last executing test programs: 7m30.185421063s ago: executing program 0 (id=1): socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 7m29.976626937s ago: executing program 2 (id=3): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1804, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r1, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m29.605752215s ago: executing program 0 (id=5): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3, 0x800000, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=""/176, 0xb0}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000800)="f43b", 0x2}], 0x1}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNGETVNETHDRSZ(r3, 0x400454cc, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0xa, 0x7, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x8f7}, 0x4000, 0x1, 0x0, 0x8, 0x5, 0xa800, 0xff, 0x0, 0x3d98, 0x0, 0x3113}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x455e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a00053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, 0x0, 0x0) 7m29.439451089s ago: executing program 3 (id=4): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100)=r5, 0x120) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0x12b) r7 = socket$kcm(0xa, 0x2, 0x88) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000e80), 0x4, r8}, 0x38) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40002123) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000012cd2fae48e3a0302689c95bce6826a334aff5040a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x7fffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 7m14.073990204s ago: executing program 32 (id=5): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3, 0x800000, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=""/176, 0xb0}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000800)="f43b", 0x2}], 0x1}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNGETVNETHDRSZ(r3, 0x400454cc, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0xa, 0x7, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x8f7}, 0x4000, 0x1, 0x0, 0x8, 0x5, 0xa800, 0xff, 0x0, 0x3d98, 0x0, 0x3113}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x455e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a00053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, 0x0, 0x0) 7m13.904050118s ago: executing program 33 (id=3): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1804, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r1, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m13.655375013s ago: executing program 34 (id=4): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100)=r5, 0x120) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0x12b) r7 = socket$kcm(0xa, 0x2, 0x88) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000e80), 0x4, r8}, 0x38) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40002123) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000012cd2fae48e3a0302689c95bce6826a334aff5040a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x7fffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 5.277764715s ago: executing program 5 (id=1861): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60006000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51", 0xd5}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x14002) close(r3) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7, 0x0, 0x2000000}, 0x38) r8 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 5.270155655s ago: executing program 4 (id=1862): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d660551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.15390439s ago: executing program 4 (id=1864): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xed, 0x9, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8001, 0x6, 0x8, 0x36ec, 0x4, 0xf3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4001800, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) 3.921199585s ago: executing program 6 (id=1865): socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160a", 0x1e}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 3.696178939s ago: executing program 5 (id=1867): socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 3.611712951s ago: executing program 6 (id=1868): syz_clone(0x8802500, &(0x7f00000004c0)="c13a4b94d362db35ccf1b2f941c7a75cf68cd3912280da425d95cff8a8a3ca0f751ff39fabed85701c8ed3894948ad8e4627488ad1cfc5b45d01a091", 0x3c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x8841) syz_clone(0x8802500, &(0x7f00000004c0)="c13a4b94d362db35ccf1b2f941c7a75cf68cd3912280da425d95cff8a8a3ca0f751ff39fabed85701c8ed3894948ad8e4627488ad1cfc5b45d01a091", 0x3c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getpid() (async) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x8841) (async) 3.452493955s ago: executing program 4 (id=1870): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x27) 3.451061325s ago: executing program 5 (id=1871): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000000f10000000000000c30a0700000000009500050d00000000ef4fff4ab06cb1d5d40cd7779de966c33b91ac3ef90613ed44439f622a05e202ffcaec357fd7b0bc57e2f621fe028b9b94b49ed16b545cd96a4275478827a612219589bb51386b291036ffffa317d556f04d372d59c76eecba9f3fc4d9"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x22) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x9, 0xd0, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x100, 0x30144, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x3, 0x0, 0x8001, 0x0, 0xa7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800005cb519240000000000d5ef4e091be7c79500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3b25fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) sendmsg$sock(r0, 0x0, 0x20000094) 3.271946629s ago: executing program 6 (id=1872): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.271250189s ago: executing program 4 (id=1873): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0xa0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x1}, @fwd={0x9}, @restrict={0x20009, 0x0, 0x0, 0xb, 0x4}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x800}, {0x5, 0x1, 0x2}], "ef7f"}, @datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x1, 0xb629, 0x80000000}], '\x00\x00\x00'}, @float={0xc, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000002c0)=""/80, 0x90, 0xc, 0x1, 0x3ff}, 0x28) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x2}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0xfffffe51) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, @perf_config_ext={0x2, 0xff}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 2.781456619s ago: executing program 1 (id=1874): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x40000d040, 0xe8}, 0x0, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b48e000000bd00000079104800000000006104000000000000950000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x10140) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x7, 0x44, 0xf5, 0x0, 0x80000000, 0x99639, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_config_ext={0x9, 0x80000000000}, 0x10924, 0x0, 0x7, 0x2093eb642c063c3c, 0x0, 0x80004, 0x0, 0x0, 0x2fc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0x22, &(0x7f0000000f40)=ANY=[@ANYBLOB="180000000a6b0000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000006d000000183a0000040000000000000000000000186a00000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f8ffffffbfc947ccd7261aeb91000000000000b7020000020000008500f0ff84000700b7000000000000009520cf92b3f08cfa4ace1d332b7ea3c36871c45a5334eef035ad508d"], &(0x7f00000005c0)='syzkaller\x00', 0xde7e, 0x2b, &(0x7f0000000640)=""/43, 0x41000, 0xb, '\x00', r4, @tracing=0x1c, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0x7, 0x7, 0xbea3}, 0x10, 0x0, r0, 0x9, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x5, 0x4, 0x8, 0x2}, {0x3, 0x3, 0x0, 0x7}, {0x1, 0x4, 0x7, 0x5}, {0x4, 0x3, 0xd, 0x7}, {0x3, 0x5, 0x8, 0x4}, {0x4, 0x1, 0xe, 0xa}, {0x2, 0x5, 0x9, 0x4}, {0x2, 0x3, 0x50d1dfe9, 0xa}, {0x1, 0x5, 0x2, 0x2}], 0x10, 0xbf6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 2.391718558s ago: executing program 1 (id=1875): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401", 0x30}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0xd, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_clone(0x8800, &(0x7f0000001800)="6d70b6856c7521b4cb9c8c03edb4fc1c4218342f52a80320429c490d37a319e6967cc32304b57ba77eb849f1f4012fc9fa00ff6bee415898ba59ed0c1a82f50c148314a4614c87563d3e1d1caf2bbab16807c4299ed010f6d02c2a4b4149bd86fa8e058d5ab3f5849b02dd5cd969fd6b96e5030956f9d5d1f929ef0a9f226412aaf19409844202fbe636629121c9a6dd49834826a7aeb744431ba89c879b5743", 0xa0, &(0x7f0000002800), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 1.699660803s ago: executing program 1 (id=1876): socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61127800000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160a", 0x1e}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 1.38434843s ago: executing program 5 (id=1877): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80005d31, 0x96004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x28, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01') sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) close(0x3) close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x60, 0x89, 0x5, 0x4, 0x0, 0x7, 0x400c0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4006b6f, 0x2, @perf_config_ext={0x0, 0x4}, 0x10010, 0xeb, 0x6, 0x4, 0x100, 0x2, 0x0, 0x0, 0x503d, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) mkdirat$cgroup(r0, &(0x7f0000000380)='syz0\x00', 0x1ff) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e", 0x2e}, {&(0x7f0000000580)="978187306c6a8248ed4cb97e5d31dfcd8f5ebc4c3b74867cc800e42b1d11b2622c6e5cfa5323b3a51a03e7e7a184dcd14495fb95c0ad42fe83b52286b0dfe23187497a9d742e450c37e83e947cb8c52eb66e840a70fa857da205448604f50b52d8da4dce12473cb21ecb4e475bae16ece8aeabae85e13d690be2befad78dd21383c1290fd29fdce3c2324d6e256344788cd5bbdf5446d7686e348286d9a8f3e60fff736e40f4e56279ea7d38b9fd72c4fd4b3fdb79ed89d46cdf1acf98", 0xbd}, {&(0x7f0000000640)="f351553f351763ee9e9b1b8b", 0xc}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000140)='./file0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8912, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x0, @mcast2, 0x18}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f0000000980)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x40002043) sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, 0x2}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="6e1c18059c0d3a5e9b8cd04197a91297efa951ebd2ca8b4705be88ec8ce8f675242162ba912534bc729cb82fe9dd47d19e2e111b5fbe2c6edac0c5da257ef5e9b0c5efd15b39ed6b0520a31b237a0168715c20ef98a25af4fd36c48238844d65de8b1af87621e3d4de607fce2656684a95061a5ba140e6d4f710c33277e819f15c8860e77db76b", 0x87}], 0x2, &(0x7f0000001ac0), 0xfffffffffffffdea}, 0x4008000) 1.144224955s ago: executing program 4 (id=1878): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:+\tmw'], 0xa) 1.043145377s ago: executing program 1 (id=1879): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x0, 0x7f, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x5f, 0x0]}}, &(0x7f00000005c0)=""/108, 0x39, 0x6c, 0x8, 0x3, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000680)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x15, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000880)=""/205, 0x2b, 0xcd, 0x1, 0x1000, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000400000000000000e7ff00b26613060000004065b55555b3650000080000", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="040000000300"/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109242, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, r5, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r8, 0x0, 0x2122) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 953.225809ms ago: executing program 6 (id=1880): socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 952.349929ms ago: executing program 5 (id=1881): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f"], 0x0, 0x28, 0x0, 0x1}, 0x28) r3 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xfec1}, 0x107942, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf2, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x8, 0x3}, 0xa02, 0x6, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x0, 0x7, 0x0, 0x5}, r4, 0x4, r3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, &(0x7f0000000400), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @remote, 0x12457418}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120) close(r2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r2, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 887.972151ms ago: executing program 4 (id=1882): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24040801) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="8500000022"], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0x10}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x80, &(0x7f0000000840)=[{0x0, 0x55}, {&(0x7f0000000440)="495bb4d8379fd36a26b300088c007d9f97ce2a31951a49427754a4ca6d692b1d690154ecfbffc95adce65b9dda0ed4864a9b3af06f81c3e2a1927565625326d65e6dbe2ae1f3c5befac6b5bef16dd86ad140f1908b"}, {&(0x7f00000004c0)="26bb7c3986b4e1c1dc15cc4e93f79fe8402e127d168fecc13d872f2bd6c60af82748bd59487a3bae4f325e776b893e29030dcf1794fd7a399566daaeb988177b64a6d4ffa42eebce44690e01f429c89359475d6ef17f"}, {&(0x7f0000000540)="7bccc625b34f5db6e9ff8f54939db292ce4af60317fde51d40dd08fe7aab6669a8939dca89114dc7c4e7ec932acf4a87d3a6fdf27f07ad51b7f6"}, {&(0x7f0000000a80)="4ded0d2fcaf737dc6b1a84101660a7a6301eca15488366bf3dbf255d3979f1e9773c0f327e23de80e195ca15a28cdff44ac6a013baffe234595a2f748622ad7013e3448743eec8fb0983febecf12c5e0c0c531b1c081fd65eb5c4bbcc1a1b607bf7d0621f932a3351a9f062d44631dd4f745e84e8bfd69772ed876b890a6e7dac164007f956bd069f92835af21326946c492df50c6b9dc9ca80420e33b3c89f888c9002338cf4f3bcfb88bc6ab71d9db167058f323ce895da1a7d04f69"}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec76064bef2f000000fb71caef932f3889d1fdda5b57000000860f5878437ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110700000094412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (fail_nth: 13) 562.920198ms ago: executing program 6 (id=1883): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x40000d040, 0xe8}, 0x0, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b48e000000bd00000079104800000000006104000000000000950000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x10140) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x7, 0x44, 0xf5, 0x0, 0x80000000, 0x99639, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_config_ext={0x9, 0x80000000000}, 0x10924, 0x0, 0x7, 0x2093eb642c063c3c, 0x0, 0x80004, 0x0, 0x0, 0x2fc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0x22, &(0x7f0000000f40)=ANY=[@ANYBLOB="180000000a6b0000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000006d000000183a0000040000000000000000000000186a0000000000000000000002000000b7080000000000007b8af8ff00000000b7080000ff0f00007b8af0ff00000000bf", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f8ffffffbfc947ccd7261aeb91000000000000b7020000020000008500f0ff84000700b7000000000000009520cf92b3f08cfa4ace1d332b7ea3c36871c45a5334eef035ad508d"], &(0x7f00000005c0)='syzkaller\x00', 0xde7e, 0x2b, &(0x7f0000000640)=""/43, 0x41000, 0xb, '\x00', r4, @tracing=0x1c, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0x7, 0x7, 0xbea3}, 0x10, 0x0, r0, 0x9, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x5, 0x4, 0x8, 0x2}, {0x3, 0x3, 0x0, 0x7}, {0x1, 0x4, 0x7, 0x5}, {0x4, 0x3, 0xd, 0x7}, {0x3, 0x5, 0x8, 0x4}, {0x4, 0x1, 0xe, 0xa}, {0x2, 0x5, 0x9, 0x4}, {0x2, 0x3, 0x50d1dfe9, 0xa}, {0x1, 0x5, 0x2, 0x2}], 0x10, 0xbf6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 472.7054ms ago: executing program 1 (id=1884): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x7, 0x0, 0x0, 0x9, 0xe40bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x3c, &(0x7f0000000040), 0xcf) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x30, 0x0, 0x20000) socket$kcm(0x10, 0x2, 0x0) (async) recvmsg$kcm(r4, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/199, 0xc7}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000059c0)=""/109, 0x6d}], 0xc}, 0x2122) (async) recvmsg$unix(r3, 0x0, 0x41) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) 107.894277ms ago: executing program 5 (id=1885): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000000f10000000000000c30a0700000000009500050d00000000ef4fff4ab06cb1d5d40cd7779de966c33b91ac3ef90613ed44439f622a05e202ffcaec357fd7b0bc57e2f621fe028b9b94b49ed16b545cd96a4275478827a612219589bb51386b291036ffffa317d556f04d372d59c76eecba9f3fc4d9"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x22) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x9, 0xd0, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x100, 0x30144, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x3, 0x0, 0x8001, 0x0, 0xa7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800005cb519240000000000d5ef4e091be7c79500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3b25fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) sendmsg$sock(r0, 0x0, 0x20000094) 100.152858ms ago: executing program 1 (id=1886): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x4, 0x13, 0x9, 0x0, 0x20080000001, 0x72180, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x6}, 0x1b2e0, 0x3, 0xf25e, 0x3, 0x3, 0x9, 0x2, 0x0, 0x3, 0x0, 0x80000002000007}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xaa) r5 = socket$kcm(0x2, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x1, 0x1a, &(0x7f0000000040), 0x47) 0s ago: executing program 6 (id=1887): socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160a", 0x1e}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) kernel console output (not intermixed with test programs): alid length. [ 329.262802][ T9195] netlink: 'syz.5.859': attribute type 9 has an invalid length. [ 329.452311][ T5782] Bluetooth: Frame is too long (len 149, expected len 4) [ 329.742745][ T9209] delete_channel: no stack [ 330.306991][ T9221] netlink: 'syz.5.868': attribute type 9 has an invalid length. [ 330.956575][ T9227] netlink: 'syz.1.877': attribute type 9 has an invalid length. [ 330.978183][ T9225] netlink: 'syz.5.869': attribute type 9 has an invalid length. [ 331.279695][ T9230] netlink: 'syz.1.870': attribute type 9 has an invalid length. [ 331.525416][ T9232] netlink: 'syz.5.871': attribute type 29 has an invalid length. [ 331.564133][ T9232] netlink: 'syz.5.871': attribute type 29 has an invalid length. [ 331.605086][ T9236] netlink: 'syz.5.871': attribute type 29 has an invalid length. [ 331.988610][ T9256] netlink: 'syz.1.879': attribute type 9 has an invalid length. [ 332.632679][ T9262] FAULT_INJECTION: forcing a failure. [ 332.632679][ T9262] name failslab, interval 1, probability 0, space 0, times 0 [ 332.649336][ T9262] CPU: 1 PID: 9262 Comm: syz.5.880 Not tainted syzkaller #0 [ 332.656697][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.666830][ T9262] Call Trace: [ 332.670347][ T9262] [ 332.673299][ T9262] dump_stack_lvl+0x18c/0x250 [ 332.678015][ T9262] ? show_regs_print_info+0x20/0x20 [ 332.683345][ T9262] ? load_image+0x420/0x420 [ 332.687959][ T9262] ? __might_sleep+0xe0/0xe0 [ 332.693184][ T9262] ? __lock_acquire+0x7d80/0x7d80 [ 332.698373][ T9262] should_fail_ex+0x394/0x4c0 [ 332.703159][ T9262] should_failslab+0x9/0x20 [ 332.707691][ T9262] slab_pre_alloc_hook+0x59/0x300 [ 332.712745][ T9262] ? __get_vm_area_node+0x125/0x370 [ 332.717971][ T9262] __kmem_cache_alloc_node+0x53/0x250 [ 332.723588][ T9262] ? __get_vm_area_node+0x125/0x370 [ 332.728849][ T9262] kmalloc_node_trace+0x26/0xe0 [ 332.733740][ T9262] __get_vm_area_node+0x125/0x370 [ 332.738800][ T9262] __vmalloc_node_range+0x36f/0x1320 [ 332.744107][ T9262] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 332.749676][ T9262] ? mark_lock+0x94/0x320 [ 332.754029][ T9262] ? perf_trace_preemptirq_template+0xac/0x330 [ 332.760291][ T9262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 332.766305][ T9262] ? lock_chain_count+0x20/0x20 [ 332.771176][ T9262] ? free_vm_area+0x50/0x50 [ 332.775781][ T9262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.781962][ T9262] ? lockdep_hardirqs_on+0x98/0x150 [ 332.787175][ T9262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.793357][ T9262] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 332.799006][ T9262] __vmalloc+0x7a/0x90 [ 332.803179][ T9262] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 332.808740][ T9262] bpf_prog_alloc_no_stats+0x46/0x430 [ 332.814140][ T9262] bpf_prog_alloc+0x3d/0x1a0 [ 332.818756][ T9262] bpf_prog_load+0x6b2/0x1610 [ 332.823467][ T9262] ? map_freeze+0x420/0x420 [ 332.827990][ T9262] ? __might_fault+0xaa/0x120 [ 332.832767][ T9262] ? __lock_acquire+0x7d80/0x7d80 [ 332.837807][ T9262] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 332.844060][ T9262] ? __might_fault+0xaa/0x120 [ 332.848781][ T9262] ? __might_fault+0xc6/0x120 [ 332.853501][ T9262] ? __might_fault+0xaa/0x120 [ 332.858296][ T9262] ? bpf_lsm_bpf+0x9/0x10 [ 332.862829][ T9262] ? security_bpf+0x7e/0xa0 [ 332.867356][ T9262] __sys_bpf+0x5ba/0x890 [ 332.871615][ T9262] ? read_tsc+0x9/0x20 [ 332.875896][ T9262] ? bpf_link_show_fdinfo+0x390/0x390 [ 332.881331][ T9262] __x64_sys_bpf+0x7c/0x90 [ 332.885862][ T9262] do_syscall_64+0x55/0xb0 [ 332.890568][ T9262] ? clear_bhb_loop+0x40/0x90 [ 332.895272][ T9262] ? clear_bhb_loop+0x40/0x90 [ 332.899969][ T9262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.906145][ T9262] RIP: 0033:0x7fe23eb9de59 [ 332.910783][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.930494][ T9262] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.939014][ T9262] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 332.946999][ T9262] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 332.955154][ T9262] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 332.963250][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.971255][ T9262] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 332.979430][ T9262] [ 333.046293][ T9262] syz.5.880: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 333.074407][ T5782] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 333.082871][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 333.086031][ T9262] CPU: 0 PID: 9262 Comm: syz.5.880 Not tainted syzkaller #0 [ 333.099556][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.110015][ T9262] Call Trace: [ 333.113338][ T9262] [ 333.116309][ T9262] dump_stack_lvl+0x18c/0x250 [ 333.121108][ T9262] ? show_regs_print_info+0x20/0x20 [ 333.126380][ T9262] ? load_image+0x420/0x420 [ 333.130981][ T9262] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 333.137474][ T9262] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 333.144188][ T9262] warn_alloc+0x246/0x340 [ 333.148801][ T9262] ? __get_vm_area_node+0x125/0x370 [ 333.154176][ T9262] ? zone_watermark_ok_safe+0x230/0x230 [ 333.159893][ T9262] ? rcu_is_watching+0x15/0xb0 [ 333.165248][ T9262] ? __get_vm_area_node+0x356/0x370 [ 333.170621][ T9262] __vmalloc_node_range+0x394/0x1320 [ 333.175958][ T9262] ? mark_lock+0x94/0x320 [ 333.180352][ T9262] ? perf_trace_preemptirq_template+0xac/0x330 [ 333.186562][ T9262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 333.192684][ T9262] ? lock_chain_count+0x20/0x20 [ 333.197596][ T9262] ? free_vm_area+0x50/0x50 [ 333.202142][ T9262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.208700][ T9262] ? lockdep_hardirqs_on+0x98/0x150 [ 333.214295][ T9262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.220514][ T9262] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 333.226112][ T9262] __vmalloc+0x7a/0x90 [ 333.230609][ T9262] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 333.236218][ T9262] bpf_prog_alloc_no_stats+0x46/0x430 [ 333.241859][ T9262] bpf_prog_alloc+0x3d/0x1a0 [ 333.246504][ T9262] bpf_prog_load+0x6b2/0x1610 [ 333.251276][ T9262] ? map_freeze+0x420/0x420 [ 333.255859][ T9262] ? __might_fault+0xaa/0x120 [ 333.260613][ T9262] ? __lock_acquire+0x7d80/0x7d80 [ 333.265803][ T9262] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 333.272104][ T9262] ? __might_fault+0xaa/0x120 [ 333.276913][ T9262] ? __might_fault+0xc6/0x120 [ 333.281622][ T9262] ? __might_fault+0xaa/0x120 [ 333.286346][ T9262] ? bpf_lsm_bpf+0x9/0x10 [ 333.290721][ T9262] ? security_bpf+0x7e/0xa0 [ 333.295306][ T9262] __sys_bpf+0x5ba/0x890 [ 333.299594][ T9262] ? read_tsc+0x9/0x20 [ 333.303971][ T9262] ? bpf_link_show_fdinfo+0x390/0x390 [ 333.309571][ T9262] __x64_sys_bpf+0x7c/0x90 [ 333.314038][ T9262] do_syscall_64+0x55/0xb0 [ 333.318497][ T9262] ? clear_bhb_loop+0x40/0x90 [ 333.323380][ T9262] ? clear_bhb_loop+0x40/0x90 [ 333.328219][ T9262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.334186][ T9262] RIP: 0033:0x7fe23eb9de59 [ 333.338657][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.358491][ T9262] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.367054][ T9262] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 333.375066][ T9262] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 333.383249][ T9262] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 333.391309][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.399413][ T9262] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 333.407581][ T9262] [ 333.410812][ T5782] CPU: 1 PID: 5782 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 333.418449][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.428570][ T5782] Workqueue: hci4 hci_rx_work [ 333.433349][ T5782] Call Trace: [ 333.437316][ T5782] [ 333.440505][ T5782] dump_stack_lvl+0x18c/0x250 [ 333.445318][ T5782] ? show_regs_print_info+0x20/0x20 [ 333.450647][ T5782] ? load_image+0x420/0x420 [ 333.455332][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 333.460621][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 333.465735][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 333.470521][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 333.476833][ T5782] kobject_add_internal+0x617/0xc90 [ 333.482416][ T5782] kobject_add+0x164/0x240 [ 333.486951][ T5782] ? kobject_init+0x1d0/0x1d0 [ 333.491810][ T5782] ? get_device_parent+0x366/0x390 [ 333.496984][ T5782] device_add+0x3fa/0xc40 [ 333.501401][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 333.506414][ T5782] le_conn_complete_evt+0xe9f/0x1480 [ 333.511803][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 333.518092][ T5782] ? bt_info+0x180/0x180 [ 333.522385][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 333.528070][ T5782] ? mutex_unlock+0x10/0x10 [ 333.532695][ T5782] ? skb_pull_data+0xf0/0x1f0 [ 333.537468][ T5782] hci_le_enh_conn_complete_evt+0x189/0x460 [ 333.543454][ T5782] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 333.550021][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 333.556409][ T5782] hci_event_packet+0x7b4/0x1280 [ 333.561397][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 333.566464][ T5782] ? lock_chain_count+0x20/0x20 [ 333.571460][ T5782] ? bis_list+0x290/0x290 [ 333.575868][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 333.581332][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 333.586803][ T5782] hci_rx_work+0x43a/0xd60 [ 333.591317][ T5782] ? process_scheduled_works+0x975/0x1600 [ 333.597121][ T5782] process_scheduled_works+0xa60/0x1600 [ 333.602900][ T5782] ? worker_attach_to_pool+0x370/0x370 [ 333.608517][ T5782] ? assign_work+0x3cc/0x5d0 [ 333.613384][ T5782] worker_thread+0xa5e/0xfe0 [ 333.618150][ T5782] kthread+0x2fa/0x390 [ 333.622378][ T5782] ? pr_cont_work+0x550/0x550 [ 333.627124][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 333.631779][ T5782] ret_from_fork+0x48/0x80 [ 333.636345][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 333.640991][ T5782] ret_from_fork_asm+0x11/0x20 [ 333.645875][ T5782] [ 333.652480][ T5782] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 333.666909][ T5782] Bluetooth: hci4: failed to register connection device [ 333.685379][ T9262] Mem-Info: [ 333.695045][ T9262] active_anon:7087 inactive_anon:0 isolated_anon:0 [ 333.695045][ T9262] active_file:13164 inactive_file:40050 isolated_file:0 [ 333.695045][ T9262] unevictable:768 dirty:149 writeback:0 [ 333.695045][ T9262] slab_reclaimable:10488 slab_unreclaimable:95201 [ 333.695045][ T9262] mapped:24424 shmem:1397 pagetables:735 [ 333.695045][ T9262] sec_pagetables:0 bounce:0 [ 333.695045][ T9262] kernel_misc_reclaimable:0 [ 333.695045][ T9262] free:1340058 free_pcp:11711 free_cma:0 [ 333.908097][ T9262] Node 0 active_anon:28348kB inactive_anon:0kB active_file:52656kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97696kB dirty:596kB writeback:0kB shmem:4052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:2940kB sec_pagetables:0kB all_unreclaimable? no [ 333.942018][ T9262] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 334.003183][ T9262] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.032863][ T9262] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 334.040593][ T9262] Node 0 DMA32 free:1451208kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28204kB inactive_anon:0kB active_file:52656kB inactive_file:159176kB unevictable:1536kB writepending:596kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:29848kB local_pcp:17256kB free_cma:0kB [ 334.096249][ T9262] lowmem_reserve[]: 0 0 0 0 0 [ 334.101516][ T9262] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.172032][ T9262] lowmem_reserve[]: 0 0 0 0 0 [ 334.177248][ T9262] Node 1 Normal free:3893660kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17472kB local_pcp:7904kB free_cma:0kB [ 334.573903][ T9262] lowmem_reserve[]: 0 0 0 0 0 [ 334.579296][ T9262] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.592645][ T9262] Node 0 DMA32: 2676*4kB (UME) 1855*8kB (UME) 968*16kB (UM) 713*32kB (UME) 303*64kB (UME) 22*128kB (UME) 10*256kB (UM) 4*512kB (ME) 4*1024kB (UME) 2*2048kB (U) 330*4096kB (UM) = 1450536kB [ 334.612052][ T9262] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 334.625230][ T9262] Node 1 Normal: 263*4kB (UME) 60*8kB (UME) 42*16kB (UME) 132*32kB (UME) 32*64kB (UME) 5*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3893660kB [ 334.643569][ T9262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.666514][ T9262] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.683000][ T9262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.693012][ T9262] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.729145][ T9262] 54611 total pagecache pages [ 334.734160][ T9262] 0 pages in swap cache [ 334.743112][ T9262] Free swap = 124996kB [ 334.747939][ T9262] Total swap = 124996kB [ 334.752246][ T9262] 2097051 pages RAM [ 334.764033][ T9262] 0 pages HighMem/MovableOnly [ 334.774208][ T9262] 416953 pages reserved [ 334.800450][ T9262] 0 pages cma reserved [ 335.373550][ T9288] netlink: 'syz.4.889': attribute type 9 has an invalid length. [ 335.706079][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 335.983244][ T9302] netlink: 'syz.5.893': attribute type 10 has an invalid length. [ 336.319395][ T9311] netlink: 64 bytes leftover after parsing attributes in process `syz.5.893'. [ 336.584994][ T9302] wlan1: mtu greater than device maximum [ 336.649241][ T9312] netlink: 830 bytes leftover after parsing attributes in process `syz.1.894'. [ 336.729437][ T9314] netlink: 'syz.6.895': attribute type 6 has an invalid length. [ 336.750738][ T9314] netlink: 164 bytes leftover after parsing attributes in process `syz.6.895'. [ 336.897236][ T9302] syz.5.893 (9302) used greatest stack depth: 19288 bytes left [ 337.034508][ T9322] netlink: 'syz.4.896': attribute type 9 has an invalid length. [ 338.297841][ T9337] netlink: 'syz.4.899': attribute type 9 has an invalid length. [ 339.573685][ T9386] FAULT_INJECTION: forcing a failure. [ 339.573685][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.686049][ T9386] CPU: 0 PID: 9386 Comm: syz.5.901 Not tainted syzkaller #0 [ 339.693427][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.703623][ T9386] Call Trace: [ 339.706963][ T9386] [ 339.710034][ T9386] dump_stack_lvl+0x18c/0x250 [ 339.714890][ T9386] ? show_regs_print_info+0x20/0x20 [ 339.720428][ T9386] ? load_image+0x420/0x420 [ 339.725040][ T9386] ? __might_fault+0xaa/0x120 [ 339.730027][ T9386] ? __lock_acquire+0x7d80/0x7d80 [ 339.735195][ T9386] should_fail_ex+0x394/0x4c0 [ 339.741058][ T9386] _copy_from_user+0x2f/0xe0 [ 339.745689][ T9386] dev_ethtool+0xc6/0x18d0 [ 339.750172][ T9386] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 339.756775][ T9386] ? __lock_acquire+0x7d80/0x7d80 [ 339.762287][ T9386] ? __might_fault+0xaa/0x120 [ 339.767029][ T9386] ? full_name_hash+0x92/0xe0 [ 339.771735][ T9386] ? dev_load+0x21/0x1f0 [ 339.776000][ T9386] dev_ioctl+0x392/0x1140 [ 339.780357][ T9386] sock_do_ioctl+0x239/0x310 [ 339.785068][ T9386] ? sock_show_fdinfo+0xb0/0xb0 [ 339.790133][ T9386] sock_ioctl+0x5be/0x7e0 [ 339.794522][ T9386] ? sock_poll+0x3e0/0x3e0 [ 339.799171][ T9386] ? bpf_lsm_file_ioctl+0x9/0x10 [ 339.804142][ T9386] ? security_file_ioctl+0x80/0xa0 [ 339.809305][ T9386] ? sock_poll+0x3e0/0x3e0 [ 339.814206][ T9386] __se_sys_ioctl+0xfd/0x170 [ 339.819039][ T9386] do_syscall_64+0x55/0xb0 [ 339.823508][ T9386] ? clear_bhb_loop+0x40/0x90 [ 339.828501][ T9386] ? clear_bhb_loop+0x40/0x90 [ 339.833572][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.839641][ T9386] RIP: 0033:0x7fe23eb9de59 [ 339.844314][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.864417][ T9386] RSP: 002b:00007fe23f9b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.872870][ T9386] RAX: ffffffffffffffda RBX: 00007fe23ee26090 RCX: 00007fe23eb9de59 [ 339.881038][ T9386] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000f [ 339.889204][ T9386] RBP: 00007fe23f9b8090 R08: 0000000000000000 R09: 0000000000000000 [ 339.897464][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.905800][ T9386] R13: 00007fe23ee26128 R14: 00007fe23ee26090 R15: 00007fff6bd0aff8 [ 339.913918][ T9386] [ 341.820952][ T9407] netlink: 'syz.5.906': attribute type 6 has an invalid length. [ 341.836010][ T9407] netlink: 164 bytes leftover after parsing attributes in process `syz.5.906'. [ 342.621464][ T9410] netlink: 'syz.1.907': attribute type 9 has an invalid length. [ 342.636147][ T9414] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 343.007195][ T9419] netlink: 'syz.1.910': attribute type 9 has an invalid length. [ 344.814817][ T9450] netlink: 'syz.6.920': attribute type 10 has an invalid length. [ 345.137252][ T9457] netlink: 64 bytes leftover after parsing attributes in process `syz.6.920'. [ 345.441529][ T9451] netlink: 'syz.1.919': attribute type 9 has an invalid length. [ 346.644112][ T9465] netlink: 'syz.1.923': attribute type 6 has an invalid length. [ 346.663462][ T9465] netlink: 164 bytes leftover after parsing attributes in process `syz.1.923'. [ 346.845252][ T9467] netlink: 'syz.4.924': attribute type 9 has an invalid length. [ 346.969368][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.927'. [ 347.528160][ T9486] netlink: 'syz.6.931': attribute type 9 has an invalid length. [ 348.459679][ T9497] netlink: 'syz.4.935': attribute type 10 has an invalid length. [ 348.873007][ T9501] netlink: 64 bytes leftover after parsing attributes in process `syz.4.935'. [ 349.463659][ T9509] netlink: 'syz.6.937': attribute type 9 has an invalid length. [ 349.847137][ T9520] netlink: 'syz.4.941': attribute type 9 has an invalid length. [ 351.398296][ T9541] netlink: 'syz.4.948': attribute type 9 has an invalid length. [ 352.545737][ T9551] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 352.677296][ T9559] netlink: 'syz.5.951': attribute type 9 has an invalid length. [ 352.759606][ T9551] netlink: 64 bytes leftover after parsing attributes in process `syz.1.950'. [ 352.969974][ T9565] FAULT_INJECTION: forcing a failure. [ 352.969974][ T9565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.996295][ T9565] CPU: 1 PID: 9565 Comm: syz.6.955 Not tainted syzkaller #0 [ 353.003709][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.014357][ T9565] Call Trace: [ 353.017790][ T9565] [ 353.020949][ T9565] dump_stack_lvl+0x18c/0x250 [ 353.025856][ T9565] ? show_regs_print_info+0x20/0x20 [ 353.031124][ T9565] ? load_image+0x420/0x420 [ 353.035705][ T9565] ? __might_fault+0xaa/0x120 [ 353.040514][ T9565] ? __lock_acquire+0x7d80/0x7d80 [ 353.045617][ T9565] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 353.051650][ T9565] should_fail_ex+0x394/0x4c0 [ 353.056471][ T9565] _copy_from_user+0x2f/0xe0 [ 353.061308][ T9565] wext_handle_ioctl+0xc8/0x1e0 [ 353.066529][ T9565] ? call_commit_handler+0xf0/0xf0 [ 353.071855][ T9565] sock_ioctl+0x15d/0x7e0 [ 353.076539][ T9565] ? sock_poll+0x3e0/0x3e0 [ 353.081049][ T9565] ? bpf_lsm_file_ioctl+0x9/0x10 [ 353.086089][ T9565] ? security_file_ioctl+0x80/0xa0 [ 353.091392][ T9565] ? sock_poll+0x3e0/0x3e0 [ 353.095886][ T9565] __se_sys_ioctl+0xfd/0x170 [ 353.100882][ T9565] do_syscall_64+0x55/0xb0 [ 353.106977][ T9565] ? clear_bhb_loop+0x40/0x90 [ 353.113138][ T9565] ? clear_bhb_loop+0x40/0x90 [ 353.119483][ T9565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.126228][ T9565] RIP: 0033:0x7f61d099de59 [ 353.131135][ T9565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.151182][ T9565] RSP: 002b:00007f61d17d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.160111][ T9565] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099de59 [ 353.168162][ T9565] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 000000000000000d [ 353.176259][ T9565] RBP: 00007f61d17d7090 R08: 0000000000000000 R09: 0000000000000000 [ 353.184362][ T9565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.192746][ T9565] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffda9fad8a8 [ 353.200913][ T9565] [ 353.340142][ T9581] netlink: 'syz.1.960': attribute type 4 has an invalid length. [ 353.751899][ T9592] netlink: 'syz.1.963': attribute type 9 has an invalid length. [ 353.775274][ T9593] netlink: 132 bytes leftover after parsing attributes in process `syz.5.964'. [ 354.184247][ T9605] netlink: 64 bytes leftover after parsing attributes in process `syz.4.968'. [ 354.236651][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 354.994095][ T9615] FAULT_INJECTION: forcing a failure. [ 354.994095][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 355.007417][ T9615] CPU: 0 PID: 9615 Comm: syz.5.971 Not tainted syzkaller #0 [ 355.014928][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.025207][ T9615] Call Trace: [ 355.028770][ T9615] [ 355.031982][ T9615] dump_stack_lvl+0x18c/0x250 [ 355.036690][ T9615] ? show_regs_print_info+0x20/0x20 [ 355.041912][ T9615] ? load_image+0x420/0x420 [ 355.046438][ T9615] ? __might_sleep+0xe0/0xe0 [ 355.051176][ T9615] ? __lock_acquire+0x7d80/0x7d80 [ 355.056230][ T9615] should_fail_ex+0x394/0x4c0 [ 355.060944][ T9615] should_failslab+0x9/0x20 [ 355.065560][ T9615] slab_pre_alloc_hook+0x59/0x300 [ 355.070638][ T9615] kmem_cache_alloc_node+0x5e/0x310 [ 355.076035][ T9615] ? verify_lock_unused+0x140/0x140 [ 355.081275][ T9615] ? __alloc_skb+0x103/0x2c0 [ 355.086412][ T9615] __alloc_skb+0x103/0x2c0 [ 355.091395][ T9615] alloc_skb_with_frags+0xcd/0x7a0 [ 355.096566][ T9615] ? perf_trace_lock+0xfc/0x3b0 [ 355.101459][ T9615] sock_alloc_send_pskb+0x883/0x9a0 [ 355.106727][ T9615] ? sock_kzfree_s+0x50/0x50 [ 355.111379][ T9615] ? __lock_acquire+0x7d80/0x7d80 [ 355.116457][ T9615] ? __receive_sock+0x90/0x90 [ 355.121158][ T9615] ? sk_psock_verdict_data_ready+0x7aa/0x930 [ 355.127341][ T9615] ? sk_psock_verdict_data_ready+0xae/0x930 [ 355.133257][ T9615] unix_stream_sendmsg+0x48b/0xbf0 [ 355.138737][ T9615] ? unix_show_fdinfo+0x280/0x280 [ 355.143785][ T9615] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 355.150374][ T9615] ? apparmor_socket_sendmsg+0x8e/0x330 [ 355.155957][ T9615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 355.161274][ T9615] ? security_socket_sendmsg+0x80/0xa0 [ 355.166767][ T9615] ? unix_show_fdinfo+0x280/0x280 [ 355.171856][ T9615] ____sys_sendmsg+0x61b/0x980 [ 355.176710][ T9615] ? __asan_memset+0x22/0x40 [ 355.181629][ T9615] ? __sys_sendmsg_sock+0x30/0x30 [ 355.186709][ T9615] ? __import_iovec+0x5f2/0x850 [ 355.191791][ T9615] ? import_iovec+0x73/0xa0 [ 355.196943][ T9615] ___sys_sendmsg+0x2a6/0x360 [ 355.201753][ T9615] ? __sys_sendmsg+0x2b0/0x2b0 [ 355.206770][ T9615] ? __lock_acquire+0x7d80/0x7d80 [ 355.211962][ T9615] __se_sys_sendmsg+0x1d0/0x2c0 [ 355.216851][ T9615] ? __x64_sys_sendmsg+0x80/0x80 [ 355.222090][ T9615] ? lockdep_hardirqs_on+0x98/0x150 [ 355.227502][ T9615] do_syscall_64+0x55/0xb0 [ 355.231937][ T9615] ? clear_bhb_loop+0x40/0x90 [ 355.236636][ T9615] ? clear_bhb_loop+0x40/0x90 [ 355.241436][ T9615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.247354][ T9615] RIP: 0033:0x7fe23eb9de59 [ 355.251871][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.271517][ T9615] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.280043][ T9615] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 355.288040][ T9615] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 355.296401][ T9615] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 355.305469][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.313819][ T9615] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 355.321830][ T9615] [ 358.513257][ T9648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.980'. [ 358.684642][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.5.982'. [ 360.796217][ T5084] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 362.180088][ T9707] netlink: 'syz.1.998': attribute type 39 has an invalid length. [ 363.257567][ T9724] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.1005'. [ 363.277540][ T9724] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.1005'. [ 363.839718][ T9739] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1009'. [ 364.146286][ T9737] netlink: 'syz.5.1009': attribute type 10 has an invalid length. [ 366.636386][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.652561][ T9737] bridge_slave_1: left allmulticast mode [ 366.658872][ T9737] bridge_slave_1: left promiscuous mode [ 366.667337][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.684848][ T9737] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 368.938107][ T9792] FAULT_INJECTION: forcing a failure. [ 368.938107][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 368.958961][ T9792] CPU: 0 PID: 9792 Comm: syz.4.1025 Not tainted syzkaller #0 [ 368.966554][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.976798][ T9792] Call Trace: [ 368.980148][ T9792] [ 368.983155][ T9792] dump_stack_lvl+0x18c/0x250 [ 368.987936][ T9792] ? show_regs_print_info+0x20/0x20 [ 368.993219][ T9792] ? load_image+0x420/0x420 [ 368.997826][ T9792] ? __might_sleep+0xe0/0xe0 [ 369.002535][ T9792] ? __lock_acquire+0x7d80/0x7d80 [ 369.007635][ T9792] should_fail_ex+0x394/0x4c0 [ 369.012406][ T9792] should_failslab+0x9/0x20 [ 369.016988][ T9792] slab_pre_alloc_hook+0x59/0x300 [ 369.022170][ T9792] ? apparmor_sk_alloc_security+0x77/0x100 [ 369.028081][ T9792] __kmem_cache_alloc_node+0x53/0x250 [ 369.033654][ T9792] ? apparmor_sk_alloc_security+0x77/0x100 [ 369.039555][ T9792] kmalloc_trace+0x2a/0xe0 [ 369.044157][ T9792] apparmor_sk_alloc_security+0x77/0x100 [ 369.050055][ T9792] security_sk_alloc+0x6e/0xa0 [ 369.054911][ T9792] sk_prot_alloc+0x101/0x210 [ 369.059571][ T9792] ? sk_alloc+0x24/0x350 [ 369.063989][ T9792] sk_alloc+0x3a/0x350 [ 369.068225][ T9792] ? bpf_ctx_init+0x154/0x190 [ 369.073080][ T9792] bpf_prog_test_run_skb+0x371/0x18f0 [ 369.078546][ T9792] ? __fget_files+0x28/0x460 [ 369.083408][ T9792] ? __fget_files+0x3fc/0x460 [ 369.088362][ T9792] ? cpu_online+0x60/0x60 [ 369.092809][ T9792] bpf_prog_test_run+0x31f/0x390 [ 369.098029][ T9792] __sys_bpf+0x49d/0x890 [ 369.102476][ T9792] ? bpf_link_show_fdinfo+0x390/0x390 [ 369.108118][ T9792] ? lock_chain_count+0x20/0x20 [ 369.113122][ T9792] __x64_sys_bpf+0x7c/0x90 [ 369.117661][ T9792] do_syscall_64+0x55/0xb0 [ 369.122245][ T9792] ? clear_bhb_loop+0x40/0x90 [ 369.126987][ T9792] ? clear_bhb_loop+0x40/0x90 [ 369.131757][ T9792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.137729][ T9792] RIP: 0033:0x7f513ed9de59 [ 369.142326][ T9792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.162716][ T9792] RSP: 002b:00007f513fcb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.171235][ T9792] RAX: ffffffffffffffda RBX: 00007f513f025fa0 RCX: 00007f513ed9de59 [ 369.179299][ T9792] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 369.187345][ T9792] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 369.195394][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.203446][ T9792] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 369.211770][ T9792] [ 371.003971][ T9826] netlink: 'syz.6.1033': attribute type 3 has an invalid length. [ 371.033168][ T9826] netlink: 'syz.6.1033': attribute type 1 has an invalid length. [ 371.046338][ T9826] netlink: 193404 bytes leftover after parsing attributes in process `syz.6.1033'. [ 372.537000][ T9854] netlink: 'syz.4.1042': attribute type 3 has an invalid length. [ 372.544840][ T9854] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1042'. [ 373.444209][ T9865] netlink: 'syz.5.1046': attribute type 1 has an invalid length. [ 373.477048][ T9865] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1046'. [ 375.369231][ T9906] netlink: 'syz.4.1059': attribute type 10 has an invalid length. [ 377.043688][ T9936] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1068'. [ 377.077368][ T9941] FAULT_INJECTION: forcing a failure. [ 377.077368][ T9941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.170212][ T9941] CPU: 1 PID: 9941 Comm: syz.5.1069 Not tainted syzkaller #0 [ 377.177691][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.187814][ T9941] Call Trace: [ 377.191156][ T9941] [ 377.194145][ T9941] dump_stack_lvl+0x18c/0x250 [ 377.198914][ T9941] ? show_regs_print_info+0x20/0x20 [ 377.204228][ T9941] ? load_image+0x420/0x420 [ 377.208815][ T9941] ? __might_fault+0xaa/0x120 [ 377.213557][ T9941] ? __lock_acquire+0x7d80/0x7d80 [ 377.219028][ T9941] should_fail_ex+0x394/0x4c0 [ 377.223899][ T9941] _copy_from_iter+0x1cd/0x1290 [ 377.228931][ T9941] ? rcu_is_watching+0x15/0xb0 [ 377.233803][ T9941] ? copyout_mc+0x70/0x70 [ 377.238213][ T9941] ? __virt_addr_valid+0x10c/0x380 [ 377.243410][ T9941] ? __virt_addr_valid+0x10c/0x380 [ 377.248570][ T9941] ? __virt_addr_valid+0x10c/0x380 [ 377.253736][ T9941] ? __check_object_size+0x4fc/0xa40 [ 377.259081][ T9941] netlink_sendmsg+0x76b/0xbf0 [ 377.264030][ T9941] ? netlink_getsockopt+0x590/0x590 [ 377.269377][ T9941] ? apparmor_socket_sendmsg+0x8e/0x330 [ 377.274976][ T9941] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 377.280295][ T9941] ? security_socket_sendmsg+0x80/0xa0 [ 377.285802][ T9941] ? netlink_getsockopt+0x590/0x590 [ 377.291088][ T9941] ____sys_sendmsg+0x61b/0x980 [ 377.296001][ T9941] ? __asan_memset+0x22/0x40 [ 377.300637][ T9941] ? __sys_sendmsg_sock+0x30/0x30 [ 377.305698][ T9941] ? __import_iovec+0x5f2/0x850 [ 377.310623][ T9941] ? import_iovec+0x73/0xa0 [ 377.315191][ T9941] ___sys_sendmsg+0x2a6/0x360 [ 377.319941][ T9941] ? get_pid_task+0x20/0x1e0 [ 377.324581][ T9941] ? __sys_sendmsg+0x2b0/0x2b0 [ 377.329447][ T9941] ? __lock_acquire+0x7d80/0x7d80 [ 377.334575][ T9941] __se_sys_sendmsg+0x1d0/0x2c0 [ 377.339477][ T9941] ? __x64_sys_sendmsg+0x80/0x80 [ 377.344497][ T9941] ? lockdep_hardirqs_on+0x98/0x150 [ 377.349742][ T9941] do_syscall_64+0x55/0xb0 [ 377.354221][ T9941] ? clear_bhb_loop+0x40/0x90 [ 377.358965][ T9941] ? clear_bhb_loop+0x40/0x90 [ 377.363701][ T9941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.369666][ T9941] RIP: 0033:0x7fe23eb9de59 [ 377.374134][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.393889][ T9941] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.402356][ T9941] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 377.410361][ T9941] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 377.418477][ T9941] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 377.426569][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.434657][ T9941] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 377.442719][ T9941] [ 378.249616][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.269469][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.382819][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.611946][ T9949] netlink: 'syz.1.1072': attribute type 4 has an invalid length. [ 378.686029][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.696768][ T9949] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1072'. [ 379.072602][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.082940][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.803287][T10007] netlink: 'syz.6.1088': attribute type 39 has an invalid length. [ 380.952931][T10009] netlink: 'syz.1.1089': attribute type 2 has an invalid length. [ 380.966051][T10009] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 380.990025][T10009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.043645][T10012] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1089'. [ 381.071987][T10012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 381.288659][T10018] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 381.298930][T10018] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 383.764322][T10059] FAULT_INJECTION: forcing a failure. [ 383.764322][T10059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.840058][T10059] CPU: 1 PID: 10059 Comm: syz.1.1105 Not tainted syzkaller #0 [ 383.847598][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.857691][T10059] Call Trace: [ 383.861014][T10059] [ 383.863970][T10059] dump_stack_lvl+0x18c/0x250 [ 383.868722][T10059] ? show_regs_print_info+0x20/0x20 [ 383.873932][T10059] ? load_image+0x420/0x420 [ 383.878462][T10059] ? __might_fault+0xaa/0x120 [ 383.883200][T10059] ? __lock_acquire+0x7d80/0x7d80 [ 383.888440][T10059] ? unix_ioctl+0x259/0x6b0 [ 383.893003][T10059] should_fail_ex+0x394/0x4c0 [ 383.897744][T10059] _copy_from_user+0x2f/0xe0 [ 383.902383][T10059] sock_do_ioctl+0x190/0x310 [ 383.907020][T10059] ? sock_show_fdinfo+0xb0/0xb0 [ 383.911915][T10059] sock_ioctl+0x5be/0x7e0 [ 383.916303][T10059] ? sock_poll+0x3e0/0x3e0 [ 383.920773][T10059] ? bpf_lsm_file_ioctl+0x9/0x10 [ 383.925943][T10059] ? security_file_ioctl+0x80/0xa0 [ 383.931708][T10059] ? sock_poll+0x3e0/0x3e0 [ 383.936178][T10059] __se_sys_ioctl+0xfd/0x170 [ 383.940805][T10059] do_syscall_64+0x55/0xb0 [ 383.945335][T10059] ? clear_bhb_loop+0x40/0x90 [ 383.950042][T10059] ? clear_bhb_loop+0x40/0x90 [ 383.954754][T10059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.960680][T10059] RIP: 0033:0x7f90d8b9de59 [ 383.965378][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.985005][T10059] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.993525][T10059] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 384.001605][T10059] RDX: 0000200000000000 RSI: 0000000000008922 RDI: 0000000000000005 [ 384.009586][T10059] RBP: 00007f90d9a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 384.017586][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.025571][T10059] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 384.033582][T10059] [ 384.863179][T10069] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1106'. [ 384.924301][T10069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.948685][T10121] FAULT_INJECTION: forcing a failure. [ 387.948685][T10121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.978728][T10121] CPU: 0 PID: 10121 Comm: syz.1.1123 Not tainted syzkaller #0 [ 387.986286][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.996384][T10121] Call Trace: [ 387.999680][T10121] [ 388.002654][T10121] dump_stack_lvl+0x18c/0x250 [ 388.007449][T10121] ? show_regs_print_info+0x20/0x20 [ 388.012695][T10121] ? load_image+0x420/0x420 [ 388.017216][T10121] ? __might_fault+0xaa/0x120 [ 388.021918][T10121] ? __lock_acquire+0x7d80/0x7d80 [ 388.027043][T10121] ? __virt_addr_valid+0x10c/0x380 [ 388.032184][T10121] should_fail_ex+0x394/0x4c0 [ 388.036968][T10121] _copy_from_user+0x2f/0xe0 [ 388.041583][T10121] generic_map_update_batch+0x53e/0x800 [ 388.047157][T10121] ? rcu_read_unlock+0xa0/0xa0 [ 388.051935][T10121] ? __fdget+0x180/0x210 [ 388.056211][T10121] ? rcu_read_unlock+0xa0/0xa0 [ 388.061210][T10121] bpf_map_do_batch+0x3f2/0x600 [ 388.066167][T10121] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 388.072515][T10121] __sys_bpf+0x381/0x890 [ 388.076859][T10121] ? bpf_link_show_fdinfo+0x390/0x390 [ 388.082262][T10121] ? lock_chain_count+0x20/0x20 [ 388.087134][T10121] __x64_sys_bpf+0x7c/0x90 [ 388.091565][T10121] do_syscall_64+0x55/0xb0 [ 388.096021][T10121] ? clear_bhb_loop+0x40/0x90 [ 388.100734][T10121] ? clear_bhb_loop+0x40/0x90 [ 388.105453][T10121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.111467][T10121] RIP: 0033:0x7f90d8b9de59 [ 388.115999][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.135706][T10121] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.144138][T10121] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 388.152142][T10121] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 388.160125][T10121] RBP: 00007f90d9a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 388.168108][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.176109][T10121] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 388.184119][T10121] [ 389.990016][T10163] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 390.661948][T10173] FAULT_INJECTION: forcing a failure. [ 390.661948][T10173] name failslab, interval 1, probability 0, space 0, times 0 [ 390.686359][T10173] CPU: 0 PID: 10173 Comm: syz.1.1136 Not tainted syzkaller #0 [ 390.693912][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.704089][T10173] Call Trace: [ 390.707399][T10173] [ 390.710355][T10173] dump_stack_lvl+0x18c/0x250 [ 390.715103][T10173] ? show_regs_print_info+0x20/0x20 [ 390.720340][T10173] ? load_image+0x420/0x420 [ 390.724897][T10173] ? __might_sleep+0xe0/0xe0 [ 390.729533][T10173] ? __lock_acquire+0x7d80/0x7d80 [ 390.734598][T10173] should_fail_ex+0x394/0x4c0 [ 390.739324][T10173] should_failslab+0x9/0x20 [ 390.743867][T10173] slab_pre_alloc_hook+0x59/0x300 [ 390.748937][T10173] ? sctp_association_new+0x89/0x25b0 [ 390.754421][T10173] __kmem_cache_alloc_node+0x53/0x250 [ 390.759835][T10173] ? sctp_association_new+0x89/0x25b0 [ 390.765242][T10173] kmalloc_trace+0x2a/0xe0 [ 390.769877][T10173] sctp_association_new+0x89/0x25b0 [ 390.775107][T10173] ? security_capable+0x89/0xb0 [ 390.780089][T10173] sctp_connect_new_asoc+0x2de/0x6a0 [ 390.785457][T10173] ? __sctp_connect+0xd80/0xd80 [ 390.790423][T10173] ? __local_bh_enable_ip+0x13a/0x1c0 [ 390.795829][T10173] ? _local_bh_enable+0xa0/0xa0 [ 390.800708][T10173] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 390.806556][T10173] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 390.812485][T10173] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 390.818423][T10173] ? security_sctp_bind_connect+0x89/0xb0 [ 390.824201][T10173] sctp_sendmsg+0x1519/0x27b0 [ 390.829035][T10173] ? sctp_getsockopt+0xb60/0xb60 [ 390.834040][T10173] ? aa_af_perm+0x330/0x330 [ 390.838600][T10173] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 390.845105][T10173] ? sock_rps_record_flow+0x19/0x3f0 [ 390.850576][T10173] ? inet_sendmsg+0x7e/0x2a0 [ 390.855238][T10173] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 390.860572][T10173] ? inet_send_prepare+0x250/0x250 [ 390.865729][T10173] ____sys_sendmsg+0x61b/0x980 [ 390.870559][T10173] ? __asan_memset+0x22/0x40 [ 390.875203][T10173] ? __sys_sendmsg_sock+0x30/0x30 [ 390.880271][T10173] ? __import_iovec+0x5f2/0x850 [ 390.885174][T10173] ? import_iovec+0x73/0xa0 [ 390.889804][T10173] ___sys_sendmsg+0x2a6/0x360 [ 390.894521][T10173] ? get_pid_task+0x20/0x1e0 [ 390.899157][T10173] ? __sys_sendmsg+0x2b0/0x2b0 [ 390.903995][T10173] ? __lock_acquire+0x7d80/0x7d80 [ 390.909094][T10173] __se_sys_sendmsg+0x1d0/0x2c0 [ 390.913996][T10173] ? __x64_sys_sendmsg+0x80/0x80 [ 390.918994][T10173] ? lockdep_hardirqs_on+0x98/0x150 [ 390.924416][T10173] do_syscall_64+0x55/0xb0 [ 390.928890][T10173] ? clear_bhb_loop+0x40/0x90 [ 390.933691][T10173] ? clear_bhb_loop+0x40/0x90 [ 390.938422][T10173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.944363][T10173] RIP: 0033:0x7f90d8b9de59 [ 390.948811][T10173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.968487][T10173] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.977297][T10173] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 390.985387][T10173] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000003 [ 390.993480][T10173] RBP: 00007f90d9a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 391.001489][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.009493][T10173] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 391.017521][T10173] [ 391.784216][T10191] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1142'. [ 393.407402][T10226] netlink: 'syz.6.1152': attribute type 21 has an invalid length. [ 393.415529][T10226] netlink: 'syz.6.1152': attribute type 6 has an invalid length. [ 393.451788][T10226] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1152'. [ 393.463373][T10234] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1153'. [ 393.485438][T10234] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1153'. [ 394.975318][T10265] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1165'. [ 397.837016][T10265] sit0: entered allmulticast mode [ 397.870940][T10269] sit0: entered promiscuous mode [ 398.215165][T10272] netlink: 'syz.6.1167': attribute type 10 has an invalid length. [ 399.194998][T10302] netlink: 'syz.1.1177': attribute type 21 has an invalid length. [ 399.271754][T10303] netlink: 'syz.1.1177': attribute type 6 has an invalid length. [ 399.332189][T10303] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 399.359131][T10303] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1177'. [ 399.770953][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'. [ 399.815370][T10315] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 399.824431][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'. [ 399.850956][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1180'. [ 399.887468][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'. [ 399.917566][T10315] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 399.949401][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1180'. [ 400.028523][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'. [ 400.066104][T10312] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 400.135974][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1180'. [ 400.169466][T10312] netlink: 'syz.4.1180': attribute type 9 has an invalid length. [ 400.203524][T10312] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1180'. [ 401.508662][T10340] FAULT_INJECTION: forcing a failure. [ 401.508662][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.524608][T10340] CPU: 1 PID: 10340 Comm: syz.5.1190 Not tainted syzkaller #0 [ 401.532229][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.542407][T10340] Call Trace: [ 401.545892][T10340] [ 401.548876][T10340] dump_stack_lvl+0x18c/0x250 [ 401.553812][T10340] ? show_regs_print_info+0x20/0x20 [ 401.559077][T10340] ? load_image+0x420/0x420 [ 401.563603][T10340] ? __might_fault+0xaa/0x120 [ 401.568296][T10340] ? __lock_acquire+0x7d80/0x7d80 [ 401.573342][T10340] should_fail_ex+0x394/0x4c0 [ 401.578042][T10340] _copy_from_iter+0x1cd/0x1290 [ 401.582996][T10340] ? rep_movs_alternative+0x4a/0x90 [ 401.588239][T10340] ? copyout_mc+0x70/0x70 [ 401.592595][T10340] ? copyout_mc+0x70/0x70 [ 401.596939][T10340] ? __virt_addr_valid+0x10c/0x380 [ 401.602104][T10340] ? page_copy_sane+0x16a/0x270 [ 401.606981][T10340] copy_page_from_iter+0x7b/0x100 [ 401.612033][T10340] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 401.618051][T10340] tun_get_user+0xc84/0x3d70 [ 401.622724][T10340] ? aa_file_perm+0x3e3/0xee0 [ 401.627423][T10340] ? rcu_read_unlock+0xa0/0xa0 [ 401.632212][T10340] ? tun_get+0x1c/0x2e0 [ 401.636391][T10340] ? __lock_acquire+0x7d80/0x7d80 [ 401.641442][T10340] ? tun_get+0x1c/0x2e0 [ 401.645612][T10340] tun_chr_write_iter+0x119/0x200 [ 401.650652][T10340] vfs_write+0x474/0x9a0 [ 401.654920][T10340] ? file_end_write+0x250/0x250 [ 401.659821][T10340] ? __fget_files+0x3fc/0x460 [ 401.664522][T10340] ? __fdget_pos+0x1d8/0x330 [ 401.669141][T10340] ? ksys_write+0x74/0x260 [ 401.673591][T10340] ksys_write+0x151/0x260 [ 401.678029][T10340] ? __ia32_sys_read+0x90/0x90 [ 401.682814][T10340] ? lockdep_hardirqs_on+0x98/0x150 [ 401.688223][T10340] do_syscall_64+0x55/0xb0 [ 401.692657][T10340] ? clear_bhb_loop+0x40/0x90 [ 401.697363][T10340] ? clear_bhb_loop+0x40/0x90 [ 401.702072][T10340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.708005][T10340] RIP: 0033:0x7fe23eb9de59 [ 401.712522][T10340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.732153][T10340] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.740595][T10340] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 401.748578][T10340] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 401.756587][T10340] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 401.764655][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.772654][T10340] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 401.780738][T10340] [ 403.209657][T10367] netlink: 'syz.6.1199': attribute type 3 has an invalid length. [ 403.266898][T10367] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.1199'. [ 403.511472][T10374] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 403.526402][T10374] netlink: 'syz.4.1202': attribute type 8 has an invalid length. [ 404.050693][T10378] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 404.112514][T10380] Q6`Ҙ: renamed from lo (while UP) [ 404.389393][T10391] netlink: 'syz.4.1208': attribute type 3 has an invalid length. [ 404.429754][T10391] netlink: 'syz.4.1208': attribute type 4 has an invalid length. [ 404.431235][T10389] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 404.499867][T10391] __nla_validate_parse: 2 callbacks suppressed [ 404.499888][T10391] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.1208'. [ 404.996169][T10384] delete_channel: no stack [ 407.072755][T10440] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1223'. [ 407.959585][T10458] FAULT_INJECTION: forcing a failure. [ 407.959585][T10458] name failslab, interval 1, probability 0, space 0, times 0 [ 408.035516][T10458] CPU: 0 PID: 10458 Comm: syz.4.1230 Not tainted syzkaller #0 [ 408.043065][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.053245][T10458] Call Trace: [ 408.056551][T10458] [ 408.059506][T10458] dump_stack_lvl+0x18c/0x250 [ 408.064394][T10458] ? show_regs_print_info+0x20/0x20 [ 408.069701][T10458] ? load_image+0x420/0x420 [ 408.074347][T10458] ? __might_sleep+0xe0/0xe0 [ 408.078990][T10458] ? __lock_acquire+0x7d80/0x7d80 [ 408.084051][T10458] should_fail_ex+0x394/0x4c0 [ 408.088777][T10458] should_failslab+0x9/0x20 [ 408.093302][T10458] slab_pre_alloc_hook+0x59/0x300 [ 408.098349][T10458] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 408.104102][T10458] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 408.109843][T10458] __kmem_cache_alloc_node+0x53/0x250 [ 408.115244][T10458] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 408.120998][T10458] __kmalloc+0xa7/0x240 [ 408.125177][T10458] tomoyo_realpath_from_path+0xe6/0x5c0 [ 408.130740][T10458] ? tomoyo_domain+0xd6/0x120 [ 408.135442][T10458] tomoyo_path_number_perm+0x248/0x5e0 [ 408.140918][T10458] ? tomoyo_path_number_perm+0x217/0x5e0 [ 408.146577][T10458] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 408.152084][T10458] ? ksys_write+0x1d2/0x260 [ 408.156655][T10458] ? __fget_files+0x28/0x460 [ 408.161444][T10458] security_file_ioctl+0x70/0xa0 [ 408.166401][T10458] __se_sys_ioctl+0x48/0x170 [ 408.171023][T10458] do_syscall_64+0x55/0xb0 [ 408.175460][T10458] ? clear_bhb_loop+0x40/0x90 [ 408.180180][T10458] ? clear_bhb_loop+0x40/0x90 [ 408.184873][T10458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.190792][T10458] RIP: 0033:0x7f513ed9de59 [ 408.195220][T10458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.214839][T10458] RSP: 002b:00007f513fcb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.223272][T10458] RAX: ffffffffffffffda RBX: 00007f513f025fa0 RCX: 00007f513ed9de59 [ 408.231256][T10458] RDX: 0000000000000000 RSI: 0000000000005760 RDI: 0000000000000000 [ 408.239414][T10458] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 408.247482][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.255474][T10458] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 408.263475][T10458] [ 408.489296][T10458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.719386][T10464] netlink: 'syz.5.1233': attribute type 17 has an invalid length. [ 408.735946][T10464] netlink: 'syz.5.1233': attribute type 16 has an invalid length. [ 408.746841][T10464] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1233'. [ 408.788711][T10467] netlink: 'syz.5.1233': attribute type 17 has an invalid length. [ 408.817593][T10467] netlink: 'syz.5.1233': attribute type 16 has an invalid length. [ 408.840530][T10467] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1233'. [ 410.481210][T10489] FAULT_INJECTION: forcing a failure. [ 410.481210][T10489] name failslab, interval 1, probability 0, space 0, times 0 [ 410.511777][T10489] CPU: 1 PID: 10489 Comm: syz.5.1240 Not tainted syzkaller #0 [ 410.519406][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.529504][T10489] Call Trace: [ 410.532843][T10489] [ 410.535813][T10489] dump_stack_lvl+0x18c/0x250 [ 410.540555][T10489] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.546848][T10489] ? show_regs_print_info+0x20/0x20 [ 410.552185][T10489] ? load_image+0x420/0x420 [ 410.556743][T10489] ? should_fail_ex+0x341/0x4c0 [ 410.562088][T10489] should_fail_ex+0x394/0x4c0 [ 410.566832][T10489] should_failslab+0x9/0x20 [ 410.571561][T10489] slab_pre_alloc_hook+0x59/0x300 [ 410.576646][T10489] ? page_pool_create+0x71/0x5c0 [ 410.581694][T10489] __kmem_cache_alloc_node+0x53/0x250 [ 410.587126][T10489] ? page_pool_create+0x71/0x5c0 [ 410.592298][T10489] kmalloc_node_trace+0x26/0xe0 [ 410.597208][T10489] page_pool_create+0x71/0x5c0 [ 410.602030][T10489] bpf_test_run_xdp_live+0x203/0x1b30 [ 410.607457][T10489] ? 0xffffffffa0004740 [ 410.611661][T10489] ? 0xffffffffa0004740 [ 410.615857][T10489] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 410.621805][T10489] ? xdp_convert_md_to_buff+0x330/0x330 [ 410.627414][T10489] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 410.633693][T10489] ? _copy_from_user+0xa5/0xe0 [ 410.638472][T10489] ? bpf_test_init+0x119/0x140 [ 410.643424][T10489] ? xdp_convert_md_to_buff+0x5b/0x330 [ 410.648903][T10489] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 410.654287][T10489] ? __lock_acquire+0x7d80/0x7d80 [ 410.659357][T10489] ? __ct_user_exit+0xd0/0xd0 [ 410.664059][T10489] ? dev_put+0x80/0x80 [ 410.668158][T10489] ? dev_put+0x80/0x80 [ 410.672244][T10489] bpf_prog_test_run+0x31f/0x390 [ 410.677201][T10489] __sys_bpf+0x49d/0x890 [ 410.681471][T10489] ? read_tsc+0x9/0x20 [ 410.685651][T10489] ? bpf_link_show_fdinfo+0x390/0x390 [ 410.691068][T10489] ? lock_chain_count+0x20/0x20 [ 410.695939][T10489] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 410.702032][T10489] __x64_sys_bpf+0x7c/0x90 [ 410.706465][T10489] do_syscall_64+0x55/0xb0 [ 410.710901][T10489] ? clear_bhb_loop+0x40/0x90 [ 410.715586][T10489] ? clear_bhb_loop+0x40/0x90 [ 410.720470][T10489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.726386][T10489] RIP: 0033:0x7fe23eb9de59 [ 410.730833][T10489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.750543][T10489] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.758993][T10489] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 410.766992][T10489] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 410.774973][T10489] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 410.782964][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.790954][T10489] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 410.799212][T10489] [ 410.873545][T10498] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 410.938950][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 412.375458][T10525] netlink: 'syz.5.1254': attribute type 13 has an invalid length. [ 412.408943][T10525] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1254'. [ 412.497851][T10525] erspan0: refused to change device tx_queue_len [ 412.604967][T10532] netlink: 'syz.1.1256': attribute type 25 has an invalid length. [ 412.623279][T10532] netlink: 'syz.1.1256': attribute type 9 has an invalid length. [ 412.650832][T10532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 414.605125][T10561] netlink: 'syz.6.1267': attribute type 25 has an invalid length. [ 414.632116][T10561] netlink: 'syz.6.1267': attribute type 9 has an invalid length. [ 415.620938][T10578] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1274'. [ 417.491647][T10603] FAULT_INJECTION: forcing a failure. [ 417.491647][T10603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.539479][T10603] CPU: 0 PID: 10603 Comm: syz.4.1284 Not tainted syzkaller #0 [ 417.547057][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.557159][T10603] Call Trace: [ 417.560473][T10603] [ 417.563522][T10603] dump_stack_lvl+0x18c/0x250 [ 417.568261][T10603] ? show_regs_print_info+0x20/0x20 [ 417.573503][T10603] ? load_image+0x420/0x420 [ 417.578058][T10603] ? __might_fault+0xaa/0x120 [ 417.582778][T10603] ? __lock_acquire+0x7d80/0x7d80 [ 417.588283][T10603] ? unix_ioctl+0x259/0x6b0 [ 417.592924][T10603] should_fail_ex+0x394/0x4c0 [ 417.597745][T10603] _copy_from_user+0x2f/0xe0 [ 417.602644][T10603] sock_do_ioctl+0x190/0x310 [ 417.607285][T10603] ? sock_show_fdinfo+0xb0/0xb0 [ 417.612202][T10603] sock_ioctl+0x5be/0x7e0 [ 417.616753][T10603] ? sock_poll+0x3e0/0x3e0 [ 417.621232][T10603] ? bpf_lsm_file_ioctl+0x9/0x10 [ 417.626219][T10603] ? security_file_ioctl+0x80/0xa0 [ 417.631372][T10603] ? sock_poll+0x3e0/0x3e0 [ 417.635811][T10603] __se_sys_ioctl+0xfd/0x170 [ 417.640429][T10603] do_syscall_64+0x55/0xb0 [ 417.644956][T10603] ? clear_bhb_loop+0x40/0x90 [ 417.649658][T10603] ? clear_bhb_loop+0x40/0x90 [ 417.654354][T10603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.660266][T10603] RIP: 0033:0x7f513ed9de59 [ 417.664805][T10603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.684513][T10603] RSP: 002b:00007f513fcb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.692947][T10603] RAX: ffffffffffffffda RBX: 00007f513f025fa0 RCX: 00007f513ed9de59 [ 417.701104][T10603] RDX: 00002000000000c0 RSI: 00000000000089b0 RDI: 0000000000000003 [ 417.709088][T10603] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 417.717327][T10603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.725304][T10603] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 417.733302][T10603] [ 417.773666][T10608] syzkaller0: entered promiscuous mode [ 417.796247][T10608] syzkaller0: entered allmulticast mode [ 421.723457][T10615] syzkaller0: entered promiscuous mode [ 421.729221][T10615] syzkaller0: entered allmulticast mode [ 426.453335][T10666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.462331][T10666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.472763][T10666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.480391][T10666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.532619][T10676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.540821][T10676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.567012][T10676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.574542][T10676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.206408][T10697] FAULT_INJECTION: forcing a failure. [ 427.206408][T10697] name failslab, interval 1, probability 0, space 0, times 0 [ 427.296043][T10697] CPU: 1 PID: 10697 Comm: syz.1.1317 Not tainted syzkaller #0 [ 427.303605][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.313714][T10697] Call Trace: [ 427.317037][T10697] [ 427.320013][T10697] dump_stack_lvl+0x18c/0x250 [ 427.324755][T10697] ? show_regs_print_info+0x20/0x20 [ 427.330020][T10697] ? load_image+0x420/0x420 [ 427.334582][T10697] ? __might_sleep+0xe0/0xe0 [ 427.339234][T10697] ? __lock_acquire+0x7d80/0x7d80 [ 427.344329][T10697] should_fail_ex+0x394/0x4c0 [ 427.349080][T10697] should_failslab+0x9/0x20 [ 427.353656][T10697] slab_pre_alloc_hook+0x59/0x300 [ 427.358741][T10697] ? __lock_acquire+0x7d80/0x7d80 [ 427.363845][T10697] kmem_cache_alloc_node+0x5e/0x310 [ 427.369107][T10697] ? __alloc_skb+0x103/0x2c0 [ 427.373770][T10697] __alloc_skb+0x103/0x2c0 [ 427.378283][T10697] netlink_sendmsg+0x66a/0xbf0 [ 427.383132][T10697] ? netlink_getsockopt+0x590/0x590 [ 427.388398][T10697] ? apparmor_socket_sendmsg+0x8e/0x330 [ 427.394008][T10697] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 427.399360][T10697] ? security_socket_sendmsg+0x80/0xa0 [ 427.404877][T10697] ? netlink_getsockopt+0x590/0x590 [ 427.410183][T10697] ____sys_sendmsg+0x61b/0x980 [ 427.415032][T10697] ? __asan_memset+0x22/0x40 [ 427.419687][T10697] ? __sys_sendmsg_sock+0x30/0x30 [ 427.424784][T10697] ? __import_iovec+0x5f2/0x850 [ 427.429724][T10697] ? import_iovec+0x73/0xa0 [ 427.434313][T10697] ___sys_sendmsg+0x2a6/0x360 [ 427.439091][T10697] ? __sys_sendmsg+0x2b0/0x2b0 [ 427.444074][T10697] ? __lock_acquire+0x7d80/0x7d80 [ 427.449247][T10697] __se_sys_sendmsg+0x1d0/0x2c0 [ 427.454180][T10697] ? __x64_sys_sendmsg+0x80/0x80 [ 427.459235][T10697] ? lockdep_hardirqs_on+0x98/0x150 [ 427.464513][T10697] do_syscall_64+0x55/0xb0 [ 427.469002][T10697] ? clear_bhb_loop+0x40/0x90 [ 427.473732][T10697] ? clear_bhb_loop+0x40/0x90 [ 427.478562][T10697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.484529][T10697] RIP: 0033:0x7f90d8b9de59 [ 427.489004][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.508932][T10697] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.517428][T10697] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 427.525468][T10697] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 427.533513][T10697] RBP: 00007f90d9a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 427.541562][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.549597][T10697] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 427.557678][T10697] [ 427.999340][T10704] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1321'. [ 428.058917][ T5084] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 428.118271][T10707] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1321'. [ 429.908994][T10756] FAULT_INJECTION: forcing a failure. [ 429.908994][T10756] name failslab, interval 1, probability 0, space 0, times 0 [ 429.956258][T10756] CPU: 1 PID: 10756 Comm: syz.4.1339 Not tainted syzkaller #0 [ 429.963897][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.974024][T10756] Call Trace: [ 429.977342][T10756] [ 429.980313][T10756] dump_stack_lvl+0x18c/0x250 [ 429.985051][T10756] ? show_regs_print_info+0x20/0x20 [ 429.990309][T10756] ? load_image+0x420/0x420 [ 429.994866][T10756] ? __might_sleep+0xe0/0xe0 [ 429.999609][T10756] ? __lock_acquire+0x7d80/0x7d80 [ 430.004690][T10756] should_fail_ex+0x394/0x4c0 [ 430.009519][T10756] should_failslab+0x9/0x20 [ 430.014077][T10756] slab_pre_alloc_hook+0x59/0x300 [ 430.019164][T10756] ? __kernfs_new_node+0xaa/0x7f0 [ 430.024265][T10756] ? rcu_is_watching+0x15/0xb0 [ 430.029079][T10756] kmem_cache_alloc+0x5a/0x2c0 [ 430.033889][T10756] ? __kernfs_new_node+0xe5/0x7f0 [ 430.038976][T10756] __kernfs_new_node+0xe5/0x7f0 [ 430.043878][T10756] ? kernfs_new_node+0x260/0x260 [ 430.048874][T10756] ? make_kgid+0x1c8/0x650 [ 430.053358][T10756] ? from_kuid_munged+0x6e0/0x6e0 [ 430.058441][T10756] kernfs_new_node+0x14c/0x260 [ 430.063354][T10756] kernfs_create_dir_ns+0x44/0x120 [ 430.068596][T10756] sysfs_create_dir_ns+0x130/0x2a0 [ 430.073732][T10756] ? __lock_acquire+0x7d80/0x7d80 [ 430.078782][T10756] ? sysfs_warn_dup+0xa0/0xa0 [ 430.083469][T10756] ? trace_contention_end+0x39/0xe0 [ 430.089120][T10756] ? do_raw_spin_unlock+0x121/0x230 [ 430.094342][T10756] kobject_add_internal+0x617/0xc90 [ 430.099594][T10756] kobject_add+0x164/0x240 [ 430.104027][T10756] ? __rwlock_init+0x150/0x150 [ 430.108848][T10756] ? kobject_init+0x1d0/0x1d0 [ 430.113680][T10756] ? kobject_put+0x41a/0x450 [ 430.118291][T10756] ? get_device_parent+0x366/0x390 [ 430.123456][T10756] device_add+0x3fa/0xc40 [ 430.127902][T10756] netdev_register_kobject+0x188/0x320 [ 430.133410][T10756] register_netdevice+0x12aa/0x1ba0 [ 430.138704][T10756] ? netif_stacked_transfer_operstate+0x210/0x210 [ 430.145166][T10756] ? __lock_acquire+0x7d80/0x7d80 [ 430.150228][T10756] ? kvmalloc_node+0x70/0x180 [ 430.154946][T10756] ? rcu_is_watching+0x15/0xb0 [ 430.159754][T10756] ? net_generic+0x1e/0x240 [ 430.164501][T10756] ip6_tnl_create2+0x80/0x140 [ 430.169220][T10756] ip6_tnl_locate+0x735/0x830 [ 430.173932][T10756] ? ip6_tnl_parm_from_user+0x340/0x340 [ 430.179518][T10756] ? __might_fault+0xaa/0x120 [ 430.184227][T10756] ? __might_fault+0xc6/0x120 [ 430.188942][T10756] ? __might_fault+0xaa/0x120 [ 430.193628][T10756] ? ip6_tnl_siocdevprivate+0x5ed/0xab0 [ 430.199191][T10756] ip6_tnl_siocdevprivate+0x61b/0xab0 [ 430.204590][T10756] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 430.209985][T10756] ? dev_ioctl+0x83c/0x1140 [ 430.214547][T10756] ? __lock_acquire+0x7d80/0x7d80 [ 430.219597][T10756] ? dev_ifsioc+0x957/0xc40 [ 430.224206][T10756] dev_ioctl+0x84c/0x1140 [ 430.228557][T10756] sock_ioctl+0x74c/0x7e0 [ 430.232934][T10756] ? sock_poll+0x3e0/0x3e0 [ 430.237378][T10756] ? bpf_lsm_file_ioctl+0x9/0x10 [ 430.242331][T10756] ? security_file_ioctl+0x80/0xa0 [ 430.247455][T10756] ? sock_poll+0x3e0/0x3e0 [ 430.251882][T10756] __se_sys_ioctl+0xfd/0x170 [ 430.256499][T10756] do_syscall_64+0x55/0xb0 [ 430.261020][T10756] ? clear_bhb_loop+0x40/0x90 [ 430.265883][T10756] ? clear_bhb_loop+0x40/0x90 [ 430.270579][T10756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.276490][T10756] RIP: 0033:0x7f513ed9de59 [ 430.280941][T10756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.300673][T10756] RSP: 002b:00007f513fcb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.309110][T10756] RAX: ffffffffffffffda RBX: 00007f513f025fa0 RCX: 00007f513ed9de59 [ 430.317099][T10756] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 430.325178][T10756] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 430.333159][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.341315][T10756] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 430.349325][T10756] [ 430.377312][T10756] kobject: kobject_add_internal failed for ip6tnl1 (error: -12 parent: net) [ 430.504925][T10749] delete_channel: no stack [ 436.057748][T10810] FAULT_INJECTION: forcing a failure. [ 436.057748][T10810] name failslab, interval 1, probability 0, space 0, times 0 [ 436.145603][T10810] CPU: 1 PID: 10810 Comm: syz.1.1356 Not tainted syzkaller #0 [ 436.153137][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.163491][T10810] Call Trace: [ 436.166814][T10810] [ 436.169774][T10810] dump_stack_lvl+0x18c/0x250 [ 436.174516][T10810] ? show_regs_print_info+0x20/0x20 [ 436.179758][T10810] ? load_image+0x420/0x420 [ 436.184301][T10810] ? __might_sleep+0xe0/0xe0 [ 436.188924][T10810] ? __lock_acquire+0x7d80/0x7d80 [ 436.194002][T10810] should_fail_ex+0x394/0x4c0 [ 436.198727][T10810] should_failslab+0x9/0x20 [ 436.203288][T10810] slab_pre_alloc_hook+0x59/0x300 [ 436.208378][T10810] ? sctp_association_new+0x89/0x25b0 [ 436.213794][T10810] __kmem_cache_alloc_node+0x53/0x250 [ 436.219218][T10810] ? sctp_association_new+0x89/0x25b0 [ 436.224662][T10810] kmalloc_trace+0x2a/0xe0 [ 436.229206][T10810] sctp_association_new+0x89/0x25b0 [ 436.234618][T10810] ? security_capable+0x89/0xb0 [ 436.239611][T10810] sctp_connect_new_asoc+0x2de/0x6a0 [ 436.245117][T10810] ? __sctp_connect+0xd80/0xd80 [ 436.250135][T10810] ? __local_bh_enable_ip+0x13a/0x1c0 [ 436.255716][T10810] ? _local_bh_enable+0xa0/0xa0 [ 436.260604][T10810] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 436.266456][T10810] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 436.272302][T10810] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 436.277892][T10810] ? security_sctp_bind_connect+0x89/0xb0 [ 436.283655][T10810] sctp_sendmsg+0x1519/0x27b0 [ 436.288481][T10810] ? sctp_getsockopt+0xb60/0xb60 [ 436.293462][T10810] ? aa_af_perm+0x330/0x330 [ 436.298098][T10810] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 436.304564][T10810] ? sock_rps_record_flow+0x19/0x3f0 [ 436.309900][T10810] ? inet_sendmsg+0x7e/0x2a0 [ 436.314526][T10810] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 436.319846][T10810] ? inet_send_prepare+0x250/0x250 [ 436.325087][T10810] ____sys_sendmsg+0x61b/0x980 [ 436.329903][T10810] ? __asan_memset+0x22/0x40 [ 436.334623][T10810] ? __sys_sendmsg_sock+0x30/0x30 [ 436.339870][T10810] ? __import_iovec+0x5f2/0x850 [ 436.344951][T10810] ? import_iovec+0x73/0xa0 [ 436.349565][T10810] ___sys_sendmsg+0x2a6/0x360 [ 436.354294][T10810] ? get_pid_task+0x20/0x1e0 [ 436.358932][T10810] ? __sys_sendmsg+0x2b0/0x2b0 [ 436.363884][T10810] ? __lock_acquire+0x7d80/0x7d80 [ 436.368993][T10810] __se_sys_sendmsg+0x1d0/0x2c0 [ 436.373898][T10810] ? __x64_sys_sendmsg+0x80/0x80 [ 436.379093][T10810] ? lockdep_hardirqs_on+0x98/0x150 [ 436.384515][T10810] do_syscall_64+0x55/0xb0 [ 436.388981][T10810] ? clear_bhb_loop+0x40/0x90 [ 436.393784][T10810] ? clear_bhb_loop+0x40/0x90 [ 436.399126][T10810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.405074][T10810] RIP: 0033:0x7f90d8b9de59 [ 436.409527][T10810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.429195][T10810] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.437659][T10810] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 436.445678][T10810] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000005 [ 436.453784][T10810] RBP: 00007f90d9a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 436.461873][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.469888][T10810] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 436.477920][T10810] [ 436.622676][T10815] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1358'. [ 436.682325][T10815] sit0: entered allmulticast mode [ 436.792500][T10815] veth1_vlan: entered allmulticast mode [ 437.374158][T10836] FAULT_INJECTION: forcing a failure. [ 437.374158][T10836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.451581][T10836] CPU: 0 PID: 10836 Comm: syz.4.1366 Not tainted syzkaller #0 [ 437.459217][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.469328][T10836] Call Trace: [ 437.472663][T10836] [ 437.475809][T10836] dump_stack_lvl+0x18c/0x250 [ 437.480534][T10836] ? show_regs_print_info+0x20/0x20 [ 437.485946][T10836] ? load_image+0x420/0x420 [ 437.490511][T10836] ? __might_fault+0xaa/0x120 [ 437.495214][T10836] ? __lock_acquire+0x7d80/0x7d80 [ 437.500358][T10836] should_fail_ex+0x394/0x4c0 [ 437.505094][T10836] _copy_from_user+0x2f/0xe0 [ 437.509718][T10836] ___sys_recvmsg+0x174/0x590 [ 437.514763][T10836] ? __sys_recvmsg+0x2a0/0x2a0 [ 437.519546][T10836] ? __fget_files+0x28/0x460 [ 437.524710][T10836] ? __fget_files+0x3fc/0x460 [ 437.529427][T10836] __x64_sys_recvmsg+0x21e/0x2f0 [ 437.534384][T10836] ? ___sys_recvmsg+0x590/0x590 [ 437.539260][T10836] ? syscall_enter_from_user_mode+0x2e/0x80 [ 437.545289][T10836] do_syscall_64+0x55/0xb0 [ 437.549865][T10836] ? clear_bhb_loop+0x40/0x90 [ 437.554561][T10836] ? clear_bhb_loop+0x40/0x90 [ 437.559267][T10836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.565273][T10836] RIP: 0033:0x7f513ed9de59 [ 437.569735][T10836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.589445][T10836] RSP: 002b:00007f513fcb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 437.597878][T10836] RAX: ffffffffffffffda RBX: 00007f513f025fa0 RCX: 00007f513ed9de59 [ 437.605865][T10836] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 437.614034][T10836] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 437.622196][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.630182][T10836] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 437.638615][T10836] [ 437.728921][T10834] netlink: 'syz.1.1364': attribute type 9 has an invalid length. [ 437.744459][T10834] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1364'. [ 438.031570][T10852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.039825][T10852] IPv6: NLM_F_CREATE should be set when creating new route [ 438.047600][T10852] IPv6: NLM_F_CREATE should be set when creating new route [ 438.055313][T10852] IPv6: NLM_F_CREATE should be set when creating new route [ 438.108073][T10852] netlink: 'syz.5.1369': attribute type 9 has an invalid length. [ 438.126610][T10852] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1369'. [ 438.413056][T10854] netlink: 'syz.5.1369': attribute type 9 has an invalid length. [ 438.423179][T10854] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1369'. [ 438.498755][T10857] netlink: 'syz.6.1370': attribute type 3 has an invalid length. [ 439.771268][T10886] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.1378'. [ 439.787255][T10886] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 440.446326][T10898] FAULT_INJECTION: forcing a failure. [ 440.446326][T10898] name failslab, interval 1, probability 0, space 0, times 0 [ 440.464068][T10900] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 440.490664][T10898] CPU: 0 PID: 10898 Comm: syz.6.1382 Not tainted syzkaller #0 [ 440.498296][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.508475][T10898] Call Trace: [ 440.511885][T10898] [ 440.514850][T10898] dump_stack_lvl+0x18c/0x250 [ 440.519592][T10898] ? show_regs_print_info+0x20/0x20 [ 440.524817][T10898] ? load_image+0x420/0x420 [ 440.529354][T10898] should_fail_ex+0x394/0x4c0 [ 440.534052][T10898] should_failslab+0x9/0x20 [ 440.538581][T10898] slab_pre_alloc_hook+0x59/0x300 [ 440.543632][T10898] kmem_cache_alloc+0x5a/0x2c0 [ 440.548418][T10898] ? __nf_conntrack_alloc+0x93/0x370 [ 440.553799][T10898] __nf_conntrack_alloc+0x93/0x370 [ 440.558927][T10898] init_conntrack+0x166/0xf40 [ 440.563624][T10898] ? early_drop+0x7f0/0x7f0 [ 440.568232][T10898] ? nf_conntrack_find_get+0x670/0x670 [ 440.573750][T10898] ? __local_bh_enable_ip+0x13a/0x1c0 [ 440.579143][T10898] ? __siphash_unaligned+0x25c/0x3d0 [ 440.584452][T10898] nf_conntrack_in+0xc29/0x1630 [ 440.589342][T10898] ? nf_ct_pernet+0x270/0x270 [ 440.594045][T10898] ? ipt_do_table+0x2c5/0x15c0 [ 440.598871][T10898] ? read_lock_is_recursive+0x20/0x20 [ 440.604261][T10898] ? get_random_u32+0x4d5/0x930 [ 440.609172][T10898] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 440.614647][T10898] ? ipv4_conntrack_local+0x123/0x200 [ 440.620033][T10898] ? ipv4_conntrack_in+0x20/0x20 [ 440.624982][T10898] nf_hook_slow+0xbd/0x200 [ 440.629423][T10898] ? nf_hook+0x390/0x390 [ 440.633746][T10898] nf_hook+0x228/0x390 [ 440.637836][T10898] ? nf_hook+0xa2/0x390 [ 440.642010][T10898] ? __ip_local_out+0x5f0/0x5f0 [ 440.646885][T10898] ? nf_hook+0x390/0x390 [ 440.651144][T10898] ? csum_partial+0x241/0x2c0 [ 440.655870][T10898] ? csum_block_add_ext+0x41/0x50 [ 440.660906][T10898] ? ip_fast_csum+0x1ee/0x2b0 [ 440.665609][T10898] __ip_local_out+0x4db/0x5f0 [ 440.670303][T10898] ? nf_hook+0x390/0x390 [ 440.674566][T10898] ip_send_skb+0x4c/0x1d0 [ 440.678908][T10898] udp_send_skb+0xa7d/0x1440 [ 440.683651][T10898] udp_sendmsg+0x77d/0x23d0 [ 440.688261][T10898] ? mark_lock+0x94/0x320 [ 440.692609][T10898] ? udp_sendmsg+0x23d0/0x23d0 [ 440.697389][T10898] ? mark_lock+0x94/0x320 [ 440.701735][T10898] ? udp_cmsg_send+0x350/0x350 [ 440.706540][T10898] ? verify_lock_unused+0x140/0x140 [ 440.711784][T10898] ? aa_label_sk_perm+0x4d4/0x660 [ 440.716832][T10898] ? verify_lock_unused+0x140/0x140 [ 440.722040][T10898] ? tomoyo_check_open_permission+0x384/0x460 [ 440.728135][T10898] udpv6_sendmsg+0x944/0x2350 [ 440.732897][T10898] ? udpv6_sendmsg+0x2350/0x2350 [ 440.737867][T10898] ? __might_sleep+0xe0/0xe0 [ 440.742481][T10898] ? udp_v6_early_demux+0xf90/0xf90 [ 440.747732][T10898] ? aa_af_perm+0x330/0x330 [ 440.752287][T10898] ? sock_rps_record_flow+0x19/0x3f0 [ 440.758243][T10898] ? inet_send_prepare+0x5b/0x250 [ 440.763285][T10898] ? inet6_sendmsg+0x5f/0xd0 [ 440.767889][T10898] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 440.773099][T10898] ____sys_sendmsg+0x61b/0x980 [ 440.777893][T10898] ? __asan_memset+0x22/0x40 [ 440.782508][T10898] ? __sys_sendmsg_sock+0x30/0x30 [ 440.787554][T10898] ? __import_iovec+0x5f2/0x850 [ 440.792528][T10898] ? import_iovec+0x73/0xa0 [ 440.797054][T10898] ___sys_sendmsg+0x2a6/0x360 [ 440.801784][T10898] ? get_pid_task+0x20/0x1e0 [ 440.806567][T10898] ? __sys_sendmsg+0x2b0/0x2b0 [ 440.811486][T10898] ? __lock_acquire+0x7d80/0x7d80 [ 440.816550][T10898] __se_sys_sendmsg+0x1d0/0x2c0 [ 440.821451][T10898] ? perf_trace_preemptirq_template+0x269/0x330 [ 440.827842][T10898] ? __x64_sys_sendmsg+0x80/0x80 [ 440.832897][T10898] ? lockdep_hardirqs_on+0x98/0x150 [ 440.838216][T10898] do_syscall_64+0x55/0xb0 [ 440.842662][T10898] ? clear_bhb_loop+0x40/0x90 [ 440.847353][T10898] ? clear_bhb_loop+0x40/0x90 [ 440.852048][T10898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.858056][T10898] RIP: 0033:0x7f61d099de59 [ 440.862488][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.882111][T10898] RSP: 002b:00007f61d17d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.890551][T10898] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099de59 [ 440.898623][T10898] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000005 [ 440.906628][T10898] RBP: 00007f61d17d7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.914643][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.922935][T10898] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffda9fad8a8 [ 440.930955][T10898] [ 440.966422][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.972895][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.129361][T10908] netlink: 'syz.5.1387': attribute type 10 has an invalid length. [ 441.154970][T10908] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 441.932998][T10931] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1392'. [ 442.515715][T10937] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 443.092313][T10949] netlink: 'syz.5.1400': attribute type 10 has an invalid length. [ 443.121309][T10949] hsr0: entered promiscuous mode [ 443.134257][T10949] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 443.167697][T10951] netlink: 'syz.1.1401': attribute type 10 has an invalid length. [ 443.199075][T10951] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1401'. [ 448.152475][T10974] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1407'. [ 448.163568][T10974] hsr_slave_0: left promiscuous mode [ 448.169965][T10974] hsr_slave_1: left promiscuous mode [ 448.399949][T10983] netlink: 'syz.5.1410': attribute type 9 has an invalid length. [ 448.562922][T10989] netlink: 'syz.1.1412': attribute type 9 has an invalid length. [ 448.695613][T10992] netlink: 'syz.6.1414': attribute type 9 has an invalid length. [ 448.798691][T11002] netlink: 'syz.4.1416': attribute type 10 has an invalid length. [ 448.844329][T11002] veth1_macvtap: left promiscuous mode [ 450.142298][T11024] netlink: 'syz.1.1425': attribute type 9 has an invalid length. [ 450.330800][T11027] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.414246][T11027] FAULT_INJECTION: forcing a failure. [ 450.414246][T11027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.465853][T11027] CPU: 0 PID: 11027 Comm: syz.6.1426 Not tainted syzkaller #0 [ 450.473401][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.483519][T11027] Call Trace: [ 450.487008][T11027] [ 450.489965][T11027] dump_stack_lvl+0x18c/0x250 [ 450.494776][T11027] ? show_regs_print_info+0x20/0x20 [ 450.500018][T11027] ? load_image+0x420/0x420 [ 450.504564][T11027] ? __lock_acquire+0x7d80/0x7d80 [ 450.509621][T11027] ? snprintf+0xe9/0x140 [ 450.513924][T11027] should_fail_ex+0x394/0x4c0 [ 450.518730][T11027] _copy_to_user+0x2f/0xa0 [ 450.523201][T11027] simple_read_from_buffer+0xe7/0x150 [ 450.528626][T11027] proc_fail_nth_read+0x1e8/0x260 [ 450.533695][T11027] ? proc_fault_inject_write+0x360/0x360 [ 450.539453][T11027] ? fsnotify_perm+0x271/0x5e0 [ 450.544376][T11027] ? proc_fault_inject_write+0x360/0x360 [ 450.550047][T11027] vfs_read+0x298/0x990 [ 450.554626][T11027] ? kernel_read+0x1e0/0x1e0 [ 450.559256][T11027] ? __fget_files+0x28/0x460 [ 450.563911][T11027] ? __fget_files+0x3fc/0x460 [ 450.568738][T11027] ? __fdget_pos+0x2a3/0x330 [ 450.573375][T11027] ? ksys_read+0x74/0x260 [ 450.577767][T11027] ksys_read+0x151/0x260 [ 450.582049][T11027] ? vfs_write+0x9a0/0x9a0 [ 450.586514][T11027] ? lockdep_hardirqs_on+0x98/0x150 [ 450.591762][T11027] do_syscall_64+0x55/0xb0 [ 450.596215][T11027] ? clear_bhb_loop+0x40/0x90 [ 450.600923][T11027] ? clear_bhb_loop+0x40/0x90 [ 450.605637][T11027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.611588][T11027] RIP: 0033:0x7f61d095e68e [ 450.616035][T11027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.635677][T11027] RSP: 002b:00007f61d17d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.644128][T11027] RAX: ffffffffffffffda RBX: 00007f61d17d76c0 RCX: 00007f61d095e68e [ 450.652141][T11027] RDX: 000000000000000f RSI: 00007f61d17d70a0 RDI: 0000000000000004 [ 450.660156][T11027] RBP: 00007f61d17d7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.668177][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.676262][T11027] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffda9fad8a8 [ 450.684379][T11027] [ 450.861008][T11029] netlink: 'syz.4.1427': attribute type 9 has an invalid length. [ 451.795937][T11057] netlink: 'syz.1.1436': attribute type 9 has an invalid length. [ 452.086384][T11064] netlink: 'syz.1.1440': attribute type 21 has an invalid length. [ 452.141081][T11064] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1440'. [ 452.412767][T11070] netlink: 'syz.6.1442': attribute type 21 has an invalid length. [ 452.434887][T11070] netlink: 'syz.6.1442': attribute type 6 has an invalid length. [ 452.496211][T11070] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1442'. [ 452.640498][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1442'. [ 452.682281][T11070] veth1_macvtap: entered allmulticast mode [ 453.030863][T11084] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 453.800639][T11091] FAULT_INJECTION: forcing a failure. [ 453.800639][T11091] name failslab, interval 1, probability 0, space 0, times 0 [ 453.819761][T11091] CPU: 0 PID: 11091 Comm: syz.5.1450 Not tainted syzkaller #0 [ 453.827382][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.837460][T11091] Call Trace: [ 453.840755][T11091] [ 453.843738][T11091] dump_stack_lvl+0x18c/0x250 [ 453.848455][T11091] ? show_regs_print_info+0x20/0x20 [ 453.853691][T11091] ? _printk+0x11c/0x130 [ 453.857969][T11091] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.864245][T11091] should_fail_ex+0x394/0x4c0 [ 453.868959][T11091] should_failslab+0x9/0x20 [ 453.873660][T11091] slab_pre_alloc_hook+0x59/0x300 [ 453.878721][T11091] kmem_cache_alloc_node+0x5e/0x310 [ 453.884029][T11091] ? perf_event_alloc+0x146/0x2150 [ 453.889188][T11091] perf_event_alloc+0x146/0x2150 [ 453.894179][T11091] ? _raw_spin_unlock+0x28/0x40 [ 453.899130][T11091] ? find_lively_task_by_vpid+0x19/0x290 [ 453.904793][T11091] ? find_lively_task_by_vpid+0x19/0x290 [ 453.910638][T11091] __se_sys_perf_event_open+0x740/0x1c60 [ 453.916329][T11091] ? ktime_get+0x24b/0x280 [ 453.920772][T11091] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 453.926460][T11091] ? syscall_enter_from_user_mode+0x2e/0x80 [ 453.932543][T11091] ? __x64_sys_perf_event_open+0x20/0xc0 [ 453.938203][T11091] do_syscall_64+0x55/0xb0 [ 453.942727][T11091] ? clear_bhb_loop+0x40/0x90 [ 453.947515][T11091] ? clear_bhb_loop+0x40/0x90 [ 453.952223][T11091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.958139][T11091] RIP: 0033:0x7fe23eb9de59 [ 453.962579][T11091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.982205][T11091] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 453.990640][T11091] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 453.998632][T11091] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 454.006621][T11091] RBP: 00007fe23f9d9090 R08: 0000000000000002 R09: 0000000000000000 [ 454.014713][T11091] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 454.022842][T11091] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 454.030919][T11091] [ 454.204639][T11091] validate_nla: 4 callbacks suppressed [ 454.204673][T11091] netlink: 'syz.5.1450': attribute type 21 has an invalid length. [ 454.259449][T11091] netlink: 'syz.5.1450': attribute type 6 has an invalid length. [ 454.273850][T11091] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1450'. [ 454.287454][T11092] netlink: 'syz.5.1450': attribute type 16 has an invalid length. [ 454.295379][T11092] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1450'. [ 454.307897][T11092] veth1_macvtap: entered allmulticast mode [ 454.315569][T11098] netlink: 'syz.4.1453': attribute type 21 has an invalid length. [ 454.341913][T11098] netlink: 'syz.4.1453': attribute type 6 has an invalid length. [ 454.373002][T11098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1453'. [ 454.379343][T11099] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1451'. [ 454.384503][T11102] netlink: 'syz.6.1454': attribute type 9 has an invalid length. [ 454.450501][T11100] netlink: 'syz.4.1453': attribute type 16 has an invalid length. [ 454.458630][T11100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1453'. [ 454.473295][T11100] veth1_macvtap: entered allmulticast mode [ 455.018142][T11113] netlink: 'syz.6.1457': attribute type 9 has an invalid length. [ 456.326811][T11138] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1464'. [ 456.357360][T11138] hsr_slave_0: left promiscuous mode [ 456.394199][T11138] hsr_slave_1: left promiscuous mode [ 456.554668][T11141] netlink: 'syz.1.1465': attribute type 9 has an invalid length. [ 456.832291][T11153] netlink: 'syz.4.1469': attribute type 29 has an invalid length. [ 456.867516][T11154] syzkaller0: refused to change device tx_queue_len [ 457.052421][T11162] FAULT_INJECTION: forcing a failure. [ 457.052421][T11162] name failslab, interval 1, probability 0, space 0, times 0 [ 457.095906][T11162] CPU: 1 PID: 11162 Comm: syz.1.1472 Not tainted syzkaller #0 [ 457.103470][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.113592][T11162] Call Trace: [ 457.116920][T11162] [ 457.119895][T11162] dump_stack_lvl+0x18c/0x250 [ 457.124652][T11162] ? show_regs_print_info+0x20/0x20 [ 457.129920][T11162] ? load_image+0x420/0x420 [ 457.134511][T11162] ? __might_sleep+0xe0/0xe0 [ 457.139172][T11162] ? __lock_acquire+0x7d80/0x7d80 [ 457.144265][T11162] should_fail_ex+0x394/0x4c0 [ 457.149019][T11162] should_failslab+0x9/0x20 [ 457.153578][T11162] slab_pre_alloc_hook+0x59/0x300 [ 457.158718][T11162] ? __lock_acquire+0x7d80/0x7d80 [ 457.163821][T11162] kmem_cache_alloc_node+0x5e/0x310 [ 457.169086][T11162] ? __alloc_skb+0x103/0x2c0 [ 457.173853][T11162] __alloc_skb+0x103/0x2c0 [ 457.178358][T11162] netlink_sendmsg+0x66a/0xbf0 [ 457.183231][T11162] ? netlink_getsockopt+0x590/0x590 [ 457.188523][T11162] ? apparmor_socket_sendmsg+0x8e/0x330 [ 457.194140][T11162] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 457.199481][T11162] ? security_socket_sendmsg+0x80/0xa0 [ 457.205001][T11162] ? netlink_getsockopt+0x590/0x590 [ 457.210264][T11162] ____sys_sendmsg+0x61b/0x980 [ 457.215109][T11162] ? __asan_memset+0x22/0x40 [ 457.219855][T11162] ? __sys_sendmsg_sock+0x30/0x30 [ 457.224948][T11162] ? __import_iovec+0x5f2/0x850 [ 457.229882][T11162] ? import_iovec+0x73/0xa0 [ 457.234453][T11162] ___sys_sendmsg+0x2a6/0x360 [ 457.239187][T11162] ? get_pid_task+0x20/0x1e0 [ 457.243845][T11162] ? __sys_sendmsg+0x2b0/0x2b0 [ 457.248730][T11162] ? __lock_acquire+0x7d80/0x7d80 [ 457.253877][T11162] __se_sys_sendmsg+0x1d0/0x2c0 [ 457.258906][T11162] ? __x64_sys_sendmsg+0x80/0x80 [ 457.263946][T11162] ? lockdep_hardirqs_on+0x98/0x150 [ 457.269500][T11162] do_syscall_64+0x55/0xb0 [ 457.273979][T11162] ? clear_bhb_loop+0x40/0x90 [ 457.278735][T11162] ? clear_bhb_loop+0x40/0x90 [ 457.283475][T11162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.289426][T11162] RIP: 0033:0x7f90d8b9de59 [ 457.293889][T11162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.313734][T11162] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.322218][T11162] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 457.330344][T11162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 457.338366][T11162] RBP: 00007f90d9a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 457.346386][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.354424][T11162] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 457.362502][T11162] [ 458.620753][T11185] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1479'. [ 459.035332][T11192] FAULT_INJECTION: forcing a failure. [ 459.035332][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 459.051477][T11192] CPU: 0 PID: 11192 Comm: syz.5.1483 Not tainted syzkaller #0 [ 459.058980][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 459.069081][T11192] Call Trace: [ 459.072412][T11192] [ 459.075362][T11192] dump_stack_lvl+0x18c/0x250 [ 459.080128][T11192] ? show_regs_print_info+0x20/0x20 [ 459.085400][T11192] ? load_image+0x420/0x420 [ 459.089963][T11192] ? __might_sleep+0xe0/0xe0 [ 459.094677][T11192] ? __lock_acquire+0x7d80/0x7d80 [ 459.099740][T11192] should_fail_ex+0x394/0x4c0 [ 459.104453][T11192] should_failslab+0x9/0x20 [ 459.108993][T11192] slab_pre_alloc_hook+0x59/0x300 [ 459.114044][T11192] ? __kernfs_new_node+0xaa/0x7f0 [ 459.119090][T11192] ? __kernfs_new_node+0xaa/0x7f0 [ 459.124132][T11192] __kmem_cache_alloc_node+0x53/0x250 [ 459.129623][T11192] ? __kernfs_new_node+0xaa/0x7f0 [ 459.134665][T11192] __kmalloc_node_track_caller+0xa4/0x230 [ 459.140411][T11192] kstrdup+0x3b/0x80 [ 459.144362][T11192] __kernfs_new_node+0xaa/0x7f0 [ 459.149239][T11192] ? perf_trace_lock_acquire+0x105/0x400 [ 459.154891][T11192] ? kernfs_new_node+0x260/0x260 [ 459.159868][T11192] ? perf_trace_lock+0xfc/0x3b0 [ 459.164762][T11192] ? trace_event_raw_event_lock+0x240/0x240 [ 459.170675][T11192] ? make_kgid+0x1c8/0x650 [ 459.175118][T11192] ? from_kuid_munged+0x6e0/0x6e0 [ 459.180254][T11192] kernfs_new_node+0x14c/0x260 [ 459.185045][T11192] kernfs_create_dir_ns+0x44/0x120 [ 459.190183][T11192] sysfs_create_dir_ns+0x130/0x2a0 [ 459.195395][T11192] ? __lock_acquire+0x7d80/0x7d80 [ 459.200451][T11192] ? sysfs_warn_dup+0xa0/0xa0 [ 459.205145][T11192] ? do_raw_spin_unlock+0x121/0x230 [ 459.210377][T11192] kobject_add_internal+0x617/0xc90 [ 459.215616][T11192] kobject_add+0x164/0x240 [ 459.220236][T11192] ? __rwlock_init+0x150/0x150 [ 459.225020][T11192] ? kobject_init+0x1d0/0x1d0 [ 459.229735][T11192] ? kobject_put+0x41a/0x450 [ 459.234351][T11192] ? get_device_parent+0x366/0x390 [ 459.239484][T11192] device_add+0x3fa/0xc40 [ 459.243831][T11192] netdev_register_kobject+0x188/0x320 [ 459.249322][T11192] register_netdevice+0x12aa/0x1ba0 [ 459.254568][T11192] ? netif_stacked_transfer_operstate+0x210/0x210 [ 459.261015][T11192] ? __asan_memset+0x22/0x40 [ 459.265625][T11192] ? alloc_netdev_mqs+0xba3/0x1040 [ 459.270823][T11192] ? __asan_memcpy+0x40/0x70 [ 459.275439][T11192] ? __ip_tunnel_create+0x386/0x4d0 [ 459.280807][T11192] __ip_tunnel_create+0x3bc/0x4d0 [ 459.285856][T11192] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 459.291090][T11192] ip_tunnel_ctl+0xc36/0x1910 [ 459.296682][T11192] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 459.302247][T11192] ? dev_ioctl+0x83c/0x1140 [ 459.306774][T11192] ? ip_tunnel_update+0xae0/0xae0 [ 459.312013][T11192] ? dev_ifsioc+0x957/0xc40 [ 459.316534][T11192] dev_ioctl+0x84c/0x1140 [ 459.320911][T11192] sock_ioctl+0x74c/0x7e0 [ 459.325264][T11192] ? sock_poll+0x3e0/0x3e0 [ 459.329792][T11192] ? bpf_lsm_file_ioctl+0x9/0x10 [ 459.334746][T11192] ? security_file_ioctl+0x80/0xa0 [ 459.339907][T11192] ? sock_poll+0x3e0/0x3e0 [ 459.344355][T11192] __se_sys_ioctl+0xfd/0x170 [ 459.348977][T11192] do_syscall_64+0x55/0xb0 [ 459.353420][T11192] ? clear_bhb_loop+0x40/0x90 [ 459.358117][T11192] ? clear_bhb_loop+0x40/0x90 [ 459.362853][T11192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.368797][T11192] RIP: 0033:0x7fe23eb9de59 [ 459.373235][T11192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.393053][T11192] RSP: 002b:00007fe23f9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.401498][T11192] RAX: ffffffffffffffda RBX: 00007fe23ee25fa0 RCX: 00007fe23eb9de59 [ 459.409501][T11192] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 459.417577][T11192] RBP: 00007fe23f9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 459.425571][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.433560][T11192] R13: 00007fe23ee26038 R14: 00007fe23ee25fa0 R15: 00007fff6bd0aff8 [ 459.441572][T11192] [ 459.479239][T11192] kobject: kobject_add_internal failed for  (error: -12 parent: net) [ 459.551928][T11189] validate_nla: 8 callbacks suppressed [ 459.551976][T11189] netlink: 'syz.1.1482': attribute type 3 has an invalid length. [ 459.571936][T11189] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1482'. [ 459.807472][T11202] netlink: 668 bytes leftover after parsing attributes in process `syz.5.1487'. [ 459.816823][T11202] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 459.825179][T11202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 460.265948][ T5084] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 460.272746][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 460.555557][T11199] netlink: 'syz.6.1486': attribute type 9 has an invalid length. [ 460.777397][T11213] netlink: 'syz.5.1490': attribute type 9 has an invalid length. [ 462.458151][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1498'. [ 462.506949][T11228] netlink: 'syz.4.1497': attribute type 9 has an invalid length. [ 462.884465][T11237] netlink: 'syz.4.1501': attribute type 9 has an invalid length. [ 463.917384][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1510'. [ 463.926831][T11260] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1510'. [ 463.959681][T11258] netlink: 'syz.5.1509': attribute type 9 has an invalid length. [ 464.612713][T11271] netlink: 'syz.1.1514': attribute type 9 has an invalid length. [ 465.623892][T11282] netlink: 'syz.6.1519': attribute type 9 has an invalid length. [ 465.842517][T11291] netlink: 'syz.6.1523': attribute type 9 has an invalid length. [ 466.418112][T11310] netlink: 'syz.1.1531': attribute type 9 has an invalid length. [ 467.110436][T11318] netlink: 'syz.4.1535': attribute type 9 has an invalid length. [ 467.701702][T11338] netlink: 'syz.1.1542': attribute type 9 has an invalid length. [ 467.931769][ T5782] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 468.899725][T11350] netlink: 'syz.4.1546': attribute type 9 has an invalid length. [ 469.356099][T11366] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.1551'. [ 469.701029][T11372] netlink: 'syz.5.1553': attribute type 9 has an invalid length. [ 470.235610][T11383] netlink: 'syz.5.1558': attribute type 9 has an invalid length. [ 471.054412][T11395] netlink: 'syz.1.1563': attribute type 9 has an invalid length. [ 472.155421][T11418] netlink: 'syz.5.1572': attribute type 1 has an invalid length. [ 472.175437][T11418] netlink: 'syz.5.1572': attribute type 3 has an invalid length. [ 472.256827][T11418] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1572'. [ 472.574953][T11424] netlink: 'syz.6.1573': attribute type 9 has an invalid length. [ 472.849320][T11431] netlink: 'syz.5.1575': attribute type 9 has an invalid length. [ 473.765927][T11443] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.1579'. [ 474.652746][T11459] netlink: 'syz.5.1585': attribute type 9 has an invalid length. [ 474.909190][T11463] netlink: 'syz.1.1586': attribute type 9 has an invalid length. [ 478.323131][T11488] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1592'. [ 478.529406][T11496] netlink: 'syz.5.1595': attribute type 9 has an invalid length. [ 478.616567][T11497] netlink: 'syz.6.1596': attribute type 9 has an invalid length. [ 481.800003][T11506] netlink: 'syz.5.1600': attribute type 29 has an invalid length. [ 481.886795][T11506] netlink: 'syz.5.1600': attribute type 29 has an invalid length. [ 481.897071][T11511] netlink: 'syz.5.1600': attribute type 29 has an invalid length. [ 481.949655][T11505] netlink: 'syz.5.1600': attribute type 29 has an invalid length. [ 483.459725][T11525] netlink: 'syz.1.1605': attribute type 9 has an invalid length. [ 483.490144][T11527] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1606'. [ 483.603570][T11534] netlink: 209596 bytes leftover after parsing attributes in process `syz.5.1607'. [ 483.670515][T11536] netlink: 'syz.1.1609': attribute type 9 has an invalid length. [ 484.496807][T11546] netlink: 'syz.1.1613': attribute type 41 has an invalid length. [ 487.229017][T11570] netlink: 'syz.6.1619': attribute type 9 has an invalid length. [ 488.911255][T11578] netlink: 'syz.6.1621': attribute type 9 has an invalid length. [ 490.112033][T11586] FAULT_INJECTION: forcing a failure. [ 490.112033][T11586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.175836][T11586] CPU: 0 PID: 11586 Comm: syz.6.1624 Not tainted syzkaller #0 [ 490.183372][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.193547][T11586] Call Trace: [ 490.196877][T11586] [ 490.199835][T11586] dump_stack_lvl+0x18c/0x250 [ 490.204742][T11586] ? show_regs_print_info+0x20/0x20 [ 490.210105][T11586] ? load_image+0x420/0x420 [ 490.214836][T11586] ? __might_fault+0xaa/0x120 [ 490.219546][T11586] ? __lock_acquire+0x7d80/0x7d80 [ 490.224598][T11586] should_fail_ex+0x394/0x4c0 [ 490.229308][T11586] _copy_from_user+0x2f/0xe0 [ 490.233936][T11586] ___sys_sendmsg+0x1c7/0x360 [ 490.238752][T11586] ? get_pid_task+0x20/0x1e0 [ 490.243411][T11586] ? __sys_sendmsg+0x2b0/0x2b0 [ 490.248252][T11586] ? __lock_acquire+0x7d80/0x7d80 [ 490.253344][T11586] __se_sys_sendmsg+0x1d0/0x2c0 [ 490.258330][T11586] ? __x64_sys_sendmsg+0x80/0x80 [ 490.263326][T11586] ? lockdep_hardirqs_on+0x98/0x150 [ 490.268583][T11586] do_syscall_64+0x55/0xb0 [ 490.273050][T11586] ? clear_bhb_loop+0x40/0x90 [ 490.277834][T11586] ? clear_bhb_loop+0x40/0x90 [ 490.282703][T11586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.288618][T11586] RIP: 0033:0x7f61d099de59 [ 490.293057][T11586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.312778][T11586] RSP: 002b:00007f61d17d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.321227][T11586] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099de59 [ 490.329312][T11586] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 490.337435][T11586] RBP: 00007f61d17d7090 R08: 0000000000000000 R09: 0000000000000000 [ 490.345986][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.354066][T11586] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffda9fad8a8 [ 490.362091][T11586] [ 490.699616][T11596] netlink: 'syz.6.1629': attribute type 9 has an invalid length. [ 490.740941][T11598] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 490.797092][T11598] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1630'. [ 490.879197][T11604] FAULT_INJECTION: forcing a failure. [ 490.879197][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.897146][T11604] CPU: 1 PID: 11604 Comm: syz.6.1632 Not tainted syzkaller #0 [ 490.904761][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.914946][T11604] Call Trace: [ 490.918270][T11604] [ 490.921233][T11604] dump_stack_lvl+0x18c/0x250 [ 490.925970][T11604] ? show_regs_print_info+0x20/0x20 [ 490.931213][T11604] ? load_image+0x420/0x420 [ 490.935762][T11604] ? __might_fault+0xaa/0x120 [ 490.940482][T11604] ? __lock_acquire+0x7d80/0x7d80 [ 490.945547][T11604] ? __virt_addr_valid+0x10c/0x380 [ 490.950699][T11604] should_fail_ex+0x394/0x4c0 [ 490.955424][T11604] _copy_from_user+0x2f/0xe0 [ 490.960057][T11604] sctp_setsockopt+0x19e/0x11e0 [ 490.964933][T11604] ? sock_common_recvmsg+0x190/0x190 [ 490.970246][T11604] do_sock_setsockopt+0x175/0x1a0 [ 490.975403][T11604] ? __fdget+0x180/0x210 [ 490.979672][T11604] __x64_sys_setsockopt+0x182/0x200 [ 490.984897][T11604] do_syscall_64+0x55/0xb0 [ 490.989340][T11604] ? clear_bhb_loop+0x40/0x90 [ 490.994038][T11604] ? clear_bhb_loop+0x40/0x90 [ 490.998728][T11604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.004636][T11604] RIP: 0033:0x7f61d099de59 [ 491.009074][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.028694][T11604] RSP: 002b:00007f61d17d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 491.037123][T11604] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099de59 [ 491.045103][T11604] RDX: 0000000000000013 RSI: 0000000000000084 RDI: 0000000000000003 [ 491.053085][T11604] RBP: 00007f61d17d7090 R08: 0000000000000004 R09: 0000000000000000 [ 491.061071][T11604] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 491.069055][T11604] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffda9fad8a8 [ 491.077084][T11604] [ 491.495484][T11599] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1627'. [ 491.523810][T11599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.550177][T11609] netlink: 'syz.6.1633': attribute type 9 has an invalid length. [ 491.784185][T11616] netlink: 'syz.6.1637': attribute type 9 has an invalid length. [ 491.805931][T11616] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1637'. [ 492.050199][T11621] netlink: 'syz.6.1637': attribute type 9 has an invalid length. [ 492.111028][T11621] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1637'. [ 492.867800][T11631] netlink: 'syz.5.1641': attribute type 9 has an invalid length. [ 493.421249][T11647] netlink: 'syz.1.1645': attribute type 9 has an invalid length. [ 495.061903][T11661] netlink: 'syz.5.1652': attribute type 9 has an invalid length. [ 496.899432][T11676] netlink: 'syz.4.1658': attribute type 9 has an invalid length. [ 497.151035][T11675] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1659'. [ 497.497293][T11681] netlink: 'syz.1.1660': attribute type 9 has an invalid length. [ 497.505689][T11681] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1660'. [ 497.532848][T11687] netlink: 'syz.6.1663': attribute type 9 has an invalid length. [ 497.642028][T11691] FAULT_INJECTION: forcing a failure. [ 497.642028][T11691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.683240][T11691] CPU: 1 PID: 11691 Comm: syz.4.1664 Not tainted syzkaller #0 [ 497.690799][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.700900][T11691] Call Trace: [ 497.704218][T11691] [ 497.707230][T11691] dump_stack_lvl+0x18c/0x250 [ 497.711967][T11691] ? show_regs_print_info+0x20/0x20 [ 497.717206][T11691] ? load_image+0x420/0x420 [ 497.721769][T11691] ? __might_fault+0xaa/0x120 [ 497.726581][T11691] ? __lock_acquire+0x7d80/0x7d80 [ 497.731728][T11691] ? __virt_addr_valid+0x10c/0x380 [ 497.736887][T11691] should_fail_ex+0x394/0x4c0 [ 497.741796][T11691] _copy_to_user+0x2f/0xa0 [ 497.746259][T11691] generic_map_lookup_batch+0x8ba/0xc60 [ 497.751858][T11691] ? bpf_map_update_value+0x710/0x710 [ 497.757275][T11691] ? __fdget+0x180/0x210 [ 497.761561][T11691] ? bpf_map_update_value+0x710/0x710 [ 497.767049][T11691] bpf_map_do_batch+0x2e3/0x600 [ 497.771944][T11691] ? bpf_lsm_bpf+0x9/0x10 [ 497.776485][T11691] ? security_bpf+0x7e/0xa0 [ 497.781026][T11691] __sys_bpf+0x7d7/0x890 [ 497.785304][T11691] ? bpf_link_show_fdinfo+0x390/0x390 [ 497.790724][T11691] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.797115][T11691] __x64_sys_bpf+0x7c/0x90 [ 497.801651][T11691] do_syscall_64+0x55/0xb0 [ 497.806108][T11691] ? clear_bhb_loop+0x40/0x90 [ 497.810814][T11691] ? clear_bhb_loop+0x40/0x90 [ 497.815525][T11691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.821458][T11691] RIP: 0033:0x7f513ed9de59 [ 497.825916][T11691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.845739][T11691] RSP: 002b:00007f513fcb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.854300][T11691] RAX: ffffffffffffffda RBX: 00007f513f025fa0 RCX: 00007f513ed9de59 [ 497.862317][T11691] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 497.870326][T11691] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 497.878336][T11691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.886344][T11691] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 497.894386][T11691] [ 498.420175][T11705] netlink: 'syz.4.1669': attribute type 9 has an invalid length. [ 499.283324][T11730] netlink: 'syz.5.1675': attribute type 9 has an invalid length. [ 499.889156][T11747] netlink: 'syz.5.1680': attribute type 9 has an invalid length. [ 500.713840][T11759] netlink: 'syz.4.1686': attribute type 9 has an invalid length. [ 501.700130][T11779] netlink: 'syz.5.1693': attribute type 9 has an invalid length. [ 502.072783][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.079637][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.456649][T11784] netlink: 'syz.6.1697': attribute type 9 has an invalid length. [ 502.476033][T11789] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.1695'. [ 502.819433][T11796] netlink: 'syz.1.1700': attribute type 29 has an invalid length. [ 502.845512][T11796] netlink: 'syz.1.1700': attribute type 29 has an invalid length. [ 503.175343][T11811] netlink: 'syz.5.1704': attribute type 9 has an invalid length. [ 504.300955][T11831] netlink: 'syz.6.1710': attribute type 9 has an invalid length. [ 504.404843][T11835] س: renamed from bond0 [ 504.463918][T11833] can: request_module (can-proto-0) failed. [ 504.650036][T11841] netlink: 'syz.6.1714': attribute type 9 has an invalid length. [ 505.852572][T11865] netlink: 'syz.1.1722': attribute type 9 has an invalid length. [ 505.871044][T11867] netlink: 'syz.6.1723': attribute type 21 has an invalid length. [ 506.094651][T11869] netlink: 'syz.4.1724': attribute type 29 has an invalid length. [ 506.138207][T11874] netlink: 'syz.6.1726': attribute type 9 has an invalid length. [ 506.173380][T11869] netlink: 'syz.4.1724': attribute type 29 has an invalid length. [ 506.266586][T11871] netlink: 'syz.4.1724': attribute type 29 has an invalid length. [ 506.279787][T11873] netlink: 'syz.4.1724': attribute type 29 has an invalid length. [ 506.708435][T11895] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1730'. [ 506.765546][T11895] bridge_slave_1: default FDB implementation only supports local addresses [ 507.367838][T11897] netlink: 'syz.4.1733': attribute type 9 has an invalid length. [ 507.628602][T11903] syzkaller0: entered promiscuous mode [ 507.634527][T11903] syzkaller0: entered allmulticast mode [ 508.021768][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.029327][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.061649][T11899] bond0: (slave bridge0): Releasing backup interface [ 509.252694][T11935] syzkaller0: entered promiscuous mode [ 509.265866][T11935] syzkaller0: entered allmulticast mode [ 509.460974][T11941] validate_nla: 4 callbacks suppressed [ 509.461022][T11941] netlink: 'syz.1.1747': attribute type 9 has an invalid length. [ 512.752352][T11955] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 512.759646][T11955] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 512.776860][T11963] netlink: 'syz.5.1755': attribute type 9 has an invalid length. [ 512.867819][ T5782] Bluetooth: hci6: ISO packet for unknown connection handle 2622 [ 512.969580][T11971] netlink: 'syz.1.1758': attribute type 9 has an invalid length. [ 513.089933][T11975] netlink: 'syz.6.1760': attribute type 29 has an invalid length. [ 513.099569][T11975] netlink: 'syz.6.1760': attribute type 29 has an invalid length. [ 513.186217][T11975] netlink: 'syz.6.1760': attribute type 29 has an invalid length. [ 513.342039][T11983] netlink: 'syz.6.1763': attribute type 29 has an invalid length. [ 513.352064][T11983] netlink: 'syz.6.1763': attribute type 29 has an invalid length. [ 513.362271][T11983] FAULT_INJECTION: forcing a failure. [ 513.362271][T11983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.378418][T11983] CPU: 1 PID: 11983 Comm: syz.6.1763 Not tainted syzkaller #0 [ 513.386045][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.396143][T11983] Call Trace: [ 513.399483][T11983] [ 513.402450][T11983] dump_stack_lvl+0x18c/0x250 [ 513.407185][T11983] ? show_regs_print_info+0x20/0x20 [ 513.412509][T11983] ? load_image+0x420/0x420 [ 513.417065][T11983] ? __might_fault+0xaa/0x120 [ 513.421794][T11983] should_fail_ex+0x394/0x4c0 [ 513.426518][T11983] copyout+0x1a/0x90 [ 513.430454][T11983] _copy_to_iter+0x42b/0x1110 [ 513.435170][T11983] ? __virt_addr_valid+0x10c/0x380 [ 513.440427][T11983] ? iov_iter_init+0x1e0/0x1e0 [ 513.445220][T11983] ? __virt_addr_valid+0x10c/0x380 [ 513.450372][T11983] ? __virt_addr_valid+0x10c/0x380 [ 513.455532][T11983] ? __virt_addr_valid+0x10c/0x380 [ 513.460693][T11983] ? __check_object_size+0x4fc/0xa40 [ 513.466028][T11983] __skb_datagram_iter+0xdb/0x780 [ 513.471113][T11983] ? skb_copy_datagram_iter+0x200/0x200 [ 513.476814][T11983] skb_copy_datagram_iter+0xb1/0x200 [ 513.482175][T11983] netlink_recvmsg+0x2d4/0xe60 [ 513.487020][T11983] ? netlink_sendmsg+0xbf0/0xbf0 [ 513.492044][T11983] ? aa_af_perm+0x330/0x330 [ 513.496608][T11983] ? __lock_acquire+0x1262/0x7d80 [ 513.502063][T11983] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 513.507407][T11983] ? security_socket_recvmsg+0x89/0xb0 [ 513.512934][T11983] ? netlink_sendmsg+0xbf0/0xbf0 [ 513.517942][T11983] ____sys_recvmsg+0x2bd/0x5d0 [ 513.522769][T11983] ? __sys_recvmsg_sock+0x50/0x50 [ 513.527860][T11983] ? import_iovec+0x73/0xa0 [ 513.532415][T11983] ___sys_recvmsg+0x214/0x590 [ 513.537165][T11983] ? __sys_recvmsg+0x2a0/0x2a0 [ 513.542012][T11983] ? ksys_write+0x1d2/0x260 [ 513.546576][T11983] ? __fget_files+0x3fc/0x460 [ 513.551310][T11983] __x64_sys_recvmsg+0x21e/0x2f0 [ 513.556287][T11983] ? ___sys_recvmsg+0x590/0x590 [ 513.561195][T11983] ? lockdep_hardirqs_on+0x98/0x150 [ 513.566438][T11983] do_syscall_64+0x55/0xb0 [ 513.570895][T11983] ? clear_bhb_loop+0x40/0x90 [ 513.575605][T11983] ? clear_bhb_loop+0x40/0x90 [ 513.580318][T11983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.586254][T11983] RIP: 0033:0x7f61d099de59 [ 513.590705][T11983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.610355][T11983] RSP: 002b:00007f61d17d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 513.618815][T11983] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099de59 [ 513.626864][T11983] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 513.634872][T11983] RBP: 00007f61d17d7090 R08: 0000000000000000 R09: 0000000000000000 [ 513.642881][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.650895][T11983] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffda9fad8a8 [ 513.659104][T11983] [ 513.745166][T11983] netlink: 'syz.6.1763': attribute type 29 has an invalid length. [ 514.282530][T11996] netlink: 'syz.5.1765': attribute type 9 has an invalid length. [ 514.538177][T12006] validate_nla: 3 callbacks suppressed [ 514.538357][T12006] netlink: 'syz.5.1770': attribute type 9 has an invalid length. [ 515.410531][T12014] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 515.423281][T12014] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 515.521344][T12020] netlink: 'syz.4.1777': attribute type 11 has an invalid length. [ 515.546023][T12020] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.1777'. [ 515.699069][T12025] netlink: 'syz.6.1778': attribute type 9 has an invalid length. [ 516.248589][T12043] netlink: 'syz.4.1784': attribute type 9 has an invalid length. [ 516.341953][T12045] FAULT_INJECTION: forcing a failure. [ 516.341953][T12045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.361340][T12045] CPU: 1 PID: 12045 Comm: syz.4.1786 Not tainted syzkaller #0 [ 516.368861][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.378926][T12045] Call Trace: [ 516.382220][T12045] [ 516.385191][T12045] dump_stack_lvl+0x18c/0x250 [ 516.389927][T12045] ? show_regs_print_info+0x20/0x20 [ 516.395148][T12045] ? load_image+0x420/0x420 [ 516.399758][T12045] ? __lock_acquire+0x7d80/0x7d80 [ 516.404809][T12045] ? snprintf+0xe9/0x140 [ 516.409075][T12045] should_fail_ex+0x394/0x4c0 [ 516.413956][T12045] _copy_to_user+0x2f/0xa0 [ 516.418400][T12045] simple_read_from_buffer+0xe7/0x150 [ 516.423805][T12045] proc_fail_nth_read+0x1e8/0x260 [ 516.428865][T12045] ? proc_fault_inject_write+0x360/0x360 [ 516.434543][T12045] ? fsnotify_perm+0x271/0x5e0 [ 516.439328][T12045] ? proc_fault_inject_write+0x360/0x360 [ 516.445065][T12045] vfs_read+0x298/0x990 [ 516.449253][T12045] ? kernel_read+0x1e0/0x1e0 [ 516.453870][T12045] ? __fget_files+0x28/0x460 [ 516.458480][T12045] ? __fget_files+0x3fc/0x460 [ 516.463179][T12045] ? __fdget_pos+0x2a3/0x330 [ 516.467884][T12045] ? ksys_read+0x74/0x260 [ 516.472318][T12045] ksys_read+0x151/0x260 [ 516.476847][T12045] ? vfs_write+0x9a0/0x9a0 [ 516.481369][T12045] ? lockdep_hardirqs_on+0x98/0x150 [ 516.486679][T12045] do_syscall_64+0x55/0xb0 [ 516.491170][T12045] ? clear_bhb_loop+0x40/0x90 [ 516.495865][T12045] ? clear_bhb_loop+0x40/0x90 [ 516.500593][T12045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.506535][T12045] RIP: 0033:0x7f513ed5e68e [ 516.510985][T12045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.530625][T12045] RSP: 002b:00007f513fcaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.539140][T12045] RAX: ffffffffffffffda RBX: 00007f513fcb06c0 RCX: 00007f513ed5e68e [ 516.547219][T12045] RDX: 000000000000000f RSI: 00007f513fcb00a0 RDI: 0000000000000004 [ 516.555203][T12045] RBP: 00007f513fcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 516.563645][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.571712][T12045] R13: 00007f513f026038 R14: 00007f513f025fa0 R15: 00007ffc050af5c8 [ 516.579713][T12045] [ 517.539354][T12056] netlink: 'syz.5.1789': attribute type 9 has an invalid length. [ 518.100230][T12066] netlink: 'syz.1.1795': attribute type 9 has an invalid length. [ 519.524759][T12097] netlink: 'syz.1.1804': attribute type 9 has an invalid length. [ 519.574659][T12098] netlink: 'syz.6.1806': attribute type 9 has an invalid length. [ 519.606857][T12100] netlink: 'syz.5.1807': attribute type 10 has an invalid length. [ 519.624734][T12100] netlink: 'syz.5.1807': attribute type 10 has an invalid length. [ 519.656326][T12100] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 520.013151][T12110] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 520.022958][T12110] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 520.055628][T12110] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1809'. [ 520.087259][T12110] openvswitch: netlink: Message has 4 unknown bytes. [ 520.144401][T12118] S: renamed from bond_slave_0 (while UP) [ 520.778023][T12112] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1811'. [ 520.800325][T12112] bridge_slave_1: default FDB implementation only supports local addresses [ 521.005376][T12129] netlink: 'syz.1.1816': attribute type 7 has an invalid length. [ 521.009743][T12126] netlink: 26 bytes leftover after parsing attributes in process `syz.5.1815'. [ 521.054751][T12130] netlink: 'syz.4.1817': attribute type 9 has an invalid length. [ 521.328707][T12137] netlink: 'syz.4.1818': attribute type 9 has an invalid length. [ 521.959911][T12143] netlink: 'syz.1.1820': attribute type 33 has an invalid length. [ 521.973228][T12143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1820'. [ 521.994192][T12143] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 522.040301][T12158] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.1824'. [ 522.074903][T12158] netlink: 4548 bytes leftover after parsing attributes in process `syz.5.1824'. [ 522.138183][T12158] netlink: 'syz.5.1824': attribute type 1 has an invalid length. [ 522.382858][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.423559][T12159] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.431122][T12159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.489574][T12159] team0: Port device bridge0 added [ 522.767861][T12168] س: renamed from bond0 [ 523.455239][T12184] sctp: [Deprecated]: syz.1.1835 (pid 12184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.455239][T12184] Use struct sctp_sack_info instead [ 524.612648][T12190] validate_nla: 8 callbacks suppressed [ 524.612671][T12190] netlink: 'syz.6.1837': attribute type 9 has an invalid length. [ 525.771977][T12202] netlink: 'syz.5.1841': attribute type 9 has an invalid length. [ 526.618649][T12216] netlink: 'syz.5.1846': attribute type 9 has an invalid length. [ 526.958605][T12224] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 526.976092][T12223] netlink: 'syz.1.1849': attribute type 21 has an invalid length. [ 526.993810][T12223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1849'. [ 527.015864][T12223] netlink: 'syz.1.1849': attribute type 5 has an invalid length. [ 527.036797][T12223] netlink: 'syz.1.1849': attribute type 6 has an invalid length. [ 527.063668][T12223] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1849'. [ 527.257841][T12229] netlink: 'syz.6.1850': attribute type 10 has an invalid length. [ 527.366120][T12229] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1850'. [ 530.242695][T12239] netlink: 'syz.4.1854': attribute type 9 has an invalid length. [ 530.414769][T12244] netlink: 'syz.5.1856': attribute type 9 has an invalid length. [ 531.250938][T12263] netlink: 'syz.5.1861': attribute type 10 has an invalid length. [ 532.471303][T12276] netlink: 'syz.5.1867': attribute type 9 has an invalid length. [ 533.788297][T12305] netlink: 'syz.1.1875': attribute type 21 has an invalid length. [ 533.836367][T12305] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1875'. [ 534.150035][T12309] netlink: 'syz.1.1876': attribute type 9 has an invalid length. [ 535.280522][T12321] netlink: 'syz.6.1880': attribute type 9 has an invalid length. [ 535.477241][T12326] FAULT_INJECTION: forcing a failure. [ 535.477241][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 535.523059][T12326] CPU: 0 PID: 12326 Comm: syz.4.1882 Not tainted syzkaller #0 [ 535.530609][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.540832][T12326] Call Trace: [ 535.544145][T12326] [ 535.547376][T12326] dump_stack_lvl+0x18c/0x250 [ 535.552105][T12326] ? show_regs_print_info+0x20/0x20 [ 535.557366][T12326] ? load_image+0x420/0x420 [ 535.561923][T12326] ? __lock_acquire+0x7d80/0x7d80 [ 535.566988][T12326] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 535.573018][T12326] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 535.580230][T12326] should_fail_ex+0x394/0x4c0 [ 535.584940][T12326] should_failslab+0x9/0x20 [ 535.589492][T12326] slab_pre_alloc_hook+0x59/0x300 [ 535.594614][T12326] ? rxrpc_alloc_peer+0x7e/0x340 [ 535.599713][T12326] __kmem_cache_alloc_node+0x53/0x250 [ 535.605139][T12326] ? rxrpc_alloc_peer+0x7e/0x340 [ 535.610128][T12326] kmalloc_trace+0x2a/0xe0 [ 535.614697][T12326] rxrpc_alloc_peer+0x7e/0x340 [ 535.619521][T12326] rxrpc_lookup_peer+0x3f4/0x850 [ 535.624604][T12326] rxrpc_new_client_call+0xba9/0x1400 [ 535.630035][T12326] rxrpc_do_sendmsg+0xe03/0x12d0 [ 535.635038][T12326] ? rxrpc_propose_abort+0x1f0/0x1f0 [ 535.640390][T12326] ? rxrpc_sendmsg+0x326/0x5b0 [ 535.645317][T12326] ? rxrpc_sendmsg+0x373/0x5b0 [ 535.650135][T12326] ? rxrpc_getsockopt+0x150/0x150 [ 535.655212][T12326] ____sys_sendmsg+0x61b/0x980 [ 535.660034][T12326] ? __sys_sendmsg_sock+0x30/0x30 [ 535.665276][T12326] ? __import_iovec+0x5f2/0x850 [ 535.670185][T12326] ? import_iovec+0x73/0xa0 [ 535.674734][T12326] ___sys_sendmsg+0x2a6/0x360 [ 535.679467][T12326] ? __sys_sendmsg+0x2b0/0x2b0 [ 535.684358][T12326] __se_sys_sendmsg+0x1d0/0x2c0 [ 535.689281][T12326] ? __x64_sys_sendmsg+0x80/0x80 [ 535.694299][T12326] ? syscall_enter_from_user_mode+0x2e/0x80 [ 535.700255][T12326] do_syscall_64+0x55/0xb0 [ 535.704736][T12326] ? clear_bhb_loop+0x40/0x90 [ 535.709459][T12326] ? clear_bhb_loop+0x40/0x90 [ 535.714193][T12326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.720140][T12326] RIP: 0033:0x7f513ed9de59 [ 535.724597][T12326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.744254][T12326] RSP: 002b:00007f513fc6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.752895][T12326] RAX: ffffffffffffffda RBX: 00007f513f026180 RCX: 00007f513ed9de59 [ 535.760912][T12326] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 000000000000000c [ 535.768925][T12326] RBP: 00007f513fc6e090 R08: 0000000000000000 R09: 0000000000000000 [ 535.776941][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.784949][T12326] R13: 00007f513f026218 R14: 00007f513f026180 R15: 00007ffc050af5c8 [ 535.792993][T12326] [ 535.987394][ C0] [ 535.987402][ C0] ================================ [ 535.987407][ C0] WARNING: inconsistent lock state [ 535.987412][ C0] syzkaller #0 Not tainted [ 535.987420][ C0] -------------------------------- [ 535.987424][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 535.987432][ C0] syz.1.1886/12341 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 535.987448][ C0] ffff88807812fa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 535.987496][ C0] {INITIAL USE} state was registered at: [ 535.987502][ C0] lock_acquire+0x19e/0x420 [ 535.987519][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 535.987537][ C0] trie_delete_elem+0x95/0x680 [ 535.987557][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x46 [ 535.987573][ C0] trace_call_bpf+0x333/0x6c0 [ 535.987591][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 535.987608][ C0] perf_trace_mm_page_free+0xe4/0x120 [ 535.987627][ C0] trace_mm_page_free+0xe8/0x110 [ 535.987644][ C0] free_unref_page_prepare+0x89/0x8f0 [ 535.987666][ C0] free_unref_page+0x32/0x2e0 [ 535.987687][ C0] vfree+0x1a7/0x340 [ 535.987705][ C0] bpf_prog_calc_tag+0x5b6/0x6b0 [ 535.987722][ C0] resolve_pseudo_ldimm64+0xd4/0x1100 [ 535.987740][ C0] bpf_check+0x3713/0xec30 [ 535.987758][ C0] bpf_prog_load+0x10fa/0x1610 [ 535.987773][ C0] __sys_bpf+0x5ba/0x890 [ 535.987788][ C0] __x64_sys_bpf+0x7c/0x90 [ 535.987803][ C0] do_syscall_64+0x55/0xb0 [ 535.987823][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.987845][ C0] irq event stamp: 1310 [ 535.987852][ C0] hardirqs last enabled at (1309): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.987883][ C0] hardirqs last disabled at (1310): [] exc_debug+0x73/0x140 [ 535.987903][ C0] softirqs last enabled at (1188): [] __irq_exit_rcu+0xd3/0x190 [ 535.987926][ C0] softirqs last disabled at (1123): [] __irq_exit_rcu+0xd3/0x190 [ 535.987948][ C0] [ 535.987948][ C0] other info that might help us debug this: [ 535.987953][ C0] Possible unsafe locking scenario: [ 535.987953][ C0] [ 535.987957][ C0] CPU0 [ 535.987960][ C0] ---- [ 535.987964][ C0] lock(&trie->lock); [ 535.987975][ C0] [ 535.987979][ C0] lock(&trie->lock); [ 535.987989][ C0] [ 535.987989][ C0] *** DEADLOCK *** [ 535.987989][ C0] [ 535.987993][ C0] no locks held by syz.1.1886/12341. [ 535.988001][ C0] [ 535.988001][ C0] stack backtrace: [ 535.988006][ C0] CPU: 0 PID: 12341 Comm: syz.1.1886 Not tainted syzkaller #0 [ 535.988023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.988033][ C0] Call Trace: [ 535.988041][ C0] <#DB> [ 535.988048][ C0] dump_stack_lvl+0x18c/0x250 [ 535.988076][ C0] ? show_regs_print_info+0x20/0x20 [ 535.988104][ C0] ? print_usage_bug+0x43d/0x6a0 [ 535.988123][ C0] ? verify_lock_unused+0x15/0x140 [ 535.988144][ C0] lock_acquire+0x2c2/0x420 [ 535.988165][ C0] ? trie_delete_elem+0x95/0x680 [ 535.988185][ C0] ? read_lock_is_recursive+0x20/0x20 [ 535.988205][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 535.988227][ C0] ? __perf_cgroup_move+0x60/0x60 [ 535.988244][ C0] ? look_up_lock_class+0x75/0x140 [ 535.988265][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 535.988287][ C0] ? trie_delete_elem+0x95/0x680 [ 535.988308][ C0] ? _raw_spin_lock+0x40/0x40 [ 535.988343][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 535.988364][ C0] trie_delete_elem+0x95/0x680 [ 535.988386][ C0] ? perf_callchain+0x220/0x220 [ 535.988406][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 535.988424][ C0] bpf_overflow_handler+0x1fc/0x510 [ 535.988447][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 535.988467][ C0] ? bpf_overflow_handler+0xde/0x510 [ 535.988489][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 535.988514][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 535.988534][ C0] __perf_event_overflow+0x461/0x660 [ 535.988556][ C0] perf_swevent_event+0x319/0x570 [ 535.988576][ C0] ? perf_tp_event+0x1550/0x1550 [ 535.988599][ C0] perf_bp_event+0x319/0x430 [ 535.988618][ C0] ? look_up_lock_class+0x75/0x140 [ 535.988637][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 535.988656][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.988679][ C0] ? lock_release+0xb5/0x8c0 [ 535.988709][ C0] ? lock_acquire+0x2c2/0x420 [ 535.988729][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 535.988752][ C0] notifier_call_chain+0x18f/0x380 [ 535.988775][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 535.988796][ C0] atomic_notifier_call_chain+0xda/0x180 [ 535.988817][ C0] notify_die+0x145/0x1a0 [ 535.988837][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 535.988861][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.988882][ C0] notify_debug+0x2e/0x50 [ 535.988940][ C0] exc_debug+0xde/0x140 [ 535.988958][ C0] asm_exc_debug+0x1e/0x40 [ 535.988982][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 535.988999][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 535.989013][ C0] RSP: 0018:ffffc90010397958 EFLAGS: 00050206 [ 535.989028][ C0] RAX: ffffffff842eee01 RBX: 0000000000033fe0 RCX: 0000000000033c60 [ 535.989039][ C0] RDX: 0000000000000001 RSI: 0000200000000380 RDI: ffffc900104a7380 [ 535.989050][ C0] RBP: ffffc90010397a90 R08: ffffc900104dafdf R09: 1ffff9200209b5fb [ 535.989062][ C0] R10: dffffc0000000000 R11: fffff5200209b5fc R12: ffffc900104a7000 [ 535.989074][ C0] R13: 0000200000000000 R14: ffffc90010397c18 R15: 1ffff92002072f83 [ 535.989091][ C0] ? _copy_from_iter+0x1b1/0x1290 [ 535.989114][ C0] [ 535.989119][ C0] [ 535.989124][ C0] _copy_from_iter+0x242/0x1290 [ 535.989145][ C0] ? __rwlock_init+0x150/0x150 [ 535.989167][ C0] ? copyout_mc+0x70/0x70 [ 535.989186][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 535.989208][ C0] ? _raw_spin_unlock+0x28/0x40 [ 535.989227][ C0] ? find_vmap_area+0xfc/0x110 [ 535.989250][ C0] ? __check_object_size+0x4fc/0xa40 [ 535.989269][ C0] netlink_sendmsg+0x76b/0xbf0 [ 535.989297][ C0] ? netlink_getsockopt+0x590/0x590 [ 535.989331][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 535.989348][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 535.989368][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 535.989393][ C0] sock_write_iter+0x2dc/0x420 [ 535.989413][ C0] ? sock_read_iter+0x3f0/0x3f0 [ 535.989433][ C0] ? common_file_perm+0x198/0x1f0 [ 535.989452][ C0] vfs_write+0x474/0x9a0 [ 535.989476][ C0] ? file_end_write+0x250/0x250 [ 535.989498][ C0] ? __fget_files+0x3fc/0x460 [ 535.989523][ C0] ? __fdget_pos+0x1d8/0x330 [ 535.989543][ C0] ? ksys_write+0x74/0x260 [ 535.989562][ C0] ksys_write+0x151/0x260 [ 535.989586][ C0] ? __ia32_sys_read+0x90/0x90 [ 535.989609][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 535.989630][ C0] do_syscall_64+0x55/0xb0 [ 535.989653][ C0] ? clear_bhb_loop+0x40/0x90 [ 535.989668][ C0] ? clear_bhb_loop+0x40/0x90 [ 535.989683][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.989707][ C0] RIP: 0033:0x7f90d8b9de59 [ 535.989722][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.989736][ C0] RSP: 002b:00007f90d9a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.989755][ C0] RAX: ffffffffffffffda RBX: 00007f90d8e25fa0 RCX: 00007f90d8b9de59 [ 535.989767][ C0] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 000000000000000b [ 535.989779][ C0] RBP: 00007f90d8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 535.989790][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.989800][ C0] R13: 00007f90d8e26038 R14: 00007f90d8e25fa0 R15: 00007ffc2e631148 [ 535.989819][ C0] [ 535.991002][T12341] netlink: 'syz.1.1886': attribute type 12 has an invalid length. [ 537.403701][T12341] netlink: 14561 bytes leftover after parsing attributes in process `syz.1.1886'. [ 537.444730][T12344] netlink: 'syz.6.1887': attribute type 9 has an invalid length.