 0x41000, 0x30, '\x00', r2, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0xfffffffb, 0x400}, 0x10, r3, r1, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x4, 0x3, 0x3}, {0x4, 0x3, 0xc, 0x7}], 0x10, 0x8}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', r2, r4, 0x2, 0x0, 0x5}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x500}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r7}, 0xc) socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000", 0x1e}], 0x1}, 0x0) 4.049110621s ago: executing program 2 (id=9236): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x68001, 0x3f00) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) close(r6) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random="000600"}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa, 0xff, 0x8, 0x1, 0x0, 0x5, 0x5013c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x81, 0x2}, 0x0, 0x0, 0x6, 0x7, 0x3, 0x582a010f, 0xff, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a060a441d85ac551177feb4471a05ffd0f6e5cc99d6619a14375d71cdd88ad841e744cac579797ca46d15a60a15d5a8a17b2dc805b7c65f39e090f6be40b81278ed884d2f61418c91f526bbe1b2ce132fec1f0049d2282dc38c874846c1946ca162c08727afcb83f6c9f711cb786689650ba99a224bd0c89817f4b47cdb1b6c6d30aab3bc24547a28350a9d2ac5ca7dd47dd0da51dc3667eb8bd5151727231706bdfcbfed8f00d44943158a862c39830101c69922293edde6a58bf2061c2e831f1c79f969ab6aa45a3090264a8cf8d486ff449111fe79930f7bc9ac3cc4a392e9e02b6b4af1af536a3b3b8f46a", 0xed}], 0x1, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@rr={0x7, 0x23, 0xe4, [@multicast1, @loopback, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010101]}, @rr={0x7, 0xf, 0xac, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0xe8, 0x0, 0x5, [0xfffffffa]}, @end, @timestamp_addr={0x44, 0x4c, 0xd0, 0x1, 0x0, [{@loopback, 0xffff1771}, {@broadcast, 0xe5ec}, {@multicast2, 0xa35a}, {@remote, 0x4}, {@multicast1, 0x7}, {@empty, 0x400}, {@local, 0x8a6}, {@empty, 0x7}, {@empty, 0x2}]}, @noop, @lsrr={0x83, 0xf, 0xf1, [@loopback, @loopback, @private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x43, [@broadcast, @local, @multicast1, @private=0xa010100, @remote, @local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x5c, [@broadcast, @loopback, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x2a, 0x3, 0xb, [{@empty, 0x7}, {@remote, 0x54aa}, {@multicast1, 0x4}, {@local, 0xeaa}, {@private=0xa010100, 0xffffffff}, {@multicast2}, {@multicast2, 0xd5}]}, @noop]}}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xc6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @multicast2]}, @end, @timestamp_prespec={0x44, 0x44, 0x79, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0xff}, {@local, 0x80}, {@remote, 0x1}, {@private=0xa010101, 0xece4}, {@private=0xa010100, 0xe625}, {@broadcast, 0xb0e7}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x7, [0x5, 0xac59, 0xc79, 0x1ff]}, @noop, @timestamp_addr={0x44, 0x44, 0xf, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0xb94}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast2, 0x8001}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffff00}, {@multicast1, 0x6}, {@empty, 0x5}]}, @lsrr={0x83, 0x13, 0x9f, [@empty, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x0, [{@multicast1, 0x80}]}]}}}], 0x268}, 0x830) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.989822223s ago: executing program 4 (id=9238): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006", 0x39}], 0x1}, 0x20000004) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209", 0x29}], 0x1}, 0x800) (async, rerun: 64) r2 = perf_event_open$cgroup(&(0x7f0000000640)={0x4, 0x80, 0x3, 0x1, 0x10, 0xc0, 0x0, 0x8, 0x80d6, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x200, 0x4}, 0x2000, 0x9, 0x1, 0x2, 0x5, 0xc6, 0x3, 0x0, 0xffffff62, 0x0, 0x200}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000080)=@phonet={0x23, 0x2, 0x7, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="c4c8460f1a7d520ffd6a0bb87815f708d628cb7664408babc50617eb832ee17e711573bc6b68c2984084f1bb3ab5d5e9e051d71e9890354f60a1171084549793cff0e302ddb05056651472e27a534ca4439fce576781faffa09209f51cac3afc981255f4c45a7c78be12fd7c1abcb212e594886870108efb8e6aa749404029ec9f65a6912b743b4efe3cb1feae1576e90884949b6efa811aee11af68ac1cc2cd0bb64b8673bb1c0994b789dfb3d75b8f8165d562ec9e204a6f1a1e11d6883ec99f0ca61febbfacacf5129ec5b33b6d17", 0xd0}, {&(0x7f0000000100)="fd02d50ae83d1d47de9c757b7a6bf33280942b3d0371733a462801", 0x1b}, {&(0x7f0000000300)="f5b1ea46d45786ac5ab06f150e0fbc9caa86d1b294f52f38f4922045b50c07b8435d8f459ca279cc7af57cadbb0a7b68b5db4e4190b7e8330347be700d43beaf09dce6d14d31a273f6a7555316fddf7e045e5d83db3a950211149394dc444790892dd5bb1217999637cbb41246063066af40a9831cf86120eccad90b13d3d4d70d4f69f44ef36b2b0417f35356ddcae20f3fdce37cb4ef6dea199691f444ad57e9decf7af16b847e", 0xa8}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f00000003c0)="bd033ad5c95ca10001a65674fc93d486414ca27c0ae49b26a3976fc52321a0e575bca5699ee1db223b17c132306e037a8c6eceebd0ce57dc8bffac607dd27b98e0f5701b9576cdae7c5f0c993ad6ee6cd8bf46ef939f28f44959d16f2af627b0e471b423604c5cc7e45d2b2e29c5172593220c6df8e0cc25e4e2c73211bb1192bb9ecded07b6ab5f589e221febad7d368c999b9846692f6f57d2ae7c4df50e92e4a8bc2ccf301749b1dc24da1c4e587eafb54e5a39181547ac220962f21b980ee04a93", 0xc3}], 0x5, &(0x7f00000004c0)=[{0xb0, 0x110, 0xfffffff8, "ad1414621519d7d9f85d95a8a80820508c38c0dae5d884ddf10d163623985fcdb764be165c9875e8e969ec41216c1adb8f363e550b16db9f933093a586f9399a7a3edd4851804ff728beb11441ac66eb465a0443cd0ca4b69b8d7e8984262fd1d5ab164b75822916fb5b51d42ac1327686e804b425e9409da5243385bedff9569e270c4d1a4313abfebff373a0a55b07a63c4f7ed0547bbc0442a463acaf6930"}, {0x80, 0x2a, 0x5bce, "6752d542b689a1b27aa34ac9f1499efd8c667971c316c0daa8f1ca73e2b8d42662a4f9177fb839b3c5c369a76484bd214d2ad40625ccb29aabcfebb1218db9c9997622d870f24acfc8895762cd8571293805b897bf924a75b28435c9e04fa171ef60f777fe460013d87a7033"}], 0x130}, 0x4040) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.989100593s ago: executing program 1 (id=9239): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4004851) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000f8ffffff1efe000000000000000085000000360000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x76, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0xffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000a40012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4204, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) 2.988528093s ago: executing program 2 (id=9240): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="4099da2e7848052ca42f25a328d8a26a4f9123825ffaf4b2", @ANYRES64=0x0], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a4aa0000000000000000000500"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89b1, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000100200"/28], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0xa, 0x1, 0xfffffffe, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 2.896967057s ago: executing program 3 (id=9241): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(r0) 2.818934072s ago: executing program 0 (id=9242): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80044944, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x22, 0x0, 0x4e) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/68, 0x44, 0x0, &(0x7f0000000980)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r5, 0x4) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000280)={r1, r9}) sendmsg$kcm(r6, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f50cded05947507fa3cf61f9fdd2593bdaf8cb77454f01c0f09d2d658846ea29990a496eaaf6301c409eb968c3efeff62cf7e369a1b7606d562f12a7173d68afba6768ddf7ee49d768ad138d93f56095c88040f03d503159adfe635200fc8221de8a7ab67e0cf965e8b80acecc33df377aeca6aca3f9aac4a48f1bc18a30784151e476bea664110c01ff1a34248053db3fa6c536253ecb4ac4bb610eaf5e", 0x9e}], 0x1}, 0x4c810) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080005000300e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.6492346s ago: executing program 4 (id=9243): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46dfde5e192f8e3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="90939d9d3b530dcd18660cc77c515628fee2e2b8c654457d36f9f81773417bdc8e9528d12f44506e1b3807f0078500b7388f30fc8ab5e19e2dc08783fe7890aa3652112847261fa0fa46ed665e6e92c2c8fea273961f562bffec538cedda97df8225aa5807253cacaf7011003417ae49bd2552cbc936bf41a9255596e3daeee3c363e94523c86bf7f764c4f54d844d5c177cd6492b52d9428283c0af480e8fc7c9773b6ca6b804a36caa657a421b48fe3829", 0xfffffffffffffcfe}], 0x1}, 0x24048850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x7400}, 0x20000010) 2.6455536s ago: executing program 3 (id=9244): r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x30}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000400)="8d", 0x1}], 0x300, &(0x7f0000001a00)=ANY=[@ANYBLOB="14000000000000000000000000090000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x5000}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20) r4 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)='\x00', 0x1}, {&(0x7f0000000100)="949443ff040000b08e131acb0839c163379ba4575e01e817aaca50946b1b95ad3d9bfb8978f63da1940c5031d98f3fedccc3b21f16bb8a3a28ca444830a219f6b9be61885c913190fa5f8187fc3352e270bfe9cad8b32a91ee3686e3b090318c", 0x60}], 0x2}, 0x1) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000600)=""/215, 0xd7}], 0x6, &(0x7f0000001a80)=""/4096, 0x1000}, 0x60) recvmsg$kcm(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) 2.374107714s ago: executing program 1 (id=9245): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x1, 0x945, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x2000, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x800000000000, r1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40400c0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0xe1129, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0xffffffffffffffff, 0x0, 0xffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60403f00e8ff00001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbab79164010183d42365f003724a237e09000000b2a1cfc0183214d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd600"/216, 0xd8}], 0x1}, 0x80) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r8}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008004) 2.23008007s ago: executing program 4 (id=9246): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x8, &(0x7f0000001d80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x4}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001a40)="b3d0", 0x3, r7, 0x4}, 0x38) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000000300f4f4294d0c6025f2548d2967643c101c6e40118b6e66054c1be7c1596875cf15036a984c4971c843515c70a039a928058ebeb06e1bdee9cbb8cb0acaa9dc02ecebc6a2331b48975830b4594f", @ANYBLOB="e5633b0e1185b300d90de05585951918f59635d5cf07c1a9ea225cba208b1b51ac43c659fb5fc21a05546f1c3dd3a253d31993eba4ce3e1031d9104c4ba9545af1217dee62ac7a60a2cdc5df560acd6c413e62306100da36ed15202d063923b1faddae4ce6e683eda622703437e3f324c3278914b24be104440a070709e0b52178bf769b26f4a3d48a5d9adf2a5b7af34e0af3897f0cc725b25fde9618850837e5b90e0f8f155534dc97ac0ec5e88ebbf2c2e4bc7b712c64af24695067536b752e8497f0f4a98b89ac7815923381169ddca73e39b1eccee0cb2a1812483ccb84099182344102c0dede6034835f15f697e7f577", @ANYRES64=r8, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002f5ffffffff", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000000007020000f8ffffffb703000008070000000000000000000085000000450000000008e20be266287380f1dd041de29019cbda2956000000000000003fd000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.179596613s ago: executing program 0 (id=9247): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1db}, 0x94) socketpair(0x1, 0x2, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.989750852s ago: executing program 2 (id=9248): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext, 0x104002, 0xac5d, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, 0x0, 0x2da9ffc1467e9a8e) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$kcm(0x2, 0x3, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000008c2c111600e364214c14ec45b275182000001800000005000000020000080000000c7ba58fc733bc14e5a349fe3e709c32"], 0x0, 0x35, 0x0, 0x0, 0x2}, 0x28) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000280)="d27ff1c3bc21487869a600a5b8f9572e8d251542ebf36f3f96d442448862881a89b8dc840810eeb304487ea0", 0x2c}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000ec0)={0x0, 0x80, 0x4, 0x3, 0xb2, 0xff, 0x0, 0x0, 0x81200, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000e80), 0x4}, 0x300, 0x5, 0x1000, 0xe, 0x4, 0x7, 0x6, 0x0, 0x4, 0x0, 0x6}, 0x0, 0x7, r0, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000011000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180025521db8722b22478a0fef01000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xadc, r6}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{}, &(0x7f0000000f40), &(0x7f0000000f80)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000016c0), 0x0, 0x10, &(0x7f00000011c0), &(0x7f0000001280), 0x8, 0x51, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001440)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x1a, &(0x7f00000016c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYRES32=r2, @ANYRES8, @ANYRESDEC=r6], &(0x7f0000001100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x20780, 0x13, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000001480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xe, 0x3ff, 0x844}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001500)=[{0x3, 0x2000004, 0xc, 0x4}, {0x5, 0x1, 0xa, 0x3}, {0x3, 0x3, 0x11, 0x9}, {0x2, 0x1, 0x1}, {0x3, 0x3, 0x10, 0x1}, {0x1, 0x4, 0xb, 0x7}, {0x4, 0x3, 0xc, 0xc}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4) close(r4) 1.63401014s ago: executing program 4 (id=9249): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe80, &(0x7f00000002c0)="f3fffeffffffa000", &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.63231491s ago: executing program 1 (id=9259): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="4099da2e7848052ca42f25a328d8a26a4f9123825ffaf4b207f0b832eae1474196f9f23a", @ANYRES64=0x0], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a4aa0000000000000000000500"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89b1, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000100200"/28], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0xa, 0x1, 0xfffffffe, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 1.600132942s ago: executing program 3 (id=9250): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5c281, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x80000, 0xfffffffe, 0x4, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) (async) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r7}) 1.243808559s ago: executing program 3 (id=9251): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r0, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="14000000320081024e81798ead4cb9040c1d0800", 0x14}], 0x1}, 0x20004000) 883.399866ms ago: executing program 2 (id=9252): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000)=r1, 0x8) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f00000000c0), 0x8}, 0x10000, 0x0, 0x0, 0x7, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000000100000007910000000000000630000ff000000009500680000070000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x21) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100), 0x90) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x40000) 698.355135ms ago: executing program 3 (id=9253): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf7, 0xf7, 0x8, [@struct={0xe, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x5}, {0xd, 0x3, 0x9}, {0xa, 0x3, 0xb}, {0x0, 0x5, 0x80000000}]}, @volatile={0xa}, @enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xa, 0x8, 0xfffffff9}, {0x9, 0x6, 0x3146738e}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0x1, 0x3}, {0xf}, {0x1, 0x4}]}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @var={0x8, 0x0, 0x0, 0xe, 0x3}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @datasec={0x2, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x1ff}, {0x3, 0x424, 0x3}, {0x5, 0x3, 0xa}], "6b1ce6"}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/215, 0x118, 0xd7, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c45c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x4, 0x1, 0x7, 0x94da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 666.003877ms ago: executing program 1 (id=9254): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(r0) 575.046052ms ago: executing program 0 (id=9255): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) sendmsg(r0, &(0x7f0000001900)={&(0x7f00000006c0)=@phonet={0x23, 0x1, 0xf, 0x8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)="b239eb8babd3d94e17d3e78c47999fc21cbde8788e2a0709d2d3255d81632a010ee3613d6e87e509b6956f6ff8b6f5782b937c1c100d47842dbbc3f91fe5039ca504218d5b46f113a0b15e27ed2d1237e3d0fba9bee5691293ab8fec025a4bde855ca0b0917178fcda19691eccd723549103c963d1be97b85c97fe208f3538a97dc3b2e586abd6c0553f807de0db9f2fb49291b52061ad49fa4780dc1136513336aa2cf0107d3b3e672ae18b4390503cedbdf4f11544a016cfd71158e9a40ac2c25bd2f7659fe2923f2cab2d9a0a381622620a765501346203", 0xd9}], 0x1, &(0x7f0000000840)=[{0x1010, 0x136, 0x39, "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"}, {0x80, 0x10d, 0x4, "af089fdc6a7dfbb96c20cb2705e6472ae1cd0c4ea8e34766473c98221a0ac2524bbffcd4d37ff5d467b1029240da2342d3108609adf483350611f07e0979c0b9a9b3268d4c80bdc17de2a1c93f94e6e8975fa3aa4bcf41139b8d53b179a22b40481fc1c1933450c18b62b1"}], 0x1090}, 0x20048001) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000500)=r0, 0x4) recvmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/94, 0x5e}], 0x5, &(0x7f00000005c0)=""/218, 0xda}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) 503.275375ms ago: executing program 1 (id=9256): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46dfde5e192f8e3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="90939d9d3b530dcd18660cc77c515628fee2e2b8c654457d36f9f81773417bdc8e9528d12f44506e1b3807f0078500b7388f30fc8ab5e19e2dc08783fe7890aa3652112847261fa0fa46ed665e6e92c2c8fea273961f562bffec538cedda97df8225aa5807253cacaf7011003417ae49bd2552cbc936bf41a9255596e3daeee3c363e94523c86bf7f764c4f54d844d5c177cd6492b52d9428283c0af480e8fc7c9773b6ca6b804a36caa657a421b48fe3829", 0xfffffffffffffcfe}], 0x1}, 0x24048850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x7400}, 0x20000010) 446.087408ms ago: executing program 2 (id=9257): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8001600040001", 0xfded}], 0x1}, 0x4004) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x10020) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='\x00') 445.185018ms ago: executing program 3 (id=9258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000a00000000100000", @ANYRES32, @ANYBLOB="0002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x200, 0x0, r1, 0x6, '\x00', r3, r4, 0x5, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x6a) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 356.874972ms ago: executing program 4 (id=9260): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x8, &(0x7f0000001d80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x4}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001a40)="b3d0", 0x3, r7, 0x4}, 0x38) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000000300f4f4294d0c6025f2548d2967643c101c6e40118b6e66054c1be7c1596875cf15036a984c4971c843515c70a039a928058ebeb06e1bdee9cbb8cb0acaa9dc02ecebc6a2331b48975830b4594f", @ANYBLOB="e5633b0e1185b300d90de05585951918f59635d5cf07c1a9ea225cba208b1b51ac43c659fb5fc21a05546f1c3dd3a253d31993eba4ce3e1031d9104c4ba9545af1217dee62ac7a60a2cdc5df560acd6c413e62306100da36ed15202d063923b1faddae4ce6e683eda622703437e3f324c3278914b24be104440a070709e0b52178bf769b26f4a3d48a5d9adf2a5b7af34e0af3897f0cc725b25fde9618850837e5b90e0f8f155534dc97ac0ec5e88ebbf2c2e4bc7b712c64af24695067536b752e8497f0f4a98b89ac7815923381169ddca73e39b1eccee0cb2a1812483ccb84099182344102c0dede6034835f15f697e7f577", @ANYRES64=r8, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 282.129016ms ago: executing program 1 (id=9261): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0xb, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)='(pu&00\t||') close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 115.581484ms ago: executing program 2 (id=9262): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480)=r0, 0x4) 0s ago: executing program 0 (id=9263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480)=r0, 0x4) (fail_nth: 1) kernel console output (not intermixed with test programs): netlink: 'syz.3.7708': attribute type 10 has an invalid length. [ 1793.648513][T30036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1793.690575][T30036] device ipvlan1 entered promiscuous mode [ 1793.703685][T30036] bridge0: port 4(ipvlan1) entered blocking state [ 1793.720050][T30036] bridge0: port 4(ipvlan1) entered disabled state [ 1793.764673][T30036] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1793.908607][T30037] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1794.439981][T30039] netlink: 'syz.2.7709': attribute type 1 has an invalid length. [ 1794.448688][T30039] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7709'. [ 1794.685731][T30043] netlink: 'syz.1.7710': attribute type 21 has an invalid length. [ 1794.751251][T30043] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1794.960550][T30057] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1795.152718][T30057] team0: Port device dummy0 removed [ 1795.329301][T30063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1796.225045][T30084] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7724'. [ 1797.195056][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.203923][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.997687][T30111] FAULT_INJECTION: forcing a failure. [ 1797.997687][T30111] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.041411][T30111] CPU: 0 PID: 30111 Comm: syz.1.7732 Not tainted syzkaller #0 [ 1798.053759][T30111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1798.071241][T30111] Call Trace: [ 1798.078181][T30111] [ 1798.083482][T30111] dump_stack_lvl+0x188/0x24e [ 1798.090687][T30111] ? sctp_sendmsg+0x15b0/0x2940 [ 1798.098631][T30111] ? show_regs_print_info+0x12/0x12 [ 1798.107873][T30111] ? load_image+0x400/0x400 [ 1798.115239][T30111] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1798.125551][T30111] ? lock_chain_count+0x20/0x20 [ 1798.132741][T30111] should_fail_ex+0x399/0x4d0 [ 1798.141602][T30111] should_failslab+0x5/0x20 [ 1798.148276][T30111] slab_pre_alloc_hook+0x59/0x310 [ 1798.159674][T30111] ? sctp_add_bind_addr+0x89/0x350 [ 1798.169374][T30111] __kmem_cache_alloc_node+0x4f/0x260 [ 1798.178600][T30111] ? sctp_add_bind_addr+0x89/0x350 [ 1798.186354][T30111] kmalloc_trace+0x26/0xe0 [ 1798.191565][T30111] sctp_add_bind_addr+0x89/0x350 [ 1798.199454][T30111] sctp_copy_local_addr_list+0x311/0x4e0 [ 1798.210544][T30111] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1798.219229][T30111] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1798.230180][T30111] ? sctp_v4_is_any+0x31/0x50 [ 1798.237372][T30111] ? sctp_copy_one_addr+0x93/0x660 [ 1798.244123][T30111] sctp_bind_addr_copy+0xaf/0x3c0 [ 1798.250279][T30111] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1798.258247][T30111] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1798.264743][T30111] ? __sctp_connect+0xd80/0xd80 [ 1798.271216][T30111] ? __local_bh_enable_ip+0x136/0x1c0 [ 1798.278121][T30111] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1798.284183][T30111] ? security_sctp_bind_connect+0x85/0xb0 [ 1798.291123][T30111] sctp_sendmsg+0x15b0/0x2940 [ 1798.296692][T30111] ? aa_sk_perm+0x781/0x950 [ 1798.302211][T30111] ? sctp_getsockopt+0x8a0/0x8a0 [ 1798.308365][T30111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1798.318166][T30111] ? aa_af_perm+0x340/0x340 [ 1798.325358][T30111] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1798.333552][T30111] ? inet_sendmsg+0xe5/0x2f0 [ 1798.339473][T30111] ? inet_send_prepare+0x260/0x260 [ 1798.345122][T30111] ____sys_sendmsg+0x5be/0x970 [ 1798.353458][T30111] ? __sys_sendmsg_sock+0x30/0x30 [ 1798.358905][T30111] ? __import_iovec+0x315/0x500 [ 1798.364208][T30111] ? import_iovec+0x6f/0xa0 [ 1798.369045][T30111] ___sys_sendmsg+0x2a2/0x360 [ 1798.374653][T30111] ? __sys_sendmsg+0x290/0x290 [ 1798.380665][T30111] ? __lock_acquire+0x7d10/0x7d10 [ 1798.385984][T30111] __se_sys_sendmsg+0x1bb/0x2a0 [ 1798.391276][T30111] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.396668][T30111] ? lockdep_hardirqs_on+0x94/0x140 [ 1798.403175][T30111] do_syscall_64+0x4c/0xa0 [ 1798.408158][T30111] ? clear_bhb_loop+0x60/0xb0 [ 1798.413456][T30111] ? clear_bhb_loop+0x60/0xb0 [ 1798.418863][T30111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.425485][T30111] RIP: 0033:0x7fe78a19c799 [ 1798.430415][T30111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.452646][T30111] RSP: 002b:00007fe78b142028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.462623][T30111] RAX: ffffffffffffffda RBX: 00007fe78a415fa0 RCX: 00007fe78a19c799 [ 1798.472152][T30111] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 1798.482444][T30111] RBP: 00007fe78b142090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.491507][T30111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1798.501717][T30111] R13: 00007fe78a416038 R14: 00007fe78a415fa0 R15: 00007fff5cab9248 [ 1798.510524][T30111] [ 1798.662241][T30123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1799.231314][T30138] hsr0: VLAN not yet supported [ 1803.219630][T30181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7755'. [ 1805.703497][T30234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7774'. [ 1805.898622][T30238] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7776'. [ 1805.922461][T30238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1807.107381][T30265] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.7787'. [ 1807.389551][T30275] validate_nla: 6 callbacks suppressed [ 1807.389574][T30275] netlink: 'syz.2.7790': attribute type 22 has an invalid length. [ 1807.420390][T30276] netlink: 'syz.1.7791': attribute type 2 has an invalid length. [ 1807.439559][T30276] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.7791'. [ 1807.459177][T30275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7790'. [ 1808.585691][T30296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1809.090194][T30317] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7805'. [ 1810.442319][T30337] netlink: 'syz.2.7810': attribute type 1 has an invalid length. [ 1810.479153][T30337] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7810'. [ 1810.744784][T30351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7815'. [ 1810.780099][T30353] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7817'. [ 1811.226236][T30376] netlink: 'syz.3.7822': attribute type 6 has an invalid length. [ 1811.256055][T30376] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7822'. [ 1811.290739][T30375] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7823'. [ 1811.904908][T30393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1813.268839][T30427] FAULT_INJECTION: forcing a failure. [ 1813.268839][T30427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.329309][T30427] CPU: 0 PID: 30427 Comm: syz.0.7841 Not tainted syzkaller #0 [ 1813.340346][T30427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1813.357274][T30427] Call Trace: [ 1813.362976][T30427] [ 1813.366503][T30427] dump_stack_lvl+0x188/0x24e [ 1813.373364][T30427] ? show_regs_print_info+0x12/0x12 [ 1813.383744][T30427] ? load_image+0x400/0x400 [ 1813.390786][T30427] ? __lock_acquire+0x7d10/0x7d10 [ 1813.399211][T30427] should_fail_ex+0x399/0x4d0 [ 1813.406847][T30427] _copy_from_user+0x2c/0x170 [ 1813.412546][T30427] ___sys_sendmsg+0x1c3/0x360 [ 1813.420824][T30427] ? __sys_sendmsg+0x290/0x290 [ 1813.427716][T30427] ? __lock_acquire+0x7d10/0x7d10 [ 1813.436537][T30427] __se_sys_sendmsg+0x1bb/0x2a0 [ 1813.443120][T30427] ? __x64_sys_sendmsg+0x80/0x80 [ 1813.449464][T30427] ? lockdep_hardirqs_on+0x94/0x140 [ 1813.455682][T30427] do_syscall_64+0x4c/0xa0 [ 1813.460776][T30427] ? clear_bhb_loop+0x60/0xb0 [ 1813.466465][T30427] ? clear_bhb_loop+0x60/0xb0 [ 1813.471690][T30427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1813.478988][T30427] RIP: 0033:0x7f847b79c799 [ 1813.485642][T30427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.509307][T30427] RSP: 002b:00007f847c659028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1813.521190][T30427] RAX: ffffffffffffffda RBX: 00007f847ba16090 RCX: 00007f847b79c799 [ 1813.530346][T30427] RDX: 0000000000000000 RSI: 0000200000001a40 RDI: 0000000000000005 [ 1813.540977][T30427] RBP: 00007f847c659090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.551369][T30427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.561885][T30427] R13: 00007f847ba16128 R14: 00007f847ba16090 R15: 00007fffa06d5128 [ 1813.574111][T30427] [ 1813.743927][T30435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7844'. [ 1814.480691][T30454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7853'. [ 1814.514604][T30454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7853'. [ 1814.615698][T30458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7853'. [ 1815.395046][T30473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1819.293413][T30525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7872'. [ 1820.353943][T30553] netlink: 'syz.3.7882': attribute type 21 has an invalid length. [ 1820.426695][T30553] netlink: 'syz.3.7882': attribute type 20 has an invalid length. [ 1820.520324][T30553] netlink: 'syz.3.7882': attribute type 10 has an invalid length. [ 1820.607293][T30553] device veth0_macvtap left promiscuous mode [ 1821.488987][T30564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1821.499233][T30575] netlink: 'syz.4.7889': attribute type 4 has an invalid length. [ 1821.974592][T30575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7889'. [ 1822.400028][T30584] netlink: 'syz.0.7890': attribute type 3 has an invalid length. [ 1822.461320][T30584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7890'. [ 1823.470443][T30594] FAULT_INJECTION: forcing a failure. [ 1823.470443][T30594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.822112][T30594] CPU: 1 PID: 30594 Comm: syz.2.7891 Not tainted syzkaller #0 [ 1823.830636][T30594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1823.841631][T30594] Call Trace: [ 1823.845129][T30594] [ 1823.848194][T30594] dump_stack_lvl+0x188/0x24e [ 1823.853748][T30594] ? show_regs_print_info+0x12/0x12 [ 1823.859271][T30594] ? load_image+0x400/0x400 [ 1823.863928][T30594] ? __lock_acquire+0x7d10/0x7d10 [ 1823.869032][T30594] ? lockdep_hardirqs_on+0x94/0x140 [ 1823.874825][T30594] should_fail_ex+0x399/0x4d0 [ 1823.879772][T30594] _copy_from_user+0x2c/0x170 [ 1823.884969][T30594] __sys_bpf+0x2ea/0x780 [ 1823.889900][T30594] ? bpf_link_show_fdinfo+0x380/0x380 [ 1823.895711][T30594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1823.902063][T30594] __x64_sys_bpf+0x78/0x90 [ 1823.907178][T30594] do_syscall_64+0x4c/0xa0 [ 1823.912231][T30594] ? clear_bhb_loop+0x60/0xb0 [ 1823.917465][T30594] ? clear_bhb_loop+0x60/0xb0 [ 1823.922576][T30594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1823.928714][T30594] RIP: 0033:0x7f3a3c79c799 [ 1823.933726][T30594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.954430][T30594] RSP: 002b:00007f3a3d655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1823.963525][T30594] RAX: ffffffffffffffda RBX: 00007f3a3ca15fa0 RCX: 00007f3a3c79c799 [ 1823.972265][T30594] RDX: 0000000000000030 RSI: 0000200000000180 RDI: 0000000000000014 [ 1823.981013][T30594] RBP: 00007f3a3d655090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.989306][T30594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.997827][T30594] R13: 00007f3a3ca16038 R14: 00007f3a3ca15fa0 R15: 00007fff066aaae8 [ 1824.007005][T30594] [ 1826.377419][T30652] tap0: tun_chr_ioctl cmd 2148553947 [ 1826.386237][T30652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7912'. [ 1826.396645][T30652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7912'. [ 1826.410428][T30652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7912'. [ 1826.441536][T30654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7915'. [ 1826.549752][T30659] netlink: 'syz.4.7916': attribute type 3 has an invalid length. [ 1826.571898][T30659] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7916'. [ 1827.808283][T30675] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1828.917262][T30694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7928'. [ 1829.077818][T30695] netlink: 'syz.3.7929': attribute type 10 has an invalid length. [ 1829.237649][T30695] bridge0: port 3(batadv0) entered disabled state [ 1829.245610][T30695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.254609][T30695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.314888][T30705] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7932'. [ 1829.493510][T30701] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1829.581474][T30701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1830.216294][T30719] netlink: 'syz.1.7936': attribute type 10 has an invalid length. [ 1830.276899][T30719] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7936'. [ 1830.375570][T30719] device hsr0 entered promiscuous mode [ 1830.450059][T30719] bridge0: port 3(hsr0) entered blocking state [ 1830.530560][T30719] bridge0: port 3(hsr0) entered disabled state [ 1830.563066][T30719] bridge0: port 3(hsr0) entered blocking state [ 1830.570553][T30719] bridge0: port 3(hsr0) entered forwarding state [ 1830.622074][T30720] device macvlan1 entered promiscuous mode [ 1830.944966][T30735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7942'. [ 1831.226506][T30744] netlink: 'syz.0.7944': attribute type 2 has an invalid length. [ 1831.789377][T30744] device 0 entered promiscuous mode [ 1832.072195][T30754] device syzkaller0 entered promiscuous mode [ 1832.619497][T30771] netlink: 'syz.1.7950': attribute type 3 has an invalid length. [ 1832.659432][T30771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1832.711178][T30775] FAULT_INJECTION: forcing a failure. [ 1832.711178][T30775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1832.789267][T30775] CPU: 1 PID: 30775 Comm: syz.0.7952 Not tainted syzkaller #0 [ 1832.797433][T30775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1832.809277][T30775] Call Trace: [ 1832.812709][T30775] [ 1832.816657][T30775] dump_stack_lvl+0x188/0x24e [ 1832.821904][T30775] ? show_regs_print_info+0x12/0x12 [ 1832.827793][T30775] ? load_image+0x400/0x400 [ 1832.832747][T30775] ? __lock_acquire+0x7d10/0x7d10 [ 1832.838608][T30775] ? perf_trace_preemptirq_template+0x268/0x320 [ 1832.846326][T30775] should_fail_ex+0x399/0x4d0 [ 1832.851516][T30775] _copy_from_iter+0x1c0/0x1130 [ 1832.859072][T30775] ? lock_chain_count+0x20/0x20 [ 1832.864315][T30775] ? copyout_mc+0x110/0x110 [ 1832.869076][T30775] ? lockdep_hardirqs_on+0x94/0x140 [ 1832.874884][T30775] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1832.881726][T30775] ? page_copy_sane+0x4e/0x390 [ 1832.887266][T30775] copy_page_from_iter+0x77/0x100 [ 1832.893522][T30775] pipe_write+0x87f/0x1b20 [ 1832.899023][T30775] ? pipe_read+0x1260/0x1260 [ 1832.906055][T30775] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1832.913073][T30775] ? end_current_label_crit_section+0x14b/0x170 [ 1832.919649][T30775] ? common_file_perm+0x171/0x1c0 [ 1832.926155][T30775] vfs_write+0x4b1/0xa30 [ 1832.931625][T30775] ? file_end_write+0x250/0x250 [ 1832.937379][T30775] ? __fget_files+0x43d/0x4b0 [ 1832.944533][T30775] ? __fdget_pos+0x1d4/0x360 [ 1832.949623][T30775] ? ksys_write+0x71/0x250 [ 1832.955891][T30775] ksys_write+0x14c/0x250 [ 1832.961350][T30775] ? __ia32_sys_read+0x80/0x80 [ 1832.967334][T30775] ? lockdep_hardirqs_on+0x94/0x140 [ 1832.975652][T30775] do_syscall_64+0x4c/0xa0 [ 1832.982645][T30775] ? clear_bhb_loop+0x60/0xb0 [ 1832.988895][T30775] ? clear_bhb_loop+0x60/0xb0 [ 1832.995917][T30775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1833.006473][T30775] RIP: 0033:0x7f847b79c799 [ 1833.014096][T30775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1833.046974][T30775] RSP: 002b:00007f847c67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1833.059204][T30775] RAX: ffffffffffffffda RBX: 00007f847ba15fa0 RCX: 00007f847b79c799 [ 1833.071855][T30775] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 1833.081729][T30775] RBP: 00007f847c67a090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.090767][T30775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.099890][T30775] R13: 00007f847ba16038 R14: 00007f847ba15fa0 R15: 00007fffa06d5128 [ 1833.108931][T30775] [ 1833.856732][T30793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7959'. [ 1836.793931][T30785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1836.795204][T30762] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1836.813598][T30792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7959'. [ 1836.823720][T30792] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7959'. [ 1836.835479][T30762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1836.846998][T30762] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1837.506307][T30817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1837.939577][T30813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1837.971841][T30813] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1838.011266][T30809] tipc: Started in network mode [ 1838.017344][T30809] tipc: Node identity 9215a268, cluster identity 4711 [ 1838.031737][T30809] tipc: Node number set to 2450891368 [ 1838.309235][T30832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7972'. [ 1838.412257][T30836] FAULT_INJECTION: forcing a failure. [ 1838.412257][T30836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1838.441830][T30836] CPU: 0 PID: 30836 Comm: syz.3.7974 Not tainted syzkaller #0 [ 1838.449484][T30836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1838.461338][T30836] Call Trace: [ 1838.465448][T30836] [ 1838.468677][T30836] dump_stack_lvl+0x188/0x24e [ 1838.474839][T30836] ? show_regs_print_info+0x12/0x12 [ 1838.481612][T30836] ? load_image+0x400/0x400 [ 1838.486626][T30836] ? __lock_acquire+0x7d10/0x7d10 [ 1838.492259][T30836] should_fail_ex+0x399/0x4d0 [ 1838.497191][T30836] _copy_from_user+0x2c/0x170 [ 1838.502011][T30836] iovec_from_user+0x143/0x360 [ 1838.507243][T30836] __import_iovec+0x6d/0x500 [ 1838.512511][T30836] ? __might_fault+0xc2/0x120 [ 1838.517616][T30836] import_iovec+0x6f/0xa0 [ 1838.522397][T30836] ___sys_sendmsg+0x252/0x360 [ 1838.527698][T30836] ? __sys_sendmsg+0x290/0x290 [ 1838.533192][T30836] ? __lock_acquire+0x7d10/0x7d10 [ 1838.538573][T30836] __se_sys_sendmsg+0x1bb/0x2a0 [ 1838.544279][T30836] ? __x64_sys_sendmsg+0x80/0x80 [ 1838.549944][T30836] ? lockdep_hardirqs_on+0x94/0x140 [ 1838.555510][T30836] do_syscall_64+0x4c/0xa0 [ 1838.560757][T30836] ? clear_bhb_loop+0x60/0xb0 [ 1838.566375][T30836] ? clear_bhb_loop+0x60/0xb0 [ 1838.571559][T30836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.578630][T30836] RIP: 0033:0x7f723699c799 [ 1838.583631][T30836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.605999][T30836] RSP: 002b:00007f7237884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1838.615360][T30836] RAX: ffffffffffffffda RBX: 00007f7236c15fa0 RCX: 00007f723699c799 [ 1838.624811][T30836] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 1838.634513][T30836] RBP: 00007f7237884090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.644997][T30836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1838.654625][T30836] R13: 00007f7236c16038 R14: 00007f7236c15fa0 R15: 00007ffd8c32c0f8 [ 1838.663746][T30836] [ 1838.713632][T30834] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7973'. [ 1839.552478][T30860] tipc: Started in network mode [ 1839.557864][T30860] tipc: Node identity 9215a268, cluster identity 4711 [ 1839.688442][T30860] tipc: Node number set to 2450891368 [ 1840.193400][T30877] netlink: 'syz.3.7986': attribute type 10 has an invalid length. [ 1840.242967][T30880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1841.729201][T30916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8002'. [ 1843.517119][T30957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8016'. [ 1843.701836][T30962] netlink: 'syz.0.8018': attribute type 39 has an invalid length. [ 1843.740380][T30963] netlink: 'syz.0.8018': attribute type 39 has an invalid length. [ 1843.762349][T30962] gre0: mtu less than device minimum [ 1844.195089][T30976] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8022'. [ 1844.314244][T30979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1844.379668][T30979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1844.418141][T30980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1844.770834][T30985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1844.811803][T30985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1844.832816][T30987] FAULT_INJECTION: forcing a failure. [ 1844.832816][T30987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1844.909525][T30987] CPU: 0 PID: 30987 Comm: syz.2.8027 Not tainted syzkaller #0 [ 1844.917773][T30987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1844.928684][T30987] Call Trace: [ 1844.932204][T30987] [ 1844.935538][T30987] dump_stack_lvl+0x188/0x24e [ 1844.940476][T30987] ? show_regs_print_info+0x12/0x12 [ 1844.946240][T30987] ? load_image+0x400/0x400 [ 1844.951642][T30987] ? __lock_acquire+0x7d10/0x7d10 [ 1844.957017][T30987] should_fail_ex+0x399/0x4d0 [ 1844.962926][T30987] _copy_from_user+0x2c/0x170 [ 1844.968522][T30987] iovec_from_user+0x143/0x360 [ 1844.974143][T30987] __import_iovec+0x6d/0x500 [ 1844.979463][T30987] ? __might_fault+0xa6/0x120 [ 1844.984832][T30987] import_iovec+0x6f/0xa0 [ 1844.989845][T30987] ___sys_recvmsg+0x4b6/0x590 [ 1844.994959][T30987] ? __sys_recvmsg+0x290/0x290 [ 1845.000462][T30987] ? common_file_perm+0x171/0x1c0 [ 1845.006753][T30987] ? __fget_files+0x43d/0x4b0 [ 1845.012649][T30987] __x64_sys_recvmsg+0x205/0x2e0 [ 1845.017843][T30987] ? ___sys_recvmsg+0x590/0x590 [ 1845.023586][T30987] ? lockdep_hardirqs_on+0x94/0x140 [ 1845.029217][T30987] do_syscall_64+0x4c/0xa0 [ 1845.034198][T30987] ? clear_bhb_loop+0x60/0xb0 [ 1845.039234][T30987] ? clear_bhb_loop+0x60/0xb0 [ 1845.044299][T30987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1845.050619][T30987] RIP: 0033:0x7f3a3c79c799 [ 1845.055365][T30987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.077901][T30987] RSP: 002b:00007f3a3d634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1845.087095][T30987] RAX: ffffffffffffffda RBX: 00007f3a3ca16090 RCX: 00007f3a3c79c799 [ 1845.096018][T30987] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000003 [ 1845.104843][T30987] RBP: 00007f3a3d634090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.114105][T30987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.122675][T30987] R13: 00007f3a3ca16128 R14: 00007f3a3ca16090 R15: 00007fff066aaae8 [ 1845.131349][T30987] [ 1845.531749][T30998] netlink: 'syz.2.8030': attribute type 21 has an invalid length. [ 1845.571659][T30998] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1845.629495][T30998] netlink: 'syz.2.8030': attribute type 4 has an invalid length. [ 1845.659134][T30998] netlink: 'syz.2.8030': attribute type 5 has an invalid length. [ 1845.689200][T30998] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1845.723957][T31000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8031'. [ 1848.751833][T31084] FAULT_INJECTION: forcing a failure. [ 1848.751833][T31084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1848.810815][T31084] CPU: 0 PID: 31084 Comm: syz.1.8060 Not tainted syzkaller #0 [ 1848.820595][T31084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1848.836553][T31084] Call Trace: [ 1848.841208][T31084] [ 1848.845890][T31084] dump_stack_lvl+0x188/0x24e [ 1848.853480][T31084] ? show_regs_print_info+0x12/0x12 [ 1848.862096][T31084] ? load_image+0x400/0x400 [ 1848.868690][T31084] ? __lock_acquire+0x7d10/0x7d10 [ 1848.876245][T31084] should_fail_ex+0x399/0x4d0 [ 1848.882269][T31084] prepare_alloc_pages+0x1e2/0x5f0 [ 1848.889346][T31084] __alloc_pages+0x130/0x4f0 [ 1848.895441][T31084] ? zone_statistics+0x170/0x170 [ 1848.902109][T31084] ? perf_trace_preemptirq_template+0x268/0x320 [ 1848.909669][T31084] __folio_alloc+0xe/0x30 [ 1848.915407][T31084] vma_alloc_folio+0x4a3/0x900 [ 1848.922287][T31084] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 1848.928959][T31084] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 1848.935203][T31084] ? shmem_replace_folio+0xee0/0xee0 [ 1848.943356][T31084] ? xas_load+0x127/0x140 [ 1848.948042][T31084] ? __filemap_get_folio+0x10f/0xdb0 [ 1848.953782][T31084] ? __filemap_get_folio+0xb24/0xdb0 [ 1848.960739][T31084] ? __filemap_get_folio+0x10f/0xdb0 [ 1848.966854][T31084] ? page_cache_prev_miss+0x380/0x380 [ 1848.974635][T31084] ? mark_lock+0x94/0x320 [ 1848.981085][T31084] shmem_get_folio_gfp+0x1361/0x3400 [ 1848.987595][T31084] shmem_write_begin+0xee/0x3f0 [ 1848.995492][T31084] generic_perform_write+0x2fa/0x5c0 [ 1849.003685][T31084] ? generic_file_direct_write+0x330/0x330 [ 1849.013292][T31084] ? __file_remove_privs+0x5f0/0x5f0 [ 1849.021792][T31084] ? rwsem_write_trylock+0x135/0x1c0 [ 1849.029004][T31084] ? clear_nonspinnable+0x60/0x60 [ 1849.035972][T31084] ? generic_write_checks_count+0x3d9/0x4c0 [ 1849.045235][T31084] __generic_file_write_iter+0x148/0x2a0 [ 1849.052725][T31084] generic_file_write_iter+0xab/0x2e0 [ 1849.061248][T31084] vfs_write+0x4b1/0xa30 [ 1849.066301][T31084] ? file_end_write+0x250/0x250 [ 1849.073339][T31084] ? __fget_files+0x43d/0x4b0 [ 1849.079500][T31084] ? __fdget_pos+0x2ae/0x360 [ 1849.086532][T31084] ? ksys_write+0x71/0x250 [ 1849.092156][T31084] ksys_write+0x14c/0x250 [ 1849.097660][T31084] ? __ia32_sys_read+0x80/0x80 [ 1849.103575][T31084] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1849.114003][T31084] do_syscall_64+0x4c/0xa0 [ 1849.119562][T31084] ? clear_bhb_loop+0x60/0xb0 [ 1849.125485][T31084] ? clear_bhb_loop+0x60/0xb0 [ 1849.131834][T31084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1849.140102][T31084] RIP: 0033:0x7fe78a19c799 [ 1849.148453][T31084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.175282][T31084] RSP: 002b:00007fe78b142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1849.186336][T31084] RAX: ffffffffffffffda RBX: 00007fe78a415fa0 RCX: 00007fe78a19c799 [ 1849.195971][T31084] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000009 [ 1849.205874][T31084] RBP: 00007fe78b142090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.215044][T31084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.224110][T31084] R13: 00007fe78a416038 R14: 00007fe78a415fa0 R15: 00007fff5cab9248 [ 1849.233220][T31084] [ 1849.856175][T31101] tap0: tun_chr_ioctl cmd 1074025680 [ 1852.835105][T31114] __nla_validate_parse: 4 callbacks suppressed [ 1852.835127][T31114] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8070'. [ 1854.385758][T31135] netlink: 'syz.0.8079': attribute type 1 has an invalid length. [ 1854.412083][T31135] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.8079'. [ 1855.814071][T31173] netlink: 'syz.1.8089': attribute type 29 has an invalid length. [ 1855.883167][T31173] netlink: 'syz.1.8089': attribute type 29 has an invalid length. [ 1855.970778][T31180] netlink: 'syz.1.8089': attribute type 29 has an invalid length. [ 1856.692183][T31201] netlink: 'syz.1.8097': attribute type 21 has an invalid length. [ 1857.771935][T31224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8104'. [ 1857.792115][T31225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8103'. [ 1857.821637][T31224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8104'. [ 1857.852572][T31229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8104'. [ 1857.873406][T31224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8104'. [ 1858.172768][T31241] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.8109'. [ 1858.749639][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.756327][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.525264][T31268] FAULT_INJECTION: forcing a failure. [ 1859.525264][T31268] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.558926][T31268] CPU: 0 PID: 31268 Comm: syz.4.8118 Not tainted syzkaller #0 [ 1859.566595][T31268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1859.577279][T31268] Call Trace: [ 1859.580960][T31268] [ 1859.584024][T31268] dump_stack_lvl+0x188/0x24e [ 1859.588813][T31268] ? show_regs_print_info+0x12/0x12 [ 1859.594873][T31268] ? load_image+0x400/0x400 [ 1859.599705][T31268] ? __lock_acquire+0x7d10/0x7d10 [ 1859.605889][T31268] should_fail_ex+0x399/0x4d0 [ 1859.611169][T31268] should_failslab+0x5/0x20 [ 1859.616094][T31268] slab_pre_alloc_hook+0x59/0x310 [ 1859.621992][T31268] kmem_cache_alloc_lru+0x49/0x2e0 [ 1859.627424][T31268] ? __d_alloc+0x31/0x700 [ 1859.632303][T31268] ? alloc_fd+0x58f/0x630 [ 1859.636812][T31268] __d_alloc+0x31/0x700 [ 1859.641135][T31268] ? do_raw_spin_lock+0x128/0x2f0 [ 1859.646670][T31268] d_alloc_pseudo+0x19/0x70 [ 1859.651507][T31268] alloc_file_pseudo+0xe0/0x200 [ 1859.657127][T31268] ? alloc_empty_file_noaccount+0x80/0x80 [ 1859.663101][T31268] ? alloc_fd+0x58f/0x630 [ 1859.667849][T31268] anon_inode_getfd+0xc6/0x1c0 [ 1859.673364][T31268] btf_new_fd+0x5f1/0x780 [ 1859.678291][T31268] __sys_bpf+0x612/0x780 [ 1859.683029][T31268] ? bpf_link_show_fdinfo+0x380/0x380 [ 1859.688573][T31268] ? lock_chain_count+0x20/0x20 [ 1859.693815][T31268] __x64_sys_bpf+0x78/0x90 [ 1859.698643][T31268] do_syscall_64+0x4c/0xa0 [ 1859.703727][T31268] ? clear_bhb_loop+0x60/0xb0 [ 1859.708613][T31268] ? clear_bhb_loop+0x60/0xb0 [ 1859.713560][T31268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1859.719754][T31268] RIP: 0033:0x7f965079c799 [ 1859.724210][T31268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.744561][T31268] RSP: 002b:00007f9651698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1859.753896][T31268] RAX: ffffffffffffffda RBX: 00007f9650a15fa0 RCX: 00007f965079c799 [ 1859.762348][T31268] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 1859.771478][T31268] RBP: 00007f9651698090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.780010][T31268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1859.789138][T31268] R13: 00007f9650a16038 R14: 00007f9650a15fa0 R15: 00007ffd1edfe9d8 [ 1859.798045][T31268] [ 1859.914021][T31274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8119'. [ 1860.106759][T31279] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1860.202868][T13856] Bluetooth: hci0: Malformed LE Event: 0x1b [ 1860.203653][T31284] netlink: 'syz.1.8123': attribute type 3 has an invalid length. [ 1860.279457][T31284] netlink: 'syz.1.8123': attribute type 1 has an invalid length. [ 1860.309717][T31284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8123'. [ 1860.375077][T31279] team0: Port device team_slave_0 removed [ 1860.390244][T31279] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1860.534893][T31288] netlink: 'syz.0.8124': attribute type 3 has an invalid length. [ 1860.575970][T31288] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.8124'. [ 1861.304179][T31306] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8127'. [ 1861.907817][T31322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1862.393299][T31336] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.8138'. [ 1862.413570][T31336] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1863.116727][T31361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8146'. [ 1863.313030][T31370] FAULT_INJECTION: forcing a failure. [ 1863.313030][T31370] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.434494][T31370] CPU: 0 PID: 31370 Comm: syz.3.8149 Not tainted syzkaller #0 [ 1863.442674][T31370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1863.453884][T31370] Call Trace: [ 1863.457424][T31370] [ 1863.460685][T31370] dump_stack_lvl+0x188/0x24e [ 1863.465983][T31370] ? show_regs_print_info+0x12/0x12 [ 1863.472330][T31370] ? load_image+0x400/0x400 [ 1863.478676][T31370] ? __might_sleep+0xd0/0xd0 [ 1863.483776][T31370] ? __lock_acquire+0x7d10/0x7d10 [ 1863.489501][T31370] should_fail_ex+0x399/0x4d0 [ 1863.494817][T31370] should_failslab+0x5/0x20 [ 1863.500000][T31370] slab_pre_alloc_hook+0x59/0x310 [ 1863.506267][T31370] kmem_cache_alloc+0x56/0x2f0 [ 1863.511709][T31370] ? __alloc_file+0x25/0x230 [ 1863.516870][T31370] __alloc_file+0x25/0x230 [ 1863.521688][T31370] alloc_empty_file+0x90/0x180 [ 1863.526844][T31370] alloc_file+0x5c/0x5f0 [ 1863.531928][T31370] alloc_file_pseudo+0x180/0x200 [ 1863.537263][T31370] ? alloc_empty_file_noaccount+0x80/0x80 [ 1863.543552][T31370] ? put_pid+0xc3/0x120 [ 1863.548266][T31370] ? init_peercred+0x273/0x310 [ 1863.553834][T31370] sock_alloc_file+0xb3/0x240 [ 1863.558877][T31370] __sys_socketpair+0x2cc/0x540 [ 1863.565194][T31370] __x64_sys_socketpair+0x97/0xb0 [ 1863.571325][T31370] do_syscall_64+0x4c/0xa0 [ 1863.576494][T31370] ? clear_bhb_loop+0x60/0xb0 [ 1863.581744][T31370] ? clear_bhb_loop+0x60/0xb0 [ 1863.587090][T31370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.593684][T31370] RIP: 0033:0x7f723699c799 [ 1863.598310][T31370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.621176][T31370] RSP: 002b:00007f7237884028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1863.631244][T31370] RAX: ffffffffffffffda RBX: 00007f7236c15fa0 RCX: 00007f723699c799 [ 1863.640337][T31370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1863.649067][T31370] RBP: 00007f7237884090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.657440][T31370] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000002 [ 1863.666508][T31370] R13: 00007f7236c16038 R14: 00007f7236c15fa0 R15: 00007ffd8c32c0f8 [ 1863.676528][T31370] [ 1864.170711][T31377] netlink: 'syz.3.8151': attribute type 12 has an invalid length. [ 1864.542660][T31390] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8155'. [ 1864.556019][T31390] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8155'. [ 1864.577658][T31390] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8155'. [ 1865.217047][T31404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8160'. [ 1865.430796][T31410] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1865.664134][T31415] netlink: 'syz.4.8165': attribute type 12 has an invalid length. [ 1865.737408][T31415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8165'. [ 1866.080750][T31427] IPv6: pim6reg1: Disabled Multicast RS [ 1866.436038][T31439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1867.333307][T31469] netlink: 'syz.2.8183': attribute type 3 has an invalid length. [ 1867.359207][T31469] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8183'. [ 1867.683439][T31481] netlink: 'syz.1.8187': attribute type 10 has an invalid length. [ 1867.974804][T31489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1868.432206][T31499] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1870.823777][T31531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8201'. [ 1871.207920][T31541] netlink: 'syz.3.8205': attribute type 10 has an invalid length. [ 1871.237791][T31541] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8205'. [ 1871.924954][T31557] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1871.959288][T31557] netlink: zone id is out of range [ 1871.984552][T31557] netlink: zone id is out of range [ 1871.994784][T31557] netlink: zone id is out of range [ 1872.010429][T31561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1872.048386][T31561] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1872.087952][T31557] netlink: del zone limit has 4 unknown bytes [ 1872.588679][T31581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8215'. [ 1873.033246][T31593] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8220'. [ 1874.156285][T31607] FAULT_INJECTION: forcing a failure. [ 1874.156285][T31607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.386112][T31607] CPU: 0 PID: 31607 Comm: syz.0.8224 Not tainted syzkaller #0 [ 1874.394592][T31607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.405009][T31607] Call Trace: [ 1874.408594][T31607] [ 1874.411847][T31607] dump_stack_lvl+0x188/0x24e [ 1874.417144][T31607] ? show_regs_print_info+0x12/0x12 [ 1874.422705][T31607] ? load_image+0x400/0x400 [ 1874.427733][T31607] ? __lock_acquire+0x7d10/0x7d10 [ 1874.433455][T31607] ? lockdep_hardirqs_on+0x94/0x140 [ 1874.438840][T31607] should_fail_ex+0x399/0x4d0 [ 1874.443776][T31607] _copy_from_user+0x2c/0x170 [ 1874.448719][T31607] __sys_bpf+0x2ea/0x780 [ 1874.453389][T31607] ? bpf_link_show_fdinfo+0x380/0x380 [ 1874.459386][T31607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1874.467128][T31607] __x64_sys_bpf+0x78/0x90 [ 1874.471887][T31607] do_syscall_64+0x4c/0xa0 [ 1874.476551][T31607] ? clear_bhb_loop+0x60/0xb0 [ 1874.481753][T31607] ? clear_bhb_loop+0x60/0xb0 [ 1874.487214][T31607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.493357][T31607] RIP: 0033:0x7f847b79c799 [ 1874.498016][T31607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.518595][T31607] RSP: 002b:00007f847c659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1874.527968][T31607] RAX: ffffffffffffffda RBX: 00007f847ba16090 RCX: 00007f847b79c799 [ 1874.537701][T31607] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1874.547320][T31607] RBP: 00007f847c659090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.556049][T31607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.564759][T31607] R13: 00007f847ba16128 R14: 00007f847ba16090 R15: 00007fffa06d5128 [ 1874.575346][T31607] [ 1874.905811][T31617] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1875.322677][T31624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8230'. [ 1875.437299][T31624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8230'. [ 1875.556605][T31624] device macvlan1 entered promiscuous mode [ 1875.628088][T31633] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8231'. [ 1875.729238][T31633] netlink: zone id is out of range [ 1875.736267][T31633] netlink: zone id is out of range [ 1875.750950][T31633] netlink: zone id is out of range [ 1875.756809][T31633] netlink: zone id is out of range [ 1875.797972][T31633] netlink: zone id is out of range [ 1875.805711][T31628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8230'. [ 1875.864737][T31633] netlink: zone id is out of range [ 1875.870887][T31628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8230'. [ 1876.790900][T31658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1876.819673][T31661] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8242'. [ 1877.176801][T31668] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1877.655912][T31681] netlink: 'syz.3.8248': attribute type 10 has an invalid length. [ 1877.694692][T31681] team0: Port device wlan1 added [ 1877.922488][T31692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1880.041830][T31730] __nla_validate_parse: 1 callbacks suppressed [ 1880.041871][T31730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8265'. [ 1880.538143][T31747] FAULT_INJECTION: forcing a failure. [ 1880.538143][T31747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.635580][T31747] CPU: 0 PID: 31747 Comm: syz.2.8273 Not tainted syzkaller #0 [ 1880.644548][T31747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1880.658296][T31747] Call Trace: [ 1880.662307][T31747] [ 1880.667844][T31747] dump_stack_lvl+0x188/0x24e [ 1880.675586][T31747] ? show_regs_print_info+0x12/0x12 [ 1880.684154][T31747] ? load_image+0x400/0x400 [ 1880.689169][T31747] ? __lock_acquire+0x7d10/0x7d10 [ 1880.694440][T31747] ? __kmem_cache_alloc_node+0x140/0x260 [ 1880.700582][T31747] ? __virt_addr_valid+0x188/0x540 [ 1880.706294][T31747] should_fail_ex+0x399/0x4d0 [ 1880.712624][T31747] _copy_from_user+0x2c/0x170 [ 1880.718552][T31747] map_update_elem+0x454/0x680 [ 1880.723922][T31747] __sys_bpf+0x4ec/0x780 [ 1880.728238][T31747] ? bpf_link_show_fdinfo+0x380/0x380 [ 1880.734389][T31747] ? lock_chain_count+0x20/0x20 [ 1880.739967][T31747] __x64_sys_bpf+0x78/0x90 [ 1880.745199][T31747] do_syscall_64+0x4c/0xa0 [ 1880.750552][T31747] ? clear_bhb_loop+0x60/0xb0 [ 1880.756524][T31747] ? clear_bhb_loop+0x60/0xb0 [ 1880.762277][T31747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1880.769314][T31747] RIP: 0033:0x7f3a3c79c799 [ 1880.776123][T31747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.800407][T31747] RSP: 002b:00007f3a3d655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1880.811352][T31747] RAX: ffffffffffffffda RBX: 00007f3a3ca15fa0 RCX: 00007f3a3c79c799 [ 1880.820484][T31747] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 1880.829471][T31747] RBP: 00007f3a3d655090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.839267][T31747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.849005][T31747] R13: 00007f3a3ca16038 R14: 00007f3a3ca15fa0 R15: 00007fff066aaae8 [ 1880.858719][T31747] [ 1881.435355][T31762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8279'. [ 1881.526109][T31764] netlink: 'syz.2.8278': attribute type 9 has an invalid length. [ 1881.553216][T31764] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1881.858954][T31777] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8282'. [ 1882.127185][T31777] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1884.288534][T31806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1885.578619][T31813] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8294'. [ 1885.799581][T31816] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.8296'. [ 1886.916774][T31843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8304'. [ 1886.950796][T31843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8304'. [ 1887.028824][T31845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8305'. [ 1887.204102][T31851] netlink: 'syz.0.8306': attribute type 1 has an invalid length. [ 1887.223203][T31851] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8306'. [ 1887.910175][T31894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1887.993579][T31894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1888.065461][T31900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1888.104157][T31888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1888.496149][T31911] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1888.523185][T31911] syzkaller0: linktype set to 769 [ 1888.543688][T31911] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1888.553854][T31911] syzkaller0: tun_chr_ioctl cmd 35636 [ 1888.575123][T31911] netlink: 'syz.3.8318': attribute type 10 has an invalid length. [ 1890.547366][T31938] netlink: 'syz.2.8327': attribute type 1 has an invalid length. [ 1890.779793][T31938] __nla_validate_parse: 4 callbacks suppressed [ 1890.779839][T31938] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1891.542896][T31954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1893.341074][T31986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8344'. [ 1893.638528][T31997] netlink: 'syz.2.8348': attribute type 10 has an invalid length. [ 1893.667490][T31999] netlink: 'syz.4.8346': attribute type 10 has an invalid length. [ 1894.152418][T32016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1894.601462][T32016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1894.621696][T32008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1894.793058][T32022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1895.055612][T32033] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8358'. [ 1896.449611][T32062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8369'. [ 1897.028118][T32075] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8372'. [ 1897.984874][T32094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8381'. [ 1898.412484][T32102] netlink: 'syz.4.8384': attribute type 1 has an invalid length. [ 1898.508401][T32108] netlink: 'syz.3.8386': attribute type 10 has an invalid length. [ 1898.792105][T32108] team0: Port device geneve1 added [ 1899.138915][T32129] netlink: 'syz.0.8391': attribute type 10 has an invalid length. [ 1899.240140][T32129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8391'. [ 1899.262586][T32132] netlink: 'syz.1.8393': attribute type 2 has an invalid length. [ 1899.286563][T32129] net_ratelimit: 98 callbacks suppressed [ 1899.286584][T32129] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1899.360397][T32134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8394'. [ 1901.020918][T32174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8406'. [ 1903.263189][T32211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8420'. [ 1903.698950][T32205] netlink: 'syz.4.8418': attribute type 21 has an invalid length. [ 1903.744848][T32205] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1903.790921][T32205] netlink: 'syz.4.8418': attribute type 4 has an invalid length. [ 1903.866075][T32205] netlink: 'syz.4.8418': attribute type 5 has an invalid length. [ 1903.962800][T32205] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1904.057622][T32221] netlink: 'syz.2.8422': attribute type 1 has an invalid length. [ 1904.223400][T32221] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1905.056092][T32252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8433'. [ 1905.604444][T32269] FAULT_INJECTION: forcing a failure. [ 1905.604444][T32269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.622383][T32269] CPU: 1 PID: 32269 Comm: syz.2.8439 Not tainted syzkaller #0 [ 1905.630276][T32269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1905.640799][T32269] Call Trace: [ 1905.645625][T32269] [ 1905.648720][T32269] dump_stack_lvl+0x188/0x24e [ 1905.653834][T32269] ? show_regs_print_info+0x12/0x12 [ 1905.659453][T32269] ? load_image+0x400/0x400 [ 1905.664360][T32269] ? __lock_acquire+0x7d10/0x7d10 [ 1905.670161][T32269] should_fail_ex+0x399/0x4d0 [ 1905.675198][T32269] strncpy_from_user+0x32/0x350 [ 1905.680126][T32269] bpf_prog_load+0x1f3/0x1560 [ 1905.685050][T32269] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1905.691459][T32269] ? lock_chain_count+0x20/0x20 [ 1905.696922][T32269] ? map_freeze+0x390/0x390 [ 1905.702119][T32269] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1905.708804][T32269] ? lockdep_hardirqs_on+0x94/0x140 [ 1905.714573][T32269] ? security_bpf+0x40/0xa0 [ 1905.719314][T32269] ? security_bpf+0x7a/0xa0 [ 1905.724311][T32269] __sys_bpf+0x5b8/0x780 [ 1905.729150][T32269] ? bpf_link_show_fdinfo+0x380/0x380 [ 1905.734782][T32269] ? lock_chain_count+0x20/0x20 [ 1905.739894][T32269] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1905.746509][T32269] __x64_sys_bpf+0x78/0x90 [ 1905.751366][T32269] do_syscall_64+0x4c/0xa0 [ 1905.756375][T32269] ? clear_bhb_loop+0x60/0xb0 [ 1905.761478][T32269] ? clear_bhb_loop+0x60/0xb0 [ 1905.767398][T32269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1905.774063][T32269] RIP: 0033:0x7f3a3c79c799 [ 1905.778805][T32269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.799349][T32269] RSP: 002b:00007f3a3d655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1905.808679][T32269] RAX: ffffffffffffffda RBX: 00007f3a3ca15fa0 RCX: 00007f3a3c79c799 [ 1905.817823][T32269] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1905.826549][T32269] RBP: 00007f3a3d655090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.835105][T32269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1905.843303][T32269] R13: 00007f3a3ca16038 R14: 00007f3a3ca15fa0 R15: 00007fff066aaae8 [ 1905.852569][T32269] [ 1906.186382][T32278] netlink: 'syz.4.8442': attribute type 29 has an invalid length. [ 1906.460010][T32278] netlink: 'syz.4.8442': attribute type 29 has an invalid length. [ 1907.353556][T32298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8448'. [ 1908.501210][T32334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8462'. [ 1908.534663][T13856] Bluetooth: hci3: ISO packet for unknown connection handle 8 [ 1908.637781][T32336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8465'. [ 1908.647892][T32336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8465'. [ 1908.684714][T32339] netlink: 'syz.4.8463': attribute type 10 has an invalid length. [ 1908.695749][T32339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.703658][T32339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.730592][T32339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.738151][T32339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.745847][T32339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.753615][T32339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.869549][T32339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1908.959530][T32336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8465'. [ 1909.007293][T32341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8464'. [ 1909.428147][T32353] netlink: 'syz.3.8466': attribute type 10 has an invalid length. [ 1909.530536][T32353] team0: Device vxcan1 is of different type [ 1909.772514][T32364] FAULT_INJECTION: forcing a failure. [ 1909.772514][T32364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.827921][T32364] CPU: 1 PID: 32364 Comm: syz.0.8471 Not tainted syzkaller #0 [ 1909.835901][T32364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1909.846551][T32364] Call Trace: [ 1909.849883][T32364] [ 1909.853122][T32364] dump_stack_lvl+0x188/0x24e [ 1909.858571][T32364] ? show_regs_print_info+0x12/0x12 [ 1909.864538][T32364] ? load_image+0x400/0x400 [ 1909.869463][T32364] ? __lock_acquire+0x7d10/0x7d10 [ 1909.874960][T32364] ? snprintf+0xe5/0x140 [ 1909.879953][T32364] should_fail_ex+0x399/0x4d0 [ 1909.885719][T32364] _copy_to_user+0x2c/0x130 [ 1909.890449][T32364] simple_read_from_buffer+0xe3/0x150 [ 1909.896837][T32364] proc_fail_nth_read+0x1a6/0x220 [ 1909.902414][T32364] ? proc_fault_inject_write+0x310/0x310 [ 1909.908720][T32364] ? fsnotify_perm+0x248/0x550 [ 1909.913999][T32364] ? proc_fault_inject_write+0x310/0x310 [ 1909.920217][T32364] vfs_read+0x2de/0xa00 [ 1909.924609][T32364] ? kernel_read+0x1e0/0x1e0 [ 1909.930037][T32364] ? __fget_files+0x28/0x4b0 [ 1909.935041][T32364] ? __fget_files+0x28/0x4b0 [ 1909.940035][T32364] ? __fget_files+0x43d/0x4b0 [ 1909.944814][T32364] ? __fdget_pos+0x2ae/0x360 [ 1909.949633][T32364] ? ksys_read+0x71/0x250 [ 1909.954508][T32364] ksys_read+0x14c/0x250 [ 1909.959343][T32364] ? vfs_write+0xa30/0xa30 [ 1909.964335][T32364] ? lockdep_hardirqs_on+0x94/0x140 [ 1909.970784][T32364] do_syscall_64+0x4c/0xa0 [ 1909.976451][T32364] ? clear_bhb_loop+0x60/0xb0 [ 1909.981985][T32364] ? clear_bhb_loop+0x60/0xb0 [ 1909.986834][T32364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.993267][T32364] RIP: 0033:0x7f847b75cfce [ 1909.998659][T32364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1910.021805][T32364] RSP: 002b:00007f847c679fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1910.032024][T32364] RAX: ffffffffffffffda RBX: 00007f847c67a6c0 RCX: 00007f847b75cfce [ 1910.041019][T32364] RDX: 000000000000000f RSI: 00007f847c67a0a0 RDI: 0000000000000004 [ 1910.049242][T32364] RBP: 00007f847c67a090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.057806][T32364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.066651][T32364] R13: 00007f847ba16038 R14: 00007f847ba15fa0 R15: 00007fffa06d5128 [ 1910.074966][T32364] [ 1910.102854][T32367] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8472'. [ 1910.350287][T32374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8475'. [ 1910.371409][T32374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8475'. [ 1910.397177][T32375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8475'. [ 1910.429486][T32374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8475'. [ 1913.414018][T32433] netlink: 'syz.2.8498': attribute type 21 has an invalid length. [ 1913.789311][T32444] netlink: 'syz.1.8501': attribute type 10 has an invalid length. [ 1914.168805][T32444] team0: Port device dummy0 added [ 1914.394471][T32455] __nla_validate_parse: 4 callbacks suppressed [ 1914.394513][T32455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8504'. [ 1914.494686][T32460] netlink: 'syz.4.8507': attribute type 9 has an invalid length. [ 1914.517623][T32466] netlink: 'syz.1.8508': attribute type 17 has an invalid length. [ 1914.527369][T32460] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8507'. [ 1914.539297][T32466] netlink: 'syz.1.8508': attribute type 41 has an invalid length. [ 1914.547396][T32466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1914.757904][T32469] netlink: 'syz.3.8509': attribute type 10 has an invalid length. [ 1915.273692][T32477] device syzkaller0 entered promiscuous mode [ 1919.610947][T32491] netlink: 'syz.1.8514': attribute type 10 has an invalid length. [ 1919.633624][T32491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.671229][T32491] bond0: (slave team0): Enslaving as an active interface with an up link [ 1919.688932][T32497] tap0: tun_chr_ioctl cmd 1074025680 [ 1919.725169][T32503] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1919.743653][T32503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1919.756294][T32503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1919.953884][T32520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1920.041762][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.054328][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.116034][T32523] netlink: 'syz.2.8522': attribute type 3 has an invalid length. [ 1920.150932][T32523] netlink: 'syz.2.8522': attribute type 8 has an invalid length. [ 1920.167343][T32523] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.8522'. [ 1920.284843][T32530] netlink: 'syz.3.8523': attribute type 9 has an invalid length. [ 1920.316160][T32530] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8523'. [ 1921.758410][T32560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8535'. [ 1921.825347][T32563] netlink: 'syz.4.8533': attribute type 10 has an invalid length. [ 1921.901798][T32563] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1922.636228][T32575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8539'. [ 1922.683478][T32575] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8539'. [ 1922.909538][T32587] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.8542'. [ 1923.177107][T32595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8547'. [ 1923.536194][T32603] netlink: 'syz.2.8551': attribute type 6 has an invalid length. [ 1923.578902][T32603] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8551'. [ 1924.109503][T32618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1924.230048][T32618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1924.294794][T32618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1924.353498][T32618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1924.681901][T32618] device batadv0 left promiscuous mode [ 1924.734227][T32618] bridge0: port 3(batadv0) entered disabled state [ 1925.009756][T32628] IPv6: pim6reg1: Disabled Multicast RS [ 1925.254323][T32633] device sit0 entered promiscuous mode [ 1925.563910][T32640] netlink: 'syz.3.8559': attribute type 10 has an invalid length. [ 1925.600269][T32640] team0: Port device wlan1 removed [ 1925.610994][T32643] __nla_validate_parse: 2 callbacks suppressed [ 1925.611036][T32643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8561'. [ 1926.056120][T32658] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8565'. [ 1927.200459][T32677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1927.354300][T32685] delete_channel: no stack [ 1927.389909][T32685] delete_channel: no stack [ 1927.450531][T32688] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8576'. [ 1927.535459][T32688] bridge_slave_1: default FDB implementation only supports local addresses [ 1927.570538][T32693] sctp: [Deprecated]: syz.3.8579 (pid 32693) Use of int in maxseg socket option. [ 1927.570538][T32693] Use struct sctp_assoc_value instead [ 1927.637276][T32692] netlink: 'syz.1.8580': attribute type 10 has an invalid length. [ 1928.064788][T32707] netlink: 'syz.1.8584': attribute type 21 has an invalid length. [ 1928.486063][T32718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8589'. [ 1929.045038][T32722] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8590'. [ 1929.409853][T32735] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8594'. [ 1929.509142][T32737] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8594'. [ 1930.515557][T32757] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8600'. [ 1930.570517][T32760] device syzkaller0 entered promiscuous mode [ 1930.670992][T32760] syzkaller0: mtu less than device minimum [ 1930.768924][T32763] FAULT_INJECTION: forcing a failure. [ 1930.768924][T32763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1930.805330][T32763] CPU: 0 PID: 32763 Comm: syz.3.8603 Not tainted syzkaller #0 [ 1930.813549][T32763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1930.826221][T32763] Call Trace: [ 1930.830716][T32763] [ 1930.834270][T32763] dump_stack_lvl+0x188/0x24e [ 1930.839813][T32763] ? show_regs_print_info+0x12/0x12 [ 1930.845626][T32763] ? load_image+0x400/0x400 [ 1930.850690][T32763] ? __lock_acquire+0x7d10/0x7d10 [ 1930.855961][T32763] should_fail_ex+0x399/0x4d0 [ 1930.860869][T32763] _copy_from_user+0x2c/0x170 [ 1930.865993][T32763] kstrtouint_from_user+0xda/0x170 [ 1930.872022][T32763] ? kstrtol_from_user+0x190/0x190 [ 1930.878040][T32763] proc_fail_nth_write+0x8b/0x200 [ 1930.883839][T32763] ? proc_fail_nth_read+0x220/0x220 [ 1930.889216][T32763] ? common_file_perm+0x171/0x1c0 [ 1930.894752][T32763] ? proc_fail_nth_read+0x220/0x220 [ 1930.901148][T32763] vfs_write+0x2e6/0xa30 [ 1930.906360][T32763] ? file_end_write+0x250/0x250 [ 1930.911614][T32763] ? __fget_files+0x28/0x4b0 [ 1930.916782][T32763] ? __fget_files+0x28/0x4b0 [ 1930.922139][T32763] ? __fget_files+0x43d/0x4b0 [ 1930.927396][T32763] ? __fdget_pos+0x2ae/0x360 [ 1930.933113][T32763] ? ksys_write+0x71/0x250 [ 1930.937812][T32763] ksys_write+0x14c/0x250 [ 1930.943369][T32763] ? __ia32_sys_read+0x80/0x80 [ 1930.949299][T32763] ? lockdep_hardirqs_on+0x94/0x140 [ 1930.954663][T32763] do_syscall_64+0x4c/0xa0 [ 1930.962140][T32763] ? clear_bhb_loop+0x60/0xb0 [ 1930.967448][T32763] ? clear_bhb_loop+0x60/0xb0 [ 1930.974201][T32763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1930.981728][T32763] RIP: 0033:0x7f723695cfce [ 1930.988128][T32763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1931.014275][T32763] RSP: 002b:00007f7237883fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1931.025829][T32763] RAX: ffffffffffffffda RBX: 00007f72378846c0 RCX: 00007f723695cfce [ 1931.034754][T32763] RDX: 0000000000000001 RSI: 00007f72378840a0 RDI: 0000000000000004 [ 1931.043850][T32763] RBP: 00007f7237884090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.052515][T32763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.062474][T32763] R13: 00007f7236c16038 R14: 00007f7236c15fa0 R15: 00007ffd8c32c0f8 [ 1931.071066][T32763] [ 1931.761090][ T310] netlink: 'syz.1.8607': attribute type 11 has an invalid length. [ 1931.797281][ T310] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8607'. [ 1932.154259][ T316] FAULT_INJECTION: forcing a failure. [ 1932.154259][ T316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1932.195346][ T316] CPU: 0 PID: 316 Comm: syz.3.8610 Not tainted syzkaller #0 [ 1932.203526][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1932.214105][ T316] Call Trace: [ 1932.217672][ T316] [ 1932.221074][ T316] dump_stack_lvl+0x188/0x24e [ 1932.225877][ T316] ? show_regs_print_info+0x12/0x12 [ 1932.231173][ T316] ? load_image+0x400/0x400 [ 1932.236154][ T316] ? __lock_acquire+0x7d10/0x7d10 [ 1932.241462][ T316] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1932.247683][ T316] should_fail_ex+0x399/0x4d0 [ 1932.253239][ T316] _copy_to_user+0x2c/0x130 [ 1932.258037][ T316] bpf_prog_test_run_raw_tp+0x4c6/0x660 [ 1932.264409][ T316] ? trace_bpf_test_finish+0x220/0x220 [ 1932.270380][ T316] ? trace_bpf_test_finish+0x220/0x220 [ 1932.276727][ T316] bpf_prog_test_run+0x31e/0x390 [ 1932.281992][ T316] __sys_bpf+0x62b/0x780 [ 1932.286671][ T316] ? bpf_link_show_fdinfo+0x380/0x380 [ 1932.292494][ T316] ? lock_chain_count+0x20/0x20 [ 1932.297850][ T316] __x64_sys_bpf+0x78/0x90 [ 1932.302506][ T316] do_syscall_64+0x4c/0xa0 [ 1932.307545][ T316] ? clear_bhb_loop+0x60/0xb0 [ 1932.312556][ T316] ? clear_bhb_loop+0x60/0xb0 [ 1932.317809][ T316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1932.325046][ T316] RIP: 0033:0x7f723699c799 [ 1932.329730][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1932.350644][ T316] RSP: 002b:00007f7237884028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1932.359541][ T316] RAX: ffffffffffffffda RBX: 00007f7236c15fa0 RCX: 00007f723699c799 [ 1932.368126][ T316] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1932.376832][ T316] RBP: 00007f7237884090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.385212][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1932.394854][ T316] R13: 00007f7236c16038 R14: 00007f7236c15fa0 R15: 00007ffd8c32c0f8 [ 1932.403957][ T316] [ 1932.418385][ T306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1932.669893][ T327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1932.840151][ T338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8619'. [ 1932.997937][ T344] device syzkaller0 entered promiscuous mode [ 1933.025349][ T344] FAULT_INJECTION: forcing a failure. [ 1933.025349][ T344] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.039667][ T344] CPU: 0 PID: 344 Comm: syz.1.8621 Not tainted syzkaller #0 [ 1933.047975][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1933.059322][ T344] Call Trace: [ 1933.063096][ T344] [ 1933.066169][ T344] dump_stack_lvl+0x188/0x24e [ 1933.071286][ T344] ? show_regs_print_info+0x12/0x12 [ 1933.077112][ T344] ? load_image+0x400/0x400 [ 1933.081954][ T344] ? __might_sleep+0xd0/0xd0 [ 1933.086788][ T344] ? __lock_acquire+0x7d10/0x7d10 [ 1933.092514][ T344] should_fail_ex+0x399/0x4d0 [ 1933.097636][ T344] should_failslab+0x5/0x20 [ 1933.103034][ T344] slab_pre_alloc_hook+0x59/0x310 [ 1933.108582][ T344] kmem_cache_alloc_node+0x5a/0x320 [ 1933.114446][ T344] ? if_nlmsg_size+0x5b0/0x880 [ 1933.119561][ T344] ? __alloc_skb+0xfc/0x7e0 [ 1933.124685][ T344] __alloc_skb+0xfc/0x7e0 [ 1933.129528][ T344] rtmsg_ifinfo_build_skb+0x80/0x180 [ 1933.135556][ T344] rtnetlink_event+0xcd/0x1a0 [ 1933.140585][ T344] raw_notifier_call_chain+0xcb/0x160 [ 1933.146565][ T344] dev_set_mtu_ext+0x45f/0x680 [ 1933.151767][ T344] ? dev_validate_mtu+0x170/0x170 [ 1933.157403][ T344] ? __mutex_trylock_common+0x155/0x260 [ 1933.163459][ T344] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1933.169956][ T344] dev_set_mtu+0x41/0xc0 [ 1933.174534][ T344] dev_ifsioc+0x443/0xd40 [ 1933.179008][ T344] ? dev_ioctl+0xe80/0xe80 [ 1933.184088][ T344] ? apparmor_capable+0x12c/0x190 [ 1933.189809][ T344] ? full_name_hash+0x8e/0xe0 [ 1933.194958][ T344] ? dev_load+0x1d/0x1e0 [ 1933.199474][ T344] ? dev_load+0x1d/0x1e0 [ 1933.204502][ T344] dev_ioctl+0x55e/0xe80 [ 1933.208927][ T344] sock_do_ioctl+0x245/0x320 [ 1933.213863][ T344] ? sock_show_fdinfo+0xb0/0xb0 [ 1933.219423][ T344] sock_ioctl+0x4d2/0x710 [ 1933.224086][ T344] ? sock_poll+0x410/0x410 [ 1933.228670][ T344] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1933.234494][ T344] ? security_file_ioctl+0x7c/0xa0 [ 1933.240055][ T344] ? sock_poll+0x410/0x410 [ 1933.244899][ T344] __se_sys_ioctl+0xfa/0x170 [ 1933.249912][ T344] do_syscall_64+0x4c/0xa0 [ 1933.254582][ T344] ? clear_bhb_loop+0x60/0xb0 [ 1933.259850][ T344] ? clear_bhb_loop+0x60/0xb0 [ 1933.264747][ T344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1933.271070][ T344] RIP: 0033:0x7fe78a19c799 [ 1933.275839][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1933.297710][ T344] RSP: 002b:00007fe78b142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1933.307251][ T344] RAX: ffffffffffffffda RBX: 00007fe78a415fa0 RCX: 00007fe78a19c799 [ 1933.316508][ T344] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006 [ 1933.325727][ T344] RBP: 00007fe78b142090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.335519][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.344965][ T344] R13: 00007fe78a416038 R14: 00007fe78a415fa0 R15: 00007fff5cab9248 [ 1933.353963][ T344] [ 1934.203673][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.212360][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.477720][ T362] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8626'. [ 1934.515500][ T362] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1934.544922][ T356] netlink: 'syz.2.8625': attribute type 7 has an invalid length. [ 1934.590606][ T361] netlink: 'syz.2.8625': attribute type 1 has an invalid length. [ 1934.649566][ T361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1934.731844][ T370] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1935.171140][ T387] device syzkaller0 entered promiscuous mode [ 1935.417341][ T392] netlink: 'syz.3.8638': attribute type 4 has an invalid length. [ 1935.459992][ T392] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1935.944111][ T403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8643'. [ 1936.317052][ T408] netlink: 'syz.0.8644': attribute type 1 has an invalid length. [ 1936.386679][ T408] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.8644'. [ 1936.570033][ T413] netlink: 'syz.1.8646': attribute type 11 has an invalid length. [ 1936.609937][ T413] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8646'. [ 1937.052621][ T436] FAULT_INJECTION: forcing a failure. [ 1937.052621][ T436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1937.090649][ T436] CPU: 0 PID: 436 Comm: syz.0.8654 Not tainted syzkaller #0 [ 1937.099256][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1937.111181][ T436] Call Trace: [ 1937.115585][ T436] [ 1937.119122][ T436] dump_stack_lvl+0x188/0x24e [ 1937.124521][ T436] ? show_regs_print_info+0x12/0x12 [ 1937.130510][ T436] ? load_image+0x400/0x400 [ 1937.135528][ T436] ? __lock_acquire+0x7d10/0x7d10 [ 1937.141421][ T436] ? lock_chain_count+0x20/0x20 [ 1937.147851][ T436] should_fail_ex+0x399/0x4d0 [ 1937.154069][ T436] _copy_from_user+0x2c/0x170 [ 1937.159349][ T436] ___sys_sendmsg+0x1c3/0x360 [ 1937.165053][ T436] ? __sys_sendmsg+0x290/0x290 [ 1937.170345][ T436] ? __lock_acquire+0x7d10/0x7d10 [ 1937.177890][ T436] __se_sys_sendmsg+0x1bb/0x2a0 [ 1937.184230][ T436] ? __x64_sys_sendmsg+0x80/0x80 [ 1937.190218][ T436] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1937.197169][ T436] do_syscall_64+0x4c/0xa0 [ 1937.203322][ T436] ? clear_bhb_loop+0x60/0xb0 [ 1937.209728][ T436] ? clear_bhb_loop+0x60/0xb0 [ 1937.215562][ T436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1937.222407][ T436] RIP: 0033:0x7f847b79c799 [ 1937.228269][ T436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.250971][ T436] RSP: 002b:00007f847c67a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1937.260044][ T436] RAX: ffffffffffffffda RBX: 00007f847ba15fa0 RCX: 00007f847b79c799 [ 1937.268905][ T436] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1937.277194][ T436] RBP: 00007f847c67a090 R08: 0000000000000000 R09: 0000000000000000 [ 1937.285555][ T436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1937.293828][ T436] R13: 00007f847ba16038 R14: 00007f847ba15fa0 R15: 00007fffa06d5128 [ 1937.302773][ T436] [ 1937.341787][ T437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1939.107594][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1939.687730][ T493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8668'. [ 1939.952724][ T501] netlink: 'syz.2.8670': attribute type 10 has an invalid length. [ 1939.985314][ T501] team0: Device vxcan1 is of different type [ 1941.303106][ T530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8680'. [ 1941.725196][ T538] netlink: 'syz.1.8682': attribute type 10 has an invalid length. [ 1941.959915][ T538] device veth0_macvtap left promiscuous mode [ 1942.531507][ T541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1942.554227][ T541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1942.578070][ T541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1942.615792][ T541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1942.847362][ T549] netlink: 'syz.1.8689': attribute type 10 has an invalid length. [ 1942.964924][ T549] device syz_tun left promiscuous mode [ 1942.983624][ T549] Ÿë: port 1(syz_tun) entered disabled state [ 1943.197796][ T549] team0: Port device syz_tun added [ 1943.263836][ T556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8692'. [ 1944.172650][ T580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8698'. [ 1944.252552][ T580] netlink: 'syz.3.8698': attribute type 3 has an invalid length. [ 1945.157654][ T592] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8702'. [ 1945.180668][ T595] netlink: 'syz.3.8704': attribute type 2 has an invalid length. [ 1945.203642][ T595] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8704'. [ 1945.312709][ T597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8703'. [ 1945.462105][ T601] netlink: 'syz.4.8705': attribute type 10 has an invalid length. [ 1945.827247][ T601] team0: Port device syz_tun added [ 1946.493207][ T623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8713'. [ 1946.555039][ T623] netlink: 'syz.1.8713': attribute type 3 has an invalid length. [ 1946.857206][ T627] netlink: 'syz.4.8715': attribute type 29 has an invalid length. [ 1946.889960][ T627] netlink: 'syz.4.8715': attribute type 29 has an invalid length. [ 1946.909453][ T631] netlink: 'syz.4.8715': attribute type 29 has an invalid length. [ 1946.926081][ T627] netlink: 'syz.4.8715': attribute type 29 has an invalid length. [ 1947.564633][ T642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8718'. [ 1948.301412][ T651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8732'. [ 1949.924287][ T682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8728'. [ 1949.989191][ T682] netlink: 'syz.2.8728': attribute type 3 has an invalid length. [ 1950.183323][ T681] netlink: 'syz.3.8727': attribute type 10 has an invalid length. [ 1950.526721][ T681] team0: Port device syz_tun added [ 1951.022216][ T697] netlink: 'syz.1.8731': attribute type 29 has an invalid length. [ 1951.109781][ T697] netlink: 'syz.1.8731': attribute type 29 has an invalid length. [ 1951.183533][ T705] netlink: 'syz.1.8731': attribute type 29 has an invalid length. [ 1951.220144][ T707] netlink: 'syz.1.8731': attribute type 29 has an invalid length. [ 1951.912889][ T713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1952.572262][ T725] netlink: 'syz.4.8742': attribute type 21 has an invalid length. [ 1952.654479][ T725] netlink: 'syz.4.8742': attribute type 1 has an invalid length. [ 1952.705365][ T725] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1954.035929][ T742] netlink: 'syz.3.8750': attribute type 29 has an invalid length. [ 1954.075969][ T742] netlink: 'syz.3.8750': attribute type 29 has an invalid length. [ 1954.157377][ T749] netlink: 'syz.2.8749': attribute type 10 has an invalid length. [ 1954.462926][ T749] team0: Port device syz_tun added [ 1954.478915][ T752] netlink: 'syz.3.8750': attribute type 29 has an invalid length. [ 1954.510666][ T759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8753'. [ 1955.876475][ T780] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.8761'. [ 1955.997531][ T787] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1956.754601][ T799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8768'. [ 1956.823143][ T803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1957.483880][ T810] validate_nla: 3 callbacks suppressed [ 1957.483901][ T810] netlink: 'syz.0.8772': attribute type 10 has an invalid length. [ 1957.664076][ T813] netlink: 'syz.4.8773': attribute type 9 has an invalid length. [ 1957.675657][ T813] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.8773'. [ 1958.524236][ T838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1958.834858][ T844] netlink: 'syz.0.8784': attribute type 10 has an invalid length. [ 1959.506744][ T858] IPv6: Can't replace route, no match found [ 1959.541746][ T861] mac80211_hwsim hwsim577 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1963.749118][ T874] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8792'. [ 1963.759979][ T883] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1963.781499][ T883] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1963.799075][ T883] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1963.944497][ T892] netlink: 'syz.1.8796': attribute type 10 has an invalid length. [ 1964.024097][ T897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8795'. [ 1964.245691][ T907] netlink: 'syz.1.8801': attribute type 29 has an invalid length. [ 1964.288385][ T907] netlink: 'syz.1.8801': attribute type 29 has an invalid length. [ 1965.539908][ T946] netlink: 'syz.0.8809': attribute type 3 has an invalid length. [ 1965.548016][ T946] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8809'. [ 1965.818411][ T954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8812'. [ 1965.930832][ T955] netlink: 'syz.3.8813': attribute type 10 has an invalid length. [ 1967.905895][ T999] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8825'. [ 1968.287053][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1968.354339][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.389551][ T999] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1968.428044][ T999] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1968.444747][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.452876][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.478606][ T999] bond0 (unregistering): Released all slaves [ 1968.488902][ T1003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8827'. [ 1968.500269][ T1012] netlink: 'syz.2.8828': attribute type 10 has an invalid length. [ 1968.510293][ T1010] netlink: 'syz.1.8829': attribute type 4 has an invalid length. [ 1968.530421][ T1010] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8829'. [ 1968.544034][ T1014] netlink: 'syz.0.8830': attribute type 10 has an invalid length. [ 1970.210808][ T1063] netlink: 'syz.1.8838': attribute type 10 has an invalid length. [ 1970.372689][ T1063] team0: Device vxcan1 is of different type [ 1970.752099][ T1070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8843'. [ 1971.193289][ T1073] netlink: 'syz.4.8844': attribute type 10 has an invalid length. [ 1971.492521][T24372] team0: Port device syz_tun removed [ 1971.553679][T23918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1971.564848][T23918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1971.578361][T23918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1971.588267][T23918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1971.598668][T23918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1971.608509][ T1083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1971.826559][T31893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.070442][T31893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.448710][T31893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.883023][T31893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.116269][ T1108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8853'. [ 1973.567711][ T1081] chnl_net:caif_netlink_parms(): no params data found [ 1973.639361][T23918] Bluetooth: hci2: command 0x0409 tx timeout [ 1973.764291][T31893] device 0 left promiscuous mode [ 1973.975228][T31893] tipc: Left network mode [ 1974.050948][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.093145][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.161806][ T1081] device bridge_slave_0 entered promiscuous mode [ 1974.620149][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.628466][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.687996][ T1081] device bridge_slave_1 entered promiscuous mode [ 1974.873496][ T1135] netlink: 'syz.0.8868': attribute type 4 has an invalid length. [ 1975.161668][ T1081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1975.220481][ T1141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1975.443775][ T1145] netlink: 'syz.4.8858': attribute type 10 has an invalid length. [ 1975.485632][ T1081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1975.718610][ T1081] team0: Port device team_slave_0 added [ 1975.725447][T23918] Bluetooth: hci2: command 0x041b tx timeout [ 1975.925185][ T1081] team0: Port device team_slave_1 added [ 1976.142046][ T1081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1976.206245][ T1081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1976.282078][ T1081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1976.465061][ T1081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1976.480494][ T1081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1976.520575][ T1081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1977.135364][ T1081] device hsr_slave_0 entered promiscuous mode [ 1977.191031][ T1081] device hsr_slave_1 entered promiscuous mode [ 1977.239509][ T1081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1977.288597][ T1081] Cannot create hsr debugfs directory [ 1977.809090][T23918] Bluetooth: hci2: command 0x040f tx timeout [ 1978.231322][ T1202] netlink: 'syz.0.8870': attribute type 21 has an invalid length. [ 1978.256044][ T1202] netlink: 'syz.0.8870': attribute type 20 has an invalid length. [ 1978.634639][ T1211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8874'. [ 1978.685444][ T1202] netlink: 'syz.0.8870': attribute type 10 has an invalid length. [ 1978.738313][ T1202] device veth0_macvtap left promiscuous mode [ 1978.965139][ T1213] netlink: 'syz.2.8875': attribute type 10 has an invalid length. [ 1979.153003][T31893] device hsr_slave_0 left promiscuous mode [ 1979.199241][T31893] device hsr_slave_1 left promiscuous mode [ 1979.209467][T31893] device bridge_slave_1 left promiscuous mode [ 1979.216155][T31893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.267003][T31893] device bridge_slave_0 left promiscuous mode [ 1979.273432][T31893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.324245][T31893] device veth1_macvtap left promiscuous mode [ 1979.331523][T31893] device veth1_vlan left promiscuous mode [ 1979.338345][T31893] device veth0_vlan left promiscuous mode [ 1979.889299][T23918] Bluetooth: hci2: command 0x0419 tx timeout [ 1980.330007][T31893] team0 (unregistering): Port device geneve1 removed [ 1981.484010][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.491767][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.113872][T31893] team0 (unregistering): Port device team_slave_1 removed [ 1982.219190][T31893] team0 (unregistering): Port device team_slave_0 removed [ 1983.004715][ T1241] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1983.029505][ T1241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1983.069298][ T1241] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1983.364141][ T1264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8887'. [ 1983.578642][ T1266] netlink: 'syz.0.8888': attribute type 10 has an invalid length. [ 1984.172351][ T1081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1984.323204][ T1081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1984.345219][ T1081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1984.487674][ T1081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1984.899586][ T1081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1985.060275][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1985.099706][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1985.147791][ T1081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1985.203907][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1985.235653][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1985.257370][ T1305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1985.276868][T31893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.284962][T31893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1985.364211][ T1305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1985.411300][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1985.436760][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1985.490450][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1985.519756][T31893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.527956][T31893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1985.536750][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1985.548831][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1985.564009][ T1314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8895'. [ 1985.582732][ T1307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1985.634579][ T1310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1985.669425][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1985.683790][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1985.696899][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1985.715924][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1985.737158][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1985.776410][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1985.837341][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1985.906856][ T1081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1986.001575][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1986.152544][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1986.192789][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1986.246659][ T1328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1986.411234][ T1331] netlink: 'syz.2.8900': attribute type 10 has an invalid length. [ 1986.474838][ T1334] netlink: 'syz.1.8901': attribute type 2 has an invalid length. [ 1986.643665][ T1334] device 0 entered promiscuous mode [ 1987.445709][T31895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1987.457576][T31895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1987.515627][ T1081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1987.608992][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1987.634317][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1987.700300][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1987.710431][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1987.744493][ T1081] device veth0_vlan entered promiscuous mode [ 1987.766343][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1987.778051][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1987.827637][ T1081] device veth1_vlan entered promiscuous mode [ 1987.922196][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1987.933897][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1987.958825][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1987.980392][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1988.026968][ T1081] device veth0_macvtap entered promiscuous mode [ 1988.043940][ T1081] device veth1_macvtap entered promiscuous mode [ 1988.082013][ T1081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1988.091225][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1988.133067][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1988.173005][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1988.202137][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1988.249910][ T1081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1988.273196][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1988.290872][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1988.317518][ T1081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.337338][ T1081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.362663][ T1081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.385545][ T1081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.491547][ T1381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1988.695908][T31890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.762502][T31890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.815869][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1988.876011][T31880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.969047][T31880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.978328][T25630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1990.179177][ T1416] netlink: 'syz.3.8919': attribute type 4 has an invalid length. [ 1990.348491][ T1421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8919'. [ 1990.726218][ T1427] netlink: 'syz.4.8920': attribute type 21 has an invalid length. [ 1990.771679][ T1427] netlink: 'syz.4.8920': attribute type 20 has an invalid length. [ 1990.989341][ T1427] netlink: 'syz.4.8920': attribute type 10 has an invalid length. [ 1991.125696][ T1427] device veth0_macvtap left promiscuous mode [ 1991.457510][ T1437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8922'. [ 1991.600699][ T1442] netlink: 'syz.3.8923': attribute type 10 has an invalid length. [ 1991.934496][ T1442] team0: Port device syz_tun added [ 1995.000900][ T1502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8935'. [ 1995.559915][ T1514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8950'. [ 1996.965516][ T1537] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.8942'. [ 1997.138549][ T1545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1997.291036][ T1545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1997.402908][ T1549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1997.578345][ T1551] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1998.300237][ T1563] netlink: 'syz.2.8946': attribute type 12 has an invalid length. [ 1998.325614][ T1566] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.8961'. [ 1999.711701][ T1585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8952'. [ 1999.911297][ T1586] netlink: 'syz.1.8953': attribute type 10 has an invalid length. [ 2000.272733][ T1602] netlink: 'syz.1.8957': attribute type 10 has an invalid length. [ 2000.300707][ T1602] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8957'. [ 2001.138673][ T1614] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8962'. [ 2001.958066][ T1625] netlink: 'syz.0.8964': attribute type 12 has an invalid length. [ 2002.691209][ T1639] netlink: 'syz.2.8968': attribute type 10 has an invalid length. [ 2003.477183][ T1650] netlink: 'syz.2.8971': attribute type 10 has an invalid length. [ 2003.519743][ T1650] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8971'. [ 2005.102555][ T1676] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8978'. [ 2005.431114][ T1687] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8979'. [ 2005.786106][ T1692] netlink: 'syz.1.8981': attribute type 10 has an invalid length. [ 2007.333042][ T1718] netlink: 'syz.4.8989': attribute type 10 has an invalid length. [ 2007.353032][ T1718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8989'. [ 2007.392781][ T1718] device team0 entered promiscuous mode [ 2007.458717][ T1718] device team_slave_1 entered promiscuous mode [ 2007.479664][ T1718] device geneve1 entered promiscuous mode [ 2007.512395][ T1718] device syz_tun entered promiscuous mode [ 2007.538751][ T1718] bridge0: port 3(team0) entered blocking state [ 2007.679354][ T1718] bridge0: port 3(team0) entered disabled state [ 2008.117821][ T1740] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8994'. [ 2016.221302][ T1837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9020'. [ 2016.263881][ T1852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9022'. [ 2017.866108][ T1872] netlink: 'syz.1.9029': attribute type 10 has an invalid length. [ 2018.402432][ T1889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9036'. [ 2019.013437][ T1898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9038'. [ 2020.433282][ T1922] netlink: 'syz.1.9045': attribute type 10 has an invalid length. [ 2020.533264][ T1924] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9046'. [ 2020.803331][ T1930] netlink: 'syz.0.9049': attribute type 4 has an invalid length. [ 2020.907778][ T1930] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9049'. [ 2020.986253][ T1932] netlink: 'syz.1.9047': attribute type 10 has an invalid length. [ 2021.276109][ T1938] netlink: 'syz.3.9051': attribute type 10 has an invalid length. [ 2021.652180][ T1943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9053'. [ 2022.057625][ T1952] netlink: 'syz.4.9057': attribute type 10 has an invalid length. [ 2022.585382][ T1962] netlink: 'syz.4.9059': attribute type 10 has an invalid length. [ 2022.872447][ T1966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9060'. [ 2023.291893][ T1980] netlink: 'syz.1.9063': attribute type 10 has an invalid length. [ 2024.360355][ T1990] netlink: 'syz.1.9067': attribute type 10 has an invalid length. [ 2024.650301][ T1997] netlink: 'syz.0.9070': attribute type 10 has an invalid length. [ 2025.231460][ T2004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9082'. [ 2025.267679][ T2010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9073'. [ 2025.286329][ T2006] netlink: 'syz.2.9072': attribute type 10 has an invalid length. [ 2025.314223][ T2010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9073'. [ 2025.419332][ T2010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9073'. [ 2025.450928][ T2010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9073'. [ 2025.636290][ T2014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9075'. [ 2025.658980][ T2012] netlink: 'syz.2.9074': attribute type 10 has an invalid length. [ 2026.167949][ T2027] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.9076'. [ 2026.465632][ T2027] netlink: 'syz.2.9076': attribute type 10 has an invalid length. [ 2026.480904][ T2027] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9076'. [ 2026.599982][ T2028] netlink: 'syz.0.9079': attribute type 10 has an invalid length. [ 2026.771668][ T2031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9080'. [ 2026.850247][ T2035] FAULT_INJECTION: forcing a failure. [ 2026.850247][ T2035] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.895442][ T2035] CPU: 1 PID: 2035 Comm: syz.4.9081 Not tainted syzkaller #0 [ 2026.903163][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2026.915746][ T2035] Call Trace: [ 2026.920150][ T2035] [ 2026.923282][ T2035] dump_stack_lvl+0x188/0x24e [ 2026.928137][ T2035] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2026.934696][ T2035] ? show_regs_print_info+0x12/0x12 [ 2026.942154][ T2035] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2026.950026][ T2035] should_fail_ex+0x399/0x4d0 [ 2026.955143][ T2035] should_failslab+0x5/0x20 [ 2026.960117][ T2035] slab_pre_alloc_hook+0x59/0x310 [ 2026.966477][ T2035] ? rcu_is_watching+0x11/0xa0 [ 2026.972788][ T2035] ? tomoyo_encode+0x27e/0x540 [ 2026.979160][ T2035] __kmem_cache_alloc_node+0x4f/0x260 [ 2026.986204][ T2035] ? tomoyo_encode+0x27e/0x540 [ 2026.992551][ T2035] __kmalloc+0xa0/0x240 [ 2026.999099][ T2035] tomoyo_encode+0x27e/0x540 [ 2027.005888][ T2035] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2027.014519][ T2035] ? tomoyo_path_number_perm+0x205/0x650 [ 2027.021885][ T2035] tomoyo_path_number_perm+0x22f/0x650 [ 2027.028350][ T2035] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2027.035299][ T2035] ? __fget_files+0x28/0x4b0 [ 2027.040532][ T2035] ? __fget_files+0x28/0x4b0 [ 2027.045959][ T2035] security_file_ioctl+0x6c/0xa0 [ 2027.052583][ T2035] __se_sys_ioctl+0x48/0x170 [ 2027.058317][ T2035] do_syscall_64+0x4c/0xa0 [ 2027.064137][ T2035] ? clear_bhb_loop+0x60/0xb0 [ 2027.070730][ T2035] ? clear_bhb_loop+0x60/0xb0 [ 2027.077123][ T2035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2027.083363][ T2035] RIP: 0033:0x7f965079c799 [ 2027.088008][ T2035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2027.116676][ T2035] RSP: 002b:00007f9651698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2027.130989][ T2035] RAX: ffffffffffffffda RBX: 00007f9650a15fa0 RCX: 00007f965079c799 [ 2027.142531][ T2035] RDX: 0000200000000040 RSI: 0000000000008902 RDI: 0000000000000005 [ 2027.152961][ T2035] RBP: 00007f9651698090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.170180][ T2035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.184987][ T2035] R13: 00007f9650a16038 R14: 00007f9650a15fa0 R15: 00007ffd1edfe9d8 [ 2027.199802][ T2035] [ 2027.235746][ T2035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2027.568976][ T2043] netlink: 'syz.4.9087': attribute type 10 has an invalid length. [ 2027.678184][ T2044] netlink: 'syz.0.9097': attribute type 10 has an invalid length. [ 2028.059169][ T2057] netlink: 'syz.4.9093': attribute type 10 has an invalid length. [ 2028.263350][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9094'. [ 2028.299329][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9094'. [ 2028.373207][ T2063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9094'. [ 2028.387367][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9094'. [ 2028.692338][ T2069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9096'. [ 2030.218198][ T2094] device sit0 left promiscuous mode [ 2031.391755][ T2119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9109'. [ 2031.596423][ T2124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9112'. [ 2031.653659][ T2126] netlink: 'syz.0.9113': attribute type 3 has an invalid length. [ 2031.670884][ T2126] netlink: 'syz.0.9113': attribute type 181 has an invalid length. [ 2034.737317][ T2124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9112'. [ 2035.682714][T25151] device syz_tun left promiscuous mode [ 2035.705876][T25151] team0: Port device syz_tun removed [ 2035.892402][T13856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2035.908671][T13856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2035.929334][T13856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2035.943087][ T1083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2035.954640][ T1083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2035.965579][ T1083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2036.075360][ T2161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9122'. [ 2036.333121][ T2158] device syzkaller0 entered promiscuous mode [ 2037.169256][ T2182] sock: sock_set_timeout: `syz.1.9126' (pid 2182) tries to set negative timeout [ 2038.048752][T23918] Bluetooth: hci3: command 0x0409 tx timeout [ 2040.119150][T23918] Bluetooth: hci3: command 0x041b tx timeout [ 2040.322559][ T2173] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2040.325412][ T2175] netlink: 'syz.3.9124': attribute type 10 has an invalid length. [ 2040.336268][ T2173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2040.353293][ T2173] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2040.369242][ T2175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9124'. [ 2040.392370][ T2175] device ipvlan1 entered promiscuous mode [ 2040.411781][ T2175] bridge0: port 3(ipvlan1) entered blocking state [ 2040.418798][ T2175] bridge0: port 3(ipvlan1) entered disabled state [ 2040.442961][ T2175] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2040.511239][ T2155] chnl_net:caif_netlink_parms(): no params data found [ 2040.691916][ T2194] FAULT_INJECTION: forcing a failure. [ 2040.691916][ T2194] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.728473][ T2194] CPU: 0 PID: 2194 Comm: syz.1.9127 Not tainted syzkaller #0 [ 2040.736822][ T2194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2040.747460][ T2194] Call Trace: [ 2040.751069][ T2194] [ 2040.754860][ T2194] dump_stack_lvl+0x188/0x24e [ 2040.759983][ T2194] ? show_regs_print_info+0x12/0x12 [ 2040.765640][ T2194] ? load_image+0x400/0x400 [ 2040.770832][ T2194] ? __might_sleep+0xd0/0xd0 [ 2040.776595][ T2194] ? __lock_acquire+0x7d10/0x7d10 [ 2040.782286][ T2194] should_fail_ex+0x399/0x4d0 [ 2040.787743][ T2194] should_failslab+0x5/0x20 [ 2040.792939][ T2194] slab_pre_alloc_hook+0x59/0x310 [ 2040.798572][ T2194] ? sk_prot_alloc+0xe7/0x210 [ 2040.805680][ T2194] __kmem_cache_alloc_node+0x4f/0x260 [ 2040.812262][ T2194] ? sk_prot_alloc+0xe7/0x210 [ 2040.817730][ T2194] __kmalloc+0xa0/0x240 [ 2040.823217][ T2194] sk_prot_alloc+0xe7/0x210 [ 2040.828401][ T2194] ? sk_alloc+0x20/0x340 [ 2040.833178][ T2194] sk_alloc+0x36/0x340 [ 2040.838588][ T2194] ? bpf_ctx_init+0x163/0x1a0 [ 2040.843697][ T2194] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 2040.849748][ T2194] bpf_prog_test_run_skb+0x35e/0x12a0 [ 2040.855279][ T2194] ? lockdep_hardirqs_on+0x94/0x140 [ 2040.860962][ T2194] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2040.868066][ T2194] ? cpu_online+0xa0/0xa0 [ 2040.873015][ T2194] bpf_prog_test_run+0x31e/0x390 [ 2040.879006][ T2194] __sys_bpf+0x62b/0x780 [ 2040.884340][ T2194] ? bpf_link_show_fdinfo+0x380/0x380 [ 2040.890877][ T2194] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2040.898251][ T2194] __x64_sys_bpf+0x78/0x90 [ 2040.903242][ T2194] do_syscall_64+0x4c/0xa0 [ 2040.908965][ T2194] ? clear_bhb_loop+0x60/0xb0 [ 2040.913912][ T2194] ? clear_bhb_loop+0x60/0xb0 [ 2040.919284][ T2194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2040.927010][ T2194] RIP: 0033:0x7fe78a19c799 [ 2040.932398][ T2194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2040.955832][ T2194] RSP: 002b:00007fe78b121028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2040.965149][ T2194] RAX: ffffffffffffffda RBX: 00007fe78a416090 RCX: 00007fe78a19c799 [ 2040.973997][ T2194] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 2040.983682][ T2194] RBP: 00007fe78b121090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.995350][ T2194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.006046][ T2194] R13: 00007fe78a416128 R14: 00007fe78a416090 R15: 00007fff5cab9248 [ 2041.015046][ T2194] [ 2041.059614][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.067835][ T2155] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.077487][ T2155] device bridge_slave_0 entered promiscuous mode [ 2041.088443][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.097839][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.116523][ T2155] device bridge_slave_1 entered promiscuous mode [ 2041.155054][ T2155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.183547][ T2155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.239350][ T2155] team0: Port device team_slave_0 added [ 2041.257178][ T2155] team0: Port device team_slave_1 added [ 2041.291787][ T2155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2041.302965][ T2155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.339481][ T2155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2041.394518][ T2155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2041.413592][ T2155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.443774][ T2155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2041.547689][ T2155] device hsr_slave_0 entered promiscuous mode [ 2041.557805][ T2155] device hsr_slave_1 entered promiscuous mode [ 2041.583568][ T2155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2041.594053][ T2155] Cannot create hsr debugfs directory [ 2041.653579][ T2205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9132'. [ 2042.011637][ T2155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.199168][T23918] Bluetooth: hci3: command 0x040f tx timeout [ 2042.329469][ T2155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.611985][ T2155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.012188][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.022416][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.557878][ T2155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.114065][ T2230] device syzkaller0 entered promiscuous mode [ 2044.194211][ T2155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2044.292094][ T1083] Bluetooth: hci3: command 0x0419 tx timeout [ 2044.340452][ T2155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2044.380601][ T2234] netlink: 'syz.1.9140': attribute type 10 has an invalid length. [ 2044.475149][ T2234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9140'. [ 2044.580297][ T2234] device ipvlan1 entered promiscuous mode [ 2044.774931][ T2234] bridge0: port 4(ipvlan1) entered blocking state [ 2044.793002][ T2234] bridge0: port 4(ipvlan1) entered disabled state [ 2044.815206][ T2234] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2044.839818][ T2246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9142'. [ 2044.857773][ T2155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2048.596178][ T2155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2048.619088][ T2251] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2048.651539][ T2251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2048.677518][ T2251] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2048.854640][ T2155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.917659][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2048.934851][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2048.960897][ T2155] 8021q: adding VLAN 0 to HW filter on device team0 [ 2048.994167][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2049.028366][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2049.056785][T31893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.065296][T31893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.119475][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2049.155520][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2049.201698][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2049.269824][T31893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.277776][T31893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.322812][ T2274] netlink: 'syz.2.9149': attribute type 12 has an invalid length. [ 2049.343073][ T2274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9149'. [ 2049.386747][ T2272] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.9150'. [ 2049.432945][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2049.471116][T31880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2049.514161][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2049.537465][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2049.634854][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2049.668046][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2049.724428][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2049.776790][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2049.837546][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2049.854674][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2049.877949][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2049.991680][ T2155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2050.130430][ T2297] netlink: 'syz.4.9155': attribute type 10 has an invalid length. [ 2050.180364][ T2297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9155'. [ 2050.220482][ T2297] device ipvlan1 entered promiscuous mode [ 2050.265311][ T2297] bridge0: port 4(ipvlan1) entered blocking state [ 2050.272059][ T2297] bridge0: port 4(ipvlan1) entered disabled state [ 2050.281188][ T2297] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2051.673370][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2051.681424][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2051.733361][ T2155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2051.840772][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2051.855355][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2051.951244][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2051.978229][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2052.018650][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2052.038014][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2052.087377][ T2155] device veth0_vlan entered promiscuous mode [ 2052.165645][ T2155] device veth1_vlan entered promiscuous mode [ 2052.213959][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2052.241707][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2052.263919][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2052.290700][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2052.307768][ T2155] device veth0_macvtap entered promiscuous mode [ 2052.333901][ T2155] device veth1_macvtap entered promiscuous mode [ 2052.377623][ T2155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.395137][ T2155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.448401][ T2155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2052.480640][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2052.543303][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2052.587841][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2052.637183][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2052.673037][ T2155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.699674][ T2155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.751537][ T2155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.813115][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2052.880095][T31889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2052.971377][ T2155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.012156][ T2155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.062260][ T2155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.075772][ T2155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.241143][ T2340] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9163'. [ 2053.359539][T31889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.384628][T31889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.412813][T31893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2053.451990][T31893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.466101][T31893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.476031][T31892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2053.662478][ T2349] netlink: 'syz.0.9114': attribute type 21 has an invalid length. [ 2053.683222][ T2349] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9114'. [ 2053.697132][ T2349] netlink: 'syz.0.9114': attribute type 4 has an invalid length. [ 2053.714500][ T2349] netlink: 'syz.0.9114': attribute type 3 has an invalid length. [ 2053.733827][ T2349] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9114'. [ 2053.909348][ T2357] netlink: 'syz.2.9169': attribute type 10 has an invalid length. [ 2053.982417][ T2357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9169'. [ 2054.031569][ T2357] device ipvlan1 entered promiscuous mode [ 2054.073667][ T2357] bridge0: port 3(ipvlan1) entered blocking state [ 2054.113726][ T2357] bridge0: port 3(ipvlan1) entered disabled state [ 2054.141374][ T2357] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2054.164753][ T2356] netlink: 'syz.1.9170': attribute type 10 has an invalid length. [ 2054.543857][ T2360] netlink: 'syz.3.9171': attribute type 10 has an invalid length. [ 2054.556936][ T2360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9171'. [ 2054.573876][ T2360] bridge0: port 3(team0) entered blocking state [ 2054.586454][ T2360] bridge0: port 3(team0) entered disabled state [ 2054.602238][ T2360] device team0 entered promiscuous mode [ 2054.612052][ T2360] device team_slave_0 entered promiscuous mode [ 2054.618835][ T2360] device team_slave_1 entered promiscuous mode [ 2054.628886][ T2360] device syz_tun entered promiscuous mode [ 2054.640068][ T2360] bridge0: port 3(team0) entered blocking state [ 2054.647686][ T2360] bridge0: port 3(team0) entered forwarding state [ 2055.056115][ T2369] netlink: 'syz.3.9172': attribute type 29 has an invalid length. [ 2055.170379][ T2369] netlink: 'syz.3.9172': attribute type 29 has an invalid length. [ 2055.191182][ T2370] netlink: 'syz.3.9172': attribute type 29 has an invalid length. [ 2056.980016][ T2375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9174'. [ 2057.115677][ T2375] device syzkaller0 entered promiscuous mode [ 2058.211631][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2058.233205][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2058.306060][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2058.325558][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2058.970550][ T2416] netlink: 'syz.3.9185': attribute type 10 has an invalid length. [ 2059.104757][ T2422] netlink: 'syz.0.9188': attribute type 29 has an invalid length. [ 2059.186356][ T2422] netlink: 'syz.0.9188': attribute type 29 has an invalid length. [ 2059.236015][ T2429] netlink: 'syz.0.9188': attribute type 29 has an invalid length. [ 2060.834037][ T2439] delete_channel: no stack [ 2061.388014][ T2461] netlink: 'syz.3.9198': attribute type 10 has an invalid length. [ 2061.403775][ T2461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9198'. [ 2061.524773][ T2464] netlink: 'syz.0.9199': attribute type 11 has an invalid length. [ 2061.550680][ T2464] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9199'. [ 2061.758067][ T2479] netlink: 'syz.1.9200': attribute type 10 has an invalid length. [ 2062.060035][ T2484] netlink: 'syz.4.9205': attribute type 29 has an invalid length. [ 2062.178281][ T2484] netlink: 'syz.4.9205': attribute type 29 has an invalid length. [ 2062.330871][ T2488] netlink: 'syz.4.9205': attribute type 29 has an invalid length. [ 2062.892914][ T2503] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.9209'. [ 2063.105676][ T2508] device netdevsim0 entered promiscuous mode [ 2063.612896][ T2527] netlink: 'syz.1.9214': attribute type 5 has an invalid length. [ 2064.166853][ T2543] netlink: 'syz.1.9214': attribute type 29 has an invalid length. [ 2064.714321][ T2534] netlink: 'syz.4.9218': attribute type 10 has an invalid length. [ 2064.989901][ T2543] netlink: 'syz.1.9214': attribute type 29 has an invalid length. [ 2065.019504][ T2545] netlink: 'syz.1.9214': attribute type 10 has an invalid length. [ 2065.052806][ T2545] team0: Device vxcan1 is of different type [ 2065.473658][ T2550] delete_channel: no stack [ 2066.482549][ T2598] FAULT_INJECTION: forcing a failure. [ 2066.482549][ T2598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2066.517718][ T2598] CPU: 0 PID: 2598 Comm: syz.4.9233 Not tainted syzkaller #0 [ 2066.527015][ T2598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2066.538315][ T2598] Call Trace: [ 2066.541694][ T2598] [ 2066.544808][ T2598] dump_stack_lvl+0x188/0x24e [ 2066.549736][ T2598] ? show_regs_print_info+0x12/0x12 [ 2066.553444][ T2595] netlink: 'syz.2.9231': attribute type 10 has an invalid length. [ 2066.555251][ T2598] ? load_image+0x400/0x400 [ 2066.555297][ T2598] ? __lock_acquire+0x7d10/0x7d10 [ 2066.555331][ T2598] ? __fget_files+0x28/0x4b0 [ 2066.580477][ T2598] should_fail_ex+0x399/0x4d0 [ 2066.587077][ T2598] _copy_from_user+0x2c/0x170 [ 2066.592826][ T2598] generic_map_update_batch+0x4a1/0x810 [ 2066.599555][ T2598] ? rcu_read_unlock+0xa0/0xa0 [ 2066.605228][ T2598] ? __fdget+0x17c/0x200 [ 2066.609767][ T2598] ? rcu_read_unlock+0xa0/0xa0 [ 2066.616074][ T2598] bpf_map_do_batch+0x466/0x600 [ 2066.621616][ T2598] __sys_bpf+0x6f7/0x780 [ 2066.626878][ T2598] ? bpf_link_show_fdinfo+0x380/0x380 [ 2066.633157][ T2598] ? lock_chain_count+0x20/0x20 [ 2066.639690][ T2598] __x64_sys_bpf+0x78/0x90 [ 2066.644578][ T2598] do_syscall_64+0x4c/0xa0 [ 2066.649783][ T2598] ? clear_bhb_loop+0x60/0xb0 [ 2066.654942][ T2598] ? clear_bhb_loop+0x60/0xb0 [ 2066.659887][ T2598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2066.666480][ T2598] RIP: 0033:0x7f965079c799 [ 2066.671362][ T2598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2066.693309][ T2598] RSP: 002b:00007f9651698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2066.701943][ T2598] RAX: ffffffffffffffda RBX: 00007f9650a15fa0 RCX: 00007f965079c799 [ 2066.711457][ T2598] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 2066.720989][ T2598] RBP: 00007f9651698090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.729453][ T2598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.738295][ T2598] R13: 00007f9650a16038 R14: 00007f9650a15fa0 R15: 00007ffd1edfe9d8 [ 2066.747598][ T2598] [ 2068.159362][ T2628] netlink: 'syz.1.9239': attribute type 6 has an invalid length. [ 2068.390557][ T2640] netlink: 'syz.0.9242': attribute type 3 has an invalid length. [ 2068.472071][ T2639] delete_channel: no stack [ 2068.704171][ T2653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9245'. [ 2068.827268][ T2652] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9245'. [ 2069.040760][ T2655] netlink: 'syz.4.9246': attribute type 10 has an invalid length. [ 2070.501908][ T2691] netlink: 'syz.2.9257': attribute type 21 has an invalid length. [ 2070.545614][ T2691] netlink: 'syz.2.9257': attribute type 1 has an invalid length. [ 2070.816377][ T2701] netlink: 'syz.4.9260': attribute type 10 has an invalid length. [ 2070.904534][ C1] [ 2070.904549][ C1] ================================ [ 2070.904555][ C1] WARNING: inconsistent lock state [ 2070.904574][ C1] syzkaller #0 Not tainted [ 2070.904586][ C1] -------------------------------- [ 2070.904592][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 2070.904600][ C1] syz.1.9261/2703 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2070.904624][ C1] ffff888084027e20 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 2070.904683][ C1] {INITIAL USE} state was registered at: [ 2070.904697][ C1] lock_acquire+0x1bb/0x4a0 [ 2070.904725][ C1] _raw_spin_lock+0x2a/0x40 [ 2070.904744][ C1] htab_lock_bucket+0x179/0x2f0 [ 2070.904765][ C1] htab_lru_map_update_elem+0x31e/0xe80 [ 2070.904785][ C1] bpf_map_update_value+0x59e/0x670 [ 2070.904810][ C1] map_update_elem+0x4d7/0x680 [ 2070.904834][ C1] __sys_bpf+0x4ec/0x780 [ 2070.904858][ C1] __x64_sys_bpf+0x78/0x90 [ 2070.904881][ C1] do_syscall_64+0x4c/0xa0 [ 2070.904906][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2070.904929][ C1] irq event stamp: 8752 [ 2070.904936][ C1] hardirqs last enabled at (8751): [] syscall_enter_from_user_mode+0x21/0x80 [ 2070.904964][ C1] hardirqs last disabled at (8752): [] exc_debug+0x6e/0x130 [ 2070.904998][ C1] softirqs last enabled at (8552): [] __irq_exit_rcu+0x13b/0x230 [ 2070.905023][ C1] softirqs last disabled at (8531): [] __irq_exit_rcu+0x13b/0x230 [ 2070.905047][ C1] [ 2070.905047][ C1] other info that might help us debug this: [ 2070.905053][ C1] Possible unsafe locking scenario: [ 2070.905053][ C1] [ 2070.905058][ C1] CPU0 [ 2070.905062][ C1] ---- [ 2070.905066][ C1] lock(&htab->lockdep_key); [ 2070.905079][ C1] [ 2070.905083][ C1] lock(&htab->lockdep_key); [ 2070.905095][ C1] [ 2070.905095][ C1] *** DEADLOCK *** [ 2070.905095][ C1] [ 2070.905099][ C1] no locks held by syz.1.9261/2703. [ 2070.905108][ C1] [ 2070.905108][ C1] stack backtrace: [ 2070.905114][ C1] CPU: 1 PID: 2703 Comm: syz.1.9261 Not tainted syzkaller #0 [ 2070.905134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2070.905146][ C1] Call Trace: [ 2070.905153][ C1] <#DB> [ 2070.905162][ C1] dump_stack_lvl+0x188/0x24e [ 2070.905193][ C1] ? show_regs_print_info+0x12/0x12 [ 2070.905225][ C1] ? print_usage_bug+0x42a/0x690 [ 2070.905255][ C1] ? verify_lock_unused+0x18/0x140 [ 2070.905285][ C1] lock_acquire+0x2df/0x4a0 [ 2070.905316][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 2070.905340][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2070.905371][ C1] ? rcu_is_watching+0x11/0xa0 [ 2070.905402][ C1] ? lock_release+0xcf/0x920 [ 2070.905433][ C1] _raw_spin_lock+0x2a/0x40 [ 2070.905452][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 2070.905475][ C1] htab_lock_bucket+0x179/0x2f0 [ 2070.905501][ C1] ? htab_lru_map_delete_node+0x630/0x630 [ 2070.905537][ C1] ? htab_map_hash+0x269/0x6d0 [ 2070.905562][ C1] htab_lru_map_delete_elem+0x1ad/0x780 [ 2070.905588][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 2070.905624][ C1] ? htab_lru_map_update_elem+0xe80/0xe80 [ 2070.905654][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 2070.905677][ C1] bpf_overflow_handler+0x6e8/0x7c0 [ 2070.905700][ C1] ? perf_get_page_size+0x430/0x430 [ 2070.905732][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 2070.905755][ C1] ? perf_event_switch_output+0x760/0x760 [ 2070.905791][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 2070.905824][ C1] __perf_event_overflow+0x448/0x610 [ 2070.905859][ C1] perf_bp_event+0x28c/0x330 [ 2070.905894][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 2070.905925][ C1] ? perf_trace_lock+0xf8/0x390 [ 2070.905970][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2070.906040][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2070.906073][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 2070.906111][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 2070.906135][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2070.906160][ C1] notify_die+0x141/0x1a0 [ 2070.906184][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 2070.906216][ C1] notify_debug+0x20/0x30 [ 2070.906241][ C1] exc_debug+0xd9/0x130 [ 2070.906270][ C1] asm_exc_debug+0x1a/0x40 [ 2070.907140][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 2070.907549][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 2070.907577][ C1] RSP: 0018:ffffc90004217d48 EFLAGS: 00050202 [ 2070.907619][ C1] RAX: ffffffff84110b01 RBX: 0000000000000080 RCX: 000000000000007f [ 2070.907637][ C1] RDX: 0000000000000080 RSI: 0000200000000301 RDI: ffffc90004217dc1 [ 2070.907655][ C1] RBP: 0000000000000000 R08: ffffc90004217e3f R09: 1ffff92000842fc7 [ 2070.907672][ C1] R10: dffffc0000000000 R11: fffff52000842fc8 R12: 00007fffffffef80 [ 2070.907690][ C1] R13: 0000000000000080 R14: ffffc90004217dc0 R15: 0000200000000300 [ 2070.907715][ C1] ? _copy_from_user+0x21/0x170 [ 2070.907755][ C1] [ 2070.907763][ C1] [ 2070.907769][ C1] _copy_from_user+0xf4/0x170 [ 2070.907800][ C1] __sys_bpf+0x2ea/0x780 [ 2070.907830][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 2070.907870][ C1] ? lock_chain_count+0x20/0x20 [ 2070.907907][ C1] __x64_sys_bpf+0x78/0x90 [ 2070.907938][ C1] do_syscall_64+0x4c/0xa0 [ 2070.907970][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2070.908017][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2070.908047][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2070.908076][ C1] RIP: 0033:0x7fe78a19c799 [ 2070.908096][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2070.908115][ C1] RSP: 002b:00007fe78b142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2070.908140][ C1] RAX: ffffffffffffffda RBX: 00007fe78a415fa0 RCX: 00007fe78a19c799 [ 2070.908157][ C1] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 2070.908172][ C1] RBP: 00007fe78a232c99 R08: 0000000000000000 R09: 0000000000000000 [ 2070.908187][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2070.908653][ C1] R13: 00007fe78a416038 R14: 00007fe78a415fa0 R15: 00007fff5cab9248 [ 2070.908700][ C1] [ 2072.134271][ T2710] FAULT_INJECTION: forcing a failure. [ 2072.134271][ T2710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2072.258844][ T2710] CPU: 0 PID: 2710 Comm: syz.0.9263 Not tainted syzkaller #0 [ 2072.272605][ T2710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2072.291006][ T2710] Call Trace: [ 2072.297270][ T2710] [ 2072.302275][ T2710] dump_stack_lvl+0x188/0x24e [ 2072.310933][ T2710] ? show_regs_print_info+0x12/0x12 [ 2072.320574][ T2710] ? load_image+0x400/0x400 [ 2072.328102][ T2710] ? lock_release+0xcf/0x920 [ 2072.335737][ T2710] ? __lock_acquire+0x7d10/0x7d10 [ 2072.345160][ T2710] should_fail_ex+0x399/0x4d0 [ 2072.356800][ T2710] _copy_from_user+0x2c/0x170 [ 2072.366704][ T2710] sk_setsockopt+0x2f1/0x28a0 [ 2072.374994][ T2710] ? __fget_files+0x28/0x4b0 [ 2072.383526][ T2710] ? sockopt_capable+0x60/0x60 [ 2072.391957][ T2710] ? aa_sk_perm+0x81f/0x950 [ 2072.402666][ T2710] ? __fget_files+0x43d/0x4b0 [ 2072.413836][ T2710] ? aa_af_perm+0x340/0x340 [ 2072.421400][ T2710] ? __fget_files+0x43d/0x4b0 [ 2072.429625][ T2710] ? aa_sock_opt_perm+0x74/0x100 [ 2072.438646][ T2710] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2072.449903][ T2710] ? security_socket_setsockopt+0x7a/0xa0 [ 2072.458703][ T2710] __sys_setsockopt+0x2f6/0x3d0 [ 2072.465743][ T2710] __x64_sys_setsockopt+0xb1/0xc0 [ 2072.475918][ T2710] do_syscall_64+0x4c/0xa0 [ 2072.483230][ T2710] ? clear_bhb_loop+0x60/0xb0 [ 2072.490662][ T2710] ? clear_bhb_loop+0x60/0xb0 [ 2072.499575][ T2710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2072.510782][ T2710] RIP: 0033:0x7fb670d9c799 [ 2072.520588][ T2710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2072.562427][ T2710] RSP: 002b:00007fb671d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2072.581211][ T2710] RAX: ffffffffffffffda RBX: 00007fb671015fa0 RCX: 00007fb670d9c799 [ 2072.595861][ T2710] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000003 [ 2072.611727][ T2710] RBP: 00007fb671d0b090 R08: 0000000000000004 R09: 0000000000000000 [ 2072.623854][ T2710] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 2072.642426][ T2710] R13: 00007fb671016038 R14: 00007fb671015fa0 R15: 00007ffd595f05f8 [ 2072.657172][ T2710]