last executing test programs: 4.875338764s ago: executing program 3 (id=7587): r0 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xcb, 0x7fffbfe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b70400080000008500000095f77d00950000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="04000000040001000400000026df3889e10d8b4b0000000000000066a295a10622a3604d103011a52799d9748ae04c091139c84e685b3b7fda422d495e405fb37d2fd897f377f262cc7958b1c50cbe2e0391d008ef6519a164467895d0a4b57e8e976e68427fa8e7fbcec835c160984b2bccca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffffffff00"/28], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x10, 0x7, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xfd99, &(0x7f0000000500)}, 0x10040) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000840)="1b93eed19532a3fa2f9ee744a4ff537c3d97dd0b4808f1c1e9362737829502e94ef94479810f86d8e189243a1f88b2e46872ffd75e1584d4694972e4bfcd0df44f5da117f81e7fabc9b3dbd41607e8eae60d2dc865135a7097888fc0abbeefc2f6f98ab2bd1ddfb7bbe63cc2466e59cfeea4cc4be126914f7085bd4c6401ba3125ed77e480bf1b423e04248ea68f0ac507b2eceb9127c84ec6a92e4c8d15c64cffc8aae54121dce16b524cf9b617c0df6caf679b240ac826229e1cee588be6d0d7ee174f444ef4a3f0d96491f2c770d6cb114aabdb0eaaff64130da302db06c1d4046267ab", 0xe5}, {&(0x7f0000000280)="532fe4d67a8192a688e07bf6dc7ed4e220b6a4d5f1f5b745b0abc2da26ff0547", 0x20}, {&(0x7f0000000640)="0510f8f78ecca174dd90c28a084312e2f9fe192af25cde26111509ee0a28684ef4ad6f060b9b034786cbbb7089541f09fb8e3aaa0dded79cf95cb43a25db47c0111e4c59c4944c406753872d8c7ad02c8e48a605dcac25f413410a7e2a0128850edd699d9ce342c589d23b2590b3051ecf60784dc1e52baf24cc02bb489b22ab0d1631c8acf0d78e0a2dd6ac457c1fecc315c0fef6e1bec809cc99ed7cbb1f1404d338fba4f0d90151e05235d785feed050de0db46c77d729c3997620754d0fe42a46b083caeb7ea6148cb08999cb628f1e63c22446e7836547fbb6ca04e2c7ea81ca43a030223b6803d0e77d1702f56", 0xf0}], 0x3}, 0x20000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x42) 3.911873441s ago: executing program 1 (id=7589): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000840), &(0x7f0000000940)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0xf5f, 0x3, 0x2800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xf}, 0x50) recvmsg(r7, &(0x7f0000000780)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4092, 0xffc}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f00000007c0)=""/2, 0x2}], 0x8}, 0x2000) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, 0x0, 0x0) 3.899187961s ago: executing program 3 (id=7591): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)}, 0x120) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) close(0xffffffffffffffff) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 3.496002799s ago: executing program 1 (id=7593): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x64b2074d57f2d605, 0x3ffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES64=r5], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r6, r2}) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0x70, 0x2, 0xb4, 0x0, 0x8, 0x2a000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x8000, 0x4}, 0x3000, 0x800000000000, 0x8000, 0x9, 0x78, 0x5, 0x11, 0x0, 0xd, 0x0, 0xffff}, 0x0, 0xc, r1, 0x3) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) close(r6) socketpair(0x23, 0x2, 0x2c, &(0x7f0000000200)) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex, r11, 0x2a, 0x8, 0x0, @void, @value=r3}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000280)=0xe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x27, 0x800, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) 2.837462905s ago: executing program 3 (id=7595): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x500, &(0x7f0000001180)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0xc4) 2.640410438s ago: executing program 2 (id=7598): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000000c0)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004a59195fd80c088a7d550b54ceec4018514ab18b5e63cf43314305a52078", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff0300607692e28559da65620d", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x8805, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x20d}, {&(0x7f0000000740)="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", 0x367}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) 2.540040815s ago: executing program 4 (id=7599): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x6}, {0x74, 0x40}, {0x6, 0x0, 0x0, 0x2}]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x13, 0x0, 0x4) close(0xffffffffffffffff) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2.476190769s ago: executing program 0 (id=7600): bpf$MAP_CREATE(0xfeffff7f00000000, &(0x7f0000000600)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) 2.447847071s ago: executing program 1 (id=7601): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32], 0x50) sendmsg$sock(r2, &(0x7f0000001200)={&(0x7f0000000b00)=@caif=@util={0x25, "b6cfd1ade4f5f4138d7045f5024db60a"}, 0x80, 0x0, 0x0, &(0x7f0000001180)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48, 0xf5ff}, 0xc4) 2.363812687s ago: executing program 2 (id=7602): perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1, 0x1, 0x0, 0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.363057037s ago: executing program 4 (id=7603): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000840), &(0x7f0000000940)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0xf5f, 0x3, 0x2800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xf}, 0x50) recvmsg(r7, &(0x7f0000000780)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4092, 0xffc}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f00000007c0)=""/2, 0x2}], 0x8}, 0x2000) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, 0x0, 0x0) 2.233229846s ago: executing program 0 (id=7604): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200d25020c3d3fa614171920c00040000810300000000000000800000188b187085d539b24e5642db92454772526882e548c10787c830c71111bd4f836d3068bd227878e89890cd3db19fa29b7e3d1c2306518dfa58715390f7afd88aef80f711e699e1f84d893120b9d26cd611e8e18231207b782b9aaab3f4438cf31e30c7c51bbcf8962f122fb8702dd548c761d2adea6fef65ad969fee6c3c80c74023adeefd74d5db508c37efe1e916b33604ecad8ef0c92a9078dd13aa83f2d77402", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd, 0x9}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4804) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}, 0x60000021) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, r0, 0x2) close(r1) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x60}, 0x28) 2.232748136s ago: executing program 1 (id=7605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (fail_nth: 5) 2.107900385s ago: executing program 4 (id=7606): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}], 0x2}, 0x120) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) close(0xffffffffffffffff) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 1.800418936s ago: executing program 3 (id=7607): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x100, @remote}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x29, 0xb, "31d7"}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf960569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2000000000000000585451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4fffae2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b00a13e3f0e21c882c66f4f05ffb6d95e07de02205fca4f18a2eb5b63e45d01"], 0x0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000580)=ANY=[@ANYRES8=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005840)=[{0x10, 0x110, 0xa}, {0x10}], 0x20}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90324fc602f1a08000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = openat$cgroup_int(r5, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x6a) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.323876239s ago: executing program 2 (id=7608): r0 = getpid() r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4162, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x92}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000005c0)={r6, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000b2c600000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x15, &(0x7f0000000280)='\\{\x00'}, 0x12) 1.150223701s ago: executing program 1 (id=7609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000180)=0x20000, 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4000000000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0xc2ba}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000040), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000003229a3e70bafa46e6f8c"], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10c002, 0xec5d, 0xffff0ce0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0xb1, 0x0, 0x2, 0x2}, {0x3d}, {0x2, 0x7, 0xd, 0x7}, {0x6}]}) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r6, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffff0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) 1.138115282s ago: executing program 4 (id=7610): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x11, 0x0, 0x40019) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000980), 0x5}, 0x0, 0x0, 0x0, 0x8, 0x37e6, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 1.024658369s ago: executing program 2 (id=7611): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/233, 0xe9}, {&(0x7f00000009c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/198, 0xc6}], 0x7, 0x0, 0x700}, 0x0) 953.418104ms ago: executing program 4 (id=7612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xadc, r2}, 0x38) write$cgroup_subtree(r0, 0x0, 0x8202) 893.267178ms ago: executing program 0 (id=7613): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='!!=prio\x0ea&\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000380)={[{0x2b, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'rdma'}]}, 0x21) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006200000062000000060000000a0000000500000f020000000300000008000000000000000100000000010000000000cc03000000060000000e00000003000000090000000a00000002000000a400000008000000dca4000000000000000300000000050000000400000001000000000000005f007f00857e73d889d1b745045f4e46932087866d4e5fe8bc9b7d714ee0941d6ac9e84a149a9d7cdf9eacba03e9152a9b77d4090720a73ef94fa55a538f08bc316d977d66ccf607d57b5e52474bdd94c1ef98f5078f18bbec88b8bc7735989e8c378d4d"], &(0x7f00000005c0)=""/147, 0x82, 0x93, 0x1, 0x2, 0x10000, @value=r3}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 672.121214ms ago: executing program 2 (id=7614): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r1, 0x0, 0xe7, 0x1e, &(0x7f0000000780)="51fb854b41d8b2eb60931717040fdcc9cba2294638f3312f649ab8367c73cc30b36ba9a515a374d68fff4906357250d4a18ac7da365c977be1b090b592cac7d2ef37333e43e65ce88545bbe96fa8e9345480441b27afd349814a5152d4c66f86fbe6d1d84ff5010a6b1edadc89d7f3d6936f5f36c8717635dfdf9b156809be5c6131614842af7e7e50f0da45040f5a40cde3c37a1112d098bfb37eaf7b2d96e29ae2bde149a61217d456b0952155962b06e9ac4a4dc78df3059398c1caac2d913d25360a8e33fcb5c03f727ef5a98aef6f7dc4fe2ed21bd13e55e659b60fe2521925b62cdeb302", &(0x7f0000000940)=""/30, 0xc, 0x0, 0x74, 0x47, &(0x7f00000009c0)="8ad55011cbed8d9af0130dba73dd8f9485318351ea67e6f31c79e4f4f180844bb64cba699fa203135782c05902ffb77a171357efaf06e2f5744ed68786d5bc753e19214de2241492773447b6eb6434004dceac1c4de29e95149eb4cfa72b2cc5a9a94bede71e3a13d7a846f0adac349a867488d8", &(0x7f0000000a40)="859a9e830ed207df425e4192480830b8961e24a5e9b68b91ca62baf25c69d28f96a9d870378787bbe7a1bd7d107c40f7447d1ca490e8b1fb8089a0b81c450d0143cd50096d790a", 0x1, 0x0, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) 671.539794ms ago: executing program 0 (id=7615): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x6}, {0x74, 0x40}, {0x6, 0x0, 0x0, 0x2}]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x13, 0x0, 0x4) close(0xffffffffffffffff) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 543.641202ms ago: executing program 3 (id=7616): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000840), &(0x7f0000000940)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0xf5f, 0x3, 0x2800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xf}, 0x50) recvmsg(r7, &(0x7f0000000780)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4092, 0xffc}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f00000007c0)=""/2, 0x2}], 0x8}, 0x2000) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, 0x0, 0x0) 472.085417ms ago: executing program 1 (id=7617): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc7, &(0x7f0000000440)=""/199}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) (async) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 415.938261ms ago: executing program 4 (id=7618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f", 0x55}], 0x2}, 0x0) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000004e87f6a4d3f0e91785000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000280)='B\x1f\xce\v\xd6\x1f\xcd\xd3\xa6V\x1b\x16\xc0O?\x8d\xb5\x88(\xea(q1\xdco\xdeJy\x8d$\xba83\x7f\xf7UJl=x\x889\xf0d\xad\xa9\x06|\x16&\xcfaCI\xc6\x0fZ.n\xba\x85\vzd\xf2\x92\xec\x84B\x8d\xb0A\x8f\x7f;\xab\a\xb5\xa9&|\x1b\x80\xb0\x0e\x98Z\xb3\xc8+,4\x84 \xac\x96\xec{\x05\xee\xec\xca\xe0\xd2\xb9^\xb0)\xde\xe3\x86\x93h\x1e\"\xe8J\xbel(\x85s\xe9k\xbb*\x1d +\xc9%T\x8c/(\xcd(d~\xd7\x8d\x98F)\xfej\xac\x93`u\xd6\x14\xa6\xf2S\xac\xf6\nM\a\xbc\"\x8f\xaf/F\xfc\xf5\xfb\xde\x7f\xd5\xeb\x92\xdb\x8d\x0f\xbd3\x93g|j\x9f\xa8L\xaf\xfc\xa4\x92\xaf\xc4B\xd3m\xd4\xd6!QAx\xdcG\xf4\x1dn^>i\x8cz_\xc9./\x85\x91\xd8\xd9\x01\xb9\a\xb3;\x82\xc6k\xf4\xcf\xe9\x8b2') 399.419953ms ago: executing program 0 (id=7619): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0xfffffffffffffead, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x3, 0x7, 0x0, 0x4000, 0x8, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x4) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) 313.837198ms ago: executing program 2 (id=7620): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) 234.353994ms ago: executing program 3 (id=7621): r0 = getpid() r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4162, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x92}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000005c0)={r6, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000b2c600000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x15, &(0x7f0000000280)='\\{\x00'}, 0x12) 0s ago: executing program 0 (id=7622): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x11, 0x0, 0x40019) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000980), 0x5}, 0x0, 0x0, 0x0, 0x8, 0x37e6, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) kernel console output (not intermixed with test programs): 690': attribute type 20 has an invalid length. [ 1636.994917][T26854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6689'. [ 1637.086358][T26854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6689'. [ 1637.100899][T26860] FAULT_INJECTION: forcing a failure. [ 1637.100899][T26860] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.100944][T26860] CPU: 1 PID: 26860 Comm: syz.4.6692 Not tainted syzkaller #0 [ 1637.100967][T26860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1637.100982][T26860] Call Trace: [ 1637.100993][T26860] [ 1637.101004][T26860] dump_stack_lvl+0x188/0x24e [ 1637.101056][T26860] ? show_regs_print_info+0x12/0x12 [ 1637.101091][T26860] ? load_image+0x400/0x400 [ 1637.101126][T26860] ? __might_sleep+0xd0/0xd0 [ 1637.101162][T26860] ? __lock_acquire+0x7d10/0x7d10 [ 1637.101203][T26860] should_fail_ex+0x399/0x4d0 [ 1637.101241][T26860] should_failslab+0x5/0x20 [ 1637.101262][T26860] slab_pre_alloc_hook+0x59/0x310 [ 1637.101294][T26860] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1637.101326][T26860] __kmem_cache_alloc_node+0x4f/0x260 [ 1637.101363][T26860] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1637.101390][T26860] __kmalloc+0xa0/0x240 [ 1637.101430][T26860] bpf_prog_test_run_skb+0x234/0x12a0 [ 1637.101455][T26860] ? __fget_files+0x28/0x4b0 [ 1637.101482][T26860] ? __fget_files+0x28/0x4b0 [ 1637.101515][T26860] ? __fget_files+0x43d/0x4b0 [ 1637.101571][T26860] ? cpu_online+0xa0/0xa0 [ 1637.101600][T26860] bpf_prog_test_run+0x31e/0x390 [ 1637.101641][T26860] __sys_bpf+0x62b/0x780 [ 1637.101677][T26860] ? bpf_link_show_fdinfo+0x380/0x380 [ 1637.101744][T26860] ? lock_chain_count+0x20/0x20 [ 1637.101803][T26860] __x64_sys_bpf+0x78/0x90 [ 1637.101837][T26860] do_syscall_64+0x4c/0xa0 [ 1637.101864][T26860] ? clear_bhb_loop+0x60/0xb0 [ 1637.101890][T26860] ? clear_bhb_loop+0x60/0xb0 [ 1637.101923][T26860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.101949][T26860] RIP: 0033:0x7f0c2bf9c819 [ 1637.101973][T26860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.101994][T26860] RSP: 002b:00007f0c2ce11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1637.102022][T26860] RAX: ffffffffffffffda RBX: 00007f0c2c215fa0 RCX: 00007f0c2bf9c819 [ 1637.102048][T26860] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 1637.102073][T26860] RBP: 00007f0c2ce11090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.102090][T26860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.102105][T26860] R13: 00007f0c2c216038 R14: 00007f0c2c215fa0 R15: 00007ffd121bb5b8 [ 1637.102159][T26860] [ 1638.485989][T26894] netlink: 'syz.0.6700': attribute type 8 has an invalid length. [ 1638.551970][T26894] netlink: 'syz.0.6700': attribute type 1 has an invalid length. [ 1638.692806][T26894] __nla_validate_parse: 1 callbacks suppressed [ 1638.692831][T26894] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.6700'. [ 1638.748799][T26902] delete_channel: no stack [ 1639.619503][T26890] team0: Port device team_slave_0 removed [ 1639.629670][T26899] netlink: 'syz.1.6702': attribute type 2 has an invalid length. [ 1639.644391][T26901] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6703'. [ 1639.961175][T26915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6707'. [ 1640.016364][T26915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6707'. [ 1640.028367][T26921] netlink: 'syz.0.6708': attribute type 9 has an invalid length. [ 1640.050206][T26920] device syzkaller0 entered promiscuous mode [ 1640.067565][T26921] netlink: 399 bytes leftover after parsing attributes in process `syz.0.6708'. [ 1640.097580][T26924] netlink: 'syz.3.6711': attribute type 20 has an invalid length. [ 1641.489657][T26948] netlink: 'syz.1.6719': attribute type 8 has an invalid length. [ 1641.510205][T26948] netlink: 'syz.1.6719': attribute type 1 has an invalid length. [ 1641.547780][T26948] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6719'. [ 1641.593499][T26939] netlink: 'syz.2.6715': attribute type 8 has an invalid length. [ 1641.621248][T26939] netlink: 'syz.2.6715': attribute type 1 has an invalid length. [ 1641.650033][T26939] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.6715'. [ 1642.061683][T26967] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1642.081489][T26968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1642.122010][T26964] netlink: 'syz.1.6724': attribute type 9 has an invalid length. [ 1642.184189][T26962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6723'. [ 1642.953651][T26987] netlink: 'syz.2.6732': attribute type 8 has an invalid length. [ 1642.963286][T26987] netlink: 'syz.2.6732': attribute type 1 has an invalid length. [ 1643.146376][T26998] netlink: 'syz.0.6738': attribute type 9 has an invalid length. [ 1643.215577][T27000] FAULT_INJECTION: forcing a failure. [ 1643.215577][T27000] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.280571][T27000] CPU: 1 PID: 27000 Comm: syz.1.6737 Not tainted syzkaller #0 [ 1643.288494][T27000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1643.299032][T27000] Call Trace: [ 1643.302353][T27000] [ 1643.305423][T27000] dump_stack_lvl+0x188/0x24e [ 1643.310343][T27000] ? show_regs_print_info+0x12/0x12 [ 1643.315820][T27000] ? load_image+0x400/0x400 [ 1643.320472][T27000] ? __might_sleep+0xd0/0xd0 [ 1643.325283][T27000] ? __lock_acquire+0x7d10/0x7d10 [ 1643.330463][T27000] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1643.337010][T27000] ? irqentry_enter+0x33/0x50 [ 1643.341841][T27000] should_fail_ex+0x399/0x4d0 [ 1643.346553][T27000] should_failslab+0x5/0x20 [ 1643.351185][T27000] slab_pre_alloc_hook+0x59/0x310 [ 1643.356261][T27000] ? __get_vm_area_node+0x122/0x330 [ 1643.361588][T27000] __kmem_cache_alloc_node+0x4f/0x260 [ 1643.367048][T27000] ? __get_vm_area_node+0x122/0x330 [ 1643.372285][T27000] kmalloc_node_trace+0x22/0xe0 [ 1643.377279][T27000] __get_vm_area_node+0x122/0x330 [ 1643.382332][T27000] __vmalloc_node_range+0x357/0x13b0 [ 1643.387734][T27000] ? netlink_sendmsg+0x5ec/0xbd0 [ 1643.392896][T27000] ? netlink_insert+0x1034/0x13c0 [ 1643.398393][T27000] ? free_vm_area+0x50/0x50 [ 1643.402964][T27000] ? netlink_sendmsg+0x5ec/0xbd0 [ 1643.407939][T27000] vmalloc+0x75/0x80 [ 1643.411859][T27000] ? netlink_sendmsg+0x5ec/0xbd0 [ 1643.416921][T27000] netlink_sendmsg+0x5ec/0xbd0 [ 1643.422175][T27000] ? netlink_getsockopt+0x550/0x550 [ 1643.427659][T27000] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1643.434128][T27000] ? aa_sock_msg_perm+0x94/0x150 [ 1643.439365][T27000] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1643.444772][T27000] ? security_socket_sendmsg+0x7c/0xa0 [ 1643.450523][T27000] sock_write_iter+0x2d9/0x3e0 [ 1643.455418][T27000] ? sock_read_iter+0x3a0/0x3a0 [ 1643.460588][T27000] vfs_write+0x4b1/0xa30 [ 1643.464972][T27000] ? file_end_write+0x250/0x250 [ 1643.470035][T27000] ? __fget_files+0x43d/0x4b0 [ 1643.474944][T27000] ? __fdget_pos+0x1d4/0x360 [ 1643.479590][T27000] ? ksys_write+0x71/0x250 [ 1643.484221][T27000] ksys_write+0x14c/0x250 [ 1643.488796][T27000] ? __ia32_sys_read+0x80/0x80 [ 1643.493600][T27000] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1643.499611][T27000] do_syscall_64+0x4c/0xa0 [ 1643.504333][T27000] ? clear_bhb_loop+0x60/0xb0 [ 1643.509163][T27000] ? clear_bhb_loop+0x60/0xb0 [ 1643.514220][T27000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1643.520308][T27000] RIP: 0033:0x7fefad19c819 [ 1643.524767][T27000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.544663][T27000] RSP: 002b:00007fefae00b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1643.553363][T27000] RAX: ffffffffffffffda RBX: 00007fefad416090 RCX: 00007fefad19c819 [ 1643.561892][T27000] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1643.570143][T27000] RBP: 00007fefae00b090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.578498][T27000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.586835][T27000] R13: 00007fefad416128 R14: 00007fefad416090 R15: 00007fff3f61d468 [ 1643.595018][T27000] [ 1643.681113][T27000] syz.1.6737: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1643.793376][T27000] CPU: 0 PID: 27000 Comm: syz.1.6737 Not tainted syzkaller #0 [ 1643.801096][T27000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1643.811451][T27000] Call Trace: [ 1643.814847][T27000] [ 1643.817934][T27000] dump_stack_lvl+0x188/0x24e [ 1643.823032][T27000] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1643.829593][T27000] ? show_regs_print_info+0x12/0x12 [ 1643.835024][T27000] ? load_image+0x400/0x400 [ 1643.839560][T27000] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1643.846177][T27000] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1643.852712][T27000] warn_alloc+0x242/0x330 [ 1643.857070][T27000] ? __get_vm_area_node+0x122/0x330 [ 1643.862379][T27000] ? zone_watermark_ok_safe+0x270/0x270 [ 1643.868123][T27000] ? rcu_is_watching+0x11/0xa0 [ 1643.873038][T27000] ? __get_vm_area_node+0x318/0x330 [ 1643.878936][T27000] __vmalloc_node_range+0x37c/0x13b0 [ 1643.884442][T27000] ? netlink_insert+0x1034/0x13c0 [ 1643.889772][T27000] ? free_vm_area+0x50/0x50 [ 1643.894423][T27000] ? netlink_sendmsg+0x5ec/0xbd0 [ 1643.899573][T27000] vmalloc+0x75/0x80 [ 1643.903604][T27000] ? netlink_sendmsg+0x5ec/0xbd0 [ 1643.908965][T27000] netlink_sendmsg+0x5ec/0xbd0 [ 1643.913968][T27000] ? netlink_getsockopt+0x550/0x550 [ 1643.919330][T27000] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1643.925719][T27000] ? aa_sock_msg_perm+0x94/0x150 [ 1643.931065][T27000] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1643.936525][T27000] ? security_socket_sendmsg+0x7c/0xa0 [ 1643.942115][T27000] sock_write_iter+0x2d9/0x3e0 [ 1643.947012][T27000] ? sock_read_iter+0x3a0/0x3a0 [ 1643.951900][T27000] vfs_write+0x4b1/0xa30 [ 1643.956429][T27000] ? file_end_write+0x250/0x250 [ 1643.961312][T27000] ? __fget_files+0x43d/0x4b0 [ 1643.966196][T27000] ? __fdget_pos+0x1d4/0x360 [ 1643.970837][T27000] ? ksys_write+0x71/0x250 [ 1643.975453][T27000] ksys_write+0x14c/0x250 [ 1643.979812][T27000] ? __ia32_sys_read+0x80/0x80 [ 1643.984782][T27000] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1643.990877][T27000] do_syscall_64+0x4c/0xa0 [ 1643.995411][T27000] ? clear_bhb_loop+0x60/0xb0 [ 1644.000281][T27000] ? clear_bhb_loop+0x60/0xb0 [ 1644.004985][T27000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1644.011094][T27000] RIP: 0033:0x7fefad19c819 [ 1644.015772][T27000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.035923][T27000] RSP: 002b:00007fefae00b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1644.044620][T27000] RAX: ffffffffffffffda RBX: 00007fefad416090 RCX: 00007fefad19c819 [ 1644.052801][T27000] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1644.060972][T27000] RBP: 00007fefae00b090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.069133][T27000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.077299][T27000] R13: 00007fefad416128 R14: 00007fefad416090 R15: 00007fff3f61d468 [ 1644.085569][T27000] [ 1644.115952][T27000] Mem-Info: [ 1644.120033][T27000] active_anon:8845 inactive_anon:0 isolated_anon:0 [ 1644.120033][T27000] active_file:23300 inactive_file:40555 isolated_file:0 [ 1644.120033][T27000] unevictable:768 dirty:273 writeback:0 [ 1644.120033][T27000] slab_reclaimable:21271 slab_unreclaimable:95149 [ 1644.120033][T27000] mapped:30103 shmem:1361 pagetables:599 [ 1644.120033][T27000] sec_pagetables:0 bounce:0 [ 1644.120033][T27000] kernel_misc_reclaimable:0 [ 1644.120033][T27000] free:1313221 free_pcp:8011 free_cma:0 [ 1644.131911][T26999] netlink: 'syz.4.6736': attribute type 8 has an invalid length. [ 1644.173080][T27000] Node 0 active_anon:35380kB inactive_anon:0kB active_file:93200kB inactive_file:162020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120412kB dirty:1092kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10124kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 1644.202435][T26999] netlink: 'syz.4.6736': attribute type 1 has an invalid length. [ 1644.223839][T26999] __nla_validate_parse: 8 callbacks suppressed [ 1644.223877][T26999] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.6736'. [ 1644.235274][T27013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6739'. [ 1644.300919][T27000] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1644.336247][T27000] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.365483][T27000] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1644.371901][T27000] Node 0 DMA32 free:1344612kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:35480kB inactive_anon:0kB active_file:93200kB inactive_file:162020kB unevictable:1536kB writepending:1092kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:9084kB local_pcp:1148kB free_cma:0kB [ 1644.404417][T27000] lowmem_reserve[]: 0 0 1 1 1 [ 1644.409432][T27000] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1644.415647][T27009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1644.494293][T27009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1644.567676][T27000] lowmem_reserve[]: 0 0 0 0 0 [ 1644.578551][T27000] Node 1 Normal free:3892200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:23492kB local_pcp:12960kB free_cma:0kB [ 1644.687659][T27000] lowmem_reserve[]: 0 0 0 0 0 [ 1644.704785][T27000] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1644.760450][T27000] Node 0 DMA32: 2456*4kB (UME) 3788*8kB (UME) 2321*16kB (UME) 2265*32kB (UME) 1350*64kB (UME) 1436*128kB (UME) 437*256kB (UM) 100*512kB (UME) 35*1024kB (UME) 6*2048kB (UME) 174*4096kB (UM) = 1343856kB [ 1644.825287][T27000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1644.857992][T27000] Node 1 Normal: 246*4kB (UME) 56*8kB (UME) 39*16kB (UME) 35*32kB (UME) 18*64kB (UME) 12*128kB (UME) 3*256kB (U) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3892200kB [ 1644.928811][T27000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.949502][T27000] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1645.007522][T27000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1645.038418][T27000] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1645.077209][T27000] 65216 total pagecache pages [ 1645.098059][T27000] 0 pages in swap cache [ 1645.117676][T27000] Free swap = 124996kB [ 1645.133252][T27000] Total swap = 124996kB [ 1645.139415][T27000] 2097051 pages RAM [ 1645.151680][T27000] 0 pages HighMem/MovableOnly [ 1645.156794][T27000] 415207 pages reserved [ 1645.169279][T27000] 0 pages cma reserved [ 1645.469363][T27030] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1645.480186][T27030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1646.367106][T27047] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1646.485398][T27047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1646.601630][T27045] netlink: 'syz.3.6750': attribute type 16 has an invalid length. [ 1646.686410][T27045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1647.173412][T27061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1647.262949][T27061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1647.344335][T27062] device syzkaller0 entered promiscuous mode [ 1647.507939][T27066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6760'. [ 1648.268120][T27090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6768'. [ 1648.310335][T27090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6768'. [ 1648.372081][T27094] netlink: 'syz.2.6768': attribute type 13 has an invalid length. [ 1649.177804][T27106] netlink: 'syz.1.6774': attribute type 8 has an invalid length. [ 1649.240489][T27106] netlink: 'syz.1.6774': attribute type 1 has an invalid length. [ 1649.271715][T27106] __nla_validate_parse: 2 callbacks suppressed [ 1649.271967][T27106] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6774'. [ 1650.224338][T27132] netlink: 'syz.3.6782': attribute type 2 has an invalid length. [ 1650.283415][T27132] netlink: 119 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1650.904860][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 1651.088196][T27148] netlink: 'syz.2.6789': attribute type 8 has an invalid length. [ 1651.097069][T27148] netlink: 'syz.2.6789': attribute type 1 has an invalid length. [ 1651.132221][T27148] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.6789'. [ 1652.559846][T27184] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1652.583634][T27184] bridge_slave_1: default FDB implementation only supports local addresses [ 1653.067797][T27198] netlink: 'syz.3.6802': attribute type 8 has an invalid length. [ 1653.210553][T27198] netlink: 'syz.3.6802': attribute type 1 has an invalid length. [ 1653.269502][T27198] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.6802'. [ 1653.495078][T27189] team0: Port device team_slave_0 removed [ 1653.648764][T27184] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1654.064574][T27213] FAULT_INJECTION: forcing a failure. [ 1654.064574][T27213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.129642][T27215] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6810'. [ 1654.140026][T27213] CPU: 1 PID: 27213 Comm: syz.0.6809 Not tainted syzkaller #0 [ 1654.147656][T27213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1654.157762][T27213] Call Trace: [ 1654.161087][T27213] [ 1654.164136][T27213] dump_stack_lvl+0x188/0x24e [ 1654.168880][T27213] ? show_regs_print_info+0x12/0x12 [ 1654.174231][T27213] ? load_image+0x400/0x400 [ 1654.178874][T27213] ? __lock_acquire+0x7d10/0x7d10 [ 1654.184002][T27213] should_fail_ex+0x399/0x4d0 [ 1654.188848][T27213] _copy_from_user+0x2c/0x170 [ 1654.193662][T27213] ___sys_sendmsg+0x1c3/0x360 [ 1654.198376][T27213] ? __sys_sendmsg+0x290/0x290 [ 1654.203293][T27213] ? __lock_acquire+0x7d10/0x7d10 [ 1654.208459][T27213] __se_sys_sendmsg+0x1bb/0x2a0 [ 1654.213337][T27213] ? ct_nmi_exit+0x145/0x1c0 [ 1654.217947][T27213] ? __x64_sys_sendmsg+0x80/0x80 [ 1654.223107][T27213] ? lockdep_hardirqs_on+0x94/0x140 [ 1654.228429][T27213] do_syscall_64+0x4c/0xa0 [ 1654.232871][T27213] ? clear_bhb_loop+0x60/0xb0 [ 1654.237856][T27213] ? clear_bhb_loop+0x60/0xb0 [ 1654.242753][T27213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1654.248685][T27213] RIP: 0033:0x7fcf2159c819 [ 1654.253126][T27213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.273541][T27213] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.282087][T27213] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1654.290545][T27213] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1654.298755][T27213] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.306888][T27213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.314879][T27213] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1654.323065][T27213] [ 1654.576598][T27224] netlink: 'syz.4.6814': attribute type 9 has an invalid length. [ 1654.600477][T27224] netlink: 399 bytes leftover after parsing attributes in process `syz.4.6814'. [ 1654.841822][T27228] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6816'. [ 1655.538454][T27244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1655.560798][T27244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1655.586307][T27244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1655.672943][T27244] netlink: 'syz.3.6821': attribute type 13 has an invalid length. [ 1655.701393][T27244] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1656.748092][T27265] netlink: 'syz.0.6824': attribute type 8 has an invalid length. [ 1656.780482][T27265] netlink: 'syz.0.6824': attribute type 1 has an invalid length. [ 1656.805297][T27265] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.6824'. [ 1657.766036][T27273] netlink: 'syz.4.6829': attribute type 9 has an invalid length. [ 1657.810212][T27273] netlink: 399 bytes leftover after parsing attributes in process `syz.4.6829'. [ 1657.841702][T27275] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1658.095456][T27284] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6832'. [ 1658.296755][T27283] netlink: 'syz.0.6833': attribute type 10 has an invalid length. [ 1658.898829][T27283] team0: Device vxcan1 is of different type [ 1659.161685][T27290] netlink: 'syz.3.6835': attribute type 21 has an invalid length. [ 1660.232870][T27311] netlink: 'syz.3.6842': attribute type 10 has an invalid length. [ 1660.250588][T27311] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1660.605075][T27315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6843'. [ 1660.655321][T27322] netlink: 'syz.3.6844': attribute type 9 has an invalid length. [ 1660.668068][T27315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6843'. [ 1660.700515][T27322] netlink: 399 bytes leftover after parsing attributes in process `syz.3.6844'. [ 1660.814640][T27313] netlink: 'syz.2.6841': attribute type 16 has an invalid length. [ 1660.858317][T27313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6841'. [ 1662.378036][T27348] netlink: 'syz.3.6854': attribute type 10 has an invalid length. [ 1662.426277][T27348] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1662.784697][T27357] netlink: 'syz.0.6856': attribute type 9 has an invalid length. [ 1662.831735][T27365] device veth0_macvtap left promiscuous mode [ 1662.841528][T27357] netlink: 399 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1663.204867][T27370] netlink: 'syz.3.6861': attribute type 46 has an invalid length. [ 1663.589349][T27376] cgroup: fork rejected by pids controller in /syz1 [ 1663.840548][T27370] netlink: 'syz.3.6861': attribute type 46 has an invalid length. [ 1664.308243][T27384] netlink: 'syz.4.6864': attribute type 3 has an invalid length. [ 1664.363707][T27384] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6864'. [ 1667.028076][T27393] netlink: 'syz.0.6868': attribute type 10 has an invalid length. [ 1667.038745][T27393] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1667.048599][T27393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.062010][T27393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.298212][T23716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.470288][T23716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.664524][T23716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.829581][T23716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.122155][T27420] netlink: 'syz.2.6878': attribute type 29 has an invalid length. [ 1668.180782][T27420] netlink: 'syz.2.6878': attribute type 29 has an invalid length. [ 1668.728941][T27435] FAULT_INJECTION: forcing a failure. [ 1668.728941][T27435] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.786191][T27435] CPU: 0 PID: 27435 Comm: syz.2.6881 Not tainted syzkaller #0 [ 1668.794199][T27435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1668.804734][T27435] Call Trace: [ 1668.808144][T27435] [ 1668.811339][T27435] dump_stack_lvl+0x188/0x24e [ 1668.816187][T27435] ? show_regs_print_info+0x12/0x12 [ 1668.821606][T27435] ? load_image+0x400/0x400 [ 1668.826610][T27435] ? __might_sleep+0xd0/0xd0 [ 1668.831254][T27435] ? __lock_acquire+0x7d10/0x7d10 [ 1668.836443][T27435] should_fail_ex+0x399/0x4d0 [ 1668.841289][T27435] should_failslab+0x5/0x20 [ 1668.846034][T27435] slab_pre_alloc_hook+0x59/0x310 [ 1668.851307][T27435] kmem_cache_alloc_node+0x5a/0x320 [ 1668.856643][T27435] ? __alloc_skb+0xfc/0x7e0 [ 1668.861355][T27435] __alloc_skb+0xfc/0x7e0 [ 1668.866377][T27435] ? netlink_autobind+0xda/0x300 [ 1668.871570][T27435] netlink_sendmsg+0x654/0xbd0 [ 1668.876423][T27435] ? netlink_getsockopt+0x550/0x550 [ 1668.881966][T27435] ? aa_sock_msg_perm+0x94/0x150 [ 1668.887136][T27435] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1668.893014][T27435] ? security_socket_sendmsg+0x7c/0xa0 [ 1668.898529][T27435] ? netlink_getsockopt+0x550/0x550 [ 1668.903863][T27435] ____sys_sendmsg+0x5be/0x970 [ 1668.908970][T27435] ? __sys_sendmsg_sock+0x30/0x30 [ 1668.915126][T27435] ? __import_iovec+0x315/0x500 [ 1668.920540][T27435] ? import_iovec+0x6f/0xa0 [ 1668.925192][T27435] ___sys_sendmsg+0x2a2/0x360 [ 1668.929958][T27435] ? __sys_sendmsg+0x290/0x290 [ 1668.934808][T27435] ? __lock_acquire+0x7d10/0x7d10 [ 1668.940096][T27435] __se_sys_sendmsg+0x1bb/0x2a0 [ 1668.945623][T27435] ? __x64_sys_sendmsg+0x80/0x80 [ 1668.950889][T27435] ? lockdep_hardirqs_on+0x94/0x140 [ 1668.956228][T27435] do_syscall_64+0x4c/0xa0 [ 1668.960797][T27435] ? clear_bhb_loop+0x60/0xb0 [ 1668.965716][T27435] ? clear_bhb_loop+0x60/0xb0 [ 1668.970624][T27435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1668.976858][T27435] RIP: 0033:0x7f382f39c819 [ 1668.981402][T27435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.001492][T27435] RSP: 002b:00007f3830206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1669.009934][T27435] RAX: ffffffffffffffda RBX: 00007f382f615fa0 RCX: 00007f382f39c819 [ 1669.018282][T27435] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1669.026388][T27435] RBP: 00007f3830206090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.034769][T27435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.042934][T27435] R13: 00007f382f616038 R14: 00007f382f615fa0 R15: 00007ffe2e035098 [ 1669.051066][T27435] [ 1669.091725][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1669.103020][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1669.126343][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1669.144583][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1669.157793][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1669.165558][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1669.302741][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.309374][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.360703][T27438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6880'. [ 1671.230747][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 1673.303206][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 1673.393578][T27452] netlink: 'syz.0.6884': attribute type 10 has an invalid length. [ 1673.401866][T27452] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1673.738918][T27481] netlink: 'syz.4.6899': attribute type 10 has an invalid length. [ 1673.800428][T27481] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6899'. [ 1673.880598][T27481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.888473][T27481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.087247][T27437] chnl_net:caif_netlink_parms(): no params data found [ 1674.783987][T27437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.797344][T27510] FAULT_INJECTION: forcing a failure. [ 1674.797344][T27510] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.925348][T27437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.939933][T27437] device bridge_slave_0 entered promiscuous mode [ 1674.947188][T27510] CPU: 0 PID: 27510 Comm: syz.0.6894 Not tainted syzkaller #0 [ 1674.954882][T27510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1674.965743][T27510] Call Trace: [ 1674.969080][T27510] [ 1674.972096][T27510] dump_stack_lvl+0x188/0x24e [ 1674.977012][T27510] ? show_regs_print_info+0x12/0x12 [ 1674.982380][T27510] ? load_image+0x400/0x400 [ 1674.987076][T27510] ? _printk+0xd/0x130 [ 1674.991303][T27510] should_fail_ex+0x399/0x4d0 [ 1674.996318][T27510] should_failslab+0x5/0x20 [ 1675.000959][T27510] slab_pre_alloc_hook+0x59/0x310 [ 1675.006145][T27510] ? lockdep_hardirqs_on+0x94/0x140 [ 1675.011592][T27510] ? tomoyo_encode+0x27e/0x540 [ 1675.016415][T27510] __kmem_cache_alloc_node+0x4f/0x260 [ 1675.021844][T27510] ? tomoyo_encode+0x27e/0x540 [ 1675.026848][T27510] __kmalloc+0xa0/0x240 [ 1675.031130][T27510] tomoyo_encode+0x27e/0x540 [ 1675.035860][T27510] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1675.041621][T27510] ? tomoyo_path_number_perm+0x205/0x650 [ 1675.047734][T27510] tomoyo_path_number_perm+0x22f/0x650 [ 1675.053256][T27510] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1675.058778][T27510] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1675.064647][T27510] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1675.071295][T27510] security_file_ioctl+0x6c/0xa0 [ 1675.076429][T27510] __se_sys_ioctl+0x48/0x170 [ 1675.081382][T27510] do_syscall_64+0x4c/0xa0 [ 1675.085986][T27510] ? clear_bhb_loop+0x60/0xb0 [ 1675.090764][T27510] ? clear_bhb_loop+0x60/0xb0 [ 1675.095484][T27510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1675.101515][T27510] RIP: 0033:0x7fcf2159c819 [ 1675.106053][T27510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.126052][T27510] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.134600][T27510] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1675.143395][T27510] RDX: 00002000000003c0 RSI: 000000004008240b RDI: 0000000000000005 [ 1675.151660][T27510] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.159996][T27510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.168259][T27510] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1675.176442][T27510] [ 1675.206940][T27510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1675.380726][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 1675.528138][T27437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.546210][T27437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.575988][T27437] device bridge_slave_1 entered promiscuous mode [ 1676.359659][T27437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.416248][T27437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.472782][T23716] device hsr_slave_0 left promiscuous mode [ 1676.479670][T23716] device hsr_slave_1 left promiscuous mode [ 1676.488167][T23716] device bridge_slave_1 left promiscuous mode [ 1676.495661][T23716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.510849][T23716] device bridge_slave_0 left promiscuous mode [ 1676.518041][T23716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.561461][T23716] device veth1_macvtap left promiscuous mode [ 1676.567639][T23716] device veth0_macvtap left promiscuous mode [ 1676.575397][T23716] device veth1_vlan left promiscuous mode [ 1676.582334][T23716] device veth0_vlan left promiscuous mode [ 1677.404669][T23716] team0 (unregistering): Port device team_slave_1 removed [ 1677.471727][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 1677.479848][T23716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.553929][T23716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.707191][T27546] netlink: 'syz.2.6902': attribute type 3 has an invalid length. [ 1677.720405][T27546] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1678.045028][T23716] bond0 (unregistering): Released all slaves [ 1681.677541][T27437] team0: Port device team_slave_0 added [ 1681.683987][T27550] netlink: 'syz.4.6903': attribute type 10 has an invalid length. [ 1681.693726][T27550] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6903'. [ 1681.708623][T27554] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1681.737991][T27554] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1681.747344][T27437] team0: Port device team_slave_1 added [ 1681.809828][T27554] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1681.900664][T27437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.907722][T27437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.068831][T27437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.175779][T27576] FAULT_INJECTION: forcing a failure. [ 1682.175779][T27576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.189366][T27437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.189390][T27437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.189419][T27437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.307357][T27437] device hsr_slave_0 entered promiscuous mode [ 1682.384679][T27437] device hsr_slave_1 entered promiscuous mode [ 1682.399916][T27437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1682.447537][T27437] Cannot create hsr debugfs directory [ 1682.605378][T27576] CPU: 0 PID: 27576 Comm: syz.4.6906 Not tainted syzkaller #0 [ 1682.613123][T27576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1682.623405][T27576] Call Trace: [ 1682.626818][T27576] [ 1682.629880][T27576] dump_stack_lvl+0x188/0x24e [ 1682.634626][T27576] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.640943][T27576] ? show_regs_print_info+0x12/0x12 [ 1682.646196][T27576] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.652690][T27576] should_fail_ex+0x399/0x4d0 [ 1682.657427][T27576] _copy_from_user+0x2c/0x170 [ 1682.662403][T27576] ___sys_sendmsg+0x1c3/0x360 [ 1682.667337][T27576] ? __sys_sendmsg+0x290/0x290 [ 1682.672340][T27576] ? ktime_get_real_ts64+0x440/0x440 [ 1682.678204][T27576] __se_sys_sendmsg+0x1bb/0x2a0 [ 1682.683241][T27576] ? __x64_sys_sendmsg+0x80/0x80 [ 1682.688352][T27576] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1682.694394][T27576] do_syscall_64+0x4c/0xa0 [ 1682.698946][T27576] ? clear_bhb_loop+0x60/0xb0 [ 1682.704015][T27576] ? clear_bhb_loop+0x60/0xb0 [ 1682.709080][T27576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.715780][T27576] RIP: 0033:0x7f0c2bf9c819 [ 1682.720314][T27576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.741343][T27576] RSP: 002b:00007f0c2ce11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.750063][T27576] RAX: ffffffffffffffda RBX: 00007f0c2c215fa0 RCX: 00007f0c2bf9c819 [ 1682.758416][T27576] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 1682.766538][T27576] RBP: 00007f0c2ce11090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.774862][T27576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.783219][T27576] R13: 00007f0c2c216038 R14: 00007f0c2c215fa0 R15: 00007ffd121bb5b8 [ 1682.791430][T27576] [ 1684.498991][T27626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6917'. [ 1684.688696][T27611] device syzkaller0 entered promiscuous mode [ 1689.179984][T27636] netlink: 'syz.2.6919': attribute type 10 has an invalid length. [ 1689.190818][T27636] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1689.199968][T27636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.209697][T27636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.219949][T27643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6922'. [ 1689.571335][T27437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1689.607401][T27437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1689.894604][T27437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1689.975134][T27437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1690.206587][T27665] netlink: 'syz.0.6929': attribute type 10 has an invalid length. [ 1690.383268][T27665] team0: Device ipvlan1 failed to register rx_handler [ 1690.899780][T27437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.947843][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1690.957845][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1691.017451][T27437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.054611][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1691.069946][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1691.096930][T18284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.104537][T18284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.143603][T27695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1691.237137][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1691.297826][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1691.356983][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1691.409793][T18284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.417394][T18284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.478241][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1691.525489][T27710] netlink: 'syz.4.6934': attribute type 8 has an invalid length. [ 1691.534384][T27705] netlink: 'syz.3.6936': attribute type 10 has an invalid length. [ 1691.550179][T27705] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6936'. [ 1691.682180][T27712] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1691.739437][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1691.747784][T27710] netlink: 'syz.4.6934': attribute type 1 has an invalid length. [ 1691.758610][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1691.762954][T27710] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.6934'. [ 1691.810420][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1691.865533][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1691.917747][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1691.954897][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1691.989504][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1691.998631][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1692.045458][T27437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1692.101659][T27437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1692.154812][T27717] netlink: 'syz.3.6938': attribute type 10 has an invalid length. [ 1692.225145][T27717] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6938'. [ 1692.455434][T27717] team0: Port device virt_wifi0 added [ 1692.637361][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1692.646369][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1693.639299][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1693.654258][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1693.695675][T27437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1693.754040][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1693.769610][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1693.833149][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1693.848387][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1693.874726][T27437] device veth0_vlan entered promiscuous mode [ 1693.893114][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1693.902612][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1693.928566][T27437] device veth1_vlan entered promiscuous mode [ 1694.032343][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1694.048923][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1694.082080][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1694.122476][T23716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1694.161209][T27437] device veth0_macvtap entered promiscuous mode [ 1694.219727][T27437] device veth1_macvtap entered promiscuous mode [ 1694.293526][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.330950][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.370888][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.410721][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.448315][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.490745][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.532398][T27437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.577817][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1694.606747][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1694.615711][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1694.633649][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1694.656370][T27437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1694.676983][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1694.701636][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1694.759885][T27437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.800454][T27437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.820910][T27437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.849090][T27437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.250097][T27754] netlink: 'syz.4.6943': attribute type 2 has an invalid length. [ 1695.261198][T18293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.269697][T18293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.344084][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1695.390832][T27754] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6943'. [ 1695.524946][T18293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.549561][T18293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.605643][T18293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1697.099010][T27784] netlink: 'syz.0.6950': attribute type 10 has an invalid length. [ 1697.123884][T27784] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6950'. [ 1697.416122][T27793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6952'. [ 1697.523738][T27797] netlink: 'syz.0.6953': attribute type 2 has an invalid length. [ 1697.548664][T27797] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1697.647832][T27800] netlink: 'syz.0.6953': attribute type 2 has an invalid length. [ 1697.660959][T27800] netlink: 'syz.0.6953': attribute type 1 has an invalid length. [ 1697.699796][T27800] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1697.772051][T27806] netlink: 'syz.2.6955': attribute type 2 has an invalid length. [ 1697.783604][T27804] netlink: 'syz.2.6955': attribute type 2 has an invalid length. [ 1699.399864][T27806] device 0 entered promiscuous mode [ 1699.669280][T27804] device 1 entered promiscuous mode [ 1699.938787][T27838] netlink: 'syz.0.6959': attribute type 10 has an invalid length. [ 1700.120051][T27838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.163909][T27838] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1700.219758][T27839] netlink: 'syz.0.6959': attribute type 10 has an invalid length. [ 1700.248850][T27839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6959'. [ 1700.340822][T27839] device batadv0 entered promiscuous mode [ 1700.368742][T27839] bond0: (slave batadv0): Releasing backup interface [ 1700.565952][T27839] bridge0: port 3(batadv0) entered blocking state [ 1700.599072][T27839] bridge0: port 3(batadv0) entered disabled state [ 1700.619850][T27844] netlink: 'syz.2.6963': attribute type 10 has an invalid length. [ 1700.650423][T27844] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1700.653713][T18291] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1700.669843][T18291] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1701.346743][T27878] FAULT_INJECTION: forcing a failure. [ 1701.346743][T27878] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.396936][T27878] CPU: 0 PID: 27878 Comm: syz.0.6974 Not tainted syzkaller #0 [ 1701.404988][T27878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1701.415147][T27878] Call Trace: [ 1701.418616][T27878] [ 1701.421849][T27878] dump_stack_lvl+0x188/0x24e [ 1701.426959][T27878] ? show_regs_print_info+0x12/0x12 [ 1701.432557][T27878] ? load_image+0x400/0x400 [ 1701.438157][T27878] ? __might_sleep+0xd0/0xd0 [ 1701.443136][T27878] ? __lock_acquire+0x7d10/0x7d10 [ 1701.448686][T27878] should_fail_ex+0x399/0x4d0 [ 1701.453516][T27878] should_failslab+0x5/0x20 [ 1701.459069][T27878] slab_pre_alloc_hook+0x59/0x310 [ 1701.465100][T27878] ? tomoyo_encode+0x27e/0x540 [ 1701.470457][T27878] __kmem_cache_alloc_node+0x4f/0x260 [ 1701.476541][T27878] ? tomoyo_encode+0x27e/0x540 [ 1701.481801][T27878] __kmalloc+0xa0/0x240 [ 1701.486193][T27878] tomoyo_encode+0x27e/0x540 [ 1701.491137][T27878] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1701.497139][T27878] ? tomoyo_path_number_perm+0x205/0x650 [ 1701.503017][T27878] tomoyo_path_number_perm+0x22f/0x650 [ 1701.508870][T27878] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1701.514626][T27878] ? ksys_write+0x1c0/0x250 [ 1701.519324][T27878] ? common_file_perm+0x171/0x1c0 [ 1701.524845][T27878] ? __fget_files+0x28/0x4b0 [ 1701.529992][T27878] ? __fget_files+0x28/0x4b0 [ 1701.535063][T27878] security_file_ioctl+0x6c/0xa0 [ 1701.540280][T27878] __se_sys_ioctl+0x48/0x170 [ 1701.545102][T27878] do_syscall_64+0x4c/0xa0 [ 1701.549814][T27878] ? clear_bhb_loop+0x60/0xb0 [ 1701.554684][T27878] ? clear_bhb_loop+0x60/0xb0 [ 1701.559766][T27878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.565840][T27878] RIP: 0033:0x7fcf2159c819 [ 1701.570362][T27878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.590327][T27878] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1701.598930][T27878] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1701.607069][T27878] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 1701.615273][T27878] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.623421][T27878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.631799][T27878] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1701.640023][T27878] [ 1701.893332][T27878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1702.507639][T27901] netlink: 'syz.2.6979': attribute type 10 has an invalid length. [ 1702.555744][T27901] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6979'. [ 1702.954762][T27911] netlink: 'syz.3.6981': attribute type 3 has an invalid length. [ 1703.002418][T27911] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1704.027762][T27927] netlink: 'syz.1.6983': attribute type 8 has an invalid length. [ 1704.278006][T27927] netlink: 'syz.1.6983': attribute type 1 has an invalid length. [ 1704.380670][T27927] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1704.380704][T27933] netlink: 'syz.0.6986': attribute type 8 has an invalid length. [ 1704.442607][T27933] netlink: 'syz.0.6986': attribute type 1 has an invalid length. [ 1704.487038][T27933] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1704.967754][T27952] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6988'. [ 1705.018757][T27952] bridge_slave_1: default FDB implementation only supports local addresses [ 1705.122807][T27961] netlink: 'syz.3.6992': attribute type 10 has an invalid length. [ 1705.165970][T27961] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1705.590000][T27969] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1706.043546][T27982] FAULT_INJECTION: forcing a failure. [ 1706.043546][T27982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.077042][T27979] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.6998'. [ 1706.089211][T27982] CPU: 0 PID: 27982 Comm: syz.4.6999 Not tainted syzkaller #0 [ 1706.097250][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1706.108087][T27982] Call Trace: [ 1706.111576][T27982] [ 1706.114667][T27982] dump_stack_lvl+0x188/0x24e [ 1706.119635][T27982] ? show_regs_print_info+0x12/0x12 [ 1706.125627][T27982] ? load_image+0x400/0x400 [ 1706.130246][T27982] ? __lock_acquire+0x7d10/0x7d10 [ 1706.135812][T27982] ? __fget_files+0x28/0x4b0 [ 1706.140855][T27982] should_fail_ex+0x399/0x4d0 [ 1706.145998][T27982] _copy_to_user+0x2c/0x130 [ 1706.150703][T27982] bpf_obj_get_info_by_fd+0x1128/0x2f50 [ 1706.156512][T27982] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1706.162510][T27982] ? verify_lock_unused+0x140/0x140 [ 1706.167887][T27982] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 1706.173902][T27982] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1706.179718][T27982] ? perf_trace_lock+0xf8/0x390 [ 1706.184688][T27982] ? trace_event_raw_event_lock+0x250/0x250 [ 1706.190757][T27982] ? __might_fault+0xa6/0x120 [ 1706.195538][T27982] ? __lock_acquire+0x7d10/0x7d10 [ 1706.200771][T27982] ? __might_fault+0xa6/0x120 [ 1706.206004][T27982] ? __might_fault+0xc2/0x120 [ 1706.210926][T27982] ? __might_fault+0xa6/0x120 [ 1706.214058][T27979] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1706.215737][T27982] ? bpf_lsm_bpf+0x5/0x10 [ 1706.215770][T27982] ? security_bpf+0x7a/0xa0 [ 1706.215819][T27982] __sys_bpf+0x505/0x780 [ 1706.237751][T27982] ? bpf_link_show_fdinfo+0x380/0x380 [ 1706.243814][T27982] ? lock_chain_count+0x20/0x20 [ 1706.248956][T27982] __x64_sys_bpf+0x78/0x90 [ 1706.253714][T27982] do_syscall_64+0x4c/0xa0 [ 1706.258472][T27982] ? clear_bhb_loop+0x60/0xb0 [ 1706.263492][T27982] ? clear_bhb_loop+0x60/0xb0 [ 1706.268519][T27982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1706.274667][T27982] RIP: 0033:0x7f0c2bf9c819 [ 1706.279594][T27982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.299804][T27982] RSP: 002b:00007f0c2ce11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1706.308307][T27982] RAX: ffffffffffffffda RBX: 00007f0c2c215fa0 RCX: 00007f0c2bf9c819 [ 1706.316527][T27982] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000000f [ 1706.324834][T27982] RBP: 00007f0c2ce11090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.332881][T27982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.341026][T27982] R13: 00007f0c2c216038 R14: 00007f0c2c215fa0 R15: 00007ffd121bb5b8 [ 1706.349394][T27982] [ 1706.509806][T27991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7000'. [ 1706.642068][T27991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7000'. [ 1707.299686][T27999] netlink: 'syz.2.7005': attribute type 10 has an invalid length. [ 1707.338702][T27999] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7005'. [ 1707.665763][T28008] delete_channel: no stack [ 1708.365844][T28023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7013'. [ 1708.469066][T28023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7013'. [ 1710.222042][T28049] netlink: 'syz.1.7018': attribute type 10 has an invalid length. [ 1710.243371][T28051] netlink: 'syz.0.7017': attribute type 8 has an invalid length. [ 1710.280561][T28049] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7018'. [ 1710.289679][T28049] device batadv_slave_1 entered promiscuous mode [ 1710.310166][T28051] netlink: 'syz.0.7017': attribute type 1 has an invalid length. [ 1710.327545][T28051] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1710.350796][T28049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.358359][T28049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.540274][T28026] netlink: 'syz.3.7012': attribute type 21 has an invalid length. [ 1710.563685][T28026] netlink: 'syz.3.7012': attribute type 6 has an invalid length. [ 1710.695634][T28026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1710.938184][T28064] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1711.187455][T28067] __nla_validate_parse: 1 callbacks suppressed [ 1711.187477][T28067] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7025'. [ 1711.348302][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1715.777891][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1715.788466][T28077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.795987][T28077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.809796][T28077] device bridge0 left promiscuous mode [ 1715.840387][T28076] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1715.849775][T28076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1716.946349][T28104] netlink: 'syz.0.7035': attribute type 10 has an invalid length. [ 1716.971534][T28104] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7035'. [ 1717.335631][T28095] netlink: 'syz.3.7033': attribute type 8 has an invalid length. [ 1717.360456][T28095] netlink: 'syz.3.7033': attribute type 1 has an invalid length. [ 1717.368559][T28095] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7033'. [ 1717.474364][T28120] netlink: 'syz.2.7041': attribute type 10 has an invalid length. [ 1717.582267][T28120] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7041'. [ 1717.711773][T28118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7040'. [ 1717.768853][T28118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7040'. [ 1718.162251][T28113] netlink: 'syz.0.7038': attribute type 21 has an invalid length. [ 1718.190839][T28113] netlink: 'syz.0.7038': attribute type 6 has an invalid length. [ 1718.340876][T28113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7038'. [ 1719.674765][T28141] netlink: 63719 bytes leftover after parsing attributes in process `syz.1.7044'. [ 1719.780748][T28151] netlink: 'syz.0.7048': attribute type 10 has an invalid length. [ 1719.856554][T28151] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7048'. [ 1720.005064][T28145] netlink: 'syz.4.7046': attribute type 3 has an invalid length. [ 1720.029428][T28145] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7046'. [ 1720.620559][T28172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7054'. [ 1720.693682][T28168] netlink: 'syz.4.7052': attribute type 8 has an invalid length. [ 1720.899060][T28168] netlink: 'syz.4.7052': attribute type 1 has an invalid length. [ 1722.111884][T28194] netlink: 'syz.3.7067': attribute type 8 has an invalid length. [ 1722.191142][T28199] netlink: 'syz.2.7059': attribute type 10 has an invalid length. [ 1722.199378][T28199] __nla_validate_parse: 2 callbacks suppressed [ 1722.199400][T28199] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1722.250398][T28194] netlink: 'syz.3.7067': attribute type 1 has an invalid length. [ 1722.258325][T28194] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7067'. [ 1722.802158][T28187] netlink: 'syz.4.7056': attribute type 21 has an invalid length. [ 1722.847883][T28187] netlink: 'syz.4.7056': attribute type 6 has an invalid length. [ 1722.919672][T28187] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7056'. [ 1723.099713][T28209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.115159][T28209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.636242][T28221] netlink: 'syz.0.7068': attribute type 11 has an invalid length. [ 1723.682551][T28229] netlink: 'syz.2.7070': attribute type 27 has an invalid length. [ 1723.707015][T28229] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7070'. [ 1723.728417][T28227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7069'. [ 1723.976184][T28227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7069'. [ 1724.408592][T28243] netlink: 'syz.1.7073': attribute type 10 has an invalid length. [ 1724.446362][T28243] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7073'. [ 1724.823897][T28253] can: request_module (can-proto-0) failed. [ 1725.016956][T28262] netlink: 'syz.2.7076': attribute type 8 has an invalid length. [ 1725.272741][T28262] netlink: 'syz.2.7076': attribute type 1 has an invalid length. [ 1725.350596][T28262] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1725.749299][T28275] FAULT_INJECTION: forcing a failure. [ 1725.749299][T28275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.791587][T28271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.799510][T28271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.850933][T28275] CPU: 0 PID: 28275 Comm: syz.3.7082 Not tainted syzkaller #0 [ 1725.858835][T28275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1725.869205][T28275] Call Trace: [ 1725.872608][T28275] [ 1725.875687][T28275] dump_stack_lvl+0x188/0x24e [ 1725.880523][T28275] ? show_regs_print_info+0x12/0x12 [ 1725.885870][T28275] ? load_image+0x400/0x400 [ 1725.890782][T28275] ? __lock_acquire+0x7d10/0x7d10 [ 1725.896232][T28275] ? snprintf+0xe5/0x140 [ 1725.900621][T28275] should_fail_ex+0x399/0x4d0 [ 1725.905836][T28275] _copy_to_user+0x2c/0x130 [ 1725.910385][T28275] simple_read_from_buffer+0xe3/0x150 [ 1725.915921][T28275] proc_fail_nth_read+0x1a6/0x220 [ 1725.921541][T28275] ? proc_fault_inject_write+0x310/0x310 [ 1725.927497][T28275] ? fsnotify_perm+0x248/0x550 [ 1725.932668][T28275] ? proc_fault_inject_write+0x310/0x310 [ 1725.938545][T28275] vfs_read+0x2de/0xa00 [ 1725.942943][T28275] ? kernel_read+0x1e0/0x1e0 [ 1725.947778][T28275] ? __fget_files+0x28/0x4b0 [ 1725.952533][T28275] ? __fget_files+0x28/0x4b0 [ 1725.957283][T28275] ? __fget_files+0x43d/0x4b0 [ 1725.962169][T28275] ? __fdget_pos+0x2ae/0x360 [ 1725.966816][T28275] ? ksys_read+0x71/0x250 [ 1725.971339][T28275] ksys_read+0x14c/0x250 [ 1725.975759][T28275] ? vfs_write+0xa30/0xa30 [ 1725.980247][T28275] ? lockdep_hardirqs_on+0x94/0x140 [ 1725.985687][T28275] do_syscall_64+0x4c/0xa0 [ 1725.990264][T28275] ? clear_bhb_loop+0x60/0xb0 [ 1725.995095][T28275] ? clear_bhb_loop+0x60/0xb0 [ 1726.000099][T28275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1726.006215][T28275] RIP: 0033:0x7fbd4515d04e [ 1726.010765][T28275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1726.031036][T28275] RSP: 002b:00007fbd46007fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1726.039701][T28275] RAX: ffffffffffffffda RBX: 00007fbd460086c0 RCX: 00007fbd4515d04e [ 1726.047903][T28275] RDX: 000000000000000f RSI: 00007fbd460080a0 RDI: 0000000000000004 [ 1726.056111][T28275] RBP: 00007fbd46008090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.063629][T28261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1726.064372][T28275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.081677][T28275] R13: 00007fbd45416038 R14: 00007fbd45415fa0 R15: 00007ffef125d0b8 [ 1726.089848][T28275] [ 1726.118565][T28279] FAULT_INJECTION: forcing a failure. [ 1726.118565][T28279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.139421][T28279] CPU: 0 PID: 28279 Comm: syz.4.7084 Not tainted syzkaller #0 [ 1726.147136][T28279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1726.157427][T28279] Call Trace: [ 1726.160986][T28279] [ 1726.163957][T28279] dump_stack_lvl+0x188/0x24e [ 1726.168731][T28279] ? show_regs_print_info+0x12/0x12 [ 1726.174075][T28279] ? load_image+0x400/0x400 [ 1726.179251][T28279] ? __lock_acquire+0x7d10/0x7d10 [ 1726.184422][T28279] should_fail_ex+0x399/0x4d0 [ 1726.189577][T28279] _copy_from_user+0x2c/0x170 [ 1726.194758][T28279] do_ipv6_setsockopt+0x317/0x3e30 [ 1726.199937][T28279] ? sk_dst_reset+0xa0/0xa0 [ 1726.204614][T28279] ? verify_lock_unused+0x140/0x140 [ 1726.210130][T28279] ? mark_lock+0x94/0x320 [ 1726.214769][T28279] ? __lock_acquire+0x12f4/0x7d10 [ 1726.220159][T28279] ? perf_trace_lock+0xf8/0x390 [ 1726.225335][T28279] ? aa_label_sk_perm+0x456/0x5b0 [ 1726.230735][T28279] ? verify_lock_unused+0x140/0x140 [ 1726.236055][T28279] ? aa_sk_perm+0x950/0x950 [ 1726.240973][T28279] ? __might_sleep+0xd0/0xd0 [ 1726.246746][T28279] ? __fget_files+0x28/0x4b0 [ 1726.252224][T28279] ? aa_sk_perm+0x81f/0x950 [ 1726.256793][T28279] ? aa_af_perm+0x340/0x340 [ 1726.261539][T28279] ? __fget_files+0x43d/0x4b0 [ 1726.266560][T28279] ? aa_sock_opt_perm+0x74/0x100 [ 1726.272180][T28279] ipv6_setsockopt+0x55/0x190 [ 1726.277087][T28279] ? sock_common_recvmsg+0x190/0x190 [ 1726.282666][T28279] __sys_setsockopt+0x2bf/0x3d0 [ 1726.287951][T28279] __x64_sys_setsockopt+0xb1/0xc0 [ 1726.293338][T28279] do_syscall_64+0x4c/0xa0 [ 1726.297997][T28279] ? clear_bhb_loop+0x60/0xb0 [ 1726.302817][T28279] ? clear_bhb_loop+0x60/0xb0 [ 1726.308252][T28279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1726.314356][T28279] RIP: 0033:0x7f0c2bf9c819 [ 1726.318839][T28279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.340505][T28279] RSP: 002b:00007f0c2ce11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1726.349463][T28279] RAX: ffffffffffffffda RBX: 00007f0c2c215fa0 RCX: 00007f0c2bf9c819 [ 1726.357572][T28279] RDX: 000000000000003c RSI: 0000000000000029 RDI: 0000000000000003 [ 1726.365808][T28279] RBP: 00007f0c2ce11090 R08: 00000000000000cf R09: 0000000000000000 [ 1726.374716][T28279] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1726.382900][T28279] R13: 00007f0c2c216038 R14: 00007f0c2c215fa0 R15: 00007ffd121bb5b8 [ 1726.391281][T28279] [ 1726.639124][T28286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1727.097659][T28300] tap0: tun_chr_ioctl cmd 1074025677 [ 1727.112717][T28300] tap0: linktype set to 777 [ 1727.313753][T28305] validate_nla: 3 callbacks suppressed [ 1727.314907][T28305] netlink: 'syz.1.7094': attribute type 27 has an invalid length. [ 1727.437892][T28305] __nla_validate_parse: 2 callbacks suppressed [ 1727.437957][T28305] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7094'. [ 1728.066876][T28308] netlink: 'syz.3.7093': attribute type 8 has an invalid length. [ 1728.085890][T28308] netlink: 'syz.3.7093': attribute type 1 has an invalid length. [ 1728.094662][T28308] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1728.563855][T28335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7101'. [ 1728.617604][T28335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7101'. [ 1728.808120][T28339] FAULT_INJECTION: forcing a failure. [ 1728.808120][T28339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.911105][T28339] CPU: 1 PID: 28339 Comm: syz.4.7103 Not tainted syzkaller #0 [ 1728.920988][T28339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1728.931735][T28339] Call Trace: [ 1728.936039][T28339] [ 1728.939658][T28339] dump_stack_lvl+0x188/0x24e [ 1728.945802][T28339] ? show_regs_print_info+0x12/0x12 [ 1728.951598][T28339] ? load_image+0x400/0x400 [ 1728.956407][T28339] ? __lock_acquire+0x7d10/0x7d10 [ 1728.962095][T28339] ? full_name_hash+0x8e/0xe0 [ 1728.967120][T28339] should_fail_ex+0x399/0x4d0 [ 1728.972025][T28339] _copy_to_user+0x2c/0x130 [ 1728.976964][T28339] put_user_ifreq+0x74/0xb0 [ 1728.981872][T28339] sock_do_ioctl+0x272/0x320 [ 1728.986779][T28339] ? sock_show_fdinfo+0xb0/0xb0 [ 1728.992005][T28339] sock_ioctl+0x4d2/0x710 [ 1728.996656][T28339] ? sock_poll+0x410/0x410 [ 1729.001230][T28339] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1729.006503][T28339] ? security_file_ioctl+0x7c/0xa0 [ 1729.011688][T28339] ? sock_poll+0x410/0x410 [ 1729.016174][T28339] __se_sys_ioctl+0xfa/0x170 [ 1729.020910][T28339] do_syscall_64+0x4c/0xa0 [ 1729.025469][T28339] ? clear_bhb_loop+0x60/0xb0 [ 1729.030301][T28339] ? clear_bhb_loop+0x60/0xb0 [ 1729.035386][T28339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.041531][T28339] RIP: 0033:0x7f0c2bf9c819 [ 1729.045984][T28339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.066514][T28339] RSP: 002b:00007f0c2cdf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.074981][T28339] RAX: ffffffffffffffda RBX: 00007f0c2c216090 RCX: 00007f0c2bf9c819 [ 1729.083079][T28339] RDX: 0000200000000040 RSI: 0000000000008942 RDI: 0000000000000005 [ 1729.091275][T28339] RBP: 00007f0c2cdf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.099684][T28339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.108158][T28339] R13: 00007f0c2c216128 R14: 00007f0c2c216090 R15: 00007ffd121bb5b8 [ 1729.116827][T28339] [ 1729.279520][T28342] FAULT_INJECTION: forcing a failure. [ 1729.279520][T28342] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.330814][T28342] CPU: 1 PID: 28342 Comm: syz.0.7104 Not tainted syzkaller #0 [ 1729.338854][T28342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1729.349228][T28342] Call Trace: [ 1729.352723][T28342] [ 1729.355695][T28342] dump_stack_lvl+0x188/0x24e [ 1729.361150][T28342] ? show_regs_print_info+0x12/0x12 [ 1729.366677][T28342] ? load_image+0x400/0x400 [ 1729.371607][T28342] ? __might_sleep+0xd0/0xd0 [ 1729.376334][T28342] ? __lock_acquire+0x7d10/0x7d10 [ 1729.381407][T28342] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1729.387717][T28342] ? kasan_quarantine_put+0xd4/0x220 [ 1729.393054][T28342] should_fail_ex+0x399/0x4d0 [ 1729.397959][T28342] should_failslab+0x5/0x20 [ 1729.402783][T28342] slab_pre_alloc_hook+0x59/0x310 [ 1729.407876][T28342] ? __local_bh_enable_ip+0x136/0x1c0 [ 1729.413385][T28342] ? kvmalloc_node+0x6c/0x180 [ 1729.418288][T28342] __kmem_cache_alloc_node+0x4f/0x260 [ 1729.425111][T28342] ? kvmalloc_node+0x6c/0x180 [ 1729.430257][T28342] __kmalloc_node+0xa0/0x240 [ 1729.435031][T28342] kvmalloc_node+0x6c/0x180 [ 1729.439791][T28342] __veth_napi_enable_range+0xad/0x3c0 [ 1729.445719][T28342] veth_enable_xdp+0x301/0x4c0 [ 1729.451176][T28342] veth_xdp+0x44b/0x6b0 [ 1729.456623][T28342] bond_xdp+0x3b2/0x850 [ 1729.461338][T28342] ? bond_fix_features+0x2c0/0x2c0 [ 1729.466983][T28342] ? alloc_file+0x85/0x5f0 [ 1729.472017][T28342] dev_xdp_install+0xf2/0x240 [ 1729.476951][T28342] ? bond_fix_features+0x2c0/0x2c0 [ 1729.482210][T28342] ? bpf_xdp_link_fill_link_info+0xc0/0xc0 [ 1729.488204][T28342] ? bond_fix_features+0x2c0/0x2c0 [ 1729.493754][T28342] dev_xdp_attach+0xbd2/0xe20 [ 1729.498969][T28342] bpf_xdp_link_attach+0x31e/0x490 [ 1729.504422][T28342] ? dev_xdp_prog+0x100/0x100 [ 1729.509295][T28342] link_create+0x648/0xa20 [ 1729.513772][T28342] __sys_bpf+0x6cb/0x780 [ 1729.518160][T28342] ? bpf_link_show_fdinfo+0x380/0x380 [ 1729.523800][T28342] ? lock_chain_count+0x20/0x20 [ 1729.528795][T28342] __x64_sys_bpf+0x78/0x90 [ 1729.533447][T28342] do_syscall_64+0x4c/0xa0 [ 1729.537906][T28342] ? clear_bhb_loop+0x60/0xb0 [ 1729.542631][T28342] ? clear_bhb_loop+0x60/0xb0 [ 1729.547704][T28342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.553904][T28342] RIP: 0033:0x7fcf2159c819 [ 1729.558447][T28342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.578660][T28342] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1729.587590][T28342] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1729.595722][T28342] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 1729.603920][T28342] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.612134][T28342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.620353][T28342] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1729.628428][T28342] [ 1730.492083][T28342] bond0: (slave bond_slave_0): Error -12 calling ndo_bpf [ 1730.615682][T28354] tap0: tun_chr_ioctl cmd 1074025677 [ 1730.640783][T28354] tap0: linktype set to 777 [ 1730.917019][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.923792][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.214145][T28361] netlink: 'syz.4.7111': attribute type 27 has an invalid length. [ 1731.248358][T28361] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7111'. [ 1731.725225][T28380] netlink: 'syz.2.7112': attribute type 8 has an invalid length. [ 1731.735056][T28380] netlink: 'syz.2.7112': attribute type 1 has an invalid length. [ 1731.745186][T28380] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7112'. [ 1731.827439][T28381] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1732.317140][T28386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7116'. [ 1732.364860][T28386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7116'. [ 1733.016739][T28401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7133'. [ 1733.159434][T28401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7133'. [ 1733.619205][T28407] tap0: tun_chr_ioctl cmd 1074025677 [ 1733.656488][T28407] tap0: linktype set to 777 [ 1734.571445][T28430] netlink: 'syz.4.7129': attribute type 8 has an invalid length. [ 1734.579553][T28430] netlink: 'syz.4.7129': attribute type 1 has an invalid length. [ 1734.817986][T28430] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1735.561278][T28446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7137'. [ 1735.821688][T28446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7137'. [ 1736.074011][T28455] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7140'. [ 1736.471527][T28462] FAULT_INJECTION: forcing a failure. [ 1736.471527][T28462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.472884][T28464] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7144'. [ 1736.572181][T28462] CPU: 1 PID: 28462 Comm: syz.2.7143 Not tainted syzkaller #0 [ 1736.580209][T28462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1736.590633][T28462] Call Trace: [ 1736.594194][T28462] [ 1736.597307][T28462] dump_stack_lvl+0x188/0x24e [ 1736.602300][T28462] ? show_regs_print_info+0x12/0x12 [ 1736.607854][T28462] ? load_image+0x400/0x400 [ 1736.612628][T28462] ? __lock_acquire+0x7d10/0x7d10 [ 1736.617729][T28462] ? trace_call_bpf+0x5d6/0x6b0 [ 1736.618430][T28464] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1736.622660][T28462] should_fail_ex+0x399/0x4d0 [ 1736.622716][T28462] _copy_from_user+0x2c/0x170 [ 1736.622764][T28462] __sys_bpf+0x2ea/0x780 [ 1736.622812][T28462] ? bpf_link_show_fdinfo+0x380/0x380 [ 1736.622908][T28462] ? lock_chain_count+0x20/0x20 [ 1736.622981][T28462] __x64_sys_bpf+0x78/0x90 [ 1736.623023][T28462] do_syscall_64+0x4c/0xa0 [ 1736.623056][T28462] ? clear_bhb_loop+0x60/0xb0 [ 1736.623086][T28462] ? clear_bhb_loop+0x60/0xb0 [ 1736.623126][T28462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.623155][T28462] RIP: 0033:0x7f382f39c819 [ 1736.623182][T28462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.623206][T28462] RSP: 002b:00007f3830206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1736.623242][T28462] RAX: ffffffffffffffda RBX: 00007f382f615fa0 RCX: 00007f382f39c819 [ 1736.623262][T28462] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1736.623283][T28462] RBP: 00007f3830206090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.623301][T28462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.623328][T28462] R13: 00007f382f616038 R14: 00007f382f615fa0 R15: 00007ffe2e035098 [ 1736.623414][T28462] [ 1737.668289][T28484] netlink: 'syz.2.7149': attribute type 8 has an invalid length. [ 1737.720015][T28484] netlink: 'syz.2.7149': attribute type 1 has an invalid length. [ 1737.970780][T28484] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7149'. [ 1738.639139][T28509] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1738.833125][T28518] netlink: 'syz.0.7161': attribute type 10 has an invalid length. [ 1738.896767][T28518] device veth0_macvtap left promiscuous mode [ 1739.455097][T28528] netlink: 'syz.4.7168': attribute type 8 has an invalid length. [ 1739.468359][T28528] netlink: 'syz.4.7168': attribute type 1 has an invalid length. [ 1739.486173][T28528] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.7168'. [ 1740.174280][T28544] netlink: 'syz.1.7174': attribute type 21 has an invalid length. [ 1740.191044][T28544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7174'. [ 1740.220077][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1740.328711][T28548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1740.392832][T28550] netlink: 130181 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1740.469714][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1741.716531][T28570] netlink: 'syz.0.7182': attribute type 8 has an invalid length. [ 1741.754009][T28570] netlink: 'syz.0.7182': attribute type 1 has an invalid length. [ 1741.767675][T28570] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.7182'. [ 1742.571851][T28593] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1742.590644][T28593] netlink: zone id is out of range [ 1742.600893][T28593] netlink: zone id is out of range [ 1742.654348][T28593] netlink: del zone limit has 4 unknown bytes [ 1742.775720][T28602] netlink: 'syz.1.7192': attribute type 21 has an invalid length. [ 1742.880793][T28602] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1742.951798][T28602] netlink: 'syz.1.7192': attribute type 5 has an invalid length. [ 1743.070874][T28602] netlink: 'syz.1.7192': attribute type 6 has an invalid length. [ 1743.078993][T28602] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1743.661270][T28611] netlink: 'syz.3.7196': attribute type 1 has an invalid length. [ 1743.721914][T28611] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.7196'. [ 1744.777896][T28628] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1744.928485][T28628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1745.105394][T28646] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7207'. [ 1746.616208][T28666] netlink: 'syz.0.7212': attribute type 10 has an invalid length. [ 1746.656530][T28666] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7212'. [ 1747.165452][T28669] FAULT_INJECTION: forcing a failure. [ 1747.165452][T28669] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.214948][T28669] CPU: 0 PID: 28669 Comm: syz.0.7213 Not tainted syzkaller #0 [ 1747.222516][T28669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1747.232792][T28669] Call Trace: [ 1747.236373][T28669] [ 1747.239508][T28669] dump_stack_lvl+0x188/0x24e [ 1747.244249][T28669] ? show_regs_print_info+0x12/0x12 [ 1747.249843][T28669] ? load_image+0x400/0x400 [ 1747.254388][T28669] ? __might_sleep+0xd0/0xd0 [ 1747.259301][T28669] ? __lock_acquire+0x7d10/0x7d10 [ 1747.264472][T28669] should_fail_ex+0x399/0x4d0 [ 1747.269305][T28669] should_failslab+0x5/0x20 [ 1747.274026][T28669] slab_pre_alloc_hook+0x59/0x310 [ 1747.279177][T28669] kmem_cache_alloc_node+0x5a/0x320 [ 1747.284513][T28669] ? __alloc_skb+0xfc/0x7e0 [ 1747.289166][T28669] __alloc_skb+0xfc/0x7e0 [ 1747.293803][T28669] ? netlink_autobind+0xda/0x300 [ 1747.298891][T28669] netlink_sendmsg+0x654/0xbd0 [ 1747.304095][T28669] ? netlink_getsockopt+0x550/0x550 [ 1747.309801][T28669] ? aa_sock_msg_perm+0x94/0x150 [ 1747.314952][T28669] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1747.320286][T28669] ? security_socket_sendmsg+0x7c/0xa0 [ 1747.326007][T28669] ? netlink_getsockopt+0x550/0x550 [ 1747.331276][T28669] ____sys_sendmsg+0x5be/0x970 [ 1747.336198][T28669] ? __sys_sendmsg_sock+0x30/0x30 [ 1747.341411][T28669] ? __import_iovec+0x315/0x500 [ 1747.346688][T28669] ? import_iovec+0x6f/0xa0 [ 1747.351433][T28669] ___sys_sendmsg+0x2a2/0x360 [ 1747.356438][T28669] ? __sys_sendmsg+0x290/0x290 [ 1747.361370][T28669] ? __lock_acquire+0x7d10/0x7d10 [ 1747.366729][T28669] __se_sys_sendmsg+0x1bb/0x2a0 [ 1747.371812][T28669] ? __x64_sys_sendmsg+0x80/0x80 [ 1747.376992][T28669] ? lockdep_hardirqs_on+0x94/0x140 [ 1747.382416][T28669] do_syscall_64+0x4c/0xa0 [ 1747.387076][T28669] ? clear_bhb_loop+0x60/0xb0 [ 1747.391875][T28669] ? clear_bhb_loop+0x60/0xb0 [ 1747.396962][T28669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1747.402983][T28669] RIP: 0033:0x7fcf2159c819 [ 1747.407520][T28669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.427765][T28669] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1747.436484][T28669] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1747.444588][T28669] RDX: 0000000000008010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1747.453147][T28669] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.461366][T28669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.469379][T28669] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1747.477677][T28669] [ 1749.088002][T28694] netlink: 'syz.1.7218': attribute type 8 has an invalid length. [ 1749.265648][T28694] netlink: 'syz.1.7218': attribute type 1 has an invalid length. [ 1749.377312][T28694] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1749.527731][T28680] team0: Port device team_slave_0 removed [ 1749.534718][T28684] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1749.557794][T28707] netlink: 'syz.4.7223': attribute type 4 has an invalid length. [ 1749.570733][T28707] netlink: 199776 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1749.846942][T28691] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1749.863136][T28691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1749.934521][T28701] netlink: 'syz.4.7223': attribute type 10 has an invalid length. [ 1749.951539][T28701] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1750.016351][T28706] netlink: 'syz.4.7223': attribute type 10 has an invalid length. [ 1750.261181][T28706] team0 (unregistering): Port device team_slave_1 removed [ 1750.323772][T28706] team0 (unregistering): Port device macvlan0 removed [ 1752.251930][ T4273] Bluetooth: hci3: ISO packet for unknown connection handle 3857 [ 1752.342080][T28762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1752.432957][T28762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1752.685980][T28778] netlink: 'syz.3.7241': attribute type 3 has an invalid length. [ 1752.710725][T28778] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1752.841645][T28782] netlink: 'syz.1.7244': attribute type 21 has an invalid length. [ 1753.813964][T28816] netlink: 'syz.4.7257': attribute type 19 has an invalid length. [ 1753.850031][T28816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7257'. [ 1754.485689][T28828] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1755.773633][T28868] FAULT_INJECTION: forcing a failure. [ 1755.773633][T28868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.818448][T28868] CPU: 0 PID: 28868 Comm: syz.0.7274 Not tainted syzkaller #0 [ 1755.826128][T28868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1755.836325][T28868] Call Trace: [ 1755.839737][T28868] [ 1755.842936][T28868] dump_stack_lvl+0x188/0x24e [ 1755.847786][T28868] ? show_regs_print_info+0x12/0x12 [ 1755.853238][T28868] ? load_image+0x400/0x400 [ 1755.857893][T28868] ? __lock_acquire+0x7d10/0x7d10 [ 1755.863200][T28868] ? snprintf+0xe5/0x140 [ 1755.867625][T28868] should_fail_ex+0x399/0x4d0 [ 1755.872648][T28868] _copy_to_user+0x2c/0x130 [ 1755.877431][T28868] simple_read_from_buffer+0xe3/0x150 [ 1755.882919][T28868] proc_fail_nth_read+0x1a6/0x220 [ 1755.887967][T28868] ? proc_fault_inject_write+0x310/0x310 [ 1755.893718][T28868] ? fsnotify_perm+0x248/0x550 [ 1755.898698][T28868] ? proc_fault_inject_write+0x310/0x310 [ 1755.904353][T28868] vfs_read+0x2de/0xa00 [ 1755.908726][T28868] ? kernel_read+0x1e0/0x1e0 [ 1755.913525][T28868] ? __fget_files+0x28/0x4b0 [ 1755.918439][T28868] ? __fget_files+0x28/0x4b0 [ 1755.923144][T28868] ? __fget_files+0x43d/0x4b0 [ 1755.928265][T28868] ? __fdget_pos+0x2ae/0x360 [ 1755.933066][T28868] ? ksys_read+0x71/0x250 [ 1755.937509][T28868] ksys_read+0x14c/0x250 [ 1755.941794][T28868] ? vfs_write+0xa30/0xa30 [ 1755.946246][T28868] ? lockdep_hardirqs_on+0x94/0x140 [ 1755.951812][T28868] do_syscall_64+0x4c/0xa0 [ 1755.956257][T28868] ? clear_bhb_loop+0x60/0xb0 [ 1755.961153][T28868] ? clear_bhb_loop+0x60/0xb0 [ 1755.966209][T28868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1755.972333][T28868] RIP: 0033:0x7fcf2155d04e [ 1755.976855][T28868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1755.996575][T28868] RSP: 002b:00007fcf2251afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1756.005102][T28868] RAX: ffffffffffffffda RBX: 00007fcf2251b6c0 RCX: 00007fcf2155d04e [ 1756.013540][T28868] RDX: 000000000000000f RSI: 00007fcf2251b0a0 RDI: 0000000000000004 [ 1756.021546][T28868] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.029801][T28868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.037881][T28868] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1756.045994][T28868] [ 1756.467202][T28872] netlink: 'syz.3.7276': attribute type 10 has an invalid length. [ 1756.687091][T28872] team0: Port device wlan1 added [ 1756.856940][T28886] netlink: 'syz.3.7282': attribute type 10 has an invalid length. [ 1756.927173][T28886] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1757.019845][T28891] FAULT_INJECTION: forcing a failure. [ 1757.019845][T28891] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.201765][T28886] netlink: 'syz.3.7282': attribute type 10 has an invalid length. [ 1757.259784][T28891] CPU: 0 PID: 28891 Comm: syz.2.7280 Not tainted syzkaller #0 [ 1757.267637][T28891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1757.277838][T28891] Call Trace: [ 1757.281166][T28891] [ 1757.284142][T28891] dump_stack_lvl+0x188/0x24e [ 1757.289080][T28891] ? show_regs_print_info+0x12/0x12 [ 1757.294450][T28891] ? load_image+0x400/0x400 [ 1757.299281][T28891] ? __might_sleep+0xd0/0xd0 [ 1757.304146][T28891] ? __lock_acquire+0x7d10/0x7d10 [ 1757.309231][T28891] should_fail_ex+0x399/0x4d0 [ 1757.313972][T28891] should_failslab+0x5/0x20 [ 1757.318535][T28891] slab_pre_alloc_hook+0x59/0x310 [ 1757.323802][T28891] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1757.330024][T28891] __kmem_cache_alloc_node+0x4f/0x260 [ 1757.335544][T28891] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1757.341409][T28891] __kmalloc+0xa0/0x240 [ 1757.345619][T28891] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1757.351451][T28891] ? tomoyo_path_number_perm+0x205/0x650 [ 1757.357264][T28891] tomoyo_path_number_perm+0x22f/0x650 [ 1757.362776][T28891] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1757.368561][T28891] ? ksys_write+0x1c0/0x250 [ 1757.373120][T28891] ? common_file_perm+0x171/0x1c0 [ 1757.378587][T28891] ? __fget_files+0x28/0x4b0 [ 1757.383280][T28891] ? __fget_files+0x28/0x4b0 [ 1757.388061][T28891] security_file_ioctl+0x6c/0xa0 [ 1757.393055][T28891] __se_sys_ioctl+0x48/0x170 [ 1757.397873][T28891] do_syscall_64+0x4c/0xa0 [ 1757.402615][T28891] ? clear_bhb_loop+0x60/0xb0 [ 1757.407529][T28891] ? clear_bhb_loop+0x60/0xb0 [ 1757.412471][T28891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.418781][T28891] RIP: 0033:0x7f382f39c819 [ 1757.423544][T28891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.443873][T28891] RSP: 002b:00007f38301c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.452787][T28891] RAX: ffffffffffffffda RBX: 00007f382f616180 RCX: 00007f382f39c819 [ 1757.461164][T28891] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000b [ 1757.469189][T28891] RBP: 00007f38301c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.477294][T28891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.485497][T28891] R13: 00007f382f616218 R14: 00007f382f616180 R15: 00007ffe2e035098 [ 1757.493630][T28891] [ 1757.514295][T28892] netlink: 'syz.3.7282': attribute type 4 has an invalid length. [ 1757.538465][T28892] netlink: 199776 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1758.104402][T28886] team0 (unregistering): Port device team_slave_1 removed [ 1758.147587][T28886] team0 (unregistering): Port device virt_wifi0 removed [ 1758.216053][T28886] team0 (unregistering): Port device wlan1 removed [ 1758.630523][T28891] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1758.918830][T28911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7290'. [ 1761.943372][T28956] FAULT_INJECTION: forcing a failure. [ 1761.943372][T28956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.042401][T28956] CPU: 1 PID: 28956 Comm: syz.0.7304 Not tainted syzkaller #0 [ 1762.050162][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1762.060835][T28956] Call Trace: [ 1762.064332][T28956] [ 1762.067488][T28956] dump_stack_lvl+0x188/0x24e [ 1762.072217][T28956] ? show_regs_print_info+0x12/0x12 [ 1762.077464][T28956] ? load_image+0x400/0x400 [ 1762.082119][T28956] ? __lock_acquire+0x7d10/0x7d10 [ 1762.087283][T28956] should_fail_ex+0x399/0x4d0 [ 1762.092019][T28956] _copy_from_user+0x2c/0x170 [ 1762.097009][T28956] ____sys_sendmsg+0x30a/0x970 [ 1762.101911][T28956] ? __sys_sendmsg_sock+0x30/0x30 [ 1762.107050][T28956] ? __import_iovec+0x315/0x500 [ 1762.111947][T28956] ? import_iovec+0x6f/0xa0 [ 1762.116582][T28956] ___sys_sendmsg+0x2a2/0x360 [ 1762.121309][T28956] ? __sys_sendmsg+0x290/0x290 [ 1762.126314][T28956] ? __lock_acquire+0x7d10/0x7d10 [ 1762.131515][T28956] __se_sys_sendmsg+0x1bb/0x2a0 [ 1762.136656][T28956] ? ct_nmi_exit+0x145/0x1c0 [ 1762.141556][T28956] ? __x64_sys_sendmsg+0x80/0x80 [ 1762.146653][T28956] ? lockdep_hardirqs_on+0x94/0x140 [ 1762.152167][T28956] do_syscall_64+0x4c/0xa0 [ 1762.156707][T28956] ? clear_bhb_loop+0x60/0xb0 [ 1762.161439][T28956] ? clear_bhb_loop+0x60/0xb0 [ 1762.166267][T28956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.172370][T28956] RIP: 0033:0x7fcf2159c819 [ 1762.177271][T28956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.197612][T28956] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.206142][T28956] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1762.214154][T28956] RDX: 00000000000080fe RSI: 0000200000000080 RDI: 0000000000000006 [ 1762.222352][T28956] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.230525][T28956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.238707][T28956] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1762.246831][T28956] [ 1763.000979][T28952] mac80211_hwsim hwsim43 ªªªªªª: renamed from wlan0 [ 1763.547408][T28983] netlink: 'syz.2.7310': attribute type 8 has an invalid length. [ 1763.573711][T28983] netlink: 'syz.2.7310': attribute type 1 has an invalid length. [ 1763.614090][T28983] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7310'. [ 1766.395131][T28989] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7309'. [ 1766.422266][T28989] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1767.837872][T29027] netlink: 'syz.2.7325': attribute type 8 has an invalid length. [ 1767.857165][T29027] netlink: 'syz.2.7325': attribute type 1 has an invalid length. [ 1767.881649][T29027] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7325'. [ 1769.859813][T29063] netlink: 'syz.1.7338': attribute type 10 has an invalid length. [ 1769.887285][T29063] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7338'. [ 1771.336527][T29083] netlink: 'syz.4.7344': attribute type 8 has an invalid length. [ 1771.386189][T29083] netlink: 'syz.4.7344': attribute type 1 has an invalid length. [ 1771.417692][T29083] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.7344'. [ 1772.486530][T29094] netlink: 'syz.0.7347': attribute type 39 has an invalid length. [ 1772.744395][T29106] netlink: 'syz.0.7352': attribute type 10 has an invalid length. [ 1772.779675][T29106] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7352'. [ 1773.357103][T29116] mac80211_hwsim hwsim54 ªªªªªª: renamed from wlan0 [ 1774.852624][T29132] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7361'. [ 1774.867985][T29133] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7361'. [ 1775.219994][T29129] netlink: 'syz.1.7360': attribute type 8 has an invalid length. [ 1775.261171][T29129] netlink: 'syz.1.7360': attribute type 1 has an invalid length. [ 1775.295245][T29129] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1775.555014][T29148] netlink: 'syz.2.7367': attribute type 10 has an invalid length. [ 1775.609101][T29148] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7367'. [ 1777.928106][T29187] netlink: 'syz.2.7381': attribute type 10 has an invalid length. [ 1777.990380][T29187] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7381'. [ 1778.051744][T29183] netlink: 'syz.3.7380': attribute type 8 has an invalid length. [ 1778.080856][T29183] netlink: 'syz.3.7380': attribute type 1 has an invalid length. [ 1778.140803][T29183] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7380'. [ 1778.357228][T29203] FAULT_INJECTION: forcing a failure. [ 1778.357228][T29203] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.375054][T29203] CPU: 1 PID: 29203 Comm: syz.4.7386 Not tainted syzkaller #0 [ 1778.382604][T29203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1778.393231][T29203] Call Trace: [ 1778.396803][T29203] [ 1778.399801][T29203] dump_stack_lvl+0x188/0x24e [ 1778.404628][T29203] ? show_regs_print_info+0x12/0x12 [ 1778.409898][T29203] ? load_image+0x400/0x400 [ 1778.414430][T29203] ? __might_sleep+0xd0/0xd0 [ 1778.419047][T29203] ? __lock_acquire+0x7d10/0x7d10 [ 1778.424275][T29203] should_fail_ex+0x399/0x4d0 [ 1778.429155][T29203] should_failslab+0x5/0x20 [ 1778.433674][T29203] slab_pre_alloc_hook+0x59/0x310 [ 1778.438725][T29203] ? lock_chain_count+0x20/0x20 [ 1778.443610][T29203] kmem_cache_alloc+0x56/0x2f0 [ 1778.448479][T29203] ? sk_prot_alloc+0x57/0x210 [ 1778.453272][T29203] sk_prot_alloc+0x57/0x210 [ 1778.457965][T29203] ? sk_alloc+0x20/0x340 [ 1778.462453][T29203] sk_alloc+0x36/0x340 [ 1778.466661][T29203] ? __lock_acquire+0x7d10/0x7d10 [ 1778.471810][T29203] __vsock_create+0x3b/0x970 [ 1778.476416][T29203] vsock_create+0x12e/0x3b0 [ 1778.480942][T29203] __sock_create+0x4a2/0x940 [ 1778.485561][T29203] __sys_socketpair+0x1bd/0x540 [ 1778.490529][T29203] __x64_sys_socketpair+0x97/0xb0 [ 1778.495798][T29203] do_syscall_64+0x4c/0xa0 [ 1778.500352][T29203] ? clear_bhb_loop+0x60/0xb0 [ 1778.505259][T29203] ? clear_bhb_loop+0x60/0xb0 [ 1778.510077][T29203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.516228][T29203] RIP: 0033:0x7f0c2bf9c819 [ 1778.520714][T29203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.541388][T29203] RSP: 002b:00007f0c2ce11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1778.549938][T29203] RAX: ffffffffffffffda RBX: 00007f0c2c215fa0 RCX: 00007f0c2bf9c819 [ 1778.558124][T29203] RDX: 0000000000000028 RSI: 0000000000000002 RDI: 0000000000000028 [ 1778.566222][T29203] RBP: 00007f0c2ce11090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.574387][T29203] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.582562][T29203] R13: 00007f0c2c216038 R14: 00007f0c2c215fa0 R15: 00007ffd121bb5b8 [ 1778.591031][T29203] [ 1779.472050][T29216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7390'. [ 1779.743342][T29229] netlink: 'syz.2.7391': attribute type 3 has an invalid length. [ 1779.790689][T29229] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7391'. [ 1779.942497][T29234] netlink: 'syz.1.7395': attribute type 10 has an invalid length. [ 1779.957892][T29234] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7395'. [ 1780.022676][T29237] FAULT_INJECTION: forcing a failure. [ 1780.022676][T29237] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.058304][T29237] CPU: 0 PID: 29237 Comm: syz.0.7396 Not tainted syzkaller #0 [ 1780.066288][T29237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1780.076381][T29237] Call Trace: [ 1780.079713][T29237] [ 1780.082762][T29237] dump_stack_lvl+0x188/0x24e [ 1780.087493][T29237] ? show_regs_print_info+0x12/0x12 [ 1780.093023][T29237] ? load_image+0x400/0x400 [ 1780.097679][T29237] ? __might_sleep+0xd0/0xd0 [ 1780.102395][T29237] ? __lock_acquire+0x7d10/0x7d10 [ 1780.107462][T29237] should_fail_ex+0x399/0x4d0 [ 1780.112276][T29237] should_failslab+0x5/0x20 [ 1780.116810][T29237] slab_pre_alloc_hook+0x59/0x310 [ 1780.122069][T29237] ? security_prepare_creds+0x47/0x130 [ 1780.127746][T29237] __kmem_cache_alloc_node+0x4f/0x260 [ 1780.133182][T29237] ? security_prepare_creds+0x47/0x130 [ 1780.138690][T29237] __kmalloc+0xa0/0x240 [ 1780.142896][T29237] security_prepare_creds+0x47/0x130 [ 1780.148659][T29237] prepare_creds+0x450/0x610 [ 1780.153918][T29237] copy_creds+0x146/0xd50 [ 1780.158299][T29237] copy_process+0x932/0x4030 [ 1780.162956][T29237] ? idle_dummy+0x10/0x10 [ 1780.167355][T29237] kernel_clone+0x24b/0x900 [ 1780.172089][T29237] ? ksys_write+0x1c0/0x250 [ 1780.176651][T29237] ? create_io_thread+0x170/0x170 [ 1780.181737][T29237] __x64_sys_clone+0x1a7/0x220 [ 1780.186902][T29237] ? __fget_files+0x43d/0x4b0 [ 1780.191716][T29237] ? __ia32_sys_vfork+0x140/0x140 [ 1780.196792][T29237] ? lock_chain_count+0x20/0x20 [ 1780.201868][T29237] ? lockdep_hardirqs_on+0x94/0x140 [ 1780.207190][T29237] do_syscall_64+0x4c/0xa0 [ 1780.211744][T29237] ? clear_bhb_loop+0x60/0xb0 [ 1780.216456][T29237] ? clear_bhb_loop+0x60/0xb0 [ 1780.221164][T29237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1780.227533][T29237] RIP: 0033:0x7fcf2159c819 [ 1780.232089][T29237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.252020][T29237] RSP: 002b:00007fcf224f9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1780.260656][T29237] RAX: ffffffffffffffda RBX: 00007fcf21816090 RCX: 00007fcf2159c819 [ 1780.269134][T29237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002000 [ 1780.277312][T29237] RBP: 00007fcf224fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.285576][T29237] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1780.293684][T29237] R13: 00007fcf21816128 R14: 00007fcf21816090 R15: 00007ffc241ab008 [ 1780.301873][T29237] [ 1780.734136][T29249] netlink: 'syz.4.7398': attribute type 9 has an invalid length. [ 1780.929536][T29254] netlink: 'syz.3.7400': attribute type 8 has an invalid length. [ 1781.028087][T29254] netlink: 'syz.3.7400': attribute type 1 has an invalid length. [ 1781.105756][T29254] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7400'. [ 1781.835550][T29275] netlink: 'syz.4.7408': attribute type 3 has an invalid length. [ 1781.850048][T29279] netlink: 'syz.1.7409': attribute type 10 has an invalid length. [ 1781.860268][T29275] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7408'. [ 1781.879853][T29279] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7409'. [ 1783.338079][T29312] netlink: 'syz.1.7418': attribute type 8 has an invalid length. [ 1783.372114][T29312] netlink: 'syz.1.7418': attribute type 1 has an invalid length. [ 1783.411808][T29312] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1783.562887][T29326] netlink: 'syz.0.7424': attribute type 10 has an invalid length. [ 1783.579021][T29326] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7424'. [ 1784.111237][T29346] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7431'. [ 1785.356934][T29353] netlink: 'syz.1.7433': attribute type 25 has an invalid length. [ 1785.397116][T29353] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.7433'. [ 1785.433046][T29353] netlink: 'syz.1.7433': attribute type 2 has an invalid length. [ 1785.455082][T29353] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.7433'. [ 1785.928787][T29369] netlink: 'syz.1.7439': attribute type 10 has an invalid length. [ 1785.950799][T29369] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7439'. [ 1787.006976][T29393] FAULT_INJECTION: forcing a failure. [ 1787.006976][T29393] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.108588][T29393] CPU: 1 PID: 29393 Comm: syz.2.7447 Not tainted syzkaller #0 [ 1787.116323][T29393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1787.127394][T29393] Call Trace: [ 1787.130822][T29393] [ 1787.133794][T29393] dump_stack_lvl+0x188/0x24e [ 1787.138616][T29393] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1787.144864][T29393] ? show_regs_print_info+0x12/0x12 [ 1787.150559][T29393] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1787.156777][T29393] should_fail_ex+0x399/0x4d0 [ 1787.161519][T29393] should_failslab+0x5/0x20 [ 1787.166163][T29393] slab_pre_alloc_hook+0x59/0x310 [ 1787.171338][T29393] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1787.176961][T29393] __kmem_cache_alloc_node+0x4f/0x260 [ 1787.182455][T29393] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1787.188037][T29393] __kmalloc+0xa0/0x240 [ 1787.192321][T29393] bpf_prog_test_run_skb+0x234/0x12a0 [ 1787.197823][T29393] ? lockdep_hardirqs_on+0x94/0x140 [ 1787.203491][T29393] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1787.209680][T29393] ? cpu_online+0xa0/0xa0 [ 1787.214029][T29393] bpf_prog_test_run+0x31e/0x390 [ 1787.218990][T29393] __sys_bpf+0x62b/0x780 [ 1787.223257][T29393] ? bpf_link_show_fdinfo+0x380/0x380 [ 1787.228896][T29393] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1787.235215][T29393] __x64_sys_bpf+0x78/0x90 [ 1787.239845][T29393] do_syscall_64+0x4c/0xa0 [ 1787.244285][T29393] ? clear_bhb_loop+0x60/0xb0 [ 1787.248986][T29393] ? clear_bhb_loop+0x60/0xb0 [ 1787.253776][T29393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1787.259791][T29393] RIP: 0033:0x7f382f39c819 [ 1787.264267][T29393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.284478][T29393] RSP: 002b:00007f3830206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1787.293210][T29393] RAX: ffffffffffffffda RBX: 00007f382f615fa0 RCX: 00007f382f39c819 [ 1787.301652][T29393] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1787.309815][T29393] RBP: 00007f3830206090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.318172][T29393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.326429][T29393] R13: 00007f382f616038 R14: 00007f382f615fa0 R15: 00007ffe2e035098 [ 1787.334526][T29393] [ 1788.576723][T29421] netlink: 'syz.4.7455': attribute type 10 has an invalid length. [ 1788.591253][T29421] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7455'. [ 1788.778923][T29418] netlink: 'syz.3.7452': attribute type 8 has an invalid length. [ 1788.818235][T29418] netlink: 'syz.3.7452': attribute type 1 has an invalid length. [ 1788.829027][T29418] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7452'. [ 1789.491227][T29422] netlink: 'syz.0.7453': attribute type 10 has an invalid length. [ 1789.499418][T29422] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7453'. [ 1790.531614][T29459] FAULT_INJECTION: forcing a failure. [ 1790.531614][T29459] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.591092][T29459] CPU: 0 PID: 29459 Comm: syz.1.7465 Not tainted syzkaller #0 [ 1790.599023][T29459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1790.609299][T29459] Call Trace: [ 1790.612873][T29459] [ 1790.615925][T29459] dump_stack_lvl+0x188/0x24e [ 1790.620740][T29459] ? show_regs_print_info+0x12/0x12 [ 1790.626143][T29459] ? load_image+0x400/0x400 [ 1790.630765][T29459] ? __might_sleep+0xd0/0xd0 [ 1790.635446][T29459] ? __lock_acquire+0x7d10/0x7d10 [ 1790.640950][T29459] should_fail_ex+0x399/0x4d0 [ 1790.645774][T29459] should_failslab+0x5/0x20 [ 1790.650430][T29459] slab_pre_alloc_hook+0x59/0x310 [ 1790.655697][T29459] ? apparmor_sk_alloc_security+0x74/0x100 [ 1790.661832][T29459] __kmem_cache_alloc_node+0x4f/0x260 [ 1790.667351][T29459] ? apparmor_sk_alloc_security+0x74/0x100 [ 1790.673284][T29459] kmalloc_trace+0x26/0xe0 [ 1790.677886][T29459] apparmor_sk_alloc_security+0x74/0x100 [ 1790.683672][T29459] security_sk_alloc+0x6a/0xa0 [ 1790.688708][T29459] sk_prot_alloc+0x101/0x210 [ 1790.693448][T29459] ? sk_alloc+0x20/0x340 [ 1790.697843][T29459] sk_alloc+0x36/0x340 [ 1790.702142][T29459] ? bpf_ctx_init+0x163/0x1a0 [ 1790.706862][T29459] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1790.712449][T29459] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1790.717843][T29459] ? __fget_files+0x28/0x4b0 [ 1790.722547][T29459] ? __fget_files+0x43d/0x4b0 [ 1790.727350][T29459] ? cpu_online+0xa0/0xa0 [ 1790.731900][T29459] bpf_prog_test_run+0x31e/0x390 [ 1790.736901][T29459] __sys_bpf+0x62b/0x780 [ 1790.741538][T29459] ? bpf_link_show_fdinfo+0x380/0x380 [ 1790.747031][T29459] ? 0xffffffff81000000 [ 1790.751387][T29459] ? lock_chain_count+0x20/0x20 [ 1790.756534][T29459] __x64_sys_bpf+0x78/0x90 [ 1790.761184][T29459] do_syscall_64+0x4c/0xa0 [ 1790.765800][T29459] ? clear_bhb_loop+0x60/0xb0 [ 1790.770671][T29459] ? clear_bhb_loop+0x60/0xb0 [ 1790.775461][T29459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.781473][T29459] RIP: 0033:0x7f6b9859c819 [ 1790.785935][T29459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.806388][T29459] RSP: 002b:00007f6b993b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1790.815093][T29459] RAX: ffffffffffffffda RBX: 00007f6b98815fa0 RCX: 00007f6b9859c819 [ 1790.823495][T29459] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1790.831947][T29459] RBP: 00007f6b993b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.840382][T29459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.848553][T29459] R13: 00007f6b98816038 R14: 00007f6b98815fa0 R15: 00007ffda01536d8 [ 1790.857012][T29459] [ 1791.043438][T29463] netlink: 'syz.0.7468': attribute type 8 has an invalid length. [ 1791.074090][T29463] netlink: 'syz.0.7468': attribute type 1 has an invalid length. [ 1791.099670][T29463] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.7468'. [ 1792.026960][T29470] netlink: 'syz.0.7470': attribute type 10 has an invalid length. [ 1792.035130][T29470] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7470'. [ 1792.130827][T29474] netlink: 826 bytes leftover after parsing attributes in process `syz.1.7472'. [ 1792.152875][T29478] netlink: 'syz.3.7471': attribute type 29 has an invalid length. [ 1792.172026][T29474] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7472'. [ 1792.184020][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.184122][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.206626][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7471'. [ 1792.232801][T29478] netlink: 'syz.3.7471': attribute type 29 has an invalid length. [ 1792.269539][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7471'. [ 1792.289540][T29474] netlink: 'syz.1.7472': attribute type 21 has an invalid length. [ 1792.361079][T29474] netlink: 'syz.1.7472': attribute type 4 has an invalid length. [ 1792.856882][T29480] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7474'. [ 1793.539302][T29501] netlink: 'syz.4.7481': attribute type 8 has an invalid length. [ 1793.605545][T29501] netlink: 'syz.4.7481': attribute type 1 has an invalid length. [ 1793.639972][T29501] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1794.340461][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 1795.753682][T29516] netlink: 'syz.1.7485': attribute type 10 has an invalid length. [ 1795.762961][T29516] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1796.064406][T29526] netlink: 'syz.3.7489': attribute type 27 has an invalid length. [ 1796.093747][T29526] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1796.458011][T29534] netlink: 'syz.4.7491': attribute type 29 has an invalid length. [ 1796.486866][T29536] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7492'. [ 1796.520507][T29534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7491'. [ 1796.616245][T29534] netlink: 'syz.4.7491': attribute type 29 has an invalid length. [ 1796.729946][T29534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7491'. [ 1797.530062][T29554] netlink: 'syz.1.7498': attribute type 10 has an invalid length. [ 1797.551030][T29554] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1797.699824][T29552] netlink: 'syz.2.7497': attribute type 8 has an invalid length. [ 1797.719188][T29552] netlink: 'syz.2.7497': attribute type 1 has an invalid length. [ 1797.748035][T29552] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7497'. [ 1798.143499][T29567] netlink: 'syz.2.7503': attribute type 28 has an invalid length. [ 1798.173598][T29567] netlink: 'syz.2.7503': attribute type 29 has an invalid length. [ 1798.222923][T29567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7503'. [ 1798.353832][T29581] FAULT_INJECTION: forcing a failure. [ 1798.353832][T29581] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.435340][T29581] CPU: 0 PID: 29581 Comm: syz.1.7508 Not tainted syzkaller #0 [ 1798.443101][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1798.453200][T29581] Call Trace: [ 1798.456514][T29581] [ 1798.459504][T29581] dump_stack_lvl+0x188/0x24e [ 1798.464597][T29581] ? show_regs_print_info+0x12/0x12 [ 1798.469941][T29581] ? load_image+0x400/0x400 [ 1798.474584][T29581] ? verify_lock_unused+0x140/0x140 [ 1798.480149][T29581] should_fail_ex+0x399/0x4d0 [ 1798.484870][T29581] should_failslab+0x5/0x20 [ 1798.489587][T29581] slab_pre_alloc_hook+0x59/0x310 [ 1798.494671][T29581] kmem_cache_alloc+0x56/0x2f0 [ 1798.499498][T29581] ? skb_clone+0x1e7/0x370 [ 1798.504231][T29581] skb_clone+0x1e7/0x370 [ 1798.508526][T29581] __netlink_deliver_tap+0x3ed/0x800 [ 1798.513870][T29581] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.519297][T29581] netlink_deliver_tap+0x19c/0x1b0 [ 1798.524663][T29581] netlink_unicast+0x728/0x8d0 [ 1798.529583][T29581] netlink_sendmsg+0x8ad/0xbd0 [ 1798.534666][T29581] ? netlink_getsockopt+0x550/0x550 [ 1798.539913][T29581] ? aa_sock_msg_perm+0x94/0x150 [ 1798.544893][T29581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1798.550216][T29581] ? security_socket_sendmsg+0x7c/0xa0 [ 1798.555749][T29581] ? netlink_getsockopt+0x550/0x550 [ 1798.561157][T29581] ____sys_sendmsg+0x5be/0x970 [ 1798.566230][T29581] ? __sys_sendmsg_sock+0x30/0x30 [ 1798.571369][T29581] ? __import_iovec+0x315/0x500 [ 1798.576277][T29581] ? import_iovec+0x6f/0xa0 [ 1798.580806][T29581] ___sys_sendmsg+0x2a2/0x360 [ 1798.585515][T29581] ? __sys_sendmsg+0x290/0x290 [ 1798.590326][T29581] ? __lock_acquire+0x7d10/0x7d10 [ 1798.595668][T29581] __se_sys_sendmsg+0x1bb/0x2a0 [ 1798.600648][T29581] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.605723][T29581] ? lockdep_hardirqs_on+0x94/0x140 [ 1798.611050][T29581] do_syscall_64+0x4c/0xa0 [ 1798.615523][T29581] ? clear_bhb_loop+0x60/0xb0 [ 1798.620314][T29581] ? clear_bhb_loop+0x60/0xb0 [ 1798.625195][T29581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.631365][T29581] RIP: 0033:0x7f6b9859c819 [ 1798.635812][T29581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.655878][T29581] RSP: 002b:00007f6b993b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.664759][T29581] RAX: ffffffffffffffda RBX: 00007f6b98815fa0 RCX: 00007f6b9859c819 [ 1798.673098][T29581] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1798.681260][T29581] RBP: 00007f6b993b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.689781][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.697792][T29581] R13: 00007f6b98816038 R14: 00007f6b98815fa0 R15: 00007ffda01536d8 [ 1798.706193][T29581] [ 1798.723529][T29581] netlink: 'syz.1.7508': attribute type 2 has an invalid length. [ 1798.812936][T29587] netlink: 'syz.2.7511': attribute type 10 has an invalid length. [ 1798.830503][T29587] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1799.294354][T29594] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7513'. [ 1800.176423][T29618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7520'. [ 1800.438781][T29624] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7523'. [ 1800.757324][T29626] device veth0_macvtap left promiscuous mode [ 1801.970901][T29640] validate_nla: 7 callbacks suppressed [ 1801.970929][T29640] netlink: 'syz.1.7527': attribute type 8 has an invalid length. [ 1801.989969][T29640] netlink: 'syz.1.7527': attribute type 1 has an invalid length. [ 1801.998151][T29640] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.7527'. [ 1805.453164][T29666] netlink: 'syz.2.7535': attribute type 10 has an invalid length. [ 1805.480503][T29666] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7535'. [ 1805.656912][T29668] netlink: 'syz.4.7536': attribute type 21 has an invalid length. [ 1805.693119][T29673] netlink: 'syz.3.7539': attribute type 10 has an invalid length. [ 1805.727415][T29673] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7539'. [ 1806.166662][T29689] netlink: 'syz.4.7541': attribute type 8 has an invalid length. [ 1806.331988][T29689] netlink: 'syz.4.7541': attribute type 1 has an invalid length. [ 1806.437469][T29689] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.7541'. [ 1807.064088][T29700] delete_channel: no stack [ 1807.089631][T29700] delete_channel: no stack [ 1807.246413][T29678] netlink: 'syz.2.7540': attribute type 10 has an invalid length. [ 1807.275455][T29678] team0: Port device macvlan0 added [ 1807.690868][T29709] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1807.945133][T29709] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1810.226095][T29721] netlink: 'syz.1.7550': attribute type 10 has an invalid length. [ 1810.247360][T29721] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7550'. [ 1810.954178][T29735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7554'. [ 1811.370124][T29735] device bridge_slave_0 left promiscuous mode [ 1811.379960][T29735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.905712][T29746] device syzkaller0 entered promiscuous mode [ 1811.972240][T29766] netlink: 'syz.1.7564': attribute type 10 has an invalid length. [ 1812.000484][T29766] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7564'. [ 1814.771738][T29761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.779302][T29761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.951311][T29784] FAULT_INJECTION: forcing a failure. [ 1814.951311][T29784] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.989379][T29784] CPU: 1 PID: 29784 Comm: syz.0.7570 Not tainted syzkaller #0 [ 1814.997468][T29784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1815.007924][T29784] Call Trace: [ 1815.011242][T29784] [ 1815.014314][T29784] dump_stack_lvl+0x188/0x24e [ 1815.019321][T29784] ? show_regs_print_info+0x12/0x12 [ 1815.024563][T29784] ? load_image+0x400/0x400 [ 1815.029108][T29784] ? verify_lock_unused+0x140/0x140 [ 1815.034600][T29784] should_fail_ex+0x399/0x4d0 [ 1815.039298][T29784] should_failslab+0x5/0x20 [ 1815.043922][T29784] slab_pre_alloc_hook+0x59/0x310 [ 1815.049060][T29784] kmem_cache_alloc+0x56/0x2f0 [ 1815.053928][T29784] ? skb_clone+0x1e7/0x370 [ 1815.058471][T29784] skb_clone+0x1e7/0x370 [ 1815.062750][T29784] __netlink_deliver_tap+0x3ed/0x800 [ 1815.068169][T29784] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.073397][T29784] netlink_deliver_tap+0x19c/0x1b0 [ 1815.078724][T29784] netlink_unicast+0x728/0x8d0 [ 1815.083525][T29784] netlink_sendmsg+0x8ad/0xbd0 [ 1815.088680][T29784] ? netlink_getsockopt+0x550/0x550 [ 1815.094264][T29784] ? aa_sock_msg_perm+0x94/0x150 [ 1815.099307][T29784] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1815.104784][T29784] ? security_socket_sendmsg+0x7c/0xa0 [ 1815.110789][T29784] ? netlink_getsockopt+0x550/0x550 [ 1815.116202][T29784] ____sys_sendmsg+0x5be/0x970 [ 1815.120998][T29784] ? __sys_sendmsg_sock+0x30/0x30 [ 1815.126215][T29784] ? __import_iovec+0x315/0x500 [ 1815.131106][T29784] ? import_iovec+0x6f/0xa0 [ 1815.135753][T29784] ___sys_sendmsg+0x2a2/0x360 [ 1815.140484][T29784] ? __sys_sendmsg+0x290/0x290 [ 1815.145410][T29784] ? __lock_acquire+0x7d10/0x7d10 [ 1815.150865][T29784] __se_sys_sendmsg+0x1bb/0x2a0 [ 1815.155945][T29784] ? __x64_sys_sendmsg+0x80/0x80 [ 1815.161881][T29784] ? lockdep_hardirqs_on+0x94/0x140 [ 1815.167274][T29784] do_syscall_64+0x4c/0xa0 [ 1815.171745][T29784] ? clear_bhb_loop+0x60/0xb0 [ 1815.176623][T29784] ? clear_bhb_loop+0x60/0xb0 [ 1815.181413][T29784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.187512][T29784] RIP: 0033:0x7fcf2159c819 [ 1815.191945][T29784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.212221][T29784] RSP: 002b:00007fcf2251b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.220746][T29784] RAX: ffffffffffffffda RBX: 00007fcf21815fa0 RCX: 00007fcf2159c819 [ 1815.229529][T29784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1815.237608][T29784] RBP: 00007fcf2251b090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.245685][T29784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.253944][T29784] R13: 00007fcf21816038 R14: 00007fcf21815fa0 R15: 00007ffc241ab008 [ 1815.262237][T29784] [ 1815.414390][T29799] netlink: 'syz.1.7575': attribute type 10 has an invalid length. [ 1815.422886][T29784] netlink: 'syz.0.7570': attribute type 2 has an invalid length. [ 1815.668412][T29801] netlink: 'syz.4.7576': attribute type 10 has an invalid length. [ 1815.697021][T29801] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7576'. [ 1816.986185][T29822] netlink: 'syz.0.7581': attribute type 2 has an invalid length. [ 1818.179447][T29850] netlink: 'syz.1.7589': attribute type 10 has an invalid length. [ 1818.217657][T29850] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7589'. [ 1818.581434][T29859] netlink: 'syz.2.7592': attribute type 10 has an invalid length. [ 1818.646650][T29859] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7592'. [ 1818.647295][T29856] netlink: 'syz.4.7590': attribute type 8 has an invalid length. [ 1818.874436][T29856] netlink: 'syz.4.7590': attribute type 1 has an invalid length. [ 1818.963148][T29856] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.7590'. [ 1819.707367][T29889] netlink: 'syz.4.7603': attribute type 10 has an invalid length. [ 1819.721852][T29889] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1819.756661][T29890] netlink: 'syz.2.7602': attribute type 21 has an invalid length. [ 1819.783753][T29890] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1819.839458][T29890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1820.199134][T29894] FAULT_INJECTION: forcing a failure. [ 1820.199134][T29894] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.285744][T29894] CPU: 1 PID: 29894 Comm: syz.1.7605 Not tainted syzkaller #0 [ 1820.293482][T29894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1820.303653][T29894] Call Trace: [ 1820.307324][T29894] [ 1820.310277][T29894] dump_stack_lvl+0x188/0x24e [ 1820.315078][T29894] ? show_regs_print_info+0x12/0x12 [ 1820.320474][T29894] ? load_image+0x400/0x400 [ 1820.325147][T29894] ? __might_sleep+0xd0/0xd0 [ 1820.329755][T29894] ? __lock_acquire+0x7d10/0x7d10 [ 1820.334829][T29894] ? trace_event_raw_event_lock+0x250/0x250 [ 1820.340832][T29894] should_fail_ex+0x399/0x4d0 [ 1820.345539][T29894] should_failslab+0x5/0x20 [ 1820.350080][T29894] slab_pre_alloc_hook+0x59/0x310 [ 1820.355265][T29894] ? sk_prot_alloc+0xe7/0x210 [ 1820.360237][T29894] __kmem_cache_alloc_node+0x4f/0x260 [ 1820.365650][T29894] ? sk_prot_alloc+0xe7/0x210 [ 1820.370702][T29894] __kmalloc+0xa0/0x240 [ 1820.375219][T29894] sk_prot_alloc+0xe7/0x210 [ 1820.379745][T29894] ? sk_alloc+0x20/0x340 [ 1820.384213][T29894] sk_alloc+0x36/0x340 [ 1820.388307][T29894] ? bpf_ctx_init+0x163/0x1a0 [ 1820.393036][T29894] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1820.398745][T29894] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1820.404334][T29894] ? lockdep_hardirqs_on+0x94/0x140 [ 1820.409914][T29894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1820.416103][T29894] ? cpu_online+0xa0/0xa0 [ 1820.420458][T29894] bpf_prog_test_run+0x31e/0x390 [ 1820.425456][T29894] __sys_bpf+0x62b/0x780 [ 1820.430037][T29894] ? bpf_link_show_fdinfo+0x380/0x380 [ 1820.435617][T29894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1820.441815][T29894] __x64_sys_bpf+0x78/0x90 [ 1820.446350][T29894] do_syscall_64+0x4c/0xa0 [ 1820.450805][T29894] ? clear_bhb_loop+0x60/0xb0 [ 1820.455504][T29894] ? clear_bhb_loop+0x60/0xb0 [ 1820.460298][T29894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.466218][T29894] RIP: 0033:0x7f6b9859c819 [ 1820.470752][T29894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.491083][T29894] RSP: 002b:00007f6b993b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1820.499527][T29894] RAX: ffffffffffffffda RBX: 00007f6b98815fa0 RCX: 00007f6b9859c819 [ 1820.507767][T29894] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1820.516227][T29894] RBP: 00007f6b993b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.524595][T29894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.533113][T29894] R13: 00007f6b98816038 R14: 00007f6b98815fa0 R15: 00007ffda01536d8 [ 1820.541301][T29894] [ 1821.091726][T29914] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1821.157129][T29904] netlink: 'syz.3.7607': attribute type 8 has an invalid length. [ 1821.197229][T29904] netlink: 'syz.3.7607': attribute type 1 has an invalid length. [ 1821.223721][T29912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7609'. [ 1821.233434][T29904] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.7607'. [ 1821.550754][T29927] netlink: 'syz.3.7616': attribute type 10 has an invalid length. [ 1821.570681][T29927] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7616'. [ 1821.626815][T29932] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1821.652862][T29932] dvmrp1: ignored: set checksum disabled [ 1821.671078][T29930] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1821.676649][T29930] dvmrp1: ignored: set checksum disabled [ 1822.006058][ C1] [ 1822.006067][ C1] ================================ [ 1822.006073][ C1] WARNING: inconsistent lock state [ 1822.006079][ C1] syzkaller #0 Not tainted [ 1822.006088][ C1] -------------------------------- [ 1822.006093][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1822.006101][ C1] syz.4.7618/29931 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1822.006120][ C1] ffff8880184389a0 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 1822.006173][ C1] {INITIAL USE} state was registered at: [ 1822.006180][ C1] lock_acquire+0x1bb/0x4a0 [ 1822.006201][ C1] _raw_spin_lock+0x2a/0x40 [ 1822.006217][ C1] htab_lock_bucket+0x179/0x2f0 [ 1822.006233][ C1] htab_lru_map_update_elem+0x31e/0xe80 [ 1822.006249][ C1] bpf_map_update_value+0x59e/0x670 [ 1822.006267][ C1] map_update_elem+0x4d7/0x680 [ 1822.006286][ C1] __sys_bpf+0x4ec/0x780 [ 1822.006303][ C1] __x64_sys_bpf+0x78/0x90 [ 1822.006321][ C1] do_syscall_64+0x4c/0xa0 [ 1822.006341][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1822.006358][ C1] irq event stamp: 3274 [ 1822.006365][ C1] hardirqs last enabled at (3273): [] kasan_quarantine_put+0xd4/0x220 [ 1822.006387][ C1] hardirqs last disabled at (3274): [] exc_debug+0x6e/0x130 [ 1822.006411][ C1] softirqs last enabled at (3180): [] __dev_queue_xmit+0x26b/0x37c0 [ 1822.006433][ C1] softirqs last disabled at (3044): [] __dev_queue_xmit+0x26b/0x37c0 [ 1822.006453][ C1] [ 1822.006453][ C1] other info that might help us debug this: [ 1822.006458][ C1] Possible unsafe locking scenario: [ 1822.006458][ C1] [ 1822.006463][ C1] CPU0 [ 1822.006466][ C1] ---- [ 1822.006470][ C1] lock(&htab->lockdep_key#2); [ 1822.006485][ C1] [ 1822.006489][ C1] lock(&htab->lockdep_key#2); [ 1822.006502][ C1] [ 1822.006502][ C1] *** DEADLOCK *** [ 1822.006502][ C1] [ 1822.006507][ C1] 1 lock held by syz.4.7618/29931: [ 1822.006517][ C1] #0: ffff8880b8e40cb0 (&cpuctx_mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b5/0x490 [ 1822.006558][ C1] [ 1822.006558][ C1] stack backtrace: [ 1822.006564][ C1] CPU: 1 PID: 29931 Comm: syz.4.7618 Not tainted syzkaller #0 [ 1822.006581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1822.006590][ C1] Call Trace: [ 1822.006596][ C1] <#DB> [ 1822.006605][ C1] dump_stack_lvl+0x188/0x24e [ 1822.006639][ C1] ? show_regs_print_info+0x12/0x12 [ 1822.006683][ C1] ? print_usage_bug+0x42a/0x690 [ 1822.006708][ C1] ? verify_lock_unused+0x18/0x140 [ 1822.006744][ C1] lock_acquire+0x2df/0x4a0 [ 1822.006780][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 1822.006807][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1822.006833][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1822.006877][ C1] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 1822.006906][ C1] _raw_spin_lock+0x2a/0x40 [ 1822.006923][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 1822.006942][ C1] htab_lock_bucket+0x179/0x2f0 [ 1822.006971][ C1] ? htab_lru_map_delete_node+0x630/0x630 [ 1822.006989][ C1] ? rcu_is_watching+0x11/0xa0 [ 1822.007043][ C1] ? htab_map_hash+0x269/0x6d0 [ 1822.007071][ C1] htab_lru_map_delete_elem+0x1ad/0x780 [ 1822.007105][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1822.007132][ C1] ? htab_lru_map_update_elem+0xe80/0xe80 [ 1822.007157][ C1] ? perf_tp_event+0xaac/0xc30 [ 1822.007201][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1822.007229][ C1] bpf_overflow_handler+0x522/0x7c0 [ 1822.007259][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1822.007279][ C1] ? perf_swevent_overflow+0x230/0x230 [ 1822.007320][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1822.007355][ C1] __perf_event_overflow+0x448/0x610 [ 1822.007399][ C1] perf_swevent_event+0x315/0x570 [ 1822.007435][ C1] ? perf_tp_event+0xc30/0xc30 [ 1822.007491][ C1] perf_bp_event+0x312/0x3f0 [ 1822.007525][ C1] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 1822.007552][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 1822.007648][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1822.007676][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1822.007720][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1822.007758][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 1822.007778][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1822.007810][ C1] notify_die+0x141/0x1a0 [ 1822.007839][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1822.007898][ C1] notify_debug+0x20/0x30 [ 1822.007917][ C1] exc_debug+0xd9/0x130 [ 1822.007953][ C1] asm_exc_debug+0x1a/0x40 [ 1822.007972][ C1] RIP: 0010:strnlen_user+0x15f/0x240 [ 1822.007997][ C1] Code: df 49 fd eb 49 4d 01 e7 b8 08 00 00 00 4c 29 e0 49 89 c4 bf 09 00 00 00 4c 89 fe e8 fb e2 49 fd 49 83 ff 09 72 5f 4f 8b 2c 26 <49> 8d 44 2d 00 49 f7 d5 49 21 dd 49 21 c5 75 0f e8 fc de 49 fd 49 [ 1822.008011][ C1] RSP: 0018:ffffc90004acfbc0 EFLAGS: 00040212 [ 1822.008036][ C1] RAX: ffffffff84389575 RBX: 8080808080808080 RCX: ffff88805d040000 [ 1822.008050][ C1] RDX: 0000000000000002 RSI: 0000000000000f88 RDI: 0000000000000009 [ 1822.008061][ C1] RBP: fefefefefefefeff R08: ffff88805d040000 R09: 000000000000000c [ 1822.008072][ C1] R10: 00000000c008240a R11: 0000000000000002 R12: 0000000000000080 [ 1822.008083][ C1] R13: cd282f8c5425c92b R14: 0000200000000280 R15: 0000000000000f88 [ 1822.008115][ C1] ? strnlen_user+0x155/0x240 [ 1822.008154][ C1] [ 1822.008160][ C1] [ 1822.008178][ C1] strndup_user+0x1b/0x150 [ 1822.008206][ C1] perf_ioctl+0x59b/0x2420 [ 1822.008235][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1822.008284][ C1] ? perf_poll+0x1b0/0x1b0 [ 1822.008372][ C1] ? __fget_files+0x28/0x4b0 [ 1822.008393][ C1] ? __fget_files+0x28/0x4b0 [ 1822.008448][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1822.008469][ C1] ? security_file_ioctl+0x7c/0xa0 [ 1822.008492][ C1] ? perf_poll+0x1b0/0x1b0 [ 1822.008516][ C1] __se_sys_ioctl+0xfa/0x170 [ 1822.008548][ C1] do_syscall_64+0x4c/0xa0 [ 1822.008568][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1822.008588][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1822.008614][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1822.008633][ C1] RIP: 0033:0x7f0c2bf9c819 [ 1822.008649][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.008663][ C1] RSP: 002b:00007f0c2ce11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.008680][ C1] RAX: ffffffffffffffda RBX: 00007f0c2c215fa0 RCX: 00007f0c2bf9c819 [ 1822.008692][ C1] RDX: 0000200000000280 RSI: 0000000040082406 RDI: 000000000000000e [ 1822.008702][ C1] RBP: 00007f0c2c032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1822.008713][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1822.008723][ C1] R13: 00007f0c2c216038 R14: 00007f0c2c215fa0 R15: 00007ffd121bb5b8 [ 1822.008776][ C1]