last executing test programs: 8.018082944s ago: executing program 3 (id=5988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) 4.576073749s ago: executing program 3 (id=6011): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x6, 0x7, 0x5, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000f600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="ede800000000f100850900f5ff00"/24], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000240)}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, &(0x7f00000002c0)="a64b56de1a71ac37795a0be578022c7c11ae6b600aba9bffc0d845b3dfadf5c97fb8b9e996bd7f7ef9f026e5c5e6607a6dc8fd678aec36244f57a8f4fc0cfe4c48147f625ced3ba82dfbc34ac3439d50bcff1eaf720af57c9fdf3985c4a631388da926af291ced9d293841137cc80f322707eb7c773a0d424c0832ae2166d31b697d2d7dc082bce3ee01bd3796553ab1d75cef78a619362b221104e5d2bc3f02d64c2ae82644a085997102e17bccc4336f079613ad820688dceff6ce5d0e6ea8b1f3814d9dd9a67939cf75f15ed3463fb06b7c2149b985a4e683fd94a4cf7242b586777aa0ffcd0150ac1281bad45170384bc59a3fe8f996577c173ec1af", &(0x7f00000003c0)=""/5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x8916, &(0x7f0000000000)={r12}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, &(0x7f0000000580)=""/157}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x9}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 2.327699809s ago: executing program 2 (id=6018): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) (fail_nth: 4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x93) 2.326566718s ago: executing program 0 (id=6025): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x6, 0x7, 0x5, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000f600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="ede800000000f100850900f5ff00"/24], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000240)}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, &(0x7f00000002c0)="a64b56de1a71ac37795a0be578022c7c11ae6b600aba9bffc0d845b3dfadf5c97fb8b9e996bd7f7ef9f026e5c5e6607a6dc8fd678aec36244f57a8f4fc0cfe4c48147f625ced3ba82dfbc34ac3439d50bcff1eaf720af57c9fdf3985c4a631388da926af291ced9d293841137cc80f322707eb7c773a0d424c0832ae2166d31b697d2d7dc082bce3ee01bd3796553ab1d75cef78a619362b221104e5d2bc3f02d64c2ae82644a085997102e17bccc4336f079613ad820688dceff6ce5d0e6ea8b1f3814d9dd9a67939cf75f15ed3463fb06b7c2149b985a4e683fd94a4cf7242b586777aa0ffcd0150ac1281bad45170384bc59a3fe8f996577c173ec1af", &(0x7f00000003c0)=""/5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x8916, &(0x7f0000000000)={r12}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) 1.835129029s ago: executing program 0 (id=6020): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0xa8, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @remote}) 1.82218254s ago: executing program 1 (id=6021): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/132, 0x84}], 0x2, &(0x7f0000000240)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x40000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r5, 0x58, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x2a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8f5d}, @ldst={0x2, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffeea, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x91b6990cdfdcb84f}}, @call={0x85, 0x0, 0x0, 0x9f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x7, '\x00', r8, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001740)=[r0, r3, r1], &(0x7f0000001780)=[{0x4, 0x1, 0xb, 0xc}], 0x10, 0xfffffc01}, 0x94) openat$cgroup_int(r5, &(0x7f0000001880)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000018c0)={r1, r1}, 0xc) perf_event_open$cgroup(&(0x7f0000001900)={0x4, 0x80, 0x8, 0x6, 0xe6, 0x4, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfffffffffffffff7, 0x7fb8}, 0x800, 0xb, 0x1, 0x8, 0x8, 0x101, 0x0, 0x0, 0x1, 0x0, 0x1}, r6, 0xd, r6, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r3, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)=r6}, 0x20) sendmsg$kcm(r5, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a40)="0d447ef91a594719fd4e949259122d1016bf0baac9556a9f4b68c163d1ad826a04003d37e355ecc0a87987684918f72135e17286e7f1be18a9516b3def72dfe8a89d6f397c009461c6c096f351435c7ce70e64c12425e9", 0x57}, {&(0x7f0000001ac0)="3e9d258f87f7704b0d1a100d1b589c5c490c2c27eaf506d0610c3e853008687700787ad15973222dce3e38314b36057c80bcacb6a9c58385f7ec816413efaee25ce47f2ef04861a45ad8ba0d6c885fdfd63e1ccdc9d87d2aae6c1a36", 0x5c}, {&(0x7f0000001b40)="2d5f352252b730c466fec4bb6e5c3a458b76c2e24cc148dd784cedeb34e4c7042a8441fcc6e169955de33cd9249357a6acf4e80b68e9443ba441982736eaed9c07313319391e3ad06c14ce6a1bc8e6ae5e07dbb8951c40bf2fc740297356dbc57ee912491bcc1d82caa2a119c9f9818516b2c383b7ec0974a617b43c0037fd7bcf24b7e1f8b819d13044826fd677975c66e6cd7b0a072d2e98083cd344fa4ff20492f672560a26b7e544c7684c1a95c4429d8c8ec76912ab5722525b449ca04b8488d7cca050d5a57f938c7fd18700a7edcd22a4d89f5e2d244d4de959b7f218d4c3aee62b1c7fe6326c3af2ea75569679d4eb60281f", 0xf6}], 0x3, &(0x7f0000001c80)=[{0xc0, 0x10a, 0x80, "75d581d365c4dfd908f9a4c314166f3805d9ce4a9adbf23df85442c322c8af63bc80a3b9ef9689703dffa384b864c14ba6aea2f7a2b4f468272671773293e228768f594a23170066fdc8401ce329f006f76befdd7f71aba3a33c7138befed57b25bab1bf1633ecfaa8b769a201b6e7ec5ef6c11dba2a63dfa174056e5dc504417519537e4634aaff2cd073d872c778bedfedd1d5504f9ea881efa5f5aa468e79611572ad9123951a5df79d8796eb089f"}, {0x98, 0x11, 0x40, "a56e3a10316d13e88f05a74705441ad3edd2f0c4c186b717057b7d3dea3051132abd9583c047fb9c5ec94d7dbb7db3afc714f242a8048d4bf49160db03a2b3d516fa7be72090f4d74db96918fa2033adbe62c4fba67ba5e2e0a3490fe27170a43b8fe8c9ab27069d88d30d3e73fdd1c37fcf7f58293f059aa670fb9d5febe200683792b19307"}, {0x58, 0x103, 0x6, "b64f60ab01f4ba08b63e4de785f4f59f52057ca737bcd2eea13bdf08dde8c7e7faa04a96c40233fdac0267d0c1ade1eee4fe7dc855f454a559944ef6374720f956692eed85b0be"}], 0x1b0}, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000001e80), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001ec0)={'\x00', 0x1000}) sendmsg$kcm(r6, &(0x7f00000048c0)={&(0x7f0000001f00)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001f80)="133f8acfcaa8dd93b7fc997552f5d4479738e0a6c89db0efdf04d8320d47ccae8145a5396afc685fe9d2125ddd7a70c8e55062a4c1e4facbe81629a9fe05b845a5bc858b0215d14bfa396f5f75d110895e3ec7df678728d94c54ea712cc4318cd2947165fb9bd80f7272d5985b71f4f664b6ecc860b25a5d3afc58ccff46375439", 0x81}, {&(0x7f0000002040)="ffd68182c81fcc951756e02ab70ab5c23e818005066cc99479d85c1fabeaafaa04071667bb22943672a5cf65319952a54a2377f7ecf7594efc761da8bf538c3991a57ddffbe2ab16d4695d2de6bbcefb92f802e98cd9564f5d0ea3ff680caba6de01656ae05b6cd9b43fa35ec5783d81cc66cc7f06a5b2c788788a5adfda764e6a9c416d23596047cc32afb85a8606038ea995ae69074b381dd3e4793d427e6f1f29b2229c71276e4c6b3f6a351730aed9d11d4e2178e02f30c8e16e4f8abf9cb5f3510eb4771c", 0xc7}, {&(0x7f0000002140)="49d318", 0x3}, {&(0x7f0000002180)="4fc49b896300b5ec9d5f02619c89fc5c6328ce2376aa1e37efe742e43b99a964a8a3a0665b660335735e14a7cb7bb167b080424e3588b5c1e5f9676b01f89ea9c3a5512765a9c316a5f9c850cff3999d8beaa987a38f40d7d3edd62ee32bba2f022d471c02619290d3d291b1659ad1e556de2bcaf4bc541baeedfd23f075a2ede4939937e7b120f9fe5a5d53cc39c14ba3c9b4d4d72e1536573af66ae762adf53da20498688c5ed4a976ed844caa77bb4a215a2024603a00bdbfc0aa543643a43cf04dff013ac7cbdcb9fc875d6511079a8759ef940dc1b69fab0332260ea55b1ad84af75c8a2bbe5a418eb5f1cff7388396bb08d58621b74585395d1f9ab3e5c3cf986539524422b035855d12a262581e2d585385fd7507e272a6999a7d2fc4f91317ae284fdc2b7fbc95c429e0d3146010038a386ec3e1b0e427f9f82d1f734cab4c2a655e31b4c79e3e0d278683a1be95f14c60d40938e8b583278f97d30024b4c3f5dc8d006d9c0479a8c35490b5cbdb3db98fd8faee01c7c9f56851623197b13c66c64c885362e641365fd53da2c466156156b447374fde84155d82fbffcd24cfbb41a0c38e0eb45aa255970cb1fd540ac0bbfcc2d17979db1e1e9f4fc1dfc11846177eae3777db6880fde16fd549b9cf48e1ad509b343ae6e2432c61a3ff9d70e5c8ea5c1ec442ab6b3fd2b5835c7f432a53c964e0fefda0542d2f50c39e5015c1ae884da930cfe0183895e81e81043cbcbf9a9910555feddfe318a6f002b3dbc15ad03592dac6ece3db19ec4eedac36b41f4fbd2997be26cbdb5a8face57d5f2502189df4a991537684b7cad4669eb901a2812f22b7107157a0b6fcd3665a1e544d15c1a697eb1720b08bf33629f3d839a0fac5ef55dee9b5416db938596b419920930d6e4c166f957119b913b2d90071ef7c0e6e4cca51432efe7e0147158d7a0a19cbed31182f5408f72087e976ac724a8277977be5e33dcd0fc60fdf44710d224e8c96a30a2a41b9f084a69f0a8b0d026b995d2474fe59f5a0ce5469e3f0b7fa01a74ef5928db31b0477056db4724714dd21b359baad92ceecc7f2266018abb7b19d0e57eb81edfea4ea9ae5f9703a22e9880b68f07a344f7c39250ecf043ef6866576c951e74b45f52041775ba370ce1b86d53eddf912f18174062638a3933f4b0e176b2673189bd3921243a08634ab23d0e37ae2ef7210389d8da4ff04f353e6a4df573d6e83fa020e1a00beada351c31da3183e85b19edf4fed4a41a100887d2644abeba21396148119495cf57a07e474bd52740f67c3908d06befe0365d02130d50c8bd779c9b1a03d963962ee4e1352b4a3b53fbeebdbf8443bac6b88004aef149cf58da6925dc591eb1cfe00e51c3c8e5d6d0092921b211b58db7051598bbffc4366aa5e2f334292ba7e44476b4139f72d7aa8ea351704442a3d6fb4e8d86c3068b45d022adb9dc4463020d4a779821787320aa08c4e66ca5cfe3f87b8d02000e6d0707815be5283dedd17e6ec47219ab0b0342a77a7981fdee8416b5b2a3a4a17ea4938e4a704d1866a63f65ca32c0c140b7aa147eb973162586234bdf8cd00b25afb2807f9561f92e1bcc38dedf7f93f451c519ca0f311cddc8007748756f76a042161cb8a2d3d9981f6c15045a6bd02d2b67e6d25c16697a882f892a5d91d4fa6eb941e8d65f3a478ffa5e7ff43e8e67de2782fc5850797b48daf040fbae99fbad6ef49df12213813e60b82c53a44f285aacf144c961efc2cb51e93f28a89a4cd0271ac4c2fd3f4584d60cd68f90cc695a9d85dae348aa848f94f61372f6b0f5ccfb1e1559eeebad6b0b936606fe7154bf22a12f0eb7c09b73d4322340f2621b274c39010f506d4e70b42f3512d4574e42a6618e413bb66cf9511e89396172d3d63502fefac06d3512f56497cde9405c47d1724ac992a329f151aa8fab183f896f9794532867d2ad393841d460335f12d8f4aa4411e65ee9720b249f363c14b26916146bce16b6c704c4e23fa5d95d5631713e23f9154753d14350d5e5d11e476ea5152003804071edd2d1c638853003e18fcccbb1b0af3a86c538c8bdf9b255401dd7a3edf86c54458df7321b3d328256c74cf98cd5c62da136f88a809e62f959840e49565df7bf2a6bd0308b0dcfdb334c5023952edd2f8be1d81fe3d06979e0e738afdebcac30b364763b3ebd2214e1aba8cd99ada9b265fb00426740bdca3f28588d781d69907b8225f5ec26d93224506dfb22c4de1453965cdb34e71ab1e4359995b77cd3aab160153228ac391d52898673434d6444306182eb5ad474962c7a7f2c271e05b5373bd942a1239b6023785c8acfce27b6a5b4b553e46e90661a5a509f6c5fd43057d0cfa6a8d147180510908dfdcc053aedca8795d45747f1f9cfcbbe71118bed83471d9396b711d5e17323dea319b5d6a539a26e9633baefc6620f522daadebaf6bfa4084851fe142a59e7d6e4fad62454bcc67c9191dd84a8637fffcd667dd589b64b52f660cb8e6140566a5fcfd87fdea3962dd25ff83e8475353672df666d29ea51dc4e623847a163e380f04827f51bb3b571d9d8b8cf73e649a9efbd2ed8132e2763e6b6791877206d11ef67e024f264c15e9e7673a9593f1530e8620a62fa507cdc7bf150655f7a007cee5201633fb7838828e992060860aee0622efadf4fc3d789e9cc3923c8dd997dd3f7b98999696f2a35134eb2ac5c796bdb2d1ca87ac4f9d8283bace31c8be891cb22cccd81666a09081ba52d4d081f8b5e6b0128304252458f24b39fc36c1a9541243b8d4f3dc6c8abd630716d85d64c4675c6ef0ef71e0291f55683d470b621488c8450b62b5eda445d14572a4ec5b5fdabc1eaf946ec7c45eef81ef5e687791514ba5f28ea8c212414a82a33866069ea9041b652b069cea30263e9be4140f6e71209fd2252b31fc600c778657917c1895cac6d8312e5d0af1c5b0f96c0dfd67fb5eac01f0ba8a7f259afc29c7569b37fe7171a90c2a54c5c6e51b6f5b962ba5fc5819644c26050acd56b415c8819ef299a82b4d7b5e2b2455afe83a1b13e488e0bd150ca50063eda9796684c116b019b4d98250bcf5f4b511e4563031a579c20b941603ec7a02ebf42fd8128a621a00eaecd7e3d96a882a5413907a6d38b52d8c2af3189c33dbd29f3bad00a429841b346d962c9187077ec474653f9ca10961a7e2c6c93b44af261326b60ee250022711cbcec2185c207bb8b751977badcc37202d6afb570ecc0c39dd0e1dec195088a91024d96367e22d835fa99ad57551373a066e6eff51ef0025de22a4bcda37ea1c5dd00bcc65afb61b414e1d24d500cbc5f81012a499f77728c90f36316b0ad3cfd8b64865a6eaf18cde81102f2efb9735856f5be26e077ac549ce63c3aefd599c622ab70a69ebeb2e52d1ca530190a37419fae688d27cc8afe2a7269eb5b2df5bce3e47ee1b3fce543a00d88a9335a798b628a89cd1dfdc1c4c7aea2284b300e3b2c3bc0ab941c101fb85cfb29130ff21001fd25b12ec16c4747316855b3ed81c391fef5514d1789531783bda3b07c496cc062cc2832b59b2af9f2b06325fbb3271697219d8c733e0e2577fcd6c6db454dea3e528b8eda2360b8b22197462b2e732b16f217c66bf5773da45df966d62cc62e417b6cff29f908b7682f83a3ab893a8f75edfdf7b0f558e1c6aaf1eefbfb3616832c0ba09f48761b4f2097f35da88e4a8a5816b5d5666a9b96d9fa8fc5b1f74ca44f028b82b3c0f81b97735cca59b51ea9a627f5937a103e5b277d21c6f7a3b3550e23b664bf8a6d8295ccf19266d3bf12b15e6dd6d8d5fdb14349c1dad3d08d02f02799b64695064c82e26cb3318096034d3f197a5c137bcd6804d2aaf58fc160fe20fc40f18b5104d515084caa84c4d9a31873642c6adaf8f2a69e41f953246c4f0b9017bf1fbb63a528a55bb9d181dc222b7383c3e08e0d1d080f56a50497456ec1bc4bc63b9f4e1e1e76d58a02bc27d4fb1e341b5c685f95acfa2efdcdb4b4da2fc4e06fb05747e6f63b1a2d0628e769ebe4db614f6cb1223019ce19b5a7232a38f068f350c9dffbbb246018a8124808fe135c2abd9f9309fd6b75607f2df00b34d78973375c7a586ef31a66b434e2eacd3563c8be5a9572fc86d06ac0ac0eaec52807f16c3a8a28daebc39cc4a4702b592f1828d46c3fcff5c9bdf1f7e4d95c40c5d05379d960c7f3e6fed86f45035d5ed6b2842ea6193f62abd00b9886542a2da6c5cef8f9a7f847ea7c61283b42079cefbf362e97f644ee2f4f8e3a333d66dae4fe6246ed44e44dc483feed47a35e02f8856b5f2d341cd8731ee72c5c1ba9401935589b8f303558480d81c13057f102edcc5b7e889a77312e78e58c0fe1e8f3cc8a8b629dd0a5599a7be29fbcaa1627374e43873414eba7627476fd68f51fac9170066b321d14582bdce5205cc8b0b6bc3e7718c8b6a6b28669adf2e664d397c836bcd37fb12a402889e89b962007c1a0dd00a0ebaa63bf452fe08505b04fe9e73e6c80167a292698101afa368a0ca6761d50d332e58c17c6e6f9a357d08bcbf8679e34138cd7c343623c3c723ce012263c3aff00a35b57c998e615139415e8e19a737c3a4d8c9c3cf5951a423c8c2fc120d60d5421151a1ed210248d3975bdf19f3993a13db3468086134d4ce48bc4b1cdd45ff8308ea628a8647be037caf7c93f1a61abb026799ba4af8d2fa95ab2ba7548c458f73517f34d9d53323e88fd43ef47ac835daf7f7dc90daa65b30a5c57e8f5565b8077439b93cf16fc0bb5a64ee66dfeead93d91032c5608c99b108330655084685f2523bed0d17c75bb9a6cf2726a0666e6d52d88107c6a1abb6fe1cbe3831533056e146f16579d40704fccb2008d67e8d290aed96226097c6fac24b5487dc93148ba32e4a1c5b22d50b2fd0f797e2ab32e90a077df8f1bfb60ce9f1813252dd71d8a3338a3e16a3c7d71c7aba973876969125e62305d2af7fe514b4caa48de11bd3a136ca7c63118e0f1a427b28d00877cfc00edbba6b494a89294d61a63a5d371237d04728e0816a93551951537bdc0b0246594f107b97f4d9691aa4d5dc08adb12d249974d35d159c6f178896e327c414f2f846475d89549cb68bc8a0defa2d84bcebf0c0330d7cc8def5aba2fe2ab3fde4bd78a7106ba5a0eae3baa459b32f7b1a0bfea48b22472eb39b888f0efc4ada76d3130a211d476be88394de0e2a0de2803a66d9c8c5c03af3c6c574620f5e86f089051a604476697871af587c17cd48a0323405f9f0e8c0c4d94cba3bfe655a0d61fc9d2127aee177f2b869236e159d1171a25d27580cef886c5d4e6a4eef16da2bd213f778a344f1294bc5a5f31dd28577e42b552db47d83879b93a5f583ad3c2237791fccb259777c18895bff61384c2f7e75f0e8520748afc645e8732ab3466ef30bef04506bb6b8dd00448612c07fe0e8b162b4d9526782c1db9980e17674fd7eeb18f626d7998125e96c253816b6e019488f3020b07bd07e61dbf1d561ecc54d249402563914fbd3f1a281329d606f44c06514e7541d7ed461be14b59614d556f67785b7f3595aef15d59d6f9b5aaaace93d4405d64026780ea7440505d95dca408023f6650071561bd91b17d2bfaac5f68a2100d1cd67d88f4729aba658d2f7959293a2f0f4cb2f5501c0f0b795fb6f14657de155b09e1959cf92dc6875937869ffd20f0a0c46a58ea29ba5d15dcc904be8fe7da01012322144321c27bf1c9a45c21b2876c9d80f7726ba8027db873f929cf5", 0x1000}, {&(0x7f0000003180)="6e13fb348ee86b40ca286f35a6f43bf9c9e21922594bcde6d1ac0aaeb7dc6ce6704f1677da1737a7a2", 0x29}, {&(0x7f00000031c0)="e199ed0732274ebdb45482ad3f79e2fda706401a14aaf6f1e3f5f924919a8592dab949fddd76b8be12030d3134ed2ea5fe96ab52654e4ecdad8379f7b07fbf585aee516ec154b1696cc5e3bbae4a29548c22260ae2f1d33c99b26193a1f1097292", 0x61}, {&(0x7f0000003240)="09c75708d4c9c1f1ca1dfe4efdecd55aac1454458d18fb8f3852d6622fc2ebb4880b314276a5c6b1577782b7d9c1558b7c5a3d514b9b668aa9059032ace9c9d8447d2783dd745ca3dc6c402fbf0d02d1d2ba089d0021965a62e7f1905e68f512bf", 0x61}], 0x7, &(0x7f0000003340)=[{0xa0, 0x115, 0x4, "88d72560ba4ad64fd4e2d737694a2bfadce3274fc841967da856184c68126f26f9b8e5a48252fbce963136f50994ac9daf8cce3ae8155e1d75a2c5cd43406190a5e4b999aeaf007ebd339d05f5531b4228a3078b6de4e201f9c4225e2be9c54a7b253fdd33f56a4d63306592d4df6e0359df61e17331ac56d42f9ded314be33ae0399a62207a64bba830cb5df975"}, {0x70, 0x10e, 0x6, "8ce06aa249de36b5873feeb201a43600d02d9db6d5782b786ad3f8b7eb4a83df6988e9ca46f80dba9c074dee076fcc1baf7b9130dbc1e7f611379243d437832af05153246c88e24eb96d1ded6426240d7328ed9423b4d2e040205971"}, {0xf8, 0x3a, 0x7, "b8d38f5189b427d89bd0b77f6a940b6643a989f8ec8ade9c9f86eeed3ba7c945b2a18d554d2721d74ca3c44ee5bae70de3ccf38a04cda200f30be0c8527a2826bc6cb94ad29056108c28f5841aec87c4683d18e477558e86912aedd02ed193ddbe5c0c50133c316220dbcbdcde44b877b7ac1c282fee940f6250beb346dc6dec1716a63f9ac3c30d1eb389fc7e5aa285ce907a591b980a27bb7fcf5226bd40ef6ed5f9dc317c5bf4dd4039029929b54dec68e9756e94b0975088651e7c6b6459f22229ea925112da9bf1a0bd3953370cdbc968e631a27b2a96d7fda14ececa8d227a9702"}, {0x48, 0x119, 0x3ff, "4ad418d66c6bea50fb7fb9887c33213bb0621892f7bba0d57be3bd691c91297dab692a06d4418de82d274d12bcbbe0a6ccce528e88"}, {0xb8, 0x84, 0x7f, "557dfa967ce72ed91e757f5683ba08a33e2fda7c952c0bf605cb4c768c8ba3e21660dbde083c32fcdc3d88ce90789c52f0153d4532a065d6650cc508981bbfd79b3f349fdb7dc7e0c931e4284656279eb16501ccb2408fddf882f4a84f711a89c7a2747982d8222b94554fc9c29a0416737433f2ca470aa678b26c581b105c31977800679f613df6d7045b61c5137b97688d2952a18a1be4b3b9cbb1514bd35c4c02"}, {0x80, 0x112, 0xfffffff7, "9e1a47bb030349521de0e53e07c9fe48437af5642781837c9818117fc59e5af13a2febd21307896d102051cbad573f51ab4cb41b36114ae30623b4e56ca733638a3637477178f5dcb05903dda3df42977cc79cdd06e5d15d56baf155c91e8f8147678c5bc39ae7faa20b3c"}, {0x1010, 0x23e, 0x9, "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"}, {0x100, 0x112, 0x0, "344ce03cd0ab945ae1f640e32532a0e33d80c517a871e4326de208b28739b54e02ccabe7b02ff641058b1bf728a564a7c38a18981310abe6c4564f1b85cfca498d703e7cbb89808996cbe80a3ea0503c313142032023c1f818331336ac69c9025c3144e45b9c64b423a812c1eba510049c05b504e77edeb486c1270887a711643b2b22fdd124d3ac939310f2e307fbc9e18093805abf0fbb6812177a4d95969db3f4ad9107b662ec79b6fe76b685e19d74c7edef56d111c1e61e78776f18f22540cc7af4cc5d4c6bd7d79b4e7a120411d094f33e7f854464d90833749d8ce89dac83bf4e20117081950843a0eff318"}, {0xd0, 0x10c, 0x3, "e8f2d334dc9fc16e69cd49ca5eb815ea61499ad9e00b787e51505bdb0dd24499cb278108a94835b38857d26f09d581af6288c457dd3afed465901b3cb3f1ccf9e0e1a37d629e6b6fd179fb9ea316e862c6db6f774d187c1685afa791c64e3df8efc51885469251039fdf5653a50ba4368bf7391a2d23c063aa184e59053e8fb035790f37c57578417011448f25a41078c086c3445dcaf99a9d3071100991cb3218f1a615b3370b19357ad220bf5c3d850bfbc27d16cbad63938c"}], 0x1568}, 0x4044) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004900)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004c80)=@bpf_ext={0x1c, 0x14, &(0x7f0000004940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0xc, 0x0, 0x8, 0x6, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004a00)='syzkaller\x00', 0x6a3c, 0x9e, &(0x7f0000004a40)=""/158, 0x40f00, 0x33, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000004b00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000004b40)={0x2, 0xe, 0x7, 0x1}, 0x10, 0x12fbe, 0xffffffffffffffff, 0x9, &(0x7f0000004b80)=[r0, r1, r7, r5, r4, r2, r5, r1, r0], &(0x7f0000004bc0)=[{0x5, 0x2, 0x10, 0x4}, {0x1, 0x4, 0xc}, {0x2, 0x1, 0x4, 0xd}, {0x3, 0x4, 0x5}, {0x2, 0x5, 0x3, 0x8}, {0x4, 0x3, 0x3, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x4, 0x1, 0x10, 0x8}, {0x4, 0x5, 0x9, 0x1}], 0x10, 0x1}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004d40)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000004dc0)=@o_path={&(0x7f0000004d80)='./file0\x00', r5, 0x4000, r9}, 0x18) sendmsg$inet(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004e00)="d88b80eeff1249ed9d2f1564e2be22e8d5e9488b8887d74f635180415405e54388bc56faea3e228270bea6e7e4f255256f495f6fb759f0f75be8571b265e42143812a6d1eb4a8759f3020abb91be50665b8927390402c694f210a5595f498b66c0f5f1d9850654b91da3689a6ac07097f754b49e9ad3d0d37903c3ea4880cea0a98abcc0a47ac417790c2d3de7452d5176948b62c0742134c49e9398306a", 0x9e}, {&(0x7f0000004ec0)="ac95cf2bb951f14f7a3ca39ecb5d8a196ef00978658ebedf2d7e95c2d4fe13d42caf0b0066d0852616d945a5a01be72ebf2006b41d684988e0d68c9eb281aaec5f7aee643feb54118706b5b36d27d8ec4c6f1e4cbc3da5add9b203d9f7e4f786b7cc083194a309ab3b04756194e14b9918bf66bd3f70e580d17a4421bd3a13cf9e240c9e12ba19f79379a686dac384886251d0eb766a16744f55be3510547713dff142bfdba5a93a999a68d97eeb48415f89bd6a", 0xb4}, {&(0x7f0000004f80)="b752902e8b0692ecda28598e8f935568675ff8dfc49ec22e3796af4f72ed6f1896316dfddf72530454956d073b28f83a8e745f7dc5dc14297e02b458e636177d9f541c31d344f2fca202b1b6303ce33c74e79c024235beb93bbf29ea76f32475607ebd73f7f875e948", 0x69}, {&(0x7f0000005000)="b42baf5d4af68ab33d38aeb607dd48629840675673267eaca27cf02364ffb617d8a29eec11f46f8ca28f2d2be5b365df044a25ffc7d91a3f04962e2befdbd9d91b7873d308206a409afb62d34b591d3df7fe464849ae387949309bc2c427e499dbef913b162f452694d253a56d374122", 0x70}], 0x4, &(0x7f00000050c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x0, [{@empty, 0x51}, {@loopback, 0x5}, {@multicast1, 0x700000}, {@empty, 0x55e}]}, @noop, @rr={0x7, 0xb, 0x89, [@multicast1, @remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x1d, 0x0, 0x8, [0x81, 0x1, 0x0]}, @ssrr={0x89, 0xb, 0x2f, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp={0x44, 0x10, 0x23, 0x0, 0x4, [0x81, 0x101, 0xb]}, @ssrr={0x89, 0x2b, 0xdc, [@loopback, @loopback, @empty, @empty, @multicast2, @rand_addr=0x64010100, @multicast2, @empty, @broadcast, @loopback]}]}}}, @ip_tos_int={{0x14}}], 0xe8}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000005200), 0x80041, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f0000005280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@func={0x9, 0x0, 0x0, 0xc, 0x3}, @fwd={0xf}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @fwd={0xa}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @float={0x1, 0x0, 0x0, 0x10, 0x14}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0xe, 0x7}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x48, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xa, 0x4}, {0xf, 0x3}, {0x1, 0x3}, {0xe, 0x5}, {0x2, 0x1}]}]}, {0x0, [0x5f]}}, &(0x7f0000005380)=""/101, 0xcb, 0x65, 0x0, 0x9}, 0x28) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000005440)=@o_path={&(0x7f0000005240)='./file0\x00', r5, 0x4000, r10}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005480)={0x1b, 0x0, 0x0, 0x2000, 0x0, r9, 0x9, '\x00', 0x0, r6, 0x2, 0x1, 0x5}, 0x50) openat$cgroup_type(r1, &(0x7f0000005500), 0x2, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005540)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000005580)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000055c0)=0x1, 0x4) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) write$cgroup_int(r4, &(0x7f0000005600), 0x12) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000005680)=@generic={&(0x7f0000005640)='./file0\x00', r6}, 0x18) 1.665763353s ago: executing program 1 (id=6022): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x8, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x20002, 0x8, 0x0, 0x3, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547edb87db6d515d6e6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) 1.610154684s ago: executing program 3 (id=6023): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x88) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x54b}], 0x1}, 0x0) 1.457871068s ago: executing program 3 (id=6024): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.456189077s ago: executing program 0 (id=6033): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x7fff}, 0x14100, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x11efa, 0x270, 0x98, 0x0, 0x6, 0xfffff271, 0xf7fc, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 309.365643ms ago: executing program 2 (id=6028): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x4000000) 255.529864ms ago: executing program 0 (id=6029): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x6, 0x7, 0x5, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000f600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="ede800000000f100850900f5ff00"/24], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000240)}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, &(0x7f00000002c0)="a64b56de1a71ac37795a0be578022c7c11ae6b600aba9bffc0d845b3dfadf5c97fb8b9e996bd7f7ef9f026e5c5e6607a6dc8fd678aec36244f57a8f4fc0cfe4c48147f625ced3ba82dfbc34ac3439d50bcff1eaf720af57c9fdf3985c4a631388da926af291ced9d293841137cc80f322707eb7c773a0d424c0832ae2166d31b697d2d7dc082bce3ee01bd3796553ab1d75cef78a619362b221104e5d2bc3f02d64c2ae82644a085997102e17bccc4336f079613ad820688dceff6ce5d0e6ea8b1f3814d9dd9a67939cf75f15ed3463fb06b7c2149b985a4e683fd94a4cf7242b586777aa0ffcd0150ac1281bad45170384bc59a3fe8f996577c173ec1af", &(0x7f00000003c0)=""/5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x8916, &(0x7f0000000000)={r12}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8983, &(0x7f0000000080)) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000049d0000000000000000000008500000023000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)='P', 0x1}], 0x1}, 0x4000084) 144.298436ms ago: executing program 1 (id=6032): socketpair(0x22, 0x2, 0x1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r0, 0x0, 0xffffff1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x10, 0x0, 0xffffbffe}, 0x0, 0xffefffffffffffff, r0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={0xffffffffffffffff, 0x0, 0x9c, 0x0, &(0x7f0000000c40)="fdf137a51ecb26e2470e6b8e93858c311e2be8f190e2207c7c3e870fc1403e649a19c8d4360decb29013fbfb62bb06928aa137a6746f74fffc965c92439fa90a6d0fa87ec12e91f013a3f13c6edb7dea871571afc5bfc6eb44b6c28fd98d3832c28d989d71f211480d446dd245704d9677df24f45bc3d649559d7acab02af18e327386fd28b96cdadcf53a52c555ec260b27d00d0d757b3765dd44a8", &(0x7f0000000d00), 0x4, 0x0, 0x84, 0xb0, &(0x7f0000000d40)="c7893aa78cdc84b1b9a73173563ee8c2bdc685171faa6386872a2666e4ab59791478a2ed6f8ca917ee0d7b6d0e25c4cd4f9d64351f1e8c6b61550098f714e8535146c5db3e397360bceb2aa4dcb9935e09c53c8f527491f2d9a3c93b73937210b31a96749a4ff07c9991288943dcc0fad8370321ee9c1ae1b529ae9bf54257b43e794a36", &(0x7f0000000e00)="8ab0708461a6cac9dfac1b85028a7c7b2e5cd09bad2608c2e44abc3ca0c11b260ea52458b9088881c0df40cd7d7d866867ffa40e9c1c6296693900f412f5e816d20159139b567e0b64bbd82ee0373cb34ce52f857b6064802b88df65e1b5a65cd98463cdeb7a52c279cd6377a31e21bd92f0f8d2c53fdc34d0fa7ded94b0b411dcc1834fc46a564341bf7299efe5521c03a1e71f7bd596a836c3a731bd4e31f1619f99e6a0efe29e5f5659e092a5a654", 0x4, 0x0, 0x7ff}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x4000040) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, r3, 0xb) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014018000000000000000c000000a424a1610c"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0xfe33) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 0s ago: executing program 2 (id=6034): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x88) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): yz.0.4621'. [ 767.954566][T19302] bridge0: port 3(team0) entered blocking state [ 767.961043][T19302] bridge0: port 3(team0) entered forwarding state [ 767.968585][T19302] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.073929][T19312] validate_nla: 1 callbacks suppressed [ 769.073949][T19312] netlink: 'syz.2.4626': attribute type 8 has an invalid length. [ 769.088412][T19312] __nla_validate_parse: 1 callbacks suppressed [ 769.088429][T19312] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4626'. [ 769.171276][T19314] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4627'. [ 770.340234][T19327] netlink: 'syz.1.4630': attribute type 10 has an invalid length. [ 770.355545][T19327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4630'. [ 770.368262][T19325] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4631'. [ 770.437967][T19325] netlink: 'syz.2.4631': attribute type 10 has an invalid length. [ 770.462637][T19325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4631'. [ 771.688458][T19381] lo: left promiscuous mode [ 771.693062][T19381] lo: entered allmulticast mode [ 771.765633][T19381] lo: entered promiscuous mode [ 771.770743][T19381] lo: left allmulticast mode [ 772.010548][T19386] netlink: 'syz.2.4643': attribute type 10 has an invalid length. [ 772.090965][T19386] hsr_slave_0: entered promiscuous mode [ 772.097431][T19386] hsr_slave_0: entered allmulticast mode [ 772.111314][T19386] team0: Port device hsr_slave_0 added [ 772.126003][T19388] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4644'. [ 772.145481][T19388] netlink: 'syz.3.4644': attribute type 10 has an invalid length. [ 772.153727][T19388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4644'. [ 772.167993][T19388] bridge0: port 2(team0) entered blocking state [ 772.174508][T19388] bridge0: port 2(team0) entered forwarding state [ 772.181656][T19388] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.552952][T19399] lo: left promiscuous mode [ 772.559187][T19399] lo: entered allmulticast mode [ 772.705025][T19399] lo: entered promiscuous mode [ 772.720730][T19399] lo: left allmulticast mode [ 772.917638][T19411] FAULT_INJECTION: forcing a failure. [ 772.917638][T19411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.931746][T19411] CPU: 1 PID: 19411 Comm: syz.1.4652 Not tainted syzkaller #0 [ 772.939278][T19411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 772.949381][T19411] Call Trace: [ 772.952703][T19411] [ 772.955683][T19411] dump_stack_lvl+0x18c/0x250 [ 772.960425][T19411] ? show_regs_print_info+0x20/0x20 [ 772.965687][T19411] ? load_image+0x420/0x420 [ 772.970253][T19411] ? __lock_acquire+0x7d80/0x7d80 [ 772.975329][T19411] ? snprintf+0xe9/0x140 [ 772.979629][T19411] should_fail_ex+0x394/0x4c0 [ 772.984369][T19411] _copy_to_user+0x2f/0xa0 [ 772.988842][T19411] simple_read_from_buffer+0xe7/0x150 [ 772.994276][T19411] proc_fail_nth_read+0x1e8/0x260 [ 772.999359][T19411] ? proc_fault_inject_write+0x360/0x360 [ 773.005057][T19411] ? fsnotify_perm+0x271/0x5e0 [ 773.009900][T19411] ? proc_fault_inject_write+0x360/0x360 [ 773.015599][T19411] vfs_read+0x298/0x990 [ 773.019829][T19411] ? kernel_read+0x1e0/0x1e0 [ 773.024476][T19411] ? __fget_files+0x28/0x460 [ 773.029126][T19411] ? __fget_files+0x3fc/0x460 [ 773.033847][T19411] ? __fdget_pos+0x2a3/0x330 [ 773.038473][T19411] ? ksys_read+0x74/0x260 [ 773.042850][T19411] ksys_read+0x151/0x260 [ 773.047158][T19411] ? vfs_write+0x9a0/0x9a0 [ 773.051622][T19411] ? lockdep_hardirqs_on+0x98/0x150 [ 773.056859][T19411] do_syscall_64+0x55/0xb0 [ 773.061312][T19411] ? clear_bhb_loop+0x40/0x90 [ 773.066015][T19411] ? clear_bhb_loop+0x40/0x90 [ 773.070721][T19411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.076650][T19411] RIP: 0033:0x7fe96b55e68e [ 773.081094][T19411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 773.100725][T19411] RSP: 002b:00007fe96c532fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.109173][T19411] RAX: ffffffffffffffda RBX: 00007fe96c5336c0 RCX: 00007fe96b55e68e [ 773.117171][T19411] RDX: 000000000000000f RSI: 00007fe96c5330a0 RDI: 0000000000000004 [ 773.125169][T19411] RBP: 00007fe96c533090 R08: 0000000000000000 R09: 0000000000000000 [ 773.133166][T19411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.141167][T19411] R13: 00007fe96b826038 R14: 00007fe96b825fa0 R15: 00007fff9242c4f8 [ 773.149179][T19411] [ 773.157477][T19412] netlink: 'syz.0.4650': attribute type 8 has an invalid length. [ 773.183437][T19412] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4650'. [ 773.471974][T19428] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4659'. [ 773.529838][T19428] netlink: 'syz.1.4659': attribute type 10 has an invalid length. [ 773.559246][T19428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4659'. [ 774.387416][T19452] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4668'. [ 775.190342][T19445] netlink: 'syz.3.4665': attribute type 10 has an invalid length. [ 775.220925][T19445] team0: Device hsr_slave_0 failed to register rx_handler [ 775.321455][T19460] lo: left promiscuous mode [ 775.331261][T19460] lo: entered allmulticast mode [ 775.526915][T19467] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4673'. [ 775.551663][T19460] lo: entered promiscuous mode [ 775.569827][T19460] lo: left allmulticast mode [ 775.642596][T19467] netlink: 'syz.2.4673': attribute type 10 has an invalid length. [ 775.655889][T19467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4673'. [ 775.859307][T19475] lo: left promiscuous mode [ 775.873740][T19475] lo: entered allmulticast mode [ 775.934444][T19475] lo: entered promiscuous mode [ 775.939786][T19475] lo: left allmulticast mode [ 776.756695][T19496] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4684'. [ 776.878673][T19496] netlink: 'syz.3.4684': attribute type 10 has an invalid length. [ 776.913422][T19496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4684'. [ 777.830640][T19504] lo: left promiscuous mode [ 777.851316][T19504] lo: entered allmulticast mode [ 777.994646][T19504] lo: entered promiscuous mode [ 778.001957][T19504] lo: left allmulticast mode [ 778.244529][T19494] netlink: 'syz.2.4683': attribute type 10 has an invalid length. [ 779.569745][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.578832][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.587963][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.600204][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.608783][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 779.616584][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 780.709326][T19543] netlink: 'syz.3.4697': attribute type 10 has an invalid length. [ 780.729992][T19543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4697'. [ 780.760781][T19541] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4697'. [ 780.782606][T19520] chnl_net:caif_netlink_parms(): no params data found [ 781.083243][T19520] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.111756][T19520] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.138090][T19520] bridge_slave_0: entered allmulticast mode [ 781.156393][T19520] bridge_slave_0: entered promiscuous mode [ 781.172965][T19552] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4699'. [ 781.194331][T19520] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.203307][T19520] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.210794][T19520] bridge_slave_1: entered allmulticast mode [ 781.236976][T19520] bridge_slave_1: entered promiscuous mode [ 781.359843][T19557] FAULT_INJECTION: forcing a failure. [ 781.359843][T19557] name failslab, interval 1, probability 0, space 0, times 0 [ 781.380340][T19557] CPU: 0 PID: 19557 Comm: syz.1.4700 Not tainted syzkaller #0 [ 781.387904][T19557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 781.398014][T19557] Call Trace: [ 781.401344][T19557] [ 781.404323][T19557] dump_stack_lvl+0x18c/0x250 [ 781.409067][T19557] ? sctp_sendmsg+0x1519/0x27b0 [ 781.414009][T19557] ? ___sys_sendmsg+0x2a6/0x360 [ 781.418940][T19557] ? show_regs_print_info+0x20/0x20 [ 781.424208][T19557] ? load_image+0x420/0x420 [ 781.428818][T19557] should_fail_ex+0x394/0x4c0 [ 781.433584][T19557] should_failslab+0x9/0x20 [ 781.438153][T19557] slab_pre_alloc_hook+0x59/0x300 [ 781.443273][T19557] ? sctp_add_bind_addr+0x8c/0x360 [ 781.448419][T19557] __kmem_cache_alloc_node+0x53/0x250 [ 781.453832][T19557] ? sctp_add_bind_addr+0x8c/0x360 [ 781.458997][T19557] kmalloc_trace+0x2a/0xe0 [ 781.463452][T19557] sctp_add_bind_addr+0x8c/0x360 [ 781.468425][T19557] sctp_copy_local_addr_list+0x31b/0x4e0 [ 781.474165][T19557] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 781.479912][T19557] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 781.486015][T19557] ? sctp_v4_is_any+0x35/0x60 [ 781.490717][T19557] ? sctp_copy_one_addr+0x8c/0x350 [ 781.495858][T19557] sctp_bind_addr_copy+0x189/0x3c0 [ 781.501010][T19557] sctp_connect_new_asoc+0x2f9/0x6a0 [ 781.506327][T19557] ? __sctp_connect+0xd80/0xd80 [ 781.511209][T19557] ? __local_bh_enable_ip+0x13a/0x1c0 [ 781.516612][T19557] ? _local_bh_enable+0xa0/0xa0 [ 781.521493][T19557] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 781.527331][T19557] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 781.533170][T19557] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 781.538754][T19557] ? security_sctp_bind_connect+0x89/0xb0 [ 781.544503][T19557] sctp_sendmsg+0x1519/0x27b0 [ 781.549214][T19557] ? sctp_getsockopt+0xb60/0xb60 [ 781.554186][T19557] ? aa_af_perm+0x330/0x330 [ 781.558723][T19557] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 781.565201][T19557] ? sock_rps_record_flow+0x19/0x3f0 [ 781.570529][T19557] ? inet_sendmsg+0x7e/0x2a0 [ 781.575147][T19557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 781.580467][T19557] ? inet_send_prepare+0x250/0x250 [ 781.585626][T19557] ____sys_sendmsg+0x61b/0x980 [ 781.590521][T19557] ? __asan_memset+0x22/0x40 [ 781.595149][T19557] ? __sys_sendmsg_sock+0x30/0x30 [ 781.600208][T19557] ? __import_iovec+0x5f2/0x850 [ 781.605099][T19557] ? import_iovec+0x73/0xa0 [ 781.609647][T19557] ___sys_sendmsg+0x2a6/0x360 [ 781.614364][T19557] ? get_pid_task+0x20/0x1e0 [ 781.619003][T19557] ? __sys_sendmsg+0x2b0/0x2b0 [ 781.623816][T19557] ? __lock_acquire+0x7d80/0x7d80 [ 781.628886][T19557] __se_sys_sendmsg+0x1d0/0x2c0 [ 781.633777][T19557] ? __x64_sys_sendmsg+0x80/0x80 [ 781.638794][T19557] ? lockdep_hardirqs_on+0x98/0x150 [ 781.644030][T19557] do_syscall_64+0x55/0xb0 [ 781.648485][T19557] ? clear_bhb_loop+0x40/0x90 [ 781.653184][T19557] ? clear_bhb_loop+0x40/0x90 [ 781.657889][T19557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.663817][T19557] RIP: 0033:0x7fe96b59de59 [ 781.668258][T19557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.687896][T19557] RSP: 002b:00007fe96c533028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.696342][T19557] RAX: ffffffffffffffda RBX: 00007fe96b825fa0 RCX: 00007fe96b59de59 [ 781.704444][T19557] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000005 [ 781.712472][T19557] RBP: 00007fe96c533090 R08: 0000000000000000 R09: 0000000000000000 [ 781.720481][T19557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.728478][T19557] R13: 00007fe96b826038 R14: 00007fe96b825fa0 R15: 00007fff9242c4f8 [ 781.736490][T19557] [ 781.790580][ T5786] Bluetooth: hci3: command tx timeout [ 781.839129][T19520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.858292][T19520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.884331][T19557] netlink: 'syz.1.4700': attribute type 10 has an invalid length. [ 781.892437][T19557] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4700'. [ 781.910212][T19557] hsr0: entered promiscuous mode [ 781.924168][T19557] bridge0: port 3(hsr0) entered blocking state [ 781.932485][T19557] bridge0: port 3(hsr0) entered disabled state [ 781.940351][T19557] hsr0: entered allmulticast mode [ 781.945968][T19557] hsr_slave_0: entered allmulticast mode [ 781.951914][T19557] hsr_slave_1: entered allmulticast mode [ 781.988325][T19557] bridge0: port 3(hsr0) entered blocking state [ 781.995361][T19557] bridge0: port 3(hsr0) entered forwarding state [ 782.050498][T19520] team0: Port device team_slave_0 added [ 782.079210][T19520] team0: Port device team_slave_1 added [ 782.226194][T19520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.244632][T19520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.275592][T19520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.299575][T19520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.306776][T19520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.334058][T19520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.424440][T19362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.460940][T19520] hsr_slave_0: entered promiscuous mode [ 782.469352][T19520] hsr_slave_1: entered promiscuous mode [ 782.476667][T19520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.488331][T19520] Cannot create hsr debugfs directory [ 782.537321][T19362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.634074][T19362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.718571][T19362] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.922329][T19571] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4705'. [ 783.018640][T19571] netlink: 'syz.0.4705': attribute type 10 has an invalid length. [ 783.037462][T19571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4705'. [ 783.587497][T19589] netlink: 'syz.0.4710': attribute type 8 has an invalid length. [ 783.603873][T19589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4710'. [ 783.698437][T19595] netlink: 'syz.3.4712': attribute type 8 has an invalid length. [ 783.735013][T19595] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4712'. [ 783.853595][ T5786] Bluetooth: hci3: command tx timeout [ 784.156872][T19520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.180294][T19520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.289445][T19612] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4716'. [ 784.349980][T19520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 784.372837][T19614] netlink: 'syz.0.4716': attribute type 10 has an invalid length. [ 784.452272][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4716'. [ 784.528250][T19520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.714924][T19641] netlink: 'syz.1.4722': attribute type 8 has an invalid length. [ 785.745870][T19641] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4722'. [ 785.893651][T19520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.945920][ T5786] Bluetooth: hci3: command tx timeout [ 786.123908][T19520] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.176248][T19358] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.183539][T19358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.204051][T19656] netlink: 'syz.1.4724': attribute type 29 has an invalid length. [ 787.276058][T19358] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.283359][T19358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.316522][T19656] netlink: 'syz.1.4724': attribute type 29 has an invalid length. [ 787.449769][T19362] bridge0: port 3(team0) entered disabled state [ 787.586882][T19362] bridge_slave_1: left allmulticast mode [ 787.592617][T19362] bridge_slave_1: left promiscuous mode [ 787.741994][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.830730][T19362] bridge_slave_0: left allmulticast mode [ 787.861160][T19362] bridge_slave_0: left promiscuous mode [ 787.890684][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.037746][ T5786] Bluetooth: hci3: command tx timeout [ 788.102054][T19362] veth1_macvtap: left promiscuous mode [ 788.107882][T19362] veth0_macvtap: left promiscuous mode [ 788.113886][T19362] veth1_vlan: left promiscuous mode [ 788.119280][T19362] veth0_vlan: left promiscuous mode [ 789.007540][T19362] hsr_slave_0 (unregistering): left promiscuous mode [ 789.015165][T19362] hsr_slave_0 (unregistering): left allmulticast mode [ 789.026651][T19362] team0 (unregistering): Port device hsr_slave_0 removed [ 789.147874][T19362] team_slave_1 (unregistering): left promiscuous mode [ 789.155502][T19362] team_slave_1 (unregistering): left allmulticast mode [ 789.166037][T19362] team0 (unregistering): Port device team_slave_1 removed [ 789.210836][T19362] team_slave_0 (unregistering): left promiscuous mode [ 789.218318][T19362] team_slave_0 (unregistering): left allmulticast mode [ 789.230470][T19362] team0 (unregistering): Port device team_slave_0 removed [ 789.276674][T19362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.326461][T19362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.642614][T19362] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 789.652606][T19362] bond0 (unregistering): Released all slaves [ 789.770322][T19656] netlink: 'syz.1.4724': attribute type 29 has an invalid length. [ 790.072337][T19671] netlink: 'syz.1.4728': attribute type 1 has an invalid length. [ 790.110145][T19671] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.4728'. [ 790.330459][T19674] netlink: 'syz.0.4730': attribute type 10 has an invalid length. [ 790.356259][T19674] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4730'. [ 790.377848][T19674] hsr0: entered promiscuous mode [ 790.395905][T19674] bridge0: port 4(hsr0) entered blocking state [ 790.412552][T19674] bridge0: port 4(hsr0) entered disabled state [ 790.470524][T19674] hsr0: entered allmulticast mode [ 790.492094][T19674] hsr_slave_0: entered allmulticast mode [ 790.535296][T19674] hsr_slave_1: entered allmulticast mode [ 790.559921][T19684] netlink: 'syz.1.4732': attribute type 8 has an invalid length. [ 790.598470][T19674] bridge0: port 4(hsr0) entered blocking state [ 790.605529][T19674] bridge0: port 4(hsr0) entered forwarding state [ 790.616339][T19684] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4732'. [ 790.658547][T19520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.931863][T19689] netlink: 'syz.0.4733': attribute type 8 has an invalid length. [ 790.952124][T19520] veth0_vlan: entered promiscuous mode [ 790.958619][T19689] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4733'. [ 791.061815][T19520] veth1_vlan: entered promiscuous mode [ 791.549344][T19520] veth0_macvtap: entered promiscuous mode [ 791.562543][T19520] veth1_macvtap: entered promiscuous mode [ 791.595159][T19694] netlink: 'syz.1.4734': attribute type 10 has an invalid length. [ 791.614013][T19694] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4734'. [ 791.636924][T19698] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4735'. [ 791.689808][T19699] netlink: 'syz.0.4735': attribute type 10 has an invalid length. [ 791.726269][T19699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4735'. [ 791.812171][T19520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.824974][T19520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.838258][T19520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.887859][T19520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.898936][T19520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.924997][T19520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.961456][T19520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.982871][T19520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.992599][T19520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.001733][T19520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.071834][T19708] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4739'. [ 792.081769][T19708] openvswitch: netlink: Key type 4112 is out of range max 32 [ 792.231516][T19361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.254791][T19361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.306623][T19356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.321616][T19712] netlink: 'syz.3.4741': attribute type 8 has an invalid length. [ 792.332546][T19356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.341084][T19712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4741'. [ 792.736717][T19719] netlink: 'syz.3.4742': attribute type 8 has an invalid length. [ 792.752956][T19719] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4742'. [ 793.024254][T19730] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4745'. [ 793.075111][T19730] netlink: 'syz.0.4745': attribute type 10 has an invalid length. [ 793.128147][T19730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4745'. [ 793.220200][T19727] netlink: 'syz.2.4744': attribute type 10 has an invalid length. [ 793.251602][T19727] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4744'. [ 793.283341][T19727] hsr0: entered promiscuous mode [ 793.337176][T19727] bridge0: port 3(hsr0) entered blocking state [ 793.344560][T19727] bridge0: port 3(hsr0) entered disabled state [ 793.351475][T19727] hsr0: entered allmulticast mode [ 793.366067][T19727] hsr_slave_0: entered allmulticast mode [ 793.383766][T19727] hsr_slave_1: entered allmulticast mode [ 793.405965][T19727] bridge0: port 3(hsr0) entered blocking state [ 793.412330][T19727] bridge0: port 3(hsr0) entered forwarding state [ 793.631805][T19743] openvswitch: netlink: Key type 4112 is out of range max 32 [ 793.835145][T19747] netlink: 'syz.2.4752': attribute type 8 has an invalid length. [ 794.913453][T19751] netlink: 'syz.3.4754': attribute type 10 has an invalid length. [ 794.931694][T19751] hsr0: entered promiscuous mode [ 794.942763][T19751] bridge0: port 3(hsr0) entered blocking state [ 794.968212][T19751] bridge0: port 3(hsr0) entered disabled state [ 794.983763][T19751] hsr0: entered allmulticast mode [ 794.989052][T19751] hsr_slave_0: entered allmulticast mode [ 794.999224][T19751] hsr_slave_1: entered allmulticast mode [ 795.015092][T19751] bridge0: port 3(hsr0) entered blocking state [ 795.021481][T19751] bridge0: port 3(hsr0) entered forwarding state [ 795.679735][T19776] netlink: 'syz.1.4764': attribute type 8 has an invalid length. [ 796.468323][T19788] netlink: 'syz.2.4768': attribute type 10 has an invalid length. [ 796.488804][T19788] __nla_validate_parse: 4 callbacks suppressed [ 796.488937][T19788] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4768'. [ 798.169378][T19812] netlink: 'syz.2.4775': attribute type 8 has an invalid length. [ 798.179875][T19812] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4775'. [ 798.206421][T19813] lo: left promiscuous mode [ 798.211022][T19813] lo: entered allmulticast mode [ 798.301835][T19813] lo: entered promiscuous mode [ 798.316629][T19813] lo: left allmulticast mode [ 798.553273][T19817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4777'. [ 798.581607][T19817] netlink: 'syz.2.4777': attribute type 10 has an invalid length. [ 798.605355][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4777'. [ 798.644935][T19817] team0: entered promiscuous mode [ 798.651060][T19817] team_slave_0: entered promiscuous mode [ 798.680596][T19817] team_slave_1: entered promiscuous mode [ 798.730232][T19817] team0: entered allmulticast mode [ 798.755776][T19817] team_slave_0: entered allmulticast mode [ 798.776866][T19817] team_slave_1: entered allmulticast mode [ 798.811109][T19817] bridge0: port 4(team0) entered blocking state [ 798.836658][T19817] bridge0: port 4(team0) entered disabled state [ 798.967837][T19817] bridge0: port 4(team0) entered blocking state [ 798.975939][T19817] bridge0: port 4(team0) entered forwarding state [ 799.026900][T19819] lo: left promiscuous mode [ 799.031597][T19819] lo: entered allmulticast mode [ 799.058069][T19821] lo: entered promiscuous mode [ 799.078077][T19821] lo: left allmulticast mode [ 799.396092][T19828] netlink: 'syz.3.4781': attribute type 8 has an invalid length. [ 799.406617][T19828] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4781'. [ 801.405273][T19839] lo: left promiscuous mode [ 801.411726][T19839] lo: entered allmulticast mode [ 801.459848][T19841] lo: entered promiscuous mode [ 801.467170][T19841] lo: left allmulticast mode [ 801.640137][T19848] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4788'. [ 801.884641][T19848] netlink: 'syz.3.4788': attribute type 10 has an invalid length. [ 801.892804][T19848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4788'. [ 803.283329][T19879] netlink: 'syz.2.4795': attribute type 8 has an invalid length. [ 803.324814][T19879] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4795'. [ 804.443203][T19883] lo: left promiscuous mode [ 804.462194][T19883] lo: entered allmulticast mode [ 804.605508][T19883] lo: entered promiscuous mode [ 804.613332][T19883] lo: left allmulticast mode [ 804.867631][T19891] netlink: 'syz.2.4799': attribute type 10 has an invalid length. [ 804.889660][T19891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4799'. [ 805.205201][T19901] netlink: 'syz.3.4805': attribute type 8 has an invalid length. [ 805.232980][T19901] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4805'. [ 805.254550][T19902] netlink: 'syz.2.4803': attribute type 10 has an invalid length. [ 805.304413][T19902] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4803'. [ 805.499860][T19908] netlink: 'syz.3.4807': attribute type 8 has an invalid length. [ 805.512796][T19908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4807'. [ 806.395578][T19915] lo: left promiscuous mode [ 806.404530][T19915] lo: entered allmulticast mode [ 806.454823][T19919] lo: entered promiscuous mode [ 806.473589][T19919] lo: left allmulticast mode [ 806.709410][T19931] netlink: 'syz.3.4815': attribute type 8 has an invalid length. [ 806.743778][T19931] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4815'. [ 806.788008][T19933] netlink: 'syz.0.4816': attribute type 8 has an invalid length. [ 806.804085][T19933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4816'. [ 806.891066][T19938] netlink: 'syz.1.4818': attribute type 8 has an invalid length. [ 806.934862][T19938] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4818'. [ 807.311415][T19949] netlink: 'syz.0.4828': attribute type 8 has an invalid length. [ 807.323420][T19949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4828'. [ 807.390958][T19955] lo: entered allmulticast mode [ 807.500985][T19956] lo: entered promiscuous mode [ 807.526280][T19956] lo: left allmulticast mode [ 807.863480][T19966] netlink: 'syz.1.4830': attribute type 8 has an invalid length. [ 807.893873][T19963] netlink: 'syz.0.4829': attribute type 8 has an invalid length. [ 807.902007][T19963] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4829'. [ 807.913170][T19966] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4830'. [ 808.278526][T19977] netlink: 'syz.0.4835': attribute type 8 has an invalid length. [ 808.286903][T19977] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4835'. [ 808.818995][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.827965][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.558714][T20012] netlink: 'syz.1.4845': attribute type 10 has an invalid length. [ 809.571807][T20012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4845'. [ 810.308363][T20031] netlink: 'syz.0.4851': attribute type 10 has an invalid length. [ 810.326983][T20031] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4851'. [ 810.775460][T20046] netlink: 'syz.0.4858': attribute type 10 has an invalid length. [ 810.832758][T20046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4858'. [ 811.808199][T20069] netlink: 'syz.1.4867': attribute type 2 has an invalid length. [ 811.834050][T20069] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4867'. [ 812.128504][T20077] netlink: 'syz.0.4870': attribute type 10 has an invalid length. [ 812.148908][T20077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4870'. [ 812.471615][T20087] netlink: 'syz.1.4873': attribute type 10 has an invalid length. [ 812.514717][T20087] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4873'. [ 812.542537][T20085] veth1_macvtap: left promiscuous mode [ 812.594592][T20085] macsec0: entered allmulticast mode [ 814.177114][T20121] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4884'. [ 814.241327][T20121] netlink: 'syz.2.4884': attribute type 10 has an invalid length. [ 814.284767][T20121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4884'. [ 814.900452][T20131] netlink: 'syz.2.4887': attribute type 10 has an invalid length. [ 814.936071][T20131] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4887'. [ 816.314145][T20151] netlink: 'syz.3.4893': attribute type 10 has an invalid length. [ 816.323035][T20151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4893'. [ 817.648685][T20168] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4900'. [ 817.680835][T20168] netlink: 'syz.0.4900': attribute type 10 has an invalid length. [ 817.688898][T20168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4900'. [ 817.910378][T20177] lo: left promiscuous mode [ 817.915928][T20177] lo: entered allmulticast mode [ 818.039089][T20177] lo: entered promiscuous mode [ 818.064618][T20177] lo: left allmulticast mode [ 818.919710][T20185] netlink: 'syz.0.4915': attribute type 8 has an invalid length. [ 818.941937][T20185] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4915'. [ 819.261206][T20190] veth1_macvtap: left promiscuous mode [ 819.280554][T20190] macsec0: entered allmulticast mode [ 819.412640][T20196] netlink: 'syz.1.4909': attribute type 10 has an invalid length. [ 819.422707][T20196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4909'. [ 819.489703][T20194] netlink: 'syz.0.4918': attribute type 8 has an invalid length. [ 819.500569][T20194] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4918'. [ 819.964339][T20207] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4913'. [ 820.050190][T20207] netlink: 'syz.0.4913': attribute type 10 has an invalid length. [ 820.078928][T20207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4913'. [ 820.902848][T20222] veth1_macvtap: left promiscuous mode [ 820.908932][T20222] macsec0: entered allmulticast mode [ 821.357269][T20237] netlink: 'syz.3.4923': attribute type 10 has an invalid length. [ 821.401005][T20237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4923'. [ 821.475864][T20236] netlink: 'syz.1.4924': attribute type 8 has an invalid length. [ 821.499013][T20236] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4924'. [ 821.717028][T20243] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4926'. [ 821.793522][T20243] netlink: 'syz.1.4926': attribute type 10 has an invalid length. [ 822.659281][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.669005][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.677188][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.694885][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.705565][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 822.713688][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.800482][T20270] netlink: 'syz.0.4934': attribute type 8 has an invalid length. [ 823.809606][T20270] __nla_validate_parse: 1 callbacks suppressed [ 823.809621][T20270] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4934'. [ 824.345998][T19356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.380606][T20272] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4936'. [ 824.433134][T20272] netlink: 'syz.1.4936': attribute type 10 has an invalid length. [ 824.459470][T20272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4936'. [ 824.523490][T19356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.676879][T19356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.816151][ T5786] Bluetooth: hci1: command tx timeout [ 824.846417][T19356] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.016906][T20288] lo: left promiscuous mode [ 825.021543][T20288] lo: entered allmulticast mode [ 825.141013][T20290] lo: entered promiscuous mode [ 825.261302][T20290] lo: left allmulticast mode [ 825.414278][T20253] chnl_net:caif_netlink_parms(): no params data found [ 825.848911][T20302] netlink: 'syz.2.4945': attribute type 8 has an invalid length. [ 825.891468][T20302] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4945'. [ 825.999617][T20253] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.033325][T20253] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.061208][T20253] bridge_slave_0: entered allmulticast mode [ 826.092531][T20253] bridge_slave_0: entered promiscuous mode [ 826.122885][T20306] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4946'. [ 826.143946][T20253] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.181073][T20253] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.211252][T20253] bridge_slave_1: entered allmulticast mode [ 826.232313][T20253] bridge_slave_1: entered promiscuous mode [ 826.251916][T20306] netlink: 'syz.1.4946': attribute type 10 has an invalid length. [ 826.276561][T20306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4946'. [ 826.417897][T20253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.458080][T20253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.914000][ T5786] Bluetooth: hci1: command tx timeout [ 827.379594][T20253] team0: Port device team_slave_0 added [ 827.453607][T20253] team0: Port device team_slave_1 added [ 827.650910][T20327] lo: left promiscuous mode [ 827.659282][T20327] lo: entered allmulticast mode [ 827.680408][T20331] lo: left promiscuous mode [ 827.685378][T20331] lo: entered allmulticast mode [ 827.692312][T20253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.699607][T20253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.747798][T20253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.828780][T20253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.845290][T20253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.877078][T20253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.901565][T20334] lo: entered promiscuous mode [ 827.906700][T20334] lo: left allmulticast mode [ 828.189923][T20332] lo: entered promiscuous mode [ 828.213138][T20332] lo: left allmulticast mode [ 828.471375][T20253] hsr_slave_0: entered promiscuous mode [ 828.489760][T20253] hsr_slave_1: entered promiscuous mode [ 828.517110][T20253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.524926][T20253] Cannot create hsr debugfs directory [ 828.973296][ T5786] Bluetooth: hci1: command tx timeout [ 829.587667][T19356] hsr_slave_0: left promiscuous mode [ 829.594790][T19356] hsr_slave_1: left promiscuous mode [ 829.606574][T19356] hsr0: left allmulticast mode [ 829.611681][T19356] bridge0: port 3(hsr0) entered disabled state [ 829.624017][T19356] bridge0: port 2(team0) entered disabled state [ 829.636770][T19356] bridge_slave_0: left allmulticast mode [ 829.642490][T19356] bridge_slave_0: left promiscuous mode [ 829.648787][T19356] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.684064][T19356] veth1_macvtap: left promiscuous mode [ 829.689697][T19356] veth0_macvtap: left promiscuous mode [ 829.700714][T19356] veth1_vlan: left promiscuous mode [ 829.706391][T19356] veth0_vlan: left promiscuous mode [ 830.391095][T19356] team_slave_1 (unregistering): left promiscuous mode [ 830.398272][T19356] team_slave_1 (unregistering): left allmulticast mode [ 830.411643][T19356] team0 (unregistering): Port device team_slave_1 removed [ 830.455047][T19356] team_slave_0 (unregistering): left promiscuous mode [ 830.461903][T19356] team_slave_0 (unregistering): left allmulticast mode [ 830.470316][T19356] team0 (unregistering): Port device team_slave_0 removed [ 830.521982][T19356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.612585][T19356] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 830.867140][T19356] bond0 (unregistering): Released all slaves [ 830.989917][T20253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 831.001816][T20253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 831.024433][T20253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 831.036424][T20253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 831.055048][ T5786] Bluetooth: hci1: command tx timeout [ 831.247423][T20253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.280023][T20253] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.295614][T19365] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.302800][T19365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.328709][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.335975][T19362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.660762][T20253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.737644][T20253] veth0_vlan: entered promiscuous mode [ 831.756927][T20253] veth1_vlan: entered promiscuous mode [ 831.800798][T20253] veth0_macvtap: entered promiscuous mode [ 831.813968][T20253] veth1_macvtap: entered promiscuous mode [ 831.832273][T20253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.843536][T20253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.854325][T20253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.865644][T20253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.877553][T20253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.891628][T20253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.902223][T20253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.912316][T20253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.926684][T20253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.939094][T20253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.955754][T20253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.964959][T20253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.973747][T20253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.982485][T20253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.059464][T19358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.072529][T19358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.101130][T19362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.109211][T19362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.470244][T20392] netlink: 'syz.2.4954': attribute type 8 has an invalid length. [ 832.523508][T20392] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4954'. [ 832.904740][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 832.918986][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 832.927295][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 832.953480][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 832.966590][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 832.974644][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 833.440249][T19365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.471270][T20415] FAULT_INJECTION: forcing a failure. [ 833.471270][T20415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.486906][T20415] CPU: 1 PID: 20415 Comm: syz.1.4962 Not tainted syzkaller #0 [ 833.494468][T20415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 833.504564][T20415] Call Trace: [ 833.507872][T20415] [ 833.510840][T20415] dump_stack_lvl+0x18c/0x250 [ 833.515568][T20415] ? show_regs_print_info+0x20/0x20 [ 833.520809][T20415] ? load_image+0x420/0x420 [ 833.525344][T20415] ? __lock_acquire+0x7d80/0x7d80 [ 833.530405][T20415] ? snprintf+0xe9/0x140 [ 833.534681][T20415] should_fail_ex+0x394/0x4c0 [ 833.539395][T20415] _copy_to_user+0x2f/0xa0 [ 833.543858][T20415] simple_read_from_buffer+0xe7/0x150 [ 833.549279][T20415] proc_fail_nth_read+0x1e8/0x260 [ 833.554353][T20415] ? proc_fault_inject_write+0x360/0x360 [ 833.560034][T20415] ? fsnotify_perm+0x271/0x5e0 [ 833.564836][T20415] ? proc_fault_inject_write+0x360/0x360 [ 833.570528][T20415] vfs_read+0x298/0x990 [ 833.574724][T20415] ? kernel_read+0x1e0/0x1e0 [ 833.579357][T20415] ? __fget_files+0x28/0x460 [ 833.584073][T20415] ? __fget_files+0x3fc/0x460 [ 833.588894][T20415] ? __fdget_pos+0x2a3/0x330 [ 833.593543][T20415] ? ksys_read+0x74/0x260 [ 833.597930][T20415] ksys_read+0x151/0x260 [ 833.602261][T20415] ? vfs_write+0x9a0/0x9a0 [ 833.606775][T20415] ? lockdep_hardirqs_on+0x98/0x150 [ 833.612064][T20415] do_syscall_64+0x55/0xb0 [ 833.616563][T20415] ? clear_bhb_loop+0x40/0x90 [ 833.621288][T20415] ? clear_bhb_loop+0x40/0x90 [ 833.626011][T20415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.631968][T20415] RIP: 0033:0x7fe96b55e68e [ 833.636467][T20415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 833.656132][T20415] RSP: 002b:00007fe96c532fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 833.664610][T20415] RAX: ffffffffffffffda RBX: 00007fe96c5336c0 RCX: 00007fe96b55e68e [ 833.672642][T20415] RDX: 000000000000000f RSI: 00007fe96c5330a0 RDI: 0000000000000007 [ 833.680671][T20415] RBP: 00007fe96c533090 R08: 0000000000000000 R09: 0000000000000000 [ 833.688693][T20415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.696713][T20415] R13: 00007fe96b826038 R14: 00007fe96b825fa0 R15: 00007fff9242c4f8 [ 833.704754][T20415] [ 833.867679][T19365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.967894][T20423] netlink: 'syz.1.4965': attribute type 8 has an invalid length. [ 833.978930][T19365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.003219][T20423] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4965'. [ 834.037485][T20427] lo: entered allmulticast mode [ 834.150071][T19365] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.185894][T20427] lo: entered promiscuous mode [ 834.191031][T20427] lo: left allmulticast mode [ 834.243218][T20401] chnl_net:caif_netlink_parms(): no params data found [ 834.544904][T20401] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.555293][T20401] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.562576][T20401] bridge_slave_0: entered allmulticast mode [ 834.586106][T20401] bridge_slave_0: entered promiscuous mode [ 834.646137][T20401] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.714165][T20401] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.807156][T20401] bridge_slave_1: entered allmulticast mode [ 834.822570][T20401] bridge_slave_1: entered promiscuous mode [ 834.983964][T20401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.057804][ T5784] Bluetooth: hci4: command tx timeout [ 835.435961][T20401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.232335][T20465] FAULT_INJECTION: forcing a failure. [ 836.232335][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.301063][T20465] CPU: 0 PID: 20465 Comm: syz.2.4973 Not tainted syzkaller #0 [ 836.308817][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 836.318923][T20465] Call Trace: [ 836.322273][T20465] [ 836.325255][T20465] dump_stack_lvl+0x18c/0x250 [ 836.330017][T20465] ? show_regs_print_info+0x20/0x20 [ 836.335393][T20465] ? load_image+0x420/0x420 [ 836.339969][T20465] ? __might_fault+0xaa/0x120 [ 836.344696][T20465] ? __lock_acquire+0x7d80/0x7d80 [ 836.349784][T20465] should_fail_ex+0x394/0x4c0 [ 836.354892][T20465] _copy_from_iter+0x1cd/0x1290 [ 836.359806][T20465] ? rep_movs_alternative+0x4a/0x90 [ 836.365058][T20465] ? copyout_mc+0x70/0x70 [ 836.369443][T20465] ? copyout_mc+0x70/0x70 [ 836.373820][T20465] ? __virt_addr_valid+0x10c/0x380 [ 836.378988][T20465] ? page_copy_sane+0x16a/0x270 [ 836.383888][T20465] copy_page_from_iter+0x7b/0x100 [ 836.388963][T20465] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 836.394855][T20465] tun_get_user+0xc84/0x3d70 [ 836.399554][T20465] ? aa_file_perm+0x3e3/0xee0 [ 836.404312][T20465] ? rcu_read_unlock+0xa0/0xa0 [ 836.409136][T20465] ? tun_get+0x1c/0x2e0 [ 836.413363][T20465] ? __lock_acquire+0x7d80/0x7d80 [ 836.418451][T20465] ? tun_get+0x1c/0x2e0 [ 836.422708][T20465] tun_chr_write_iter+0x119/0x200 [ 836.427792][T20465] vfs_write+0x474/0x9a0 [ 836.432102][T20465] ? file_end_write+0x250/0x250 [ 836.437011][T20465] ? __fget_files+0x3fc/0x460 [ 836.441750][T20465] ? __fdget_pos+0x1d8/0x330 [ 836.446407][T20465] ? ksys_write+0x74/0x260 [ 836.450885][T20465] ksys_write+0x151/0x260 [ 836.455280][T20465] ? __ia32_sys_read+0x90/0x90 [ 836.460110][T20465] ? lockdep_hardirqs_on+0x98/0x150 [ 836.465455][T20465] do_syscall_64+0x55/0xb0 [ 836.469929][T20465] ? clear_bhb_loop+0x40/0x90 [ 836.474694][T20465] ? clear_bhb_loop+0x40/0x90 [ 836.479429][T20465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.485382][T20465] RIP: 0033:0x7f8687d9de59 [ 836.489862][T20465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.509525][T20465] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.517988][T20465] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 836.526010][T20465] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 836.534025][T20465] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 836.542044][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.550064][T20465] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 836.558100][T20465] [ 836.680333][T20401] team0: Port device team_slave_0 added [ 836.721352][T20401] team0: Port device team_slave_1 added [ 837.163278][ T5784] Bluetooth: hci4: command tx timeout [ 837.542564][T20401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.593243][T20401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.779224][T20401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.013937][T20477] lo: left promiscuous mode [ 838.018596][T20477] lo: entered allmulticast mode [ 838.114310][T20401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.121368][T20401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.219938][T20401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.243054][T20483] lo: entered promiscuous mode [ 838.248028][T20483] lo: left allmulticast mode [ 839.213632][ T5784] Bluetooth: hci4: command tx timeout [ 840.410101][T20401] hsr_slave_0: entered promiscuous mode [ 840.419979][T20401] hsr_slave_1: entered promiscuous mode [ 840.428495][T20401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.440887][T20401] Cannot create hsr debugfs directory [ 840.448026][T20495] veth1_macvtap: left promiscuous mode [ 840.463216][T20495] macsec0: entered allmulticast mode [ 840.614800][T20513] lo: left promiscuous mode [ 840.619405][T20513] lo: entered allmulticast mode [ 840.907995][T20516] lo: entered promiscuous mode [ 840.922647][T20516] lo: left allmulticast mode [ 841.250832][T19365] hsr_slave_0: left promiscuous mode [ 841.269129][T19365] hsr_slave_1: left promiscuous mode [ 841.287010][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.294763][ T5784] Bluetooth: hci4: command tx timeout [ 841.310569][T19365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.329004][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.438906][T19365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.037890][T19365] hsr0: left allmulticast mode [ 842.043008][T19365] bridge0: port 4(hsr0) entered disabled state [ 842.126535][T19365] bridge0: port 3(team0) entered disabled state [ 842.155869][T19365] bridge_slave_1: left allmulticast mode [ 842.161799][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.180186][T19365] bridge_slave_0: left allmulticast mode [ 842.186083][T19365] bridge_slave_0: left promiscuous mode [ 842.192350][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.225658][T19365] veth0_macvtap: left promiscuous mode [ 842.236100][T19365] veth1_vlan: left promiscuous mode [ 842.241503][T19365] veth0_vlan: left promiscuous mode [ 842.886849][T19365] team_slave_1 (unregistering): left promiscuous mode [ 842.898442][T19365] team_slave_1 (unregistering): left allmulticast mode [ 842.910603][T19365] team0 (unregistering): Port device team_slave_1 removed [ 842.956277][T19365] team_slave_0 (unregistering): left promiscuous mode [ 842.966194][T19365] team_slave_0 (unregistering): left allmulticast mode [ 842.975677][T19365] team0 (unregistering): Port device team_slave_0 removed [ 843.021701][T19365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.076046][T19365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.416891][T19365] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 843.426037][T19365] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 843.438351][T19365] bond0 (unregistering): Released all slaves [ 845.702818][T20584] lo: left promiscuous mode [ 845.713920][T20584] lo: entered allmulticast mode [ 845.952916][T20584] lo: entered promiscuous mode [ 845.977815][T20584] lo: left allmulticast mode [ 846.087917][T20401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 846.129085][T20401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 846.170317][T20401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 846.200416][T20401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 846.256813][T20596] netlink: 'syz.1.4996': attribute type 8 has an invalid length. [ 846.286894][T20596] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4996'. [ 846.392761][T20599] netlink: 'syz.3.4998': attribute type 1 has an invalid length. [ 846.411411][T20599] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4998'. [ 846.443793][T20599] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4998'. [ 846.524645][T20401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.568716][T20401] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.621567][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.628864][T19359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.687805][T19359] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.695117][T19359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.888379][T20401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.134989][T20663] lo: left promiscuous mode [ 849.139641][T20663] lo: entered allmulticast mode [ 849.214635][T20401] veth0_vlan: entered promiscuous mode [ 849.275284][T20401] veth1_vlan: entered promiscuous mode [ 849.444471][T20663] lo: entered promiscuous mode [ 849.449892][T20663] lo: left allmulticast mode [ 849.542443][T20401] veth0_macvtap: entered promiscuous mode [ 849.577747][T20401] veth1_macvtap: entered promiscuous mode [ 849.608955][T20401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.622391][T20401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.637223][T20401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.649393][T20401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.705729][T20401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.746975][T20401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.789565][T20401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.814811][T20401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.835668][T20401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.859715][T20401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.878003][T20681] lo: left promiscuous mode [ 849.882736][T20681] lo: entered allmulticast mode [ 849.992671][T20681] lo: entered promiscuous mode [ 850.009336][T20681] lo: left allmulticast mode [ 850.085112][T20401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.107895][T20401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.123307][T20401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.152578][T20401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.521591][T20693] netlink: 'syz.2.5018': attribute type 8 has an invalid length. [ 850.537163][T20693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5018'. [ 850.577941][T19361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.607627][T19361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.821990][T19361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.853804][T19361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.497898][T20731] veth1_macvtap: left promiscuous mode [ 852.504480][T20731] macsec0: entered allmulticast mode [ 852.863696][T20740] lo: entered allmulticast mode [ 852.982273][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.994325][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 853.006119][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 853.017218][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 853.028312][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 853.051354][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 853.173664][T20746] lo: entered promiscuous mode [ 853.179397][T20746] lo: left allmulticast mode [ 853.467839][T20760] FAULT_INJECTION: forcing a failure. [ 853.467839][T20760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.510855][T20760] CPU: 1 PID: 20760 Comm: syz.2.5027 Not tainted syzkaller #0 [ 853.518392][T20760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 853.528503][T20760] Call Trace: [ 853.531827][T20760] [ 853.534800][T20760] dump_stack_lvl+0x18c/0x250 [ 853.539547][T20760] ? show_regs_print_info+0x20/0x20 [ 853.544937][T20760] ? load_image+0x420/0x420 [ 853.549506][T20760] ? __might_fault+0xaa/0x120 [ 853.554274][T20760] should_fail_ex+0x394/0x4c0 [ 853.559020][T20760] copyin+0x1a/0x90 [ 853.562887][T20760] _copy_from_iter+0x3ec/0x1290 [ 853.567814][T20760] ? copyout_mc+0x70/0x70 [ 853.572200][T20760] ? verify_lock_unused+0x140/0x140 [ 853.577452][T20760] ? aa_label_sk_perm+0x4d4/0x660 [ 853.582531][T20760] ? dev_get_by_index+0x22/0x2d0 [ 853.587514][T20760] ? dev_get_by_index+0x22/0x2d0 [ 853.592513][T20760] packet_sendmsg+0x2d14/0x4c70 [ 853.597452][T20760] ? balance_push_set+0x140/0x370 [ 853.602532][T20760] ? verify_lock_unused+0x140/0x140 [ 853.607784][T20760] ? aa_sk_perm+0x83c/0x970 [ 853.612350][T20760] ? packet_getsockopt+0xad0/0xad0 [ 853.617526][T20760] ? tomoyo_write_file+0xf0/0xc50 [ 853.622608][T20760] ? aa_sock_msg_perm+0x94/0x150 [ 853.627604][T20760] ? apparmor_socket_sendmsg+0x8e/0x330 [ 853.633203][T20760] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 853.638537][T20760] ? security_socket_sendmsg+0x80/0xa0 [ 853.644063][T20760] ? packet_getsockopt+0xad0/0xad0 [ 853.649235][T20760] ____sys_sendmsg+0x61b/0x980 [ 853.654070][T20760] ? __asan_memset+0x22/0x40 [ 853.658738][T20760] ? __sys_sendmsg_sock+0x30/0x30 [ 853.663820][T20760] ? __import_iovec+0x3fa/0x850 [ 853.668821][T20760] ? import_iovec+0x73/0xa0 [ 853.673384][T20760] ___sys_sendmsg+0x2a6/0x360 [ 853.678121][T20760] ? get_pid_task+0x20/0x1e0 [ 853.682808][T20760] ? __sys_sendmsg+0x2b0/0x2b0 [ 853.687668][T20760] ? __lock_acquire+0x7d80/0x7d80 [ 853.692782][T20760] __se_sys_sendmsg+0x1d0/0x2c0 [ 853.697713][T20760] ? __x64_sys_sendmsg+0x80/0x80 [ 853.702785][T20760] ? lockdep_hardirqs_on+0x98/0x150 [ 853.708051][T20760] do_syscall_64+0x55/0xb0 [ 853.712530][T20760] ? clear_bhb_loop+0x40/0x90 [ 853.717269][T20760] ? clear_bhb_loop+0x40/0x90 [ 853.722026][T20760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.727982][T20760] RIP: 0033:0x7f8687d9de59 [ 853.732455][T20760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.752164][T20760] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.760643][T20760] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 853.768682][T20760] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 853.776711][T20760] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 853.784765][T20760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.792783][T20760] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 853.800827][T20760] [ 853.988176][T19365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.057709][T19365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.133338][ T5784] Bluetooth: hci0: command tx timeout [ 855.143692][T19365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.169743][T20749] chnl_net:caif_netlink_parms(): no params data found [ 855.198825][T19365] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 855.208351][T19365] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.291779][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.299509][T20749] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.307362][T20749] bridge_slave_0: entered allmulticast mode [ 855.315097][T20749] bridge_slave_0: entered promiscuous mode [ 855.329770][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.340512][T20749] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.349999][T20749] bridge_slave_1: entered allmulticast mode [ 855.358027][T20749] bridge_slave_1: entered promiscuous mode [ 855.396330][T20749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.409718][T20749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.467194][T20749] team0: Port device team_slave_0 added [ 855.476288][T20749] team0: Port device team_slave_1 added [ 855.532808][T20749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.541856][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.568517][T20749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.609826][T20749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.617037][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.643215][T20749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.747335][T20749] hsr_slave_0: entered promiscuous mode [ 855.755164][T20749] hsr_slave_1: entered promiscuous mode [ 855.761452][T20749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 855.773603][T20749] Cannot create hsr debugfs directory [ 857.213274][ T5784] Bluetooth: hci0: command tx timeout [ 857.533506][T20802] netlink: 'syz.2.5033': attribute type 10 has an invalid length. [ 857.541405][T20802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5033'. [ 857.742443][T20811] lo: left promiscuous mode [ 857.747180][T20811] lo: entered allmulticast mode [ 857.884074][T20814] lo: left promiscuous mode [ 857.888909][T20814] lo: entered allmulticast mode [ 857.941520][T20818] netlink: 'syz.2.5037': attribute type 8 has an invalid length. [ 857.952797][T20818] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5037'. [ 857.977742][T20819] lo: entered promiscuous mode [ 857.982838][T20819] lo: left allmulticast mode [ 858.005392][T20814] lo: entered promiscuous mode [ 858.014481][T20814] lo: left allmulticast mode [ 859.293054][T20838] netlink: 'syz.2.5044': attribute type 3 has an invalid length. [ 859.293907][ T5784] Bluetooth: hci0: command tx timeout [ 859.310782][T20838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5044'. [ 859.781415][T19365] hsr_slave_0: left promiscuous mode [ 859.792433][T19365] hsr_slave_1: left promiscuous mode [ 859.806385][T19365] hsr0: left allmulticast mode [ 859.811418][T19365] bridge0: port 3(hsr0) entered disabled state [ 859.827556][T19365] bridge0: port 2(team0) entered disabled state [ 859.848884][T19365] bridge_slave_0: left allmulticast mode [ 859.873325][T19365] bridge_slave_0: left promiscuous mode [ 859.879236][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.889590][T20852] netlink: 'syz.2.5047': attribute type 8 has an invalid length. [ 859.902916][T20852] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5047'. [ 859.961979][T19365] veth0_macvtap: left promiscuous mode [ 859.971318][T19365] veth1_vlan: left promiscuous mode [ 859.984353][T19365] veth0_vlan: left promiscuous mode [ 860.820445][T19365] team_slave_1 (unregistering): left promiscuous mode [ 860.829018][T19365] team_slave_1 (unregistering): left allmulticast mode [ 860.840483][T19365] team0 (unregistering): Port device team_slave_1 removed [ 860.891165][T19365] team_slave_0 (unregistering): left promiscuous mode [ 860.898917][T19365] team_slave_0 (unregistering): left allmulticast mode [ 860.909105][T19365] team0 (unregistering): Port device team_slave_0 removed [ 860.953681][T19365] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 861.005964][T19365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.052982][T19365] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 861.329868][T19365] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 861.339919][T19365] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 861.351656][T19365] bond0 (unregistering): Released all slaves [ 861.377445][ T5784] Bluetooth: hci0: command tx timeout [ 861.457510][T20749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 861.477653][T20861] lo: left promiscuous mode [ 861.482242][T20861] lo: entered allmulticast mode [ 861.503234][T20865] lo: entered promiscuous mode [ 861.508104][T20865] lo: left allmulticast mode [ 861.554341][T20749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 861.577244][T20749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 861.646897][T20749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 862.081184][T20749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.211888][T20749] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.298332][T19361] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.305650][T19361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.373947][T19359] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.381171][T19359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.526845][T20749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 863.128614][T20905] lo: left promiscuous mode [ 863.147833][T20905] lo: entered allmulticast mode [ 863.274157][T20749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.321389][T20905] lo: entered promiscuous mode [ 863.334892][T20905] lo: left allmulticast mode [ 863.441618][T20911] lo: left promiscuous mode [ 863.451085][T20911] lo: entered allmulticast mode [ 863.513758][T20749] veth0_vlan: entered promiscuous mode [ 863.566706][T20749] veth1_vlan: entered promiscuous mode [ 863.667603][T20911] lo: entered promiscuous mode [ 863.674172][T20911] lo: left allmulticast mode [ 863.738428][T20749] veth0_macvtap: entered promiscuous mode [ 863.749947][T20749] veth1_macvtap: entered promiscuous mode [ 863.759021][T20913] netlink: 'syz.0.5060': attribute type 3 has an invalid length. [ 863.776749][T20913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5060'. [ 863.814723][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.833993][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.873239][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.891286][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.907766][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.921080][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.940878][T20749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.979897][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.999635][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.012782][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.034685][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.050879][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.058793][T20919] netlink: 'syz.2.5062': attribute type 8 has an invalid length. [ 864.080198][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.091037][T20919] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5062'. [ 864.106011][T20749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.146015][T20749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.174077][T20749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.182880][T20749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.196541][T20749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.478267][T19358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.557919][T19358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.700438][T19361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.719941][T19361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.853948][T20972] FAULT_INJECTION: forcing a failure. [ 866.853948][T20972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.898304][T20972] CPU: 1 PID: 20972 Comm: syz.2.5083 Not tainted syzkaller #0 [ 866.905859][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 866.915959][T20972] Call Trace: [ 866.919270][T20972] [ 866.922256][T20972] dump_stack_lvl+0x18c/0x250 [ 866.926984][T20972] ? show_regs_print_info+0x20/0x20 [ 866.932230][T20972] ? load_image+0x420/0x420 [ 866.936799][T20972] ? __might_fault+0xaa/0x120 [ 866.941520][T20972] ? __lock_acquire+0x7d80/0x7d80 [ 866.946583][T20972] ? __virt_addr_valid+0x10c/0x380 [ 866.951730][T20972] should_fail_ex+0x394/0x4c0 [ 866.956456][T20972] _copy_from_user+0x2f/0xe0 [ 866.961084][T20972] sctp_setsockopt+0x19e/0x11e0 [ 866.965967][T20972] ? sock_common_recvmsg+0x190/0x190 [ 866.971299][T20972] do_sock_setsockopt+0x175/0x1a0 [ 866.976369][T20972] ? __fdget+0x180/0x210 [ 866.980652][T20972] __x64_sys_setsockopt+0x182/0x200 [ 866.985978][T20972] do_syscall_64+0x55/0xb0 [ 866.990425][T20972] ? clear_bhb_loop+0x40/0x90 [ 866.995127][T20972] ? clear_bhb_loop+0x40/0x90 [ 866.999840][T20972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.005774][T20972] RIP: 0033:0x7f8687d9de59 [ 867.010216][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.029848][T20972] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 867.038298][T20972] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 867.046292][T20972] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000005 [ 867.054285][T20972] RBP: 00007f8688c3b090 R08: 0000000000000010 R09: 0000000000000000 [ 867.062280][T20972] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.070279][T20972] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 867.078296][T20972] [ 868.485940][T20980] lo: left promiscuous mode [ 868.490572][T20980] lo: entered allmulticast mode [ 868.538830][T20986] lo: entered promiscuous mode [ 868.590170][T20986] lo: left allmulticast mode [ 868.880681][T20999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5091'. [ 868.916679][T20999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5091'. [ 868.932885][T20999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5091'. [ 868.953659][T20999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5091'. [ 868.965650][T20999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5091'. [ 869.105455][T21006] netlink: 'syz.2.5095': attribute type 27 has an invalid length. [ 869.114438][T21006] netlink: 'syz.2.5095': attribute type 25 has an invalid length. [ 869.896037][T21017] netlink: 'syz.3.5099': attribute type 10 has an invalid length. [ 869.910583][T21017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5099'. [ 869.921129][T21017] team0: entered promiscuous mode [ 869.960652][T21017] team_slave_0: entered promiscuous mode [ 870.000450][T21017] team_slave_1: entered promiscuous mode [ 870.018347][T21017] team0: entered allmulticast mode [ 870.033776][T21017] team_slave_0: entered allmulticast mode [ 870.040376][T21017] team_slave_1: entered allmulticast mode [ 870.063558][T21017] bridge0: port 3(team0) entered blocking state [ 870.074134][T21017] bridge0: port 3(team0) entered disabled state [ 870.135471][T21017] bridge0: port 3(team0) entered blocking state [ 870.143237][T21017] bridge0: port 3(team0) entered forwarding state [ 870.269001][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.276146][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.566783][T21032] FAULT_INJECTION: forcing a failure. [ 870.566783][T21032] name failslab, interval 1, probability 0, space 0, times 0 [ 870.589325][T21032] CPU: 0 PID: 21032 Comm: syz.2.5105 Not tainted syzkaller #0 [ 870.596967][T21032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 870.607161][T21032] Call Trace: [ 870.610566][T21032] [ 870.613641][T21032] dump_stack_lvl+0x18c/0x250 [ 870.618464][T21032] ? show_regs_print_info+0x20/0x20 [ 870.623768][T21032] ? load_image+0x420/0x420 [ 870.628366][T21032] ? __might_sleep+0xe0/0xe0 [ 870.633025][T21032] ? __lock_acquire+0x7d80/0x7d80 [ 870.638271][T21032] should_fail_ex+0x394/0x4c0 [ 870.643182][T21032] should_failslab+0x9/0x20 [ 870.647838][T21032] slab_pre_alloc_hook+0x59/0x300 [ 870.653038][T21032] ? __lock_acquire+0x7d80/0x7d80 [ 870.658249][T21032] kmem_cache_alloc_node+0x5e/0x310 [ 870.663636][T21032] ? __alloc_skb+0x103/0x2c0 [ 870.668448][T21032] __alloc_skb+0x103/0x2c0 [ 870.673078][T21032] netlink_sendmsg+0x66a/0xbf0 [ 870.678079][T21032] ? netlink_getsockopt+0x590/0x590 [ 870.683470][T21032] ? apparmor_socket_sendmsg+0x8e/0x330 [ 870.689159][T21032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 870.694593][T21032] ? security_socket_sendmsg+0x80/0xa0 [ 870.700217][T21032] ? netlink_getsockopt+0x590/0x590 [ 870.705558][T21032] ____sys_sendmsg+0x61b/0x980 [ 870.710449][T21032] ? __asan_memset+0x22/0x40 [ 870.715138][T21032] ? __sys_sendmsg_sock+0x30/0x30 [ 870.720225][T21032] ? __import_iovec+0x5f2/0x850 [ 870.725204][T21032] ? import_iovec+0x73/0xa0 [ 870.729801][T21032] ___sys_sendmsg+0x2a6/0x360 [ 870.734602][T21032] ? get_pid_task+0x20/0x1e0 [ 870.739389][T21032] ? __sys_sendmsg+0x2b0/0x2b0 [ 870.744387][T21032] ? __lock_acquire+0x7d80/0x7d80 [ 870.749646][T21032] __se_sys_sendmsg+0x1d0/0x2c0 [ 870.754637][T21032] ? __x64_sys_sendmsg+0x80/0x80 [ 870.759839][T21032] ? lockdep_hardirqs_on+0x98/0x150 [ 870.765144][T21032] do_syscall_64+0x55/0xb0 [ 870.769642][T21032] ? clear_bhb_loop+0x40/0x90 [ 870.774391][T21032] ? clear_bhb_loop+0x40/0x90 [ 870.779186][T21032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.785207][T21032] RIP: 0033:0x7f8687d9de59 [ 870.789789][T21032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.809467][T21032] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.818002][T21032] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 870.826067][T21032] RDX: 0000000004040000 RSI: 0000200000000640 RDI: 0000000000000004 [ 870.834095][T21032] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 870.842140][T21032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.850190][T21032] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 870.858354][T21032] [ 871.101859][T21034] netlink: 'syz.1.5106': attribute type 27 has an invalid length. [ 871.133262][T21034] netlink: 'syz.1.5106': attribute type 25 has an invalid length. [ 871.206469][T21038] netlink: 'syz.2.5107': attribute type 8 has an invalid length. [ 871.215750][T21038] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5107'. [ 871.228908][T21037] netlink: 'syz.3.5108': attribute type 8 has an invalid length. [ 871.242794][T21037] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5108'. [ 872.425227][T21046] netlink: 'syz.1.5110': attribute type 10 has an invalid length. [ 872.463380][T21046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5110'. [ 872.525034][T21046] team0: entered promiscuous mode [ 872.551260][T21046] team_slave_0: entered promiscuous mode [ 872.569464][T21046] team_slave_1: entered promiscuous mode [ 872.609863][T21046] team0: entered allmulticast mode [ 872.634136][T21046] team_slave_0: entered allmulticast mode [ 872.643001][T21046] team_slave_1: entered allmulticast mode [ 872.655451][T21046] bridge0: port 3(team0) entered blocking state [ 872.664826][T21046] bridge0: port 3(team0) entered disabled state [ 872.712837][T21046] bridge0: port 3(team0) entered blocking state [ 872.721496][T21046] bridge0: port 3(team0) entered forwarding state [ 872.738070][T21050] netlink: 'syz.2.5113': attribute type 10 has an invalid length. [ 872.747325][T21050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5113'. [ 873.118273][T21062] netlink: 'syz.1.5118': attribute type 8 has an invalid length. [ 874.106465][T21083] __nla_validate_parse: 2 callbacks suppressed [ 874.106541][T21083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5124'. [ 874.386145][T21089] validate_nla: 2 callbacks suppressed [ 874.386214][T21089] netlink: 'syz.1.5127': attribute type 10 has an invalid length. [ 874.417221][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5127'. [ 875.005109][T21094] netlink: 'syz.1.5138': attribute type 10 has an invalid length. [ 875.016562][T21094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5138'. [ 875.112294][T21096] netlink: 'syz.2.5129': attribute type 8 has an invalid length. [ 875.128307][T21096] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5129'. [ 875.451889][T21109] lo: entered allmulticast mode [ 875.666350][T21109] lo: entered promiscuous mode [ 875.675673][T21109] lo: left allmulticast mode [ 876.095898][T21124] netlink: 'syz.1.5142': attribute type 10 has an invalid length. [ 876.139012][T21124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5142'. [ 876.634231][T21136] FAULT_INJECTION: forcing a failure. [ 876.634231][T21136] name failslab, interval 1, probability 0, space 0, times 0 [ 876.662503][T21136] CPU: 0 PID: 21136 Comm: syz.2.5146 Not tainted syzkaller #0 [ 876.670057][T21136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 876.680183][T21136] Call Trace: [ 876.683518][T21136] [ 876.686489][T21136] dump_stack_lvl+0x18c/0x250 [ 876.691229][T21136] ? show_regs_print_info+0x20/0x20 [ 876.696526][T21136] ? load_image+0x420/0x420 [ 876.701119][T21136] ? __might_sleep+0xe0/0xe0 [ 876.705769][T21136] ? __lock_acquire+0x7d80/0x7d80 [ 876.710861][T21136] should_fail_ex+0x394/0x4c0 [ 876.715604][T21136] should_failslab+0x9/0x20 [ 876.720158][T21136] slab_pre_alloc_hook+0x59/0x300 [ 876.725246][T21136] ? __lock_acquire+0x7d80/0x7d80 [ 876.730360][T21136] kmem_cache_alloc_node+0x5e/0x310 [ 876.735681][T21136] ? __alloc_skb+0x103/0x2c0 [ 876.740301][T21136] __alloc_skb+0x103/0x2c0 [ 876.744746][T21136] netlink_sendmsg+0x66a/0xbf0 [ 876.749553][T21136] ? netlink_getsockopt+0x590/0x590 [ 876.754783][T21136] ? apparmor_socket_sendmsg+0x170/0x330 [ 876.760439][T21136] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 876.765751][T21136] ? security_socket_sendmsg+0x80/0xa0 [ 876.771241][T21136] ? netlink_getsockopt+0x590/0x590 [ 876.776497][T21136] ____sys_sendmsg+0x61b/0x980 [ 876.781298][T21136] ? __asan_memset+0x22/0x40 [ 876.785920][T21136] ? __sys_sendmsg_sock+0x30/0x30 [ 876.790974][T21136] ? __import_iovec+0x5f2/0x850 [ 876.795861][T21136] ? import_iovec+0x73/0xa0 [ 876.800409][T21136] ___sys_sendmsg+0x2a6/0x360 [ 876.805123][T21136] ? get_pid_task+0x20/0x1e0 [ 876.809756][T21136] ? __sys_sendmsg+0x2b0/0x2b0 [ 876.814580][T21136] ? __lock_acquire+0x7d80/0x7d80 [ 876.819653][T21136] __se_sys_sendmsg+0x1d0/0x2c0 [ 876.824543][T21136] ? __x64_sys_sendmsg+0x80/0x80 [ 876.829520][T21136] ? lockdep_hardirqs_on+0x98/0x150 [ 876.834769][T21136] do_syscall_64+0x55/0xb0 [ 876.839220][T21136] ? clear_bhb_loop+0x40/0x90 [ 876.843913][T21136] ? clear_bhb_loop+0x40/0x90 [ 876.848604][T21136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.854532][T21136] RIP: 0033:0x7f8687d9de59 [ 876.858988][T21136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.878621][T21136] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.887060][T21136] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 876.895063][T21136] RDX: 0000000020040014 RSI: 0000200000000080 RDI: 0000000000000003 [ 876.903067][T21136] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 876.911091][T21136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.919095][T21136] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 876.927119][T21136] [ 876.946681][T21138] netlink: 'syz.0.5148': attribute type 2 has an invalid length. [ 876.954711][T21138] netlink: 'syz.0.5148': attribute type 4 has an invalid length. [ 876.962490][T21138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5148'. [ 877.044910][T21143] netlink: 'syz.3.5150': attribute type 2 has an invalid length. [ 877.053114][T21143] netlink: 'syz.3.5150': attribute type 4 has an invalid length. [ 877.060890][T21143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5150'. [ 877.184214][T21148] lo: left promiscuous mode [ 877.188819][T21148] lo: entered allmulticast mode [ 877.291913][T21148] lo: entered promiscuous mode [ 877.338561][T21148] lo: left allmulticast mode [ 877.430975][T21150] netlink: 'syz.3.5153': attribute type 10 has an invalid length. [ 877.458315][T21150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5153'. [ 877.860712][T21167] lo: left promiscuous mode [ 877.905339][T21167] lo: entered allmulticast mode [ 878.117518][T21167] lo: entered promiscuous mode [ 878.122695][T21167] lo: left allmulticast mode [ 878.263984][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5161'. [ 878.719179][T21179] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5161'. [ 878.802552][T21184] FAULT_INJECTION: forcing a failure. [ 878.802552][T21184] name failslab, interval 1, probability 0, space 0, times 0 [ 878.832724][T21179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.853457][T21184] CPU: 0 PID: 21184 Comm: syz.1.5162 Not tainted syzkaller #0 [ 878.861004][T21184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 878.871102][T21184] Call Trace: [ 878.874413][T21184] [ 878.877384][T21184] dump_stack_lvl+0x18c/0x250 [ 878.882118][T21184] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.888332][T21184] ? show_regs_print_info+0x20/0x20 [ 878.893597][T21184] ? load_image+0x420/0x420 [ 878.898152][T21184] should_fail_ex+0x394/0x4c0 [ 878.902863][T21184] should_failslab+0x9/0x20 [ 878.907405][T21184] slab_pre_alloc_hook+0x59/0x300 [ 878.912519][T21184] ? bpf_test_init+0x9f/0x140 [ 878.917236][T21184] ? bpf_test_init+0x9f/0x140 [ 878.921949][T21184] __kmem_cache_alloc_node+0x53/0x250 [ 878.927370][T21184] ? bpf_test_init+0x9f/0x140 [ 878.932078][T21184] __kmalloc+0xa7/0x240 [ 878.936273][T21184] bpf_test_init+0x9f/0x140 [ 878.940813][T21184] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 878.946219][T21184] ? __lock_acquire+0x7d80/0x7d80 [ 878.951293][T21184] ? dev_put+0x80/0x80 [ 878.955453][T21184] ? dev_put+0x80/0x80 [ 878.959566][T21184] bpf_prog_test_run+0x31f/0x390 [ 878.964553][T21184] __sys_bpf+0x49d/0x890 [ 878.968834][T21184] ? bpf_link_show_fdinfo+0x390/0x390 [ 878.974266][T21184] ? lock_chain_count+0x20/0x20 [ 878.979166][T21184] __x64_sys_bpf+0x7c/0x90 [ 878.983621][T21184] do_syscall_64+0x55/0xb0 [ 878.988085][T21184] ? clear_bhb_loop+0x40/0x90 [ 878.992799][T21184] ? clear_bhb_loop+0x40/0x90 [ 878.997517][T21184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.003464][T21184] RIP: 0033:0x7fa25e19de59 [ 879.007911][T21184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.027590][T21184] RSP: 002b:00007fa25f043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.036052][T21184] RAX: ffffffffffffffda RBX: 00007fa25e425fa0 RCX: 00007fa25e19de59 [ 879.044061][T21184] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 879.052071][T21184] RBP: 00007fa25f043090 R08: 0000000000000000 R09: 0000000000000000 [ 879.060080][T21184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.068084][T21184] R13: 00007fa25e426038 R14: 00007fa25e425fa0 R15: 00007ffe6274ec08 [ 879.076114][T21184] [ 879.485654][T21188] netlink: 'syz.1.5165': attribute type 10 has an invalid length. [ 879.494275][T21188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5165'. [ 880.069041][ T5784] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 880.320738][T21209] FAULT_INJECTION: forcing a failure. [ 880.320738][T21209] name failslab, interval 1, probability 0, space 0, times 0 [ 880.339263][T21209] CPU: 1 PID: 21209 Comm: syz.3.5172 Not tainted syzkaller #0 [ 880.346849][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 880.356952][T21209] Call Trace: [ 880.360260][T21209] [ 880.363215][T21209] dump_stack_lvl+0x18c/0x250 [ 880.367980][T21209] ? show_regs_print_info+0x20/0x20 [ 880.373224][T21209] ? load_image+0x420/0x420 [ 880.377752][T21209] ? __lock_acquire+0x7d80/0x7d80 [ 880.382970][T21209] should_fail_ex+0x394/0x4c0 [ 880.387677][T21209] should_failslab+0x9/0x20 [ 880.392215][T21209] slab_pre_alloc_hook+0x59/0x300 [ 880.397294][T21209] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 880.403947][T21209] ? bpf_test_init+0x9f/0x140 [ 880.408650][T21209] ? bpf_test_init+0x9f/0x140 [ 880.413340][T21209] __kmem_cache_alloc_node+0x53/0x250 [ 880.418757][T21209] ? bpf_test_init+0x9f/0x140 [ 880.423477][T21209] __kmalloc+0xa7/0x240 [ 880.427689][T21209] bpf_test_init+0x9f/0x140 [ 880.432216][T21209] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 880.437629][T21209] ? __lock_acquire+0x7d80/0x7d80 [ 880.443136][T21209] ? dev_put+0x80/0x80 [ 880.447351][T21209] ? dev_put+0x80/0x80 [ 880.451460][T21209] bpf_prog_test_run+0x31f/0x390 [ 880.456429][T21209] __sys_bpf+0x49d/0x890 [ 880.460707][T21209] ? bpf_link_show_fdinfo+0x390/0x390 [ 880.466127][T21209] ? lock_chain_count+0x20/0x20 [ 880.471016][T21209] __x64_sys_bpf+0x7c/0x90 [ 880.475478][T21209] do_syscall_64+0x55/0xb0 [ 880.479926][T21209] ? clear_bhb_loop+0x40/0x90 [ 880.484627][T21209] ? clear_bhb_loop+0x40/0x90 [ 880.489338][T21209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.495268][T21209] RIP: 0033:0x7fc9b9b9de59 [ 880.499708][T21209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.519356][T21209] RSP: 002b:00007fc9baaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.527893][T21209] RAX: ffffffffffffffda RBX: 00007fc9b9e25fa0 RCX: 00007fc9b9b9de59 [ 880.535996][T21209] RDX: 000000000000001b RSI: 0000200000000640 RDI: 000000000000000a [ 880.544105][T21209] RBP: 00007fc9baaed090 R08: 0000000000000000 R09: 0000000000000000 [ 880.552100][T21209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.560093][T21209] R13: 00007fc9b9e26038 R14: 00007fc9b9e25fa0 R15: 00007ffcb6681bd8 [ 880.568108][T21209] [ 880.731157][T21211] lo: left promiscuous mode [ 880.736602][T21211] lo: entered allmulticast mode [ 880.932510][T21214] lo: entered promiscuous mode [ 880.948368][T21214] lo: left allmulticast mode [ 881.189299][T21220] netlink: 'syz.1.5177': attribute type 10 has an invalid length. [ 881.222257][T21220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5177'. [ 881.304248][T21223] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5178'. [ 881.375135][T21229] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5179'. [ 882.926655][T21250] lo: left promiscuous mode [ 882.931302][T21250] lo: entered allmulticast mode [ 882.970818][T21256] lo: entered promiscuous mode [ 882.984211][T21256] lo: left allmulticast mode [ 883.094422][T21259] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5190'. [ 883.126655][T21259] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5190'. [ 883.187879][T21261] netlink: 'syz.3.5189': attribute type 10 has an invalid length. [ 883.221220][T21261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5189'. [ 883.418615][T21263] netlink: 'syz.0.5191': attribute type 9 has an invalid length. [ 883.460295][T21263] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5191'. [ 883.535585][T21270] €Â: renamed from syzkaller0 [ 883.790641][T21275] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5191'. [ 883.801699][T21275] tc_dump_action: action bad kind [ 884.060608][T21288] lo: left promiscuous mode [ 884.074303][T21288] lo: entered allmulticast mode [ 884.187395][T21288] lo: entered promiscuous mode [ 884.203322][T21288] lo: left allmulticast mode [ 884.348577][T21292] netlink: 'syz.0.5201': attribute type 10 has an invalid length. [ 884.362262][T21292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5201'. [ 884.372962][T21292] team0: entered promiscuous mode [ 884.382949][T21292] team_slave_0: entered promiscuous mode [ 884.392830][T21292] team_slave_1: entered promiscuous mode [ 884.400582][T21292] team0: entered allmulticast mode [ 884.407110][T21292] team_slave_0: entered allmulticast mode [ 884.427148][T21292] team_slave_1: entered allmulticast mode [ 884.455870][T21292] bridge0: port 3(team0) entered blocking state [ 884.474368][T21292] bridge0: port 3(team0) entered disabled state [ 884.573527][T21292] bridge0: port 3(team0) entered blocking state [ 884.581783][T21292] bridge0: port 3(team0) entered forwarding state [ 884.731784][T21295] netlink: 'syz.2.5202': attribute type 10 has an invalid length. [ 884.755376][T21295] syz_tun: entered promiscuous mode [ 884.911849][T21295] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 886.045013][T21313] netlink: 'syz.2.5207': attribute type 10 has an invalid length. [ 886.138491][T21318] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5208'. [ 887.238531][T21334] lo: left promiscuous mode [ 887.254719][T21334] lo: entered allmulticast mode [ 887.300497][T21336] netlink: 'syz.2.5213': attribute type 10 has an invalid length. [ 887.341936][T21336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5213'. [ 887.509105][T21334] lo: entered promiscuous mode [ 887.535459][T21334] lo: left allmulticast mode [ 887.820405][ T5784] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 887.900532][T21340] netlink: 'syz.1.5209': attribute type 3 has an invalid length. [ 888.183251][T21340] netlink: 'syz.1.5209': attribute type 1 has an invalid length. [ 888.191215][T21340] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5209'. [ 888.496678][T21343] netlink: 'syz.3.5214': attribute type 39 has an invalid length. [ 889.853323][ T5784] Bluetooth: hci1: command tx timeout [ 890.292152][T21366] FAULT_INJECTION: forcing a failure. [ 890.292152][T21366] name failslab, interval 1, probability 0, space 0, times 0 [ 890.353275][T21366] CPU: 0 PID: 21366 Comm: syz.0.5220 Not tainted syzkaller #0 [ 890.360835][T21366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 890.370951][T21366] Call Trace: [ 890.374279][T21366] [ 890.377258][T21366] dump_stack_lvl+0x18c/0x250 [ 890.382008][T21366] ? show_regs_print_info+0x20/0x20 [ 890.387279][T21366] ? load_image+0x420/0x420 [ 890.391841][T21366] ? perf_trace_lock+0xfc/0x3b0 [ 890.396784][T21366] ? verify_lock_unused+0x140/0x140 [ 890.402066][T21366] ? perf_trace_lock+0xfc/0x3b0 [ 890.407000][T21366] should_fail_ex+0x394/0x4c0 [ 890.411741][T21366] should_failslab+0x9/0x20 [ 890.416295][T21366] slab_pre_alloc_hook+0x59/0x300 [ 890.421395][T21366] kmem_cache_alloc+0x5a/0x2c0 [ 890.426214][T21366] ? skb_clone+0x1eb/0x370 [ 890.430685][T21366] skb_clone+0x1eb/0x370 [ 890.434982][T21366] __netlink_deliver_tap+0x411/0x7f0 [ 890.440342][T21366] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.445600][T21366] netlink_deliver_tap+0x19c/0x1b0 [ 890.450772][T21366] netlink_unicast+0x77b/0x930 [ 890.455603][T21366] netlink_sendmsg+0x8d0/0xbf0 [ 890.460432][T21366] ? netlink_getsockopt+0x590/0x590 [ 890.465696][T21366] ? apparmor_socket_sendmsg+0x8e/0x330 [ 890.471302][T21366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 890.476635][T21366] ? security_socket_sendmsg+0x80/0xa0 [ 890.482166][T21366] ? netlink_getsockopt+0x590/0x590 [ 890.487428][T21366] ____sys_sendmsg+0x61b/0x980 [ 890.492267][T21366] ? __asan_memset+0x22/0x40 [ 890.496924][T21366] ? __sys_sendmsg_sock+0x30/0x30 [ 890.502008][T21366] ? __import_iovec+0x5f2/0x850 [ 890.506931][T21366] ? import_iovec+0x73/0xa0 [ 890.511496][T21366] ___sys_sendmsg+0x2a6/0x360 [ 890.516238][T21366] ? __sys_sendmsg+0x2b0/0x2b0 [ 890.521093][T21366] ? __lock_acquire+0x7d80/0x7d80 [ 890.526213][T21366] __se_sys_sendmsg+0x1d0/0x2c0 [ 890.531137][T21366] ? __x64_sys_sendmsg+0x80/0x80 [ 890.536159][T21366] ? lockdep_hardirqs_on+0x98/0x150 [ 890.541418][T21366] do_syscall_64+0x55/0xb0 [ 890.545901][T21366] ? clear_bhb_loop+0x40/0x90 [ 890.550622][T21366] ? clear_bhb_loop+0x40/0x90 [ 890.555346][T21366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.561309][T21366] RIP: 0033:0x7f0c2259de59 [ 890.565777][T21366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.585437][T21366] RSP: 002b:00007f0c233a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.593907][T21366] RAX: ffffffffffffffda RBX: 00007f0c22826090 RCX: 00007f0c2259de59 [ 890.601972][T21366] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 890.610036][T21366] RBP: 00007f0c233a4090 R08: 0000000000000000 R09: 0000000000000000 [ 890.618065][T21366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.626088][T21366] R13: 00007f0c22826128 R14: 00007f0c22826090 R15: 00007ffeeba8c468 [ 890.634133][T21366] [ 890.670176][T21366] netlink: 'syz.0.5220': attribute type 10 has an invalid length. [ 890.917507][T21366] syz_tun: entered promiscuous mode [ 890.966099][T21366] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 890.990721][T21371] netlink: 'syz.2.5224': attribute type 10 has an invalid length. [ 891.001307][T21371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5224'. [ 891.172268][T21377] lo: left promiscuous mode [ 891.200224][T21377] lo: entered allmulticast mode [ 891.337042][T21384] lo: entered promiscuous mode [ 891.365247][T21384] lo: left allmulticast mode [ 891.908658][T21405] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.5232'. [ 892.240659][T21410] lo: left promiscuous mode [ 892.251047][T21410] lo: entered allmulticast mode [ 892.402730][T21414] netlink: 'syz.1.5236': attribute type 10 has an invalid length. [ 892.420485][T21414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5236'. [ 892.944932][T21426] FAULT_INJECTION: forcing a failure. [ 892.944932][T21426] name failslab, interval 1, probability 0, space 0, times 0 [ 892.959871][T21426] CPU: 1 PID: 21426 Comm: syz.2.5241 Not tainted syzkaller #0 [ 892.967411][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 892.977516][T21426] Call Trace: [ 892.980843][T21426] [ 892.983838][T21426] dump_stack_lvl+0x18c/0x250 [ 892.988586][T21426] ? show_regs_print_info+0x20/0x20 [ 892.993847][T21426] ? load_image+0x420/0x420 [ 892.998409][T21426] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 893.004454][T21426] should_fail_ex+0x394/0x4c0 [ 893.009193][T21426] should_failslab+0x9/0x20 [ 893.013759][T21426] slab_pre_alloc_hook+0x59/0x300 [ 893.018873][T21426] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.025093][T21426] kmem_cache_alloc+0x5a/0x2c0 [ 893.029911][T21426] ? dst_alloc+0x105/0x170 [ 893.034380][T21426] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 893.040072][T21426] dst_alloc+0x105/0x170 [ 893.044373][T21426] ip6_rt_cache_alloc+0x3b0/0xa20 [ 893.049452][T21426] ? rt6_find_cached_rt+0x270/0x270 [ 893.054707][T21426] ? ip6_pol_route+0x171/0x1230 [ 893.059609][T21426] ip6_pol_route+0xffa/0x1230 [ 893.064342][T21426] ? ip6_pol_route+0x171/0x1230 [ 893.069283][T21426] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 893.074978][T21426] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 893.081010][T21426] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 893.088267][T21426] ? lock_chain_count+0x20/0x20 [ 893.093173][T21426] fib6_rule_lookup+0x226/0x580 [ 893.098087][T21426] ? skb_header_pointer+0x120/0x120 [ 893.103361][T21426] ? fib6_lookup+0x2d0/0x2d0 [ 893.108011][T21426] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.114239][T21426] ? l3mdev_link_scope_lookup+0x5d/0x1c0 [ 893.120043][T21426] ? dev_get_by_index_rcu+0xee/0x110 [ 893.125387][T21426] ip6_route_output_flags+0x364/0x5d0 [ 893.130814][T21426] ? ip6_route_output_flags+0x2e/0x5d0 [ 893.136338][T21426] ip6_dst_lookup_tail+0x1a5/0x1660 [ 893.141611][T21426] ? ip6_dst_lookup+0x60/0x60 [ 893.146351][T21426] ? txopt_get+0x15c/0x3f0 [ 893.150859][T21426] ? txopt_get+0x7a/0x3f0 [ 893.155239][T21426] ? txopt_get+0x7a/0x3f0 [ 893.159626][T21426] ? txopt_get+0x344/0x3f0 [ 893.164092][T21426] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.170314][T21426] ? fl6_sock_lookup+0xc0/0xc0 [ 893.175150][T21426] ip6_dst_lookup_flow+0x48/0xe0 [ 893.180144][T21426] rawv6_sendmsg+0xd53/0x1740 [ 893.184892][T21426] ? compat_rawv6_ioctl+0x70/0x70 [ 893.189969][T21426] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 893.196031][T21426] ? aa_sock_msg_perm+0x94/0x150 [ 893.201021][T21426] ? inet_sendmsg+0x7e/0x2a0 [ 893.205665][T21426] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 893.211015][T21426] ? inet_send_prepare+0x250/0x250 [ 893.216195][T21426] ____sys_sendmsg+0x61b/0x980 [ 893.221026][T21426] ? lockdep_hardirqs_on+0x98/0x150 [ 893.226296][T21426] ? __sys_sendmsg_sock+0x30/0x30 [ 893.231393][T21426] ? ___sys_sendmsg+0x28b/0x360 [ 893.236333][T21426] ___sys_sendmsg+0x2a6/0x360 [ 893.241083][T21426] ? __sys_sendmsg+0x2b0/0x2b0 [ 893.245988][T21426] __se_sys_sendmsg+0x1d0/0x2c0 [ 893.250896][T21426] ? perf_trace_preemptirq_template+0x269/0x330 [ 893.257197][T21426] ? __x64_sys_sendmsg+0x80/0x80 [ 893.262215][T21426] ? lockdep_hardirqs_on+0x98/0x150 [ 893.267473][T21426] do_syscall_64+0x55/0xb0 [ 893.271948][T21426] ? clear_bhb_loop+0x40/0x90 [ 893.276672][T21426] ? clear_bhb_loop+0x40/0x90 [ 893.281395][T21426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.287338][T21426] RIP: 0033:0x7f8687d9de59 [ 893.291797][T21426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.311467][T21426] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.319928][T21426] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 893.327938][T21426] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 893.335944][T21426] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 893.343943][T21426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.351941][T21426] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 893.359958][T21426] [ 893.438372][T21428] lo: left promiscuous mode [ 893.463340][T21428] lo: entered allmulticast mode [ 893.596033][T21428] lo: entered promiscuous mode [ 893.613568][T21428] lo: left allmulticast mode [ 894.552941][T21456] netlink: 'syz.1.5245': attribute type 2 has an invalid length. [ 894.604719][T21456] netlink: 16094 bytes leftover after parsing attributes in process `syz.1.5245'. [ 896.561312][T21468] netlink: 'syz.1.5251': attribute type 8 has an invalid length. [ 896.602815][T21468] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5251'. [ 901.014142][T21498] netlink: 'syz.3.5260': attribute type 10 has an invalid length. [ 901.052201][T21498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5260'. [ 901.460082][T21508] netlink: 'syz.0.5262': attribute type 8 has an invalid length. [ 901.476231][T21508] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5262'. [ 903.070600][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 903.307537][T21527] netlink: 'syz.1.5269': attribute type 10 has an invalid length. [ 903.330541][T21527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5269'. [ 903.722331][T21533] netlink: 'syz.1.5272': attribute type 8 has an invalid length. [ 903.765263][T21533] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5272'. [ 904.464305][T21551] netlink: 'syz.1.5280': attribute type 10 has an invalid length. [ 904.512740][T21551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5280'. [ 906.445348][T21568] netlink: 'syz.1.5286': attribute type 8 has an invalid length. [ 906.475422][T21568] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5286'. [ 906.744101][T21580] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5290'. [ 906.790856][T21580] netlink: 'syz.0.5290': attribute type 10 has an invalid length. [ 906.817465][T21580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5290'. [ 907.791445][T21587] lo: left promiscuous mode [ 907.796244][T21587] lo: entered allmulticast mode [ 907.817390][T21591] lo: entered promiscuous mode [ 907.822701][T21591] lo: left allmulticast mode [ 908.409241][T21607] netlink: 'syz.1.5300': attribute type 8 has an invalid length. [ 908.418314][T21607] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5300'. [ 908.593821][T21612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5302'. [ 908.616620][T21612] netlink: 'syz.2.5302': attribute type 10 has an invalid length. [ 908.624908][T21612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5302'. [ 908.677813][T21616] lo: left promiscuous mode [ 908.682448][T21616] lo: entered allmulticast mode [ 908.761957][T21616] lo: entered promiscuous mode [ 908.784590][T21616] lo: left allmulticast mode [ 910.627897][T21637] netlink: 'syz.1.5312': attribute type 8 has an invalid length. [ 910.640650][T21637] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5312'. [ 910.981719][T21644] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5315'. [ 911.045926][T21648] lo: left promiscuous mode [ 911.057446][T21648] lo: entered allmulticast mode [ 911.102604][T21644] netlink: 'syz.3.5315': attribute type 10 has an invalid length. [ 911.159393][T21644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5315'. [ 911.256685][T21648] lo: entered promiscuous mode [ 911.269282][T21648] lo: left allmulticast mode [ 913.038348][T21678] veth1_macvtap: left promiscuous mode [ 913.053804][T21678] macsec0: entered allmulticast mode [ 913.110316][T21682] lo: left promiscuous mode [ 913.123245][T21682] lo: entered allmulticast mode [ 913.180920][T21677] netlink: 'syz.2.5325': attribute type 8 has an invalid length. [ 913.193865][T21677] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5325'. [ 913.237157][T21680] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5326'. [ 913.252270][T21683] netlink: 'syz.0.5326': attribute type 10 has an invalid length. [ 913.433739][T21683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5326'. [ 913.521566][T21687] lo: entered promiscuous mode [ 913.590155][T21687] lo: left allmulticast mode [ 914.931802][T21721] lo: left promiscuous mode [ 914.945717][T21721] lo: entered allmulticast mode [ 914.981626][T21717] netlink: 'syz.2.5338': attribute type 8 has an invalid length. [ 914.991854][T21717] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5338'. [ 915.058278][T21720] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5339'. [ 915.080512][T21723] netlink: 'syz.1.5339': attribute type 10 has an invalid length. [ 915.106560][T21723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5339'. [ 915.226173][T21726] lo: entered promiscuous mode [ 915.257842][T21726] lo: left allmulticast mode [ 916.758642][T21753] netlink: 'syz.2.5351': attribute type 8 has an invalid length. [ 916.813763][T21753] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5351'. [ 917.069755][T21759] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5354'. [ 917.084022][T21759] netlink: 'syz.3.5354': attribute type 10 has an invalid length. [ 917.092323][T21759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5354'. [ 917.240165][T21763] lo: entered promiscuous mode [ 917.253778][T21763] lo: left allmulticast mode [ 918.734357][T21787] netlink: 'syz.2.5364': attribute type 8 has an invalid length. [ 918.763772][T21787] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5364'. [ 919.031052][T21795] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5367'. [ 919.095297][T21794] netlink: 'syz.2.5367': attribute type 10 has an invalid length. [ 919.154601][T21794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5367'. [ 919.383267][T21799] lo: left promiscuous mode [ 919.407618][T21799] lo: entered allmulticast mode [ 919.585614][T21799] lo: entered promiscuous mode [ 919.601434][T21799] lo: left allmulticast mode [ 920.259416][T21819] netlink: 'syz.3.5376': attribute type 8 has an invalid length. [ 920.293254][T21819] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5376'. [ 920.653723][T21831] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5379'. [ 920.687885][T21831] netlink: 'syz.0.5379': attribute type 10 has an invalid length. [ 920.699587][T21831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5379'. [ 920.933614][T21837] lo: left promiscuous mode [ 920.948705][T21837] lo: entered allmulticast mode [ 921.110364][T21844] lo: entered promiscuous mode [ 921.129753][T21844] lo: left allmulticast mode [ 921.639776][T21853] netlink: 'syz.2.5387': attribute type 8 has an invalid length. [ 921.667585][T21853] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5387'. [ 922.139569][T21862] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5391'. [ 922.298982][T21862] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 922.307266][T21862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5391'. [ 922.731983][T21875] lo: left promiscuous mode [ 922.743179][T21875] lo: entered allmulticast mode [ 922.775889][T21875] lo: entered promiscuous mode [ 922.787565][T21874] FAULT_INJECTION: forcing a failure. [ 922.787565][T21874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.788636][T21875] lo: left allmulticast mode [ 922.810813][T21874] CPU: 0 PID: 21874 Comm: syz.0.5394 Not tainted syzkaller #0 [ 922.818347][T21874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 922.828459][T21874] Call Trace: [ 922.831773][T21874] [ 922.834729][T21874] dump_stack_lvl+0x18c/0x250 [ 922.839466][T21874] ? show_regs_print_info+0x20/0x20 [ 922.844709][T21874] ? load_image+0x420/0x420 [ 922.849262][T21874] ? __might_fault+0xaa/0x120 [ 922.853977][T21874] ? __lock_acquire+0x7d80/0x7d80 [ 922.859033][T21874] should_fail_ex+0x394/0x4c0 [ 922.863765][T21874] _copy_to_user+0x2f/0xa0 [ 922.868214][T21874] bpf_test_finish+0x4e7/0x650 [ 922.873010][T21874] ? bpf_test_run+0x174/0x870 [ 922.877742][T21874] ? convert_skb_to___skb+0x420/0x420 [ 922.883196][T21874] bpf_prog_test_run_skb+0x1135/0x18f0 [ 922.888703][T21874] ? cpu_online+0x60/0x60 [ 922.893069][T21874] bpf_prog_test_run+0x31f/0x390 [ 922.898048][T21874] __sys_bpf+0x49d/0x890 [ 922.902329][T21874] ? bpf_link_show_fdinfo+0x390/0x390 [ 922.907749][T21874] ? lock_chain_count+0x20/0x20 [ 922.912639][T21874] __x64_sys_bpf+0x7c/0x90 [ 922.917088][T21874] do_syscall_64+0x55/0xb0 [ 922.921541][T21874] ? clear_bhb_loop+0x40/0x90 [ 922.926248][T21874] ? clear_bhb_loop+0x40/0x90 [ 922.930952][T21874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.936882][T21874] RIP: 0033:0x7f0c2259de59 [ 922.941336][T21874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.960971][T21874] RSP: 002b:00007f0c233c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 922.969438][T21874] RAX: ffffffffffffffda RBX: 00007f0c22825fa0 RCX: 00007f0c2259de59 [ 922.977462][T21874] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 922.985507][T21874] RBP: 00007f0c233c5090 R08: 0000000000000000 R09: 0000000000000000 [ 922.993514][T21874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.001510][T21874] R13: 00007f0c22826038 R14: 00007f0c22825fa0 R15: 00007ffeeba8c468 [ 923.009522][T21874] [ 923.639731][T21886] netlink: 'syz.0.5400': attribute type 8 has an invalid length. [ 923.655225][T21886] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5400'. [ 923.864808][T21893] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5402'. [ 923.987717][T21893] netlink: 'syz.2.5402': attribute type 10 has an invalid length. [ 924.005953][T21893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5402'. [ 925.003460][T21909] lo: left promiscuous mode [ 925.013305][T21909] lo: entered allmulticast mode [ 925.085469][T21909] lo: entered promiscuous mode [ 925.090675][T21909] lo: left allmulticast mode [ 925.317150][T21919] netlink: 'syz.0.5412': attribute type 8 has an invalid length. [ 925.336247][T21919] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5412'. [ 925.446663][T21924] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5414'. [ 925.469042][T21924] netlink: 'syz.2.5414': attribute type 10 has an invalid length. [ 925.483497][T21924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5414'. [ 926.993322][T21946] lo: left promiscuous mode [ 926.997967][T21946] lo: entered allmulticast mode [ 927.046247][T21952] lo: entered promiscuous mode [ 927.051130][T21952] lo: left allmulticast mode [ 927.449443][T21958] netlink: 'syz.1.5426': attribute type 8 has an invalid length. [ 927.480326][T21960] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5427'. [ 927.489737][T21958] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5426'. [ 927.612161][T21960] netlink: 'syz.3.5427': attribute type 10 has an invalid length. [ 927.644051][T21960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5427'. [ 928.557108][T21982] lo: left promiscuous mode [ 928.561966][T21982] lo: entered allmulticast mode [ 928.681383][T21982] lo: entered promiscuous mode [ 928.715586][T21982] lo: left allmulticast mode [ 929.098175][T21995] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5440'. [ 929.126192][T21995] netlink: 'syz.3.5440': attribute type 10 has an invalid length. [ 929.143338][T21995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5440'. [ 929.192196][T21992] netlink: 'syz.1.5439': attribute type 8 has an invalid length. [ 929.208791][T21992] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5439'. [ 929.435337][T22004] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5444'. [ 929.467161][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 929.476060][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 930.198846][T22015] lo: left promiscuous mode [ 930.229381][T22015] lo: entered allmulticast mode [ 930.414478][T22018] lo: entered promiscuous mode [ 930.423512][T22018] lo: left allmulticast mode [ 930.950111][T22033] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5453'. [ 931.036495][T22033] netlink: 'syz.3.5453': attribute type 10 has an invalid length. [ 931.059883][T22033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5453'. [ 931.172304][T22036] netlink: 'syz.0.5454': attribute type 8 has an invalid length. [ 931.200490][T22036] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5454'. [ 931.392339][T22040] netlink: 'syz.3.5455': attribute type 27 has an invalid length. [ 931.418922][T22040] netlink: 'syz.3.5455': attribute type 25 has an invalid length. [ 931.710898][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.723475][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.066560][T22052] FAULT_INJECTION: forcing a failure. [ 932.066560][T22052] name failslab, interval 1, probability 0, space 0, times 0 [ 932.107444][T22054] lo: left promiscuous mode [ 932.113237][T22052] CPU: 0 PID: 22052 Comm: syz.0.5460 Not tainted syzkaller #0 [ 932.120854][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 932.131034][T22052] Call Trace: [ 932.132930][T22054] lo: entered allmulticast mode [ 932.134382][T22052] [ 932.134412][T22052] dump_stack_lvl+0x18c/0x250 [ 932.134503][T22052] ? show_regs_print_info+0x20/0x20 [ 932.152452][T22052] ? load_image+0x420/0x420 [ 932.157117][T22052] ? __might_sleep+0xe0/0xe0 [ 932.161820][T22052] ? __lock_acquire+0x7d80/0x7d80 [ 932.166993][T22052] should_fail_ex+0x394/0x4c0 [ 932.171817][T22052] should_failslab+0x9/0x20 [ 932.176422][T22052] slab_pre_alloc_hook+0x59/0x300 [ 932.181547][T22052] ? __lock_acquire+0x7d80/0x7d80 [ 932.186697][T22052] kmem_cache_alloc_node+0x5e/0x310 [ 932.192006][T22052] ? __alloc_skb+0x103/0x2c0 [ 932.196759][T22052] __alloc_skb+0x103/0x2c0 [ 932.201325][T22052] netlink_sendmsg+0x66a/0xbf0 [ 932.206267][T22052] ? netlink_getsockopt+0x590/0x590 [ 932.211598][T22052] ? apparmor_socket_sendmsg+0x8e/0x330 [ 932.217260][T22052] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 932.222649][T22052] ? security_socket_sendmsg+0x80/0xa0 [ 932.228205][T22052] ? netlink_getsockopt+0x590/0x590 [ 932.233541][T22052] ____sys_sendmsg+0x61b/0x980 [ 932.238466][T22052] ? __asan_memset+0x22/0x40 [ 932.243173][T22052] ? __sys_sendmsg_sock+0x30/0x30 [ 932.248305][T22052] ? __import_iovec+0x5f2/0x850 [ 932.253316][T22052] ? import_iovec+0x73/0xa0 [ 932.257947][T22052] ___sys_sendmsg+0x2a6/0x360 [ 932.262740][T22052] ? get_pid_task+0x20/0x1e0 [ 932.267470][T22052] ? __sys_sendmsg+0x2b0/0x2b0 [ 932.272493][T22052] ? __lock_acquire+0x7d80/0x7d80 [ 932.277798][T22052] __se_sys_sendmsg+0x1d0/0x2c0 [ 932.282822][T22052] ? __x64_sys_sendmsg+0x80/0x80 [ 932.288018][T22052] ? lockdep_hardirqs_on+0x98/0x150 [ 932.293356][T22052] do_syscall_64+0x55/0xb0 [ 932.297874][T22052] ? clear_bhb_loop+0x40/0x90 [ 932.302649][T22052] ? clear_bhb_loop+0x40/0x90 [ 932.307440][T22052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.313428][T22052] RIP: 0033:0x7f0c2259de59 [ 932.317956][T22052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.337662][T22052] RSP: 002b:00007f0c233c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.346201][T22052] RAX: ffffffffffffffda RBX: 00007f0c22825fa0 RCX: 00007f0c2259de59 [ 932.354290][T22052] RDX: 0000000004040000 RSI: 0000200000000640 RDI: 0000000000000004 [ 932.362345][T22052] RBP: 00007f0c233c5090 R08: 0000000000000000 R09: 0000000000000000 [ 932.370423][T22052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.378477][T22052] R13: 00007f0c22826038 R14: 00007f0c22825fa0 R15: 00007ffeeba8c468 [ 932.386638][T22052] [ 932.446602][T22054] lo: entered promiscuous mode [ 932.463273][T22054] lo: left allmulticast mode [ 932.769434][T22062] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5464'. [ 932.795212][T22062] netlink: 'syz.3.5464': attribute type 10 has an invalid length. [ 932.804233][T22062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5464'. [ 932.867915][T22066] netlink: 'syz.2.5465': attribute type 8 has an invalid length. [ 932.916098][T22066] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5465'. [ 933.499177][T22086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.552186][T22089] netlink: 'syz.3.5473': attribute type 27 has an invalid length. [ 933.566820][T22089] netlink: 'syz.3.5473': attribute type 25 has an invalid length. [ 933.796846][T22094] lo: left promiscuous mode [ 933.801449][T22094] lo: entered allmulticast mode [ 933.867318][T22094] lo: entered promiscuous mode [ 933.893281][T22094] lo: left allmulticast mode [ 934.490492][T22106] netlink: 'syz.1.5478': attribute type 8 has an invalid length. [ 934.503471][T22106] __nla_validate_parse: 1 callbacks suppressed [ 934.503512][T22106] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5478'. [ 934.530135][T22103] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5477'. [ 934.719552][T22104] netlink: 'syz.3.5477': attribute type 10 has an invalid length. [ 934.731987][T22104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5477'. [ 935.297333][T22121] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5484'. [ 935.635104][T22130] lo: left promiscuous mode [ 935.639849][T22130] lo: entered allmulticast mode [ 935.713455][T22130] lo: entered promiscuous mode [ 935.718992][T22130] lo: left allmulticast mode [ 935.990161][T22141] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5489'. [ 936.142338][T22148] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5492'. [ 936.193342][T22148] validate_nla: 3 callbacks suppressed [ 936.193363][T22148] netlink: 'syz.1.5492': attribute type 10 has an invalid length. [ 936.225775][T22148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5492'. [ 936.663914][T22164] lo: left promiscuous mode [ 936.672988][T22164] lo: entered allmulticast mode [ 936.920140][T22166] lo: entered promiscuous mode [ 936.993895][T22166] lo: left allmulticast mode [ 937.497923][T22171] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5500'. [ 937.683186][T22176] sit0: entered allmulticast mode [ 937.769452][T22177] sit0: entered promiscuous mode [ 937.873174][T22186] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5505'. [ 937.952774][T22186] netlink: 'syz.3.5505': attribute type 10 has an invalid length. [ 937.966961][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5505'. [ 938.682331][T22202] lo: left promiscuous mode [ 938.688794][T22202] lo: entered allmulticast mode [ 938.746827][T22202] lo: entered promiscuous mode [ 938.763654][T22202] lo: left allmulticast mode [ 939.334617][T22215] netlink: 'syz.0.5517': attribute type 10 has an invalid length. [ 939.763455][T22228] lo: left promiscuous mode [ 939.776194][T22228] lo: entered allmulticast mode [ 939.831536][T22228] lo: entered promiscuous mode [ 939.853766][T22228] lo: left allmulticast mode [ 940.134344][T22239] __nla_validate_parse: 2 callbacks suppressed [ 940.134364][T22239] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5527'. [ 940.163254][T22239] netlink: 'syz.3.5527': attribute type 10 has an invalid length. [ 940.172156][T22239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5527'. [ 940.701857][T22253] FAULT_INJECTION: forcing a failure. [ 940.701857][T22253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.719002][T22253] CPU: 0 PID: 22253 Comm: syz.0.5533 Not tainted syzkaller #0 [ 940.726527][T22253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 940.736621][T22253] Call Trace: [ 940.739944][T22253] [ 940.742922][T22253] dump_stack_lvl+0x18c/0x250 [ 940.747670][T22253] ? show_regs_print_info+0x20/0x20 [ 940.752932][T22253] ? load_image+0x420/0x420 [ 940.757492][T22253] ? __might_fault+0xaa/0x120 [ 940.762212][T22253] ? __lock_acquire+0x7d80/0x7d80 [ 940.767293][T22253] should_fail_ex+0x394/0x4c0 [ 940.772076][T22253] _copy_from_user+0x2f/0xe0 [ 940.776719][T22253] ___sys_sendmsg+0x1c7/0x360 [ 940.781479][T22253] ? __sys_sendmsg+0x2b0/0x2b0 [ 940.786367][T22253] __se_sys_sendmsg+0x1d0/0x2c0 [ 940.791280][T22253] ? __x64_sys_sendmsg+0x80/0x80 [ 940.796299][T22253] ? syscall_enter_from_user_mode+0x2e/0x80 [ 940.802254][T22253] do_syscall_64+0x55/0xb0 [ 940.806724][T22253] ? clear_bhb_loop+0x40/0x90 [ 940.811444][T22253] ? clear_bhb_loop+0x40/0x90 [ 940.816185][T22253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.822116][T22253] RIP: 0033:0x7f0c2259de59 [ 940.826560][T22253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.846198][T22253] RSP: 002b:00007f0c233c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.854639][T22253] RAX: ffffffffffffffda RBX: 00007f0c22825fa0 RCX: 00007f0c2259de59 [ 940.862634][T22253] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000004 [ 940.870631][T22253] RBP: 00007f0c233c5090 R08: 0000000000000000 R09: 0000000000000000 [ 940.878623][T22253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.886611][T22253] R13: 00007f0c22826038 R14: 00007f0c22825fa0 R15: 00007ffeeba8c468 [ 940.894618][T22253] [ 941.257802][T22263] lo: left promiscuous mode [ 941.262419][T22263] lo: entered allmulticast mode [ 941.410517][T22263] lo: entered promiscuous mode [ 941.455932][T22263] lo: left allmulticast mode [ 941.579485][T22269] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5538'. [ 941.622067][T22269] netlink: 'syz.0.5538': attribute type 10 has an invalid length. [ 941.636633][T22269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5538'. [ 943.345644][T22304] lo: left promiscuous mode [ 943.369309][T22304] lo: entered allmulticast mode [ 943.503610][T22309] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5553'. [ 943.531180][T22304] lo: entered promiscuous mode [ 943.563296][T22304] lo: left allmulticast mode [ 944.356995][T22336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5563'. [ 944.769514][T22342] lo: left promiscuous mode [ 944.782119][T22342] lo: entered allmulticast mode [ 944.815289][T22342] lo: entered promiscuous mode [ 944.820880][T22342] lo: left allmulticast mode [ 945.566361][T22360] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5572'. [ 945.611879][T22362] netlink: 'syz.2.5573': attribute type 46 has an invalid length. [ 945.627371][T22362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5573'. [ 945.751881][T22369] lo: left promiscuous mode [ 945.761181][T22369] lo: entered allmulticast mode [ 945.829432][T22369] lo: entered promiscuous mode [ 945.889644][T22369] lo: left allmulticast mode [ 945.940374][T22370] netlink: 'syz.3.5574': attribute type 12 has an invalid length. [ 945.964253][T22370] netlink: 14409 bytes leftover after parsing attributes in process `syz.3.5574'. [ 947.024367][T22396] netlink: 'syz.0.5585': attribute type 15 has an invalid length. [ 947.045743][T22396] netlink: 'syz.0.5585': attribute type 7 has an invalid length. [ 947.055765][T22396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5585'. [ 947.635016][T22401] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5586'. [ 947.984207][T22404] lo: left promiscuous mode [ 947.988893][T22404] lo: entered allmulticast mode [ 948.010702][T22406] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5588'. [ 948.214108][T22409] lo: entered promiscuous mode [ 948.218939][T22409] lo: left allmulticast mode [ 949.141342][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 949.879467][T22432] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5597'. [ 950.183299][T22440] lo: left promiscuous mode [ 950.193169][T22440] lo: entered allmulticast mode [ 950.241200][T22440] lo: entered promiscuous mode [ 950.263657][T22440] lo: left allmulticast mode [ 951.475559][T22467] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5610'. [ 953.026395][T22474] lo: left promiscuous mode [ 953.031005][T22474] lo: entered allmulticast mode [ 953.112357][T22474] lo: entered promiscuous mode [ 953.140216][T22474] lo: left allmulticast mode [ 953.612298][T22493] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5619'. [ 954.524585][T22512] lo: left promiscuous mode [ 954.531675][T22512] lo: entered allmulticast mode [ 954.765876][T22514] lo: entered promiscuous mode [ 954.777405][T22514] lo: left allmulticast mode [ 955.430754][T22532] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5632'. [ 956.129528][T22550] lo: left promiscuous mode [ 956.135798][T22550] lo: entered allmulticast mode [ 956.338036][T22553] lo: entered promiscuous mode [ 956.349502][T22553] lo: left allmulticast mode [ 956.818287][T22560] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5642'. [ 957.140459][T22570] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 957.659347][T22583] lo: left promiscuous mode [ 957.665844][T22583] lo: entered allmulticast mode [ 957.729013][T22583] lo: entered promiscuous mode [ 957.745161][T22583] lo: left allmulticast mode [ 957.819073][T22586] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5653'. [ 958.139013][T22598] netlink: 'syz.1.5657': attribute type 2 has an invalid length. [ 958.166533][T22598] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5657'. [ 958.192473][T22598] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.5657'. [ 958.206756][T22598] netlink: 'syz.1.5657': attribute type 10 has an invalid length. [ 958.224068][T22598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5657'. [ 958.243779][T22598] dummy0: entered promiscuous mode [ 958.249349][T22598] dummy0: entered allmulticast mode [ 958.277702][T22598] bridge0: port 4(dummy0) entered blocking state [ 958.288575][T22598] bridge0: port 4(dummy0) entered disabled state [ 958.308629][T22598] bridge0: port 4(dummy0) entered blocking state [ 958.315310][T22598] bridge0: port 4(dummy0) entered forwarding state [ 958.781176][T22614] netlink: 'syz.2.5662': attribute type 21 has an invalid length. [ 958.789731][T22614] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5662'. [ 958.812029][T22616] lo: left promiscuous mode [ 958.821863][T22616] lo: entered allmulticast mode [ 959.375016][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 961.769341][T22618] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5664'. [ 961.789205][T22621] lo: entered promiscuous mode [ 961.803480][T22621] lo: left allmulticast mode [ 962.730341][T22650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5674'. [ 962.992138][T22654] lo: left promiscuous mode [ 962.997335][T22654] lo: entered allmulticast mode [ 963.068464][T22654] lo: entered promiscuous mode [ 963.083362][T22654] lo: left allmulticast mode [ 963.439438][T22667] lo: left promiscuous mode [ 963.444102][T22667] lo: entered allmulticast mode [ 963.726379][T22677] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5683'. [ 964.095403][T22689] lo: left promiscuous mode [ 964.100029][T22689] lo: entered allmulticast mode [ 964.179688][T22689] lo: entered promiscuous mode [ 964.184918][T22689] lo: left allmulticast mode [ 964.938381][T22713] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5696'. [ 965.108258][T22721] lo: left promiscuous mode [ 965.112993][T22721] lo: entered allmulticast mode [ 965.186960][T22721] lo: entered promiscuous mode [ 965.201194][T22721] lo: left allmulticast mode [ 965.982151][T22746] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5709'. [ 966.421248][T22759] lo: left promiscuous mode [ 966.484376][T22759] lo: entered allmulticast mode [ 966.666907][T22759] lo: entered promiscuous mode [ 966.696765][T22759] lo: left allmulticast mode [ 967.977816][T22780] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5719'. [ 968.277251][T22792] lo: left promiscuous mode [ 968.281904][T22792] lo: entered allmulticast mode [ 968.397460][T22792] lo: entered promiscuous mode [ 968.413404][T22792] lo: left allmulticast mode [ 968.587328][T22798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.181138][T22814] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5731'. [ 970.245409][T22830] lo: left promiscuous mode [ 970.250093][T22830] lo: entered allmulticast mode [ 970.332931][T22830] lo: entered promiscuous mode [ 970.339040][T22830] lo: left allmulticast mode [ 970.494697][T22834] hsr0: mtu greater than device maximum [ 970.772478][T22846] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5743'. [ 971.752322][T22868] lo: left promiscuous mode [ 971.757616][T22868] lo: entered allmulticast mode [ 971.819129][T22868] lo: entered promiscuous mode [ 971.826518][T22868] lo: left allmulticast mode [ 972.453583][T22883] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5755'. [ 973.028277][T22895] lo: left promiscuous mode [ 973.032886][T22895] lo: entered allmulticast mode [ 973.124358][T22895] lo: entered promiscuous mode [ 973.129478][T22895] lo: left allmulticast mode [ 973.585644][T22913] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5765'. [ 973.598058][T22915] FAULT_INJECTION: forcing a failure. [ 973.598058][T22915] name failslab, interval 1, probability 0, space 0, times 0 [ 973.616200][T22915] CPU: 0 PID: 22915 Comm: syz.2.5766 Not tainted syzkaller #0 [ 973.623759][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 973.633887][T22915] Call Trace: [ 973.637265][T22915] [ 973.640262][T22915] dump_stack_lvl+0x18c/0x250 [ 973.645047][T22915] ? show_regs_print_info+0x20/0x20 [ 973.650306][T22915] ? load_image+0x420/0x420 [ 973.654881][T22915] ? __might_sleep+0xe0/0xe0 [ 973.659535][T22915] ? __lock_acquire+0x7d80/0x7d80 [ 973.664624][T22915] should_fail_ex+0x394/0x4c0 [ 973.669371][T22915] should_failslab+0x9/0x20 [ 973.673947][T22915] slab_pre_alloc_hook+0x59/0x300 [ 973.679062][T22915] ? tomoyo_encode+0x2ad/0x570 [ 973.683879][T22915] ? tomoyo_encode+0x2ad/0x570 [ 973.688722][T22915] __kmem_cache_alloc_node+0x53/0x250 [ 973.694211][T22915] ? tomoyo_encode+0x2ad/0x570 [ 973.699047][T22915] __kmalloc+0xa7/0x240 [ 973.703290][T22915] tomoyo_encode+0x2ad/0x570 [ 973.707977][T22915] tomoyo_realpath_from_path+0x57c/0x5c0 [ 973.713679][T22915] ? tomoyo_domain+0xd6/0x120 [ 973.718445][T22915] tomoyo_path_number_perm+0x248/0x5e0 [ 973.723965][T22915] ? tomoyo_path_number_perm+0x217/0x5e0 [ 973.729658][T22915] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 973.735179][T22915] ? ksys_write+0x1d2/0x260 [ 973.739846][T22915] ? __fget_files+0x28/0x460 [ 973.744527][T22915] security_file_ioctl+0x70/0xa0 [ 973.749527][T22915] __se_sys_ioctl+0x48/0x170 [ 973.754186][T22915] do_syscall_64+0x55/0xb0 [ 973.758665][T22915] ? clear_bhb_loop+0x40/0x90 [ 973.763397][T22915] ? clear_bhb_loop+0x40/0x90 [ 973.768128][T22915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.774093][T22915] RIP: 0033:0x7f8687d9de59 [ 973.778581][T22915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.798238][T22915] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.806708][T22915] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 973.814737][T22915] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000006 [ 973.822747][T22915] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 973.830852][T22915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.838869][T22915] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 973.846932][T22915] [ 973.936158][T22915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 974.085275][T22918] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.5767'. [ 974.379715][T22918] netlink: 'syz.0.5767': attribute type 1 has an invalid length. [ 974.422144][T22918] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5767'. [ 975.727072][T22930] lo: left promiscuous mode [ 975.731777][T22930] lo: entered allmulticast mode [ 975.843898][T22933] lo: entered promiscuous mode [ 975.855807][T22933] lo: left allmulticast mode [ 977.142274][T22948] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5777'. [ 977.814669][T22956] FAULT_INJECTION: forcing a failure. [ 977.814669][T22956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.896417][T22956] CPU: 1 PID: 22956 Comm: syz.2.5780 Not tainted syzkaller #0 [ 977.904017][T22956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 977.914154][T22956] Call Trace: [ 977.917516][T22956] [ 977.920527][T22956] dump_stack_lvl+0x18c/0x250 [ 977.925327][T22956] ? show_regs_print_info+0x20/0x20 [ 977.930627][T22956] ? load_image+0x420/0x420 [ 977.935239][T22956] ? __might_fault+0xaa/0x120 [ 977.940019][T22956] ? __lock_acquire+0x7d80/0x7d80 [ 977.945163][T22956] should_fail_ex+0x394/0x4c0 [ 977.949958][T22956] _copy_from_iter+0x1cd/0x1290 [ 977.954900][T22956] ? __might_fault+0xaa/0x120 [ 977.959712][T22956] ? copyout_mc+0x70/0x70 [ 977.964158][T22956] ? copyout_mc+0x70/0x70 [ 977.968575][T22956] ? __virt_addr_valid+0x10c/0x380 [ 977.973814][T22956] ? page_copy_sane+0x16a/0x270 [ 977.978780][T22956] copy_page_from_iter+0x7b/0x100 [ 977.983914][T22956] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 977.989886][T22956] tun_get_user+0xc84/0x3d70 [ 977.994648][T22956] ? aa_file_perm+0x3e3/0xee0 [ 977.999448][T22956] ? rcu_read_unlock+0xa0/0xa0 [ 978.004381][T22956] ? tun_get+0x1c/0x2e0 [ 978.008648][T22956] ? __lock_acquire+0x7d80/0x7d80 [ 978.013846][T22956] ? tun_get+0x1c/0x2e0 [ 978.018145][T22956] tun_chr_write_iter+0x119/0x200 [ 978.023279][T22956] vfs_write+0x474/0x9a0 [ 978.027651][T22956] ? file_end_write+0x250/0x250 [ 978.032632][T22956] ? __fget_files+0x3fc/0x460 [ 978.037454][T22956] ? __fdget_pos+0x1d8/0x330 [ 978.042139][T22956] ? ksys_write+0x74/0x260 [ 978.046665][T22956] ksys_write+0x151/0x260 [ 978.051122][T22956] ? __ia32_sys_read+0x90/0x90 [ 978.056015][T22956] ? lockdep_hardirqs_on+0x98/0x150 [ 978.061317][T22956] do_syscall_64+0x55/0xb0 [ 978.065822][T22956] ? clear_bhb_loop+0x40/0x90 [ 978.070585][T22956] ? clear_bhb_loop+0x40/0x90 [ 978.075356][T22956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.081343][T22956] RIP: 0033:0x7f8687d9de59 [ 978.085851][T22956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.105540][T22956] RSP: 002b:00007f8688c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 978.114065][T22956] RAX: ffffffffffffffda RBX: 00007f8688025fa0 RCX: 00007f8687d9de59 [ 978.122138][T22956] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 978.130193][T22956] RBP: 00007f8688c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 978.138255][T22956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 978.146310][T22956] R13: 00007f8688026038 R14: 00007f8688025fa0 R15: 00007fff08f29af8 [ 978.154458][T22956] [ 979.864074][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 979.888079][T22966] lo: entered promiscuous mode [ 979.903309][T22966] lo: left allmulticast mode [ 981.176547][T22979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5788'. [ 983.070866][T22997] lo: left promiscuous mode [ 983.081135][T22997] lo: entered allmulticast mode [ 984.062888][T22997] lo: entered promiscuous mode [ 984.068690][T22997] lo: left allmulticast mode [ 984.714752][T23007] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5799'. [ 986.710989][T23028] syz_tun: entered allmulticast mode [ 987.189251][T23031] lo: left promiscuous mode [ 987.203572][T23031] lo: entered allmulticast mode [ 987.266999][T23032] syz_tun: entered allmulticast mode [ 987.283823][T23032] FAULT_INJECTION: forcing a failure. [ 987.283823][T23032] name failslab, interval 1, probability 0, space 0, times 0 [ 987.332182][T23032] CPU: 0 PID: 23032 Comm: syz.0.5807 Not tainted syzkaller #0 [ 987.339792][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 987.349922][T23032] Call Trace: [ 987.353294][T23032] [ 987.356296][T23032] dump_stack_lvl+0x18c/0x250 [ 987.361074][T23032] ? show_regs_print_info+0x20/0x20 [ 987.366350][T23032] ? load_image+0x420/0x420 [ 987.370981][T23032] should_fail_ex+0x394/0x4c0 [ 987.375747][T23032] should_failslab+0x9/0x20 [ 987.380315][T23032] slab_pre_alloc_hook+0x59/0x300 [ 987.385433][T23032] kmem_cache_alloc_node+0x5e/0x310 [ 987.390717][T23032] ? __alloc_skb+0x103/0x2c0 [ 987.395436][T23032] __alloc_skb+0x103/0x2c0 [ 987.399943][T23032] rtmsg_ifinfo_build_skb+0x83/0x260 [ 987.405333][T23032] rtmsg_ifinfo+0x8c/0x1a0 [ 987.409845][T23032] __dev_notify_flags+0xf3/0x310 [ 987.414876][T23032] ? __dev_change_flags+0x6a0/0x6a0 [ 987.420145][T23032] ? __dev_change_flags+0x51c/0x6a0 [ 987.425408][T23032] ? dev_load+0x21/0x1f0 [ 987.429810][T23032] ? __lock_acquire+0x7d80/0x7d80 [ 987.434912][T23032] ? dev_get_flags+0x1c0/0x1c0 [ 987.439746][T23032] ? full_name_hash+0x92/0xe0 [ 987.444534][T23032] dev_change_flags+0xde/0x1a0 [ 987.449389][T23032] dev_ioctl+0x7b4/0x1140 [ 987.453828][T23032] sock_do_ioctl+0x239/0x310 [ 987.458502][T23032] ? sock_show_fdinfo+0xb0/0xb0 [ 987.463487][T23032] sock_ioctl+0x5be/0x7e0 [ 987.467901][T23032] ? sock_poll+0x3e0/0x3e0 [ 987.472430][T23032] ? bpf_lsm_file_ioctl+0x9/0x10 [ 987.477449][T23032] ? security_file_ioctl+0x80/0xa0 [ 987.482627][T23032] ? sock_poll+0x3e0/0x3e0 [ 987.487112][T23032] __se_sys_ioctl+0xfd/0x170 [ 987.491806][T23032] do_syscall_64+0x55/0xb0 [ 987.496320][T23032] ? clear_bhb_loop+0x40/0x90 [ 987.501149][T23032] ? clear_bhb_loop+0x40/0x90 [ 987.506084][T23032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.512073][T23032] RIP: 0033:0x7f0c2259de59 [ 987.516565][T23032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.536242][T23032] RSP: 002b:00007f0c233c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.544761][T23032] RAX: ffffffffffffffda RBX: 00007f0c22825fa0 RCX: 00007f0c2259de59 [ 987.552797][T23032] RDX: 0000200000000500 RSI: 0000000000008914 RDI: 0000000000000004 [ 987.560830][T23032] RBP: 00007f0c233c5090 R08: 0000000000000000 R09: 0000000000000000 [ 987.568863][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.576913][T23032] R13: 00007f0c22826038 R14: 00007f0c22825fa0 R15: 00007ffeeba8c468 [ 987.585006][T23032] [ 987.767575][T23037] lo: entered promiscuous mode [ 987.772519][T23037] lo: left allmulticast mode [ 988.607715][T23039] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5810'. [ 991.383580][T23063] lo: left promiscuous mode [ 991.388345][T23063] lo: entered allmulticast mode [ 991.450947][T23063] lo: entered promiscuous mode [ 991.459109][T23063] lo: left allmulticast mode [ 991.600091][T23068] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5821'. [ 993.150225][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.159674][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.254882][T23096] netlink: 'syz.1.5830': attribute type 8 has an invalid length. [ 993.263446][T23096] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5830'. [ 993.381755][T23098] lo: left promiscuous mode [ 993.390666][T23098] lo: entered allmulticast mode [ 993.437609][T23098] lo: entered promiscuous mode [ 993.449353][T23098] lo: left allmulticast mode [ 993.608125][T23104] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5833'. [ 994.394062][T23125] netlink: 'syz.3.5840': attribute type 8 has an invalid length. [ 994.402752][T23125] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5840'. [ 994.564384][T23131] lo: left promiscuous mode [ 994.568995][T23131] lo: entered allmulticast mode [ 994.645814][T23131] lo: entered promiscuous mode [ 994.651017][T23131] lo: left allmulticast mode [ 995.594137][T23143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5846'. [ 995.897119][T23153] netlink: 'syz.3.5851': attribute type 8 has an invalid length. [ 995.924853][T23153] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5851'. [ 997.322717][T23170] lo: left promiscuous mode [ 997.330836][T23170] lo: entered allmulticast mode [ 997.358746][T23173] lo: entered promiscuous mode [ 997.366963][T23173] lo: left allmulticast mode [ 997.590743][T23183] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5859'. [ 998.212122][T23198] netlink: 'syz.2.5864': attribute type 8 has an invalid length. [ 998.225679][T23198] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5864'. [ 998.245316][ T5784] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 999.161505][T23204] lo: left promiscuous mode [ 999.179322][T23204] lo: entered allmulticast mode [ 999.244876][T23207] veth0_vlan: entered allmulticast mode [ 999.278235][T23204] lo: entered promiscuous mode [ 999.303471][T23204] lo: left allmulticast mode [ 999.473954][T23213] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5869'. [ 999.651667][T23216] FAULT_INJECTION: forcing a failure. [ 999.651667][T23216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 999.666917][T23216] CPU: 0 PID: 23216 Comm: syz.1.5871 Not tainted syzkaller #0 [ 999.674470][T23216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 999.684581][T23216] Call Trace: [ 999.687918][T23216] [ 999.690909][T23216] dump_stack_lvl+0x18c/0x250 [ 999.695650][T23216] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 999.701882][T23216] ? show_regs_print_info+0x20/0x20 [ 999.707150][T23216] ? load_image+0x420/0x420 [ 999.711730][T23216] should_fail_ex+0x394/0x4c0 [ 999.716485][T23216] prepare_alloc_pages+0x1e1/0x5b0 [ 999.721658][T23216] __alloc_pages+0x134/0x460 [ 999.726323][T23216] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 999.732563][T23216] ? zone_statistics+0x170/0x170 [ 999.737561][T23216] ? copy_page_from_iter+0xe8/0x100 [ 999.742824][T23216] pipe_write+0x52a/0x1b20 [ 999.747329][T23216] ? pipe_read+0x1330/0x1330 [ 999.751998][T23216] ? __get_task_ioprio+0xa6/0x260 [ 999.757118][T23216] vfs_write+0x474/0x9a0 [ 999.761430][T23216] ? file_end_write+0x250/0x250 [ 999.766319][T23216] ? __fget_files+0x3fc/0x460 [ 999.771042][T23216] ? __fdget_pos+0x1d8/0x330 [ 999.775674][T23216] ? ksys_write+0x74/0x260 [ 999.780136][T23216] ksys_write+0x151/0x260 [ 999.784511][T23216] ? __ia32_sys_read+0x90/0x90 [ 999.789316][T23216] ? syscall_enter_from_user_mode+0x2e/0x80 [ 999.795244][T23216] do_syscall_64+0x55/0xb0 [ 999.799709][T23216] ? clear_bhb_loop+0x40/0x90 [ 999.804429][T23216] ? clear_bhb_loop+0x40/0x90 [ 999.809164][T23216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.815100][T23216] RIP: 0033:0x7fa25e19de59 [ 999.819548][T23216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.839311][T23216] RSP: 002b:00007fa25f043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 999.847759][T23216] RAX: ffffffffffffffda RBX: 00007fa25e425fa0 RCX: 00007fa25e19de59 [ 999.855768][T23216] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 999.863786][T23216] RBP: 00007fa25f043090 R08: 0000000000000000 R09: 0000000000000000 [ 999.871818][T23216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.879827][T23216] R13: 00007fa25e426038 R14: 00007fa25e425fa0 R15: 00007ffe6274ec08 [ 999.887851][T23216] [ 1000.547585][ T5784] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1000.705852][T23232] netlink: 'syz.3.5876': attribute type 8 has an invalid length. [ 1000.841136][T23232] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1002.395393][T23245] lo: left promiscuous mode [ 1002.400003][T23245] lo: entered allmulticast mode [ 1002.606083][T23247] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5881'. [ 1002.709078][T23252] lo: entered promiscuous mode [ 1002.714484][T23252] lo: left allmulticast mode [ 1003.033655][T23265] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1003.342562][ T5784] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1003.363962][T23270] netlink: 'syz.1.5888': attribute type 8 has an invalid length. [ 1003.414747][T23270] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1004.608952][T23285] netlink: 'syz.2.5891': attribute type 10 has an invalid length. [ 1004.663208][T23285] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5891'. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.