last executing test programs: 13.261004731s ago: executing program 2 (id=16205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x3d) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000020) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32=r5], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x2}}, 0x10, 0x0}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) 12.332802974s ago: executing program 2 (id=16218): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x531102, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000140)) 8.561931194s ago: executing program 1 (id=16234): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffe, 0xc6, &(0x7f0000000100)=""/198, 0x0, 0x1a, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2845a, r0, 0x2, &(0x7f0000000240)=[r0], &(0x7f0000000280)=[{0x2, 0x3, 0x2, 0x9}, {0x0, 0x4, 0xd, 0x2}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) sendmsg(r0, &(0x7f0000001700)={&(0x7f00000003c0)=@llc={0x1a, 0x325, 0x6, 0x2, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="c6d26fc77931a7eb58c089f74461868df13f6b94475cc770c23acdd19eeceb9dc2ec200a0d45ee49bd2a1573190ccef8c35fc350b6b85604f9c9f94be63f943788", 0x41}, {&(0x7f00000004c0)="1e5a4a11fc45c54b7657b85c0d2c8688de08ae8035dffd16de2573cd516f83ec05d098bb9be03fe766ab38452e02b43c928f67fb4ad472f5d8e94a5a202ca875ff9b2c549fb136217c242688b1537bae39dbe3452a31b52d80db311cd2eecea022a7dc2b3c2584f28e037a0d7cad50ec94345e540186e008a7df508745edc4a10c85624b6dc548e425484d1228ac22c1f681aa104ea898e4f5629f8a556d2030348f882cc33211", 0xa7}], 0x2, &(0x7f00000005c0)=[{0x20, 0xe4, 0x5, "f1ff9db7f58e7476e65fd7798d3f"}, {0x1010, 0x6, 0xffffffff, "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"}, {0xf0, 0x108, 0x9, "182496e190856961a3c4d093288230849e91a46e2549d93c59e76eb6cf4ee868913466e12175e2068f21e6f84334597ab4894faba5c20b833a1489c40e47612a68c940f8aff74d0d82166ac72e287ff52266ff9f3303a71f7b91a4980c74b119e455c0498a865313fa4c4d0a6cc9815d01ec170ba48365a5229fce4d502e959e424ce78701050f2ea6a46d22f2041e079b40a90b31e8d6a3be2414f477e94b9ccd699dc9b68942fa522d123cf6e91850558b8c368f35755904eb45c9dd60e207e729a8ff96e074c40eb3bf13bdd7ee2dd0231dd764c14bf316a87f82df"}, {0x20, 0x114, 0x5, "64b464baef3fc23b951d01cb2a77a212"}], 0x1140}, 0x8010) (async, rerun: 32) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0xffffffffffffffff, 0x3, 0x20}, 0xc) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000017c0)=[0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000001840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0xf, 0x2, 0x4, 0x22048, r2, 0x8, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0xa}, 0x50) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_devices(r6, &(0x7f0000001b40)='devices.deny\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000001b80)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001fc0)={&(0x7f0000001bc0)=@qipcrtr, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/168, 0xa8}, {&(0x7f0000001d00)=""/246, 0xf6}, {&(0x7f0000001e00)=""/178, 0xb2}], 0x3, &(0x7f0000001f00)=""/143, 0x8f}, 0x10000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r7, 0x58, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002340), 0xc) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002380)={0xffffffffffffffff, 0xffffff5a, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000023c0)={r2, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x18, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x81, 0x9, 0x7, 0xb, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002100)='GPL\x00', 0x3, 0x85, &(0x7f0000002140)=""/133, 0x41000, 0x98, '\x00', r8, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002300)={0x4, 0xe, 0x1, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000002400)=[r2, r5, r9, r10, r11, r0, r7], 0x0, 0x10, 0x3}, 0x94) mkdirat$cgroup(r0, &(0x7f0000002500)='syz1\x00', 0x1ff) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000025c0)={{r9, 0xffffffffffffffff}, &(0x7f0000002540), &(0x7f0000002580)=r12}, 0x20) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000002640)={0x2, &(0x7f0000002600)=[{0x0, 0x0, 0x2, 0x1ff}, {0x3, 0x8, 0x67, 0x8}]}) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002880)={&(0x7f0000002680)="e3c326817d78b719916e96dd16360c9bffb2c7ed6a19b663308a0e4ed0b1ac40f294d62bedfacff7eaf45a6bf9d825004706c965a55243dda0f1ef767b", &(0x7f00000026c0)=""/85, &(0x7f0000002740)="1879c84d08859332a81f4446f4961da152045edf8b2b2afb6d788b5386a29f1c52b5b71e9378106861c2c6738927652908b38e7704d1552c9e2ab87229c68b9db40062e9fb21182eab92fcbc117a34e2d4892388cd5b8a6cf8fa2f492e9411235cfa1a2cb7159877b6956a52eb9f6b5deb6203abd856705f1e507659078e83dc2b1cd4d773dad6f41d97e9f6f8dca2b12003617b6973ae7cb20df47ba43951acb89eac8dc8749ea8a8d9f137f4093f856b6259c9cf0184014814", &(0x7f0000002800)="74918d09acb806bfe95efc42660c8fd3d9c70b3ddad7ce07923247a5baa8637e4b81fdb594f8a87c8f971f8cebd7f96f1be3742b69caeb0cc0a0e588df3f78f96b3bbdad0b208105a27114476aa1214307935370a89cea672e17beaa68549ce926c567e2138a113dae11594678526f0e96b1971e2818459c73", 0x5, r13, 0x4}, 0x38) (async, rerun: 32) openat$cgroup_type(r0, &(0x7f00000028c0), 0x2, 0x0) (async, rerun: 32) socketpair(0x10, 0x1, 0xa, &(0x7f0000002900)) (async) write$cgroup_pressure(r7, &(0x7f0000002940)={'full', 0x20, 0x9, 0x20, 0x3ff}, 0x2f) (async, rerun: 32) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002980)='freezer.parent_freezing\x00', 0x0, 0x0) (rerun: 32) openat$cgroup_pressure(r14, &(0x7f00000029c0)='cpu.pressure\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002a80)={r13, 0x58, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002ac0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b00)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x8, '\x00', r15, r16, 0x0, 0x1, 0x5}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000002b80)={0x0, r10}, 0x8) 8.295396911s ago: executing program 1 (id=16235): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0500000004000000040000000900000010000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000000000092f2009900000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0xf, 0x1}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x4e, 0xdf, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.325587398s ago: executing program 1 (id=16238): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000f00000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0xbc, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x1d, 0x55, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 5.517260497s ago: executing program 1 (id=16243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x531102, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000034000b47564cb6288200eb14050000", 0x13}], 0x1}, 0x4000) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000140)) 5.39382901s ago: executing program 3 (id=16244): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x100000001}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x4862, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @broadcast}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r2) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 5.370905901s ago: executing program 0 (id=16245): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000000a0000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000055d30720b49d2ac29a0d45db75d200000000ca638ee5a49a60338709de1f9c852b395aae07ea8f7d0738ee47cf401d8a4bbe6514d68e437ab0a7fffc64b90b3ef7616a7fca47ee695aa99323f92f53620f529574a28c3865bcb64d8cbc4372903d4f54776addd582b05b00"/125, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x58, 0x0, &(0x7f0000000000)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) 4.662351448s ago: executing program 3 (id=16247): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000005c0)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000dd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x4a600, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000540)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x20e2b81}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000300)=""/242, 0x2a, 0xf2, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350dd"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a94029f", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000680)={0x2, &(0x7f0000000000)=[{0x30, 0x3, 0xfb, 0xfffff03c}, {0x816, 0x1, 0xee, 0x2}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) 4.629871239s ago: executing program 2 (id=16248): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x30}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x4b, &(0x7f0000000100), 0x120) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000007c74110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0x0, 0x0}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x101040, 0x0) close(r9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={&(0x7f0000000340)="841d914fcbb6506d3ec1c84d02b204d037ffe4052884d55c63fd768a5a1e1d94e85e9515c72efa956986f535f4dba85648ac0c631c9364a47a85ae76e4c1c40e3eb50bdc541b84117242fb688a0ccb428081320896c0e62edf98aaddb9c0d1be46d2fbb7a424786880fc1da81a4a45b0efc9b565ea0935678df4a7d9ff3da4e80e75e2db72806df1c15b02f3cae050b68bb41cbc82a54ae498fa8c7680a462dcf0d4d4d019e019fc2b65be86e37a95c51a161c63ef9834771137c2fa7db9f75b2679def91f2ce29fb7cecdd05680b94f7d95", &(0x7f0000000440), &(0x7f0000000680)="b49139420921abd7238cdabaffd068ccf9e39bcac554ce4fef2c188ca07b20ad42f3159ba8069f816a0b80e48288f547720157b33dc84d6b328a530211f52a1e270dba24a2058718680cb212c99b1445b9971ba4bb1cd2e61217c3cf550913b03f8f3d2792dba2d0cc17a1067eb42f56990b83f73b337df820c0a2b1d7a91d0f8764f0cd96ccd9f7852bfed7c4ea", &(0x7f0000000800)="65d99ac7d0f4c8ad8de530c7ee9b840748810b2fc594f178da81b21ea68352e124aa3c9f8914dc12f9bf2400f8848bdba3d98e5703b77200ad69ba67be35d17e48082e0f9339b8969c839c7517ad32a9035ccc3245316c0c223e590831f9c110af53073fa9df1087e8094182470491e725197a8c9f54b0396196357d08ece841011ea67e3a1e811b9a5611b03b9057805ca4f2dc24cc0e074fb6e962ca68dccd8c80e879058f360fcdb316e6cfa3a49a1e3052a374f8ba1e94f0bd04d2d0bd34b3", 0x3, r0, 0x4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f08848", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) sendmsg$kcm(r1, &(0x7f0000001a40)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xb3, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000000000000300000055000000"], 0x10}, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000033c0)={&(0x7f0000000440)="2f5b0ca2aa6c883ab3fbd7fd677936a763050215b10f6d6828175bd050b2f37f9b9c11f76931265c99470b2a37f033b8e464dd", &(0x7f0000000480), &(0x7f00000022c0)="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", &(0x7f00000032c0)="5573b13d4ecc0362cb1f6c589845f91a210e34335679890b87d7464e9c9990f82f5730e44f774fa0f268d175a2d079f432cb1b1930b6e4f80dd57148daac1543cd076c7c54f7b64a69076d541723caf370be3a50613cd9e31f1693ddc7a8bc9b85d34f56eb63a244de1003267451eec764c79f7663211b37be2897802b5d3d3575bf7387c5a359b8f1f78ca5808237e0b2bde7e421e198ffeea257989304f5c8a38e0d00485f4b963bbb27ef7133432312f0f879085bbbcee5e78d6aca2594cad2958f4f5444a29e726d257c89b2b4850b510c4add3c48d82181b498383b9d45", 0x80000000, r10}, 0x38) 4.213493939s ago: executing program 4 (id=16249): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x5, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000005c0)="82db44b904021d080006007c09e8fe55a10a0015000300142603600e1208000f0000000401a8001600a4000140a9d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae34edbb57a5025ccca9e00360db70100000040215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100"/205, 0xcd}], 0x1}, 0x4004940) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(r5) r7 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xe, 0x8, 0x4, 0xdd, 0x0, 0xcb8600000000000, 0x38010, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc754, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x90e0, 0x9a, 0x7, 0x4, 0x4, 0x4, 0x5, 0x0, 0x2, 0x0, 0x8c22}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1}, 0x2142) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0xe}, 0x0) 4.044797543s ago: executing program 0 (id=16250): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.791471749s ago: executing program 3 (id=16251): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x100000001}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x4862, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b36, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 3.695017021s ago: executing program 0 (id=16252): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)}, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0xbc, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x1d, 0x55, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 3.584255434s ago: executing program 4 (id=16253): r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x567, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x27, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.507173925s ago: executing program 4 (id=16254): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000f00000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0xbc, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x1d, 0x55, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 1.594864751s ago: executing program 0 (id=16255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff20000296f8533a72905eff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x1f00}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, 0x0, 0x0) 1.528250963s ago: executing program 2 (id=16256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000080)="af888cedf2f1f18ca18fb683568a94fbaf60e041bba7f3b476067396251165a9da60ff92baedfa2ba41eb471c2308c74f7c368a4d2a37c6d25e6e4c446e017ae44fca721204504a99262253e1fa4ebbbfaacc72fe181f822c47cb25b86e6728a164f0880b57ecbb11158cdbd3422b8ed4ff2c12b96a681cad73cc64cc78b66f89928c28827eee977abd315af8925123675803acc8aa4e11f4b6fa8be5f02d6675a4d98327b651c328e3d27188127b11fdb9ba7a1f852e1ae780032bb16658547da93015322ac24b814c5fd94529aa89a4276f3bc639f827451cdd9109b", 0xdd}, {&(0x7f0000000280)="c151eed6"}], 0x2}, 0x1) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x4084) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000640)=0x1, 0x12) 1.527869183s ago: executing program 3 (id=16257): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 5) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x0) 1.480716624s ago: executing program 4 (id=16258): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x3, @mcast1}, 0x80, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) recvmsg$kcm(r4, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r10 = getpid() perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf, 0x7, 0xaa, 0x4d, 0x0, 0x4c, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x1}, 0x140, 0xbf2, 0xffff2e92, 0x7, 0x7ff, 0x0, 0xdef1, 0x0, 0x978, 0x0, 0x8000000000000000}, r10, 0x2, r3, 0xa) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r11) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x2, 0x0, 0xa000, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) 989.570846ms ago: executing program 0 (id=16259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x531102, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000140)) 775.471441ms ago: executing program 3 (id=16260): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c802, 0xac5d, 0x0, 0x0, 0x0, 0x744, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8040) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/219, 0xdb}, 0x0) close(r4) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x80, 0x85, 0x81, 0x0, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x62, 0x2, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x44, 0x0, 0x6, 0x0, 0x4, 0x7f, 0x98bb, 0x0, 0xf3, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r2, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000d6dc0000000000002f000000950a00400000020050ecc3d23dedf1a52c422939457bd07b6a404938eefb4d0fa8ba7b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000fdffe9ff00000000090000008500000036000000180100002064712500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500e100170000009500000000000000cc849ecef89c995b716afdf28aa27f4ae0f04a73b9c05e17498655fa49a344234f1e00fe3b195014e37315efb0f19d4b07f9cb12ab412d4bcf8b36155accb4a71ead9493e2d3852322f162311a5b5a7c32363efce94516bf62100ec1a407bac7181fdba73291beb1653837cdea1ddcf38e641c68c1409338cae116b018e40928f087641bbb3c830c06bfdb05498e172a1e7bf8d8ae3a0cf816e902a5cc1e776c5335d18197a12e54668bb1dc0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0a00000005020000ff0000000700000000000000", @ANYRES32=0x1, @ANYBLOB="d6000000000000000000000000000000000000008fb9e82953d6c3eeff95cc35c8de42143b7e430450ce08eeefb876acf7114ef9bb9c06c3e5df5021753294273d9c9cd9b328fe9cfe6945c2f8e9c44c77b5d20d720b508a106b6d59b576c52cfed1d0afb8089774e13d4ba9bf2a12ff0cfaaac759c98c835d53b38d968792a14908ca4a5e5c7d305c9bea3d7d51f22d36383990c56cfba7653b03d292775f6898e3151e9fcf8fbd72be44f43b1d1011953573e4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r9, r1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x100, 0xc2ba, 0x0, 0x4000000, 0x4, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 751.201492ms ago: executing program 2 (id=16261): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000005c0)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000dd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x4a600, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000540)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x20e2b81}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000300)=""/242, 0x2a, 0xf2, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a94029f", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000680)={0x2, &(0x7f0000000000)=[{0x30, 0x3, 0xfb, 0xfffff03c}, {0x816, 0x1, 0xee, 0x2}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) 609.482305ms ago: executing program 4 (id=16262): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 584.157466ms ago: executing program 1 (id=16263): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xfd, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x0) 124.739147ms ago: executing program 4 (id=16264): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x22e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x3000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x42, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1}, &(0x7f0000000040), &(0x7f0000000a80)=r5}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') close(0xffffffffffffffff) close(r2) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08", 0x9}], 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) 124.140447ms ago: executing program 1 (id=16265): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)}, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0xbc, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x1d, 0x55, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 73.411908ms ago: executing program 2 (id=16266): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0xc}, {0x6}]}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 65.826948ms ago: executing program 0 (id=16267): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0900b7674f538068924d232ccf729735fab3ffff0000d400007c8a0504ca47848378f5f35d4ec765705f56f6d63b048b00ad116989f5ff4e07f9b7d0a265a3c405106439c658b72b86912b52a1ca8cf7a68ec5c4e4995e3aa2b6cd36a57020adaa42d7cb88fe0b25e6ae569ce68e481eeb74427eb851a12a0275f3a5f25c156abb0900000000000000f14f6f3ce8c283abef943025e89e748c3b3f05f0b3cd7ff1b41bcaaa96642679aab08bb1271262d4b406c2bb7c11e924f0e63c069c3eef878cf5eb56b23af54167f8c1b84977f3bf44a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) 0s ago: executing program 3 (id=16268): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000f00000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0xbc, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x1d, 0x55, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) kernel console output (not intermixed with test programs): [ 2974.121215][T18950] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2974.194864][T18950] device veth1_macvtap left promiscuous mode [ 2974.203739][T18950] device macsec0 left promiscuous mode [ 2974.315116][T18954] device veth1_macvtap entered promiscuous mode [ 2974.321783][T18954] device macsec0 entered promiscuous mode [ 2974.342005][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2974.466530][T18959] netlink: 'syz.2.15458': attribute type 10 has an invalid length. [ 2974.510631][T18959] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15458'. [ 2975.038751][T18965] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2975.190717][T18963] netlink: 'syz.1.15470': attribute type 10 has an invalid length. [ 2975.199651][T18963] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15470'. [ 2975.268476][T18965] device veth1_macvtap left promiscuous mode [ 2975.280430][T18965] device macsec0 left promiscuous mode [ 2975.461847][T18975] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2975.581145][T18974] device veth1_macvtap left promiscuous mode [ 2975.587629][T18974] device macsec0 left promiscuous mode [ 2975.679542][T18975] device veth1_macvtap entered promiscuous mode [ 2975.694448][T18975] device macsec0 entered promiscuous mode [ 2976.115754][T18984] netlink: 'syz.4.15464': attribute type 10 has an invalid length. [ 2976.197550][T18984] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15464'. [ 2978.268816][T19018] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2978.379846][T19018] device veth1_macvtap left promiscuous mode [ 2978.405901][T19018] device macsec0 left promiscuous mode [ 2978.658631][T19024] device veth1_macvtap entered promiscuous mode [ 2978.682326][T19024] device macsec0 entered promiscuous mode [ 2978.773605][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2979.948895][T19036] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15480'. [ 2981.265202][T19048] netlink: 'syz.2.15485': attribute type 21 has an invalid length. [ 2981.312097][T19048] netlink: 'syz.2.15485': attribute type 3 has an invalid length. [ 2981.330389][T19048] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15485'. [ 2981.418743][T19053] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2981.503195][T19053] device veth1_macvtap left promiscuous mode [ 2981.523341][T19053] device macsec0 left promiscuous mode [ 2981.656743][T19056] device veth1_macvtap entered promiscuous mode [ 2981.700363][T19056] device macsec0 entered promiscuous mode [ 2981.723207][T19055] netlink: 'syz.3.15488': attribute type 10 has an invalid length. [ 2981.744401][T19055] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15488'. [ 2981.796658][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2981.941209][T19063] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2982.081734][T19063] device veth1_macvtap left promiscuous mode [ 2982.162810][T19063] device macsec0 left promiscuous mode [ 2982.290835][T19067] device veth1_macvtap entered promiscuous mode [ 2982.356977][T19067] device macsec0 entered promiscuous mode [ 2982.392335][T19071] netlink: 830 bytes leftover after parsing attributes in process `syz.0.15494'. [ 2984.695973][T19099] netlink: 'syz.2.15500': attribute type 21 has an invalid length. [ 2984.721599][T19099] netlink: 'syz.2.15500': attribute type 3 has an invalid length. [ 2984.729851][T19099] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15500'. [ 2985.668280][T19114] delete_channel: no stack [ 2985.673313][T19114] delete_channel: no stack [ 2985.979349][T19116] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2986.078291][T19116] device veth1_macvtap entered promiscuous mode [ 2986.096581][T19119] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2986.097392][T19116] device macsec0 entered promiscuous mode [ 2986.147358][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2986.292993][T19119] device veth1_macvtap left promiscuous mode [ 2986.299407][T19119] device macsec0 left promiscuous mode [ 2986.365164][T19125] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2986.421060][T19121] device veth1_macvtap entered promiscuous mode [ 2986.438641][T19121] device macsec0 entered promiscuous mode [ 2986.582565][T19125] device veth1_macvtap left promiscuous mode [ 2986.588888][T19125] device macsec0 left promiscuous mode [ 2986.688809][T19127] device veth1_macvtap entered promiscuous mode [ 2986.701058][T19127] device macsec0 entered promiscuous mode [ 2986.711715][T19131] netlink: 'syz.1.15511': attribute type 10 has an invalid length. [ 2986.744009][T19131] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15511'. [ 2986.757062][T19130] netlink: 'syz.4.15510': attribute type 10 has an invalid length. [ 2986.772436][T19130] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15510'. [ 2986.791376][T19136] netlink: 'syz.3.15512': attribute type 21 has an invalid length. [ 2986.800008][T19136] netlink: 'syz.3.15512': attribute type 3 has an invalid length. [ 2986.843311][T19136] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15512'. [ 2987.492043][T19154] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2989.016217][T19176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2989.156591][T19176] device veth1_macvtap left promiscuous mode [ 2989.166460][T19176] device macsec0 left promiscuous mode [ 2989.243444][T19178] device veth1_macvtap entered promiscuous mode [ 2989.250035][T19178] device macsec0 entered promiscuous mode [ 2989.463771][T19183] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2989.566761][T19183] device veth1_macvtap left promiscuous mode [ 2989.575308][T19183] device macsec0 left promiscuous mode [ 2989.623156][T19184] device veth1_macvtap entered promiscuous mode [ 2989.644985][T19184] device macsec0 entered promiscuous mode [ 2989.832355][T19187] netlink: 'syz.0.15527': attribute type 21 has an invalid length. [ 2989.860500][T19187] netlink: 'syz.0.15527': attribute type 3 has an invalid length. [ 2989.869007][T19187] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15527'. [ 2990.172120][T19197] netlink: 'syz.0.15531': attribute type 21 has an invalid length. [ 2990.209668][T19197] netlink: 'syz.0.15531': attribute type 3 has an invalid length. [ 2990.261408][T19197] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15531'. [ 2990.347692][T19202] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2990.490662][T19207] netlink: 'syz.4.15534': attribute type 1 has an invalid length. [ 2990.498581][T19207] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15534'. [ 2990.866599][T19219] netlink: 'syz.2.15536': attribute type 10 has an invalid length. [ 2990.991076][T19219] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15536'. [ 2991.016736][T19221] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15541'. [ 2991.377024][T19235] netlink: 830 bytes leftover after parsing attributes in process `syz.0.15546'. [ 2991.448349][T19239] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15548'. [ 2991.682501][T19242] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2991.865547][T19242] device veth1_macvtap left promiscuous mode [ 2991.886164][T22031] Bluetooth: hci2: command 0x0406 tx timeout [ 2991.964903][T19242] device macsec0 left promiscuous mode [ 2992.451556][T19256] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15552'. [ 2993.091815][T19258] validate_nla: 4 callbacks suppressed [ 2993.091854][T19258] netlink: 'syz.3.15554': attribute type 1 has an invalid length. [ 2993.205171][T19258] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.15554'. [ 2993.385535][T19268] netlink: 'syz.0.15555': attribute type 21 has an invalid length. [ 2993.405066][T19268] netlink: 'syz.0.15555': attribute type 3 has an invalid length. [ 2993.438172][T19268] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15555'. [ 2994.049589][T19276] netlink: 'syz.0.15557': attribute type 10 has an invalid length. [ 2994.084145][T19276] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15557'. [ 2994.244494][T19280] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15560'. [ 2994.348705][T19284] netlink: 'syz.4.15561': attribute type 21 has an invalid length. [ 2994.410879][T19284] netlink: 'syz.4.15561': attribute type 3 has an invalid length. [ 2994.478738][T19284] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15561'. [ 2994.590364][T19285] netlink: 'syz.0.15562': attribute type 10 has an invalid length. [ 2994.602832][T19285] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15562'. [ 2994.624643][T19291] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2994.791441][T19291] device veth1_macvtap entered promiscuous mode [ 2994.798069][T19291] device macsec0 entered promiscuous mode [ 2994.844957][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2994.903830][T19300] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.15568'. [ 2995.185599][T19313] netlink: 'syz.4.15570': attribute type 2 has an invalid length. [ 2995.210288][T19313] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15570'. [ 2996.018382][T19322] netlink: 'syz.1.15573': attribute type 10 has an invalid length. [ 2996.049027][T19322] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15573'. [ 2996.315835][T19333] FAULT_INJECTION: forcing a failure. [ 2996.315835][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.359558][T19333] CPU: 0 PID: 19333 Comm: syz.1.15577 Not tainted syzkaller #0 [ 2996.367289][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2996.377390][T19333] Call Trace: [ 2996.380723][T19333] [ 2996.383679][T19333] dump_stack_lvl+0x188/0x24e [ 2996.388410][T19333] ? show_regs_print_info+0x12/0x12 [ 2996.393992][T19333] ? load_image+0x410/0x410 [ 2996.398577][T19333] ? __might_sleep+0xd0/0xd0 [ 2996.403216][T19333] ? __lock_acquire+0x7ea0/0x7ea0 [ 2996.408291][T19333] should_fail_ex+0x390/0x4c0 [ 2996.413016][T19333] should_failslab+0x5/0x20 [ 2996.417575][T19333] slab_pre_alloc_hook+0x59/0x300 [ 2996.422636][T19333] ? sk_prot_alloc+0xe7/0x210 [ 2996.427347][T19333] __kmem_cache_alloc_node+0x4f/0x270 [ 2996.432751][T19333] ? sk_prot_alloc+0xe7/0x210 [ 2996.437459][T19333] __kmalloc+0xa3/0x240 [ 2996.441664][T19333] sk_prot_alloc+0xe7/0x210 [ 2996.446210][T19333] ? sk_alloc+0x20/0x330 [ 2996.450508][T19333] sk_alloc+0x36/0x330 [ 2996.454622][T19333] ? bpf_ctx_init+0x154/0x190 [ 2996.459462][T19333] bpf_prog_test_run_skb+0x36d/0x18e0 [ 2996.464874][T19333] ? lockdep_hardirqs_on+0x94/0x140 [ 2996.470112][T19333] ? cpu_online+0xa0/0xa0 [ 2996.474490][T19333] ? cpu_online+0xa0/0xa0 [ 2996.478856][T19333] bpf_prog_test_run+0x31c/0x390 [ 2996.483830][T19333] __sys_bpf+0x62b/0x780 [ 2996.488107][T19333] ? bpf_link_show_fdinfo+0x380/0x380 [ 2996.493527][T19333] ? lock_chain_count+0x20/0x20 [ 2996.498414][T19333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2996.504468][T19333] __x64_sys_bpf+0x78/0x90 [ 2996.508923][T19333] do_syscall_64+0x4c/0xa0 [ 2996.513375][T19333] ? clear_bhb_loop+0x60/0xb0 [ 2996.518084][T19333] ? clear_bhb_loop+0x60/0xb0 [ 2996.522792][T19333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2996.528715][T19333] RIP: 0033:0x7f1c12f9e199 [ 2996.533158][T19333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2996.552981][T19333] RSP: 002b:00007f1c13f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2996.561429][T19333] RAX: ffffffffffffffda RBX: 00007f1c13225fa0 RCX: 00007f1c12f9e199 [ 2996.569427][T19333] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2996.577510][T19333] RBP: 00007f1c13f08090 R08: 0000000000000000 R09: 0000000000000000 [ 2996.585506][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.593499][T19333] R13: 00007f1c13226038 R14: 00007f1c13225fa0 R15: 00007ffcdcc586b8 [ 2996.601512][T19333] [ 2996.668749][T19336] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2996.791470][T19336] device veth1_macvtap left promiscuous mode [ 2996.797863][T19336] device macsec0 left promiscuous mode [ 2996.932888][T19339] netlink: 'syz.0.15581': attribute type 21 has an invalid length. [ 2996.962578][T19336] device veth1_macvtap entered promiscuous mode [ 2996.973372][T19336] device macsec0 entered promiscuous mode [ 2997.014326][T31625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2998.459801][T19384] __nla_validate_parse: 4 callbacks suppressed [ 2998.459824][T19384] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.15593'. [ 2999.146259][T19393] validate_nla: 4 callbacks suppressed [ 2999.146280][T19393] netlink: 'syz.1.15594': attribute type 10 has an invalid length. [ 2999.160762][T19393] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15594'. [ 2999.234353][T19395] netlink: 'syz.4.15595': attribute type 21 has an invalid length. [ 2999.254190][T19395] netlink: 'syz.4.15595': attribute type 3 has an invalid length. [ 2999.285364][T19395] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15595'. [ 2999.350861][T19401] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2999.468364][T19401] device veth1_macvtap left promiscuous mode [ 2999.508152][T19401] device macsec0 left promiscuous mode [ 2999.556922][T19402] device veth1_macvtap entered promiscuous mode [ 2999.600099][T19402] device macsec0 entered promiscuous mode [ 2999.642335][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3000.603730][T19427] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.15605'. [ 3000.697629][T19429] netlink: 'syz.0.15606': attribute type 21 has an invalid length. [ 3000.719908][T19429] netlink: 'syz.0.15606': attribute type 3 has an invalid length. [ 3000.737243][T19429] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15606'. [ 3001.002566][T19440] netlink: 16198 bytes leftover after parsing attributes in process `syz.0.15620'. [ 3001.227330][T19443] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3001.318779][T19443] device veth1_macvtap left promiscuous mode [ 3001.374694][T19443] device macsec0 left promiscuous mode [ 3001.449920][T19450] device veth1_macvtap entered promiscuous mode [ 3001.528145][T19450] device macsec0 entered promiscuous mode [ 3001.581688][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3002.094797][T19463] netlink: 'syz.1.15621': attribute type 21 has an invalid length. [ 3002.229235][T19463] netlink: 'syz.1.15621': attribute type 3 has an invalid length. [ 3002.302020][T19463] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15621'. [ 3003.452260][T19488] netlink: 16198 bytes leftover after parsing attributes in process `syz.3.15627'. [ 3003.626937][T19493] bridge0: port 3(hsr0) entered disabled state [ 3003.654352][T19493] device bridge_slave_1 left promiscuous mode [ 3003.666935][T19493] bridge0: port 2(bridge_slave_1) entered disabled state [ 3003.677182][T19493] device bridge_slave_0 left promiscuous mode [ 3003.692402][T19493] bridge0: port 1(bridge_slave_0) entered disabled state [ 3004.138363][T19501] netlink: 'syz.1.15631': attribute type 2 has an invalid length. [ 3004.474360][T19509] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.15636'. [ 3005.747797][T19533] FAULT_INJECTION: forcing a failure. [ 3005.747797][T19533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3005.784708][T19533] CPU: 1 PID: 19533 Comm: syz.1.15643 Not tainted syzkaller #0 [ 3005.792350][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3005.802464][T19533] Call Trace: [ 3005.805790][T19533] [ 3005.808765][T19533] dump_stack_lvl+0x188/0x24e [ 3005.813555][T19533] ? show_regs_print_info+0x12/0x12 [ 3005.818812][T19533] ? load_image+0x410/0x410 [ 3005.823373][T19533] ? __lock_acquire+0x7ea0/0x7ea0 [ 3005.828461][T19533] should_fail_ex+0x390/0x4c0 [ 3005.833201][T19533] _copy_from_user+0x2c/0x170 [ 3005.837937][T19533] iovec_from_user+0x143/0x360 [ 3005.842766][T19533] __import_iovec+0x6c/0x510 [ 3005.847433][T19533] import_iovec+0x6f/0xa0 [ 3005.851834][T19533] ___sys_sendmsg+0x252/0x360 [ 3005.856574][T19533] ? __sys_sendmsg+0x2a0/0x2a0 [ 3005.861423][T19533] ? __lock_acquire+0x7ea0/0x7ea0 [ 3005.866581][T19533] __se_sys_sendmsg+0x1c3/0x2b0 [ 3005.871489][T19533] ? __x64_sys_sendmsg+0x80/0x80 [ 3005.876532][T19533] ? lockdep_hardirqs_on+0x94/0x140 [ 3005.881813][T19533] do_syscall_64+0x4c/0xa0 [ 3005.886327][T19533] ? clear_bhb_loop+0x60/0xb0 [ 3005.891066][T19533] ? clear_bhb_loop+0x60/0xb0 [ 3005.895797][T19533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3005.901729][T19533] RIP: 0033:0x7f1c12f9e199 [ 3005.906204][T19533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3005.925850][T19533] RSP: 002b:00007f1c13f08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3005.934310][T19533] RAX: ffffffffffffffda RBX: 00007f1c13225fa0 RCX: 00007f1c12f9e199 [ 3005.942319][T19533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3005.950322][T19533] RBP: 00007f1c13f08090 R08: 0000000000000000 R09: 0000000000000000 [ 3005.958327][T19533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3005.966325][T19533] R13: 00007f1c13226038 R14: 00007f1c13225fa0 R15: 00007ffcdcc586b8 [ 3005.974347][T19533] [ 3006.867664][T19565] netlink: 'syz.2.15652': attribute type 2 has an invalid length. [ 3007.882969][T19592] FAULT_INJECTION: forcing a failure. [ 3007.882969][T19592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3007.920325][T19592] CPU: 0 PID: 19592 Comm: syz.2.15663 Not tainted syzkaller #0 [ 3007.927963][T19592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3007.938068][T19592] Call Trace: [ 3007.941406][T19592] [ 3007.944380][T19592] dump_stack_lvl+0x188/0x24e [ 3007.949114][T19592] ? show_regs_print_info+0x12/0x12 [ 3007.954367][T19592] ? load_image+0x410/0x410 [ 3007.958922][T19592] ? __lock_acquire+0x7ea0/0x7ea0 [ 3007.964008][T19592] should_fail_ex+0x390/0x4c0 [ 3007.968742][T19592] _copy_to_user+0x2c/0x130 [ 3007.973298][T19592] bpf_verifier_vlog+0x172/0x3a0 [ 3007.978282][T19592] __btf_verifier_log+0xdf/0x130 [ 3007.983270][T19592] ? btf_check_sec_info+0x350/0x350 [ 3007.988504][T19592] ? btf_parse_hdr+0x1dd/0x7d0 [ 3007.993295][T19592] btf_parse_hdr+0x37e/0x7d0 [ 3007.997953][T19592] btf_new_fd+0x367/0x760 [ 3008.002318][T19592] __sys_bpf+0x612/0x780 [ 3008.006597][T19592] ? bpf_link_show_fdinfo+0x380/0x380 [ 3008.012012][T19592] ? lock_chain_count+0x20/0x20 [ 3008.016902][T19592] __x64_sys_bpf+0x78/0x90 [ 3008.021352][T19592] do_syscall_64+0x4c/0xa0 [ 3008.025799][T19592] ? clear_bhb_loop+0x60/0xb0 [ 3008.030504][T19592] ? clear_bhb_loop+0x60/0xb0 [ 3008.035223][T19592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3008.041150][T19592] RIP: 0033:0x7fb504f9e199 [ 3008.045587][T19592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3008.065228][T19592] RSP: 002b:00007fb505e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3008.073759][T19592] RAX: ffffffffffffffda RBX: 00007fb505225fa0 RCX: 00007fb504f9e199 [ 3008.081757][T19592] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 3008.089751][T19592] RBP: 00007fb505e36090 R08: 0000000000000000 R09: 0000000000000000 [ 3008.097751][T19592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3008.105747][T19592] R13: 00007fb505226038 R14: 00007fb505225fa0 R15: 00007fffc7164038 [ 3008.113758][T19592] [ 3008.438378][T19603] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3008.520435][T19603] device veth1_macvtap left promiscuous mode [ 3008.549883][T19603] device macsec0 left promiscuous mode [ 3008.770688][T19606] device veth1_macvtap entered promiscuous mode [ 3008.841988][T19606] device macsec0 entered promiscuous mode [ 3010.534496][T19646] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3010.657395][T19646] device veth1_macvtap left promiscuous mode [ 3010.695472][T19646] device macsec0 left promiscuous mode [ 3010.829110][T19649] device veth1_macvtap entered promiscuous mode [ 3010.870723][T19649] device macsec0 entered promiscuous mode [ 3010.888609][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3011.908509][T19680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15692'. [ 3011.944566][T19677] netlink: 'syz.0.15689': attribute type 16 has an invalid length. [ 3011.970385][T19677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15689'. [ 3012.339735][T19687] netlink: 'syz.2.15704': attribute type 21 has an invalid length. [ 3012.350605][T19687] netlink: 'syz.2.15704': attribute type 3 has an invalid length. [ 3012.379216][T19687] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15704'. [ 3012.705781][T19694] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.15696'. [ 3012.782185][T19696] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3013.246587][T19696] device veth1_macvtap left promiscuous mode [ 3013.256347][T19696] device macsec0 left promiscuous mode [ 3013.336354][T19702] device veth1_macvtap entered promiscuous mode [ 3013.360597][T19702] device macsec0 entered promiscuous mode [ 3014.088160][T19721] netlink: 'syz.4.15703': attribute type 21 has an invalid length. [ 3014.100729][T19721] netlink: 'syz.4.15703': attribute type 3 has an invalid length. [ 3014.134063][T22031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3014.143751][T22031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3014.151888][T22031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3014.162728][T22031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3014.170626][T22031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3014.178927][T22031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3014.197847][T19721] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15703'. [ 3014.214211][T19722] netlink: 'syz.2.15702': attribute type 10 has an invalid length. [ 3014.232947][T19730] FAULT_INJECTION: forcing a failure. [ 3014.232947][T19730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3014.253987][T19722] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15702'. [ 3014.346301][T19730] CPU: 0 PID: 19730 Comm: syz.3.15706 Not tainted syzkaller #0 [ 3014.353952][T19730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3014.364043][T19730] Call Trace: [ 3014.367346][T19730] [ 3014.370310][T19730] dump_stack_lvl+0x188/0x24e [ 3014.375037][T19730] ? show_regs_print_info+0x12/0x12 [ 3014.380273][T19730] ? load_image+0x410/0x410 [ 3014.384805][T19730] ? __lock_acquire+0x7ea0/0x7ea0 [ 3014.389872][T19730] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 3014.395768][T19730] should_fail_ex+0x390/0x4c0 [ 3014.400493][T19730] _copy_from_user+0x2c/0x170 [ 3014.405214][T19730] ___sys_sendmsg+0x1c3/0x360 [ 3014.409931][T19730] ? __sys_sendmsg+0x2a0/0x2a0 [ 3014.414741][T19730] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3014.420538][T19730] __se_sys_sendmsg+0x1c3/0x2b0 [ 3014.425427][T19730] ? __x64_sys_sendmsg+0x80/0x80 [ 3014.430409][T19730] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3014.436346][T19730] do_syscall_64+0x4c/0xa0 [ 3014.440793][T19730] ? clear_bhb_loop+0x60/0xb0 [ 3014.445500][T19730] ? clear_bhb_loop+0x60/0xb0 [ 3014.450214][T19730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3014.456168][T19730] RIP: 0033:0x7fb69d99e199 [ 3014.460620][T19730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3014.480269][T19730] RSP: 002b:00007fb69e792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3014.488730][T19730] RAX: ffffffffffffffda RBX: 00007fb69dc25fa0 RCX: 00007fb69d99e199 [ 3014.496731][T19730] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000004 [ 3014.504822][T19730] RBP: 00007fb69e792090 R08: 0000000000000000 R09: 0000000000000000 [ 3014.512822][T19730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.520870][T19730] R13: 00007fb69dc26038 R14: 00007fb69dc25fa0 R15: 00007ffd32dc0b08 [ 3014.528893][T19730] [ 3015.130817][T19739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15709'. [ 3016.054389][T19725] chnl_net:caif_netlink_parms(): no params data found [ 3016.200285][T16505] Bluetooth: hci0: command 0x0409 tx timeout [ 3016.221375][T19755] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3016.474903][T19755] device veth1_macvtap left promiscuous mode [ 3016.524615][T19755] device macsec0 left promiscuous mode [ 3016.689448][T19725] bridge0: port 1(bridge_slave_0) entered blocking state [ 3016.696835][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 3016.705308][T19725] device bridge_slave_0 entered promiscuous mode [ 3016.714861][T19757] device veth1_macvtap entered promiscuous mode [ 3016.751091][T19757] device macsec0 entered promiscuous mode [ 3016.808885][T19725] bridge0: port 2(bridge_slave_1) entered blocking state [ 3016.819746][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 3016.832559][T19725] device bridge_slave_1 entered promiscuous mode [ 3016.970171][T19764] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3017.072236][T19725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3017.158128][ T3946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.186505][T19764] device veth1_macvtap left promiscuous mode [ 3017.200302][T19764] device macsec0 left promiscuous mode [ 3017.490589][T22031] Bluetooth: hci3: command 0x0406 tx timeout [ 3017.891957][T19767] device veth1_macvtap entered promiscuous mode [ 3017.903056][T19767] device macsec0 entered promiscuous mode [ 3017.926600][T19725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3017.947373][T19769] netlink: 'syz.4.15715': attribute type 21 has an invalid length. [ 3017.968253][T19769] netlink: 'syz.4.15715': attribute type 3 has an invalid length. [ 3018.000547][T19769] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15715'. [ 3018.060979][ T3946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3018.183329][ T3946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3018.224581][T19779] netlink: 'syz.3.15717': attribute type 21 has an invalid length. [ 3018.244646][T19779] netlink: 'syz.3.15717': attribute type 3 has an invalid length. [ 3018.279063][T19779] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15717'. [ 3018.289020][T16505] Bluetooth: hci0: command 0x041b tx timeout [ 3018.312914][T19725] team0: Port device team_slave_0 added [ 3018.348489][ T3946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3018.392668][T19725] team0: Port device team_slave_1 added [ 3018.476898][T19725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3018.507754][T19725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3018.559134][T19725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3018.591450][T19725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3018.598475][T19725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3018.663360][T19725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3019.140955][T19725] device hsr_slave_0 entered promiscuous mode [ 3019.148382][T19725] device hsr_slave_1 entered promiscuous mode [ 3020.349427][T19808] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3020.360185][T22031] Bluetooth: hci0: command 0x040f tx timeout [ 3020.471521][T19808] device veth1_macvtap left promiscuous mode [ 3020.478380][T19808] device macsec0 left promiscuous mode [ 3020.542510][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.548914][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.618961][T19809] device veth1_macvtap entered promiscuous mode [ 3020.634022][T19809] device macsec0 entered promiscuous mode [ 3021.129217][T19817] netlink: 'syz.2.15723': attribute type 16 has an invalid length. [ 3021.140457][T19817] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15723'. [ 3022.129657][T19725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3022.168417][T19725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3022.283914][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3022.330420][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3022.391032][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3022.398533][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3022.440363][T22031] Bluetooth: hci0: command 0x0419 tx timeout [ 3022.504461][ T3946] device veth1_macvtap left promiscuous mode [ 3022.511050][ T3946] device veth0_macvtap left promiscuous mode [ 3022.517275][ T3946] device veth1_vlan left promiscuous mode [ 3022.530285][ T3946] device veth0_vlan left promiscuous mode [ 3023.382353][ T3946] team0 (unregistering): Port device team_slave_1 removed [ 3023.430563][ T3946] team0 (unregistering): Port device team_slave_0 removed [ 3023.849444][T19725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3023.861361][T19725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3023.875190][T19836] netlink: 'syz.3.15727': attribute type 21 has an invalid length. [ 3023.886272][T19836] netlink: 'syz.3.15727': attribute type 3 has an invalid length. [ 3023.895418][T19836] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15727'. [ 3024.050884][T19852] netlink: 'syz.4.15729': attribute type 21 has an invalid length. [ 3024.076270][T19852] netlink: 'syz.4.15729': attribute type 3 has an invalid length. [ 3024.107830][T19852] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15729'. [ 3024.275393][T19725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3024.331984][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3024.343079][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3024.365050][T19725] 8021q: adding VLAN 0 to HW filter on device team0 [ 3024.377617][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3024.387464][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3024.417403][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 3024.424636][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3024.446578][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3024.458914][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3024.497597][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3024.509112][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 3024.516317][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3024.525653][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3024.560547][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3024.584116][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3024.620351][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3024.673291][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3024.757844][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3024.826149][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3024.882027][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3024.941437][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3024.971264][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3025.010958][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3025.128645][T19874] netlink: 'syz.2.15734': attribute type 21 has an invalid length. [ 3025.172068][T19874] netlink: 'syz.2.15734': attribute type 3 has an invalid length. [ 3025.215609][T19874] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15734'. [ 3025.698459][T19890] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3027.577825][T19891] device veth1_macvtap left promiscuous mode [ 3027.596038][T19891] device macsec0 left promiscuous mode [ 3027.635162][T19892] device veth1_macvtap entered promiscuous mode [ 3027.649977][T19892] device macsec0 entered promiscuous mode [ 3027.729110][T19896] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3027.862110][T19896] device veth1_macvtap left promiscuous mode [ 3027.868457][T19896] device macsec0 left promiscuous mode [ 3027.943508][T19901] device veth1_macvtap entered promiscuous mode [ 3027.960921][T19901] device macsec0 entered promiscuous mode [ 3028.022206][T19903] FAULT_INJECTION: forcing a failure. [ 3028.022206][T19903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3028.057320][T19903] CPU: 0 PID: 19903 Comm: syz.2.15739 Not tainted syzkaller #0 [ 3028.064960][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3028.075063][T19903] Call Trace: [ 3028.078384][T19903] [ 3028.081366][T19903] dump_stack_lvl+0x188/0x24e [ 3028.086112][T19903] ? show_regs_print_info+0x12/0x12 [ 3028.091366][T19903] ? load_image+0x410/0x410 [ 3028.096097][T19903] ? __lock_acquire+0x7ea0/0x7ea0 [ 3028.101193][T19903] should_fail_ex+0x390/0x4c0 [ 3028.105930][T19903] _copy_from_user+0x2c/0x170 [ 3028.110658][T19903] __sys_bpf+0x2ea/0x780 [ 3028.114962][T19903] ? bpf_link_show_fdinfo+0x380/0x380 [ 3028.120402][T19903] ? lock_chain_count+0x20/0x20 [ 3028.125339][T19903] __x64_sys_bpf+0x78/0x90 [ 3028.129816][T19903] do_syscall_64+0x4c/0xa0 [ 3028.134279][T19903] ? clear_bhb_loop+0x60/0xb0 [ 3028.139008][T19903] ? clear_bhb_loop+0x60/0xb0 [ 3028.143764][T19903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3028.149698][T19903] RIP: 0033:0x7fb504f9e199 [ 3028.154144][T19903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3028.173782][T19903] RSP: 002b:00007fb505e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3028.182315][T19903] RAX: ffffffffffffffda RBX: 00007fb505225fa0 RCX: 00007fb504f9e199 [ 3028.190404][T19903] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 3028.198410][T19903] RBP: 00007fb505e36090 R08: 0000000000000000 R09: 0000000000000000 [ 3028.206406][T19903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3028.214421][T19903] R13: 00007fb505226038 R14: 00007fb505225fa0 R15: 00007fffc7164038 [ 3028.222453][T19903] [ 3028.268131][T19725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3028.284716][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3028.301327][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3028.313447][T19905] netlink: 'syz.3.15740': attribute type 21 has an invalid length. [ 3028.328127][T19905] netlink: 'syz.3.15740': attribute type 3 has an invalid length. [ 3028.338889][T19905] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15740'. [ 3028.402618][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3028.427830][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3028.485116][T19911] netlink: 'syz.4.15742': attribute type 10 has an invalid length. [ 3029.297834][T19725] device veth0_vlan entered promiscuous mode [ 3029.317134][T19921] netlink: 'syz.3.15745': attribute type 16 has an invalid length. [ 3029.350912][T19921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15745'. [ 3029.390088][T19928] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3029.743262][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3029.766795][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3029.810019][T19930] device veth1_macvtap left promiscuous mode [ 3029.825159][T19930] device macsec0 left promiscuous mode [ 3029.854820][T19933] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3029.870913][T19931] device veth1_macvtap entered promiscuous mode [ 3029.880790][T19931] device macsec0 entered promiscuous mode [ 3029.918140][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3029.932603][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3029.956164][T19725] device veth1_vlan entered promiscuous mode [ 3030.092393][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3030.115769][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3030.151068][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3030.172901][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3030.193098][T19941] netlink: 'syz.3.15749': attribute type 3 has an invalid length. [ 3030.221355][T19725] device veth0_macvtap entered promiscuous mode [ 3030.236442][T19941] netlink: 'syz.3.15749': attribute type 1 has an invalid length. [ 3030.267574][T19725] device veth1_macvtap entered promiscuous mode [ 3030.331231][T26449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3030.348837][T26449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3030.374547][T19942] netlink: 'syz.1.15750': attribute type 21 has an invalid length. [ 3030.390360][T19942] netlink: 'syz.1.15750': attribute type 3 has an invalid length. [ 3030.401784][T19942] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15750'. [ 3030.481728][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3030.502991][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.520327][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3030.551476][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.584782][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3030.595566][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.605742][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3030.616716][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.628814][T19725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3030.641392][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3030.655411][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3030.668621][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3030.686211][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.699222][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3030.714693][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.725144][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3030.739332][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.750046][T19725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3030.769364][T19725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3030.785143][T19725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3030.798458][T19948] netlink: 'syz.3.15751': attribute type 10 has an invalid length. [ 3030.811916][T19948] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15751'. [ 3030.824268][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3030.834219][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3030.882939][T19725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3030.907672][T19725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3030.935344][T19725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3030.970224][T19725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3030.997634][T19952] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3031.103102][T19952] device veth1_macvtap left promiscuous mode [ 3031.109587][T19952] device macsec0 left promiscuous mode [ 3031.262239][T19957] device veth1_macvtap entered promiscuous mode [ 3031.290476][T19957] device macsec0 entered promiscuous mode [ 3031.305925][T19958] netlink: 'syz.4.15755': attribute type 21 has an invalid length. [ 3031.381525][T19958] netlink: 'syz.4.15755': attribute type 3 has an invalid length. [ 3031.389826][T19958] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15755'. [ 3031.504173][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3031.566142][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3031.650310][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3031.728628][ T3946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3031.785939][ T3946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3031.911978][T19939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3032.547545][T19978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15760'. [ 3032.701948][T19980] netlink: 'syz.4.15762': attribute type 3 has an invalid length. [ 3032.709871][T19980] netlink: 'syz.4.15762': attribute type 1 has an invalid length. [ 3032.840936][T16505] Bluetooth: hci4: command 0x0406 tx timeout [ 3032.962319][T19984] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15763'. [ 3032.988401][T19984] device hsr0 entered promiscuous mode [ 3033.010541][T19984] bridge0: port 3(hsr0) entered blocking state [ 3033.028557][T19984] bridge0: port 3(hsr0) entered disabled state [ 3033.073864][T19984] bridge0: port 3(hsr0) entered blocking state [ 3033.081953][T19984] bridge0: port 3(hsr0) entered forwarding state [ 3033.122243][T19992] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15765'. [ 3033.370875][T19999] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15768'. [ 3033.398310][T20001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3034.815802][T20024] FAULT_INJECTION: forcing a failure. [ 3034.815802][T20024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3034.903578][T20024] CPU: 1 PID: 20024 Comm: syz.4.15774 Not tainted syzkaller #0 [ 3034.911391][T20024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3034.921490][T20024] Call Trace: [ 3034.924808][T20024] [ 3034.927780][T20024] dump_stack_lvl+0x188/0x24e [ 3034.932524][T20024] ? show_regs_print_info+0x12/0x12 [ 3034.937868][T20024] ? load_image+0x410/0x410 [ 3034.942422][T20024] ? __lock_acquire+0x7ea0/0x7ea0 [ 3034.947508][T20024] should_fail_ex+0x390/0x4c0 [ 3034.952249][T20024] strncpy_from_user+0x32/0x340 [ 3034.957158][T20024] bpf_prog_load+0x200/0x1530 [ 3034.961903][T20024] ? map_freeze+0x390/0x390 [ 3034.966470][T20024] ? __might_fault+0xa6/0x120 [ 3034.971219][T20024] ? __might_fault+0xa6/0x120 [ 3034.975960][T20024] ? __might_fault+0xc2/0x120 [ 3034.980695][T20024] ? __might_fault+0xa6/0x120 [ 3034.985434][T20024] ? bpf_lsm_bpf+0x5/0x10 [ 3034.989816][T20024] ? security_bpf+0x7a/0xa0 [ 3034.994372][T20024] __sys_bpf+0x5b8/0x780 [ 3034.998772][T20024] ? bpf_link_show_fdinfo+0x380/0x380 [ 3035.004222][T20024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3035.010442][T20024] __x64_sys_bpf+0x78/0x90 [ 3035.014943][T20024] do_syscall_64+0x4c/0xa0 [ 3035.019415][T20024] ? clear_bhb_loop+0x60/0xb0 [ 3035.024145][T20024] ? clear_bhb_loop+0x60/0xb0 [ 3035.028881][T20024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3035.034832][T20024] RIP: 0033:0x7fbe8d59e199 [ 3035.039303][T20024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3035.059012][T20024] RSP: 002b:00007fbe8e491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3035.067585][T20024] RAX: ffffffffffffffda RBX: 00007fbe8d825fa0 RCX: 00007fbe8d59e199 [ 3035.075609][T20024] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 3035.083634][T20024] RBP: 00007fbe8e491090 R08: 0000000000000000 R09: 0000000000000000 [ 3035.091656][T20024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3035.099679][T20024] R13: 00007fbe8d826038 R14: 00007fbe8d825fa0 R15: 00007ffff0b49608 [ 3035.107726][T20024] [ 3035.534877][T20040] validate_nla: 5 callbacks suppressed [ 3035.534914][T20040] netlink: 'syz.4.15781': attribute type 21 has an invalid length. [ 3035.559561][T20040] netlink: 'syz.4.15781': attribute type 3 has an invalid length. [ 3035.570517][T20042] netlink: 'syz.1.15779': attribute type 3 has an invalid length. [ 3035.595023][T20040] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15781'. [ 3035.604787][T20042] netlink: 'syz.1.15779': attribute type 1 has an invalid length. [ 3035.636497][T20039] netlink: 'syz.3.15780': attribute type 21 has an invalid length. [ 3035.658445][T20039] netlink: 'syz.3.15780': attribute type 3 has an invalid length. [ 3035.669421][T20039] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15780'. [ 3036.150741][T20054] netlink: 'syz.3.15784': attribute type 21 has an invalid length. [ 3036.159448][T20054] netlink: 'syz.3.15784': attribute type 3 has an invalid length. [ 3036.302006][T20054] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15784'. [ 3036.430641][T20053] netlink: 'syz.4.15783': attribute type 21 has an invalid length. [ 3036.439009][T20053] netlink: 'syz.4.15783': attribute type 3 has an invalid length. [ 3036.500263][T20053] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15783'. [ 3036.510645][T20048] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15782'. [ 3036.727601][T20065] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3036.877858][T20065] device veth1_macvtap left promiscuous mode [ 3036.898296][T20065] device macsec0 left promiscuous mode [ 3036.945599][T20074] FAULT_INJECTION: forcing a failure. [ 3036.945599][T20074] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.958718][T20074] CPU: 1 PID: 20074 Comm: syz.3.15787 Not tainted syzkaller #0 [ 3036.966319][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3036.976443][T20074] Call Trace: [ 3036.979778][T20074] [ 3036.982755][T20074] dump_stack_lvl+0x188/0x24e [ 3036.987495][T20074] ? show_regs_print_info+0x12/0x12 [ 3036.992750][T20074] ? load_image+0x410/0x410 [ 3036.997305][T20074] ? verify_lock_unused+0x140/0x140 [ 3037.002570][T20074] should_fail_ex+0x390/0x4c0 [ 3037.007310][T20074] should_failslab+0x5/0x20 [ 3037.011888][T20074] slab_pre_alloc_hook+0x59/0x300 [ 3037.016988][T20074] kmem_cache_alloc+0x56/0x2f0 [ 3037.021800][T20074] ? skb_clone+0x1e7/0x370 [ 3037.026275][T20074] skb_clone+0x1e7/0x370 [ 3037.030565][T20074] __netlink_deliver_tap+0x3e4/0x7e0 [ 3037.035915][T20074] ? netlink_deliver_tap+0x2e/0x1b0 [ 3037.041163][T20074] netlink_deliver_tap+0x19c/0x1b0 [ 3037.046327][T20074] netlink_unicast+0x777/0x920 [ 3037.051147][T20074] netlink_sendmsg+0x8ad/0xbd0 [ 3037.055963][T20074] ? netlink_getsockopt+0x550/0x550 [ 3037.061213][T20074] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3037.066804][T20074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3037.072118][T20074] ? security_socket_sendmsg+0x7c/0xa0 [ 3037.077612][T20074] ? netlink_getsockopt+0x550/0x550 [ 3037.082842][T20074] ____sys_sendmsg+0x5ed/0x9a0 [ 3037.087653][T20074] ? __sys_sendmsg_sock+0x30/0x30 [ 3037.092705][T20074] ? __import_iovec+0x306/0x510 [ 3037.097601][T20074] ? import_iovec+0x6f/0xa0 [ 3037.102141][T20074] ___sys_sendmsg+0x2a2/0x360 [ 3037.106856][T20074] ? __sys_sendmsg+0x2a0/0x2a0 [ 3037.111668][T20074] ? __lock_acquire+0x7ea0/0x7ea0 [ 3037.116750][T20074] __se_sys_sendmsg+0x1c3/0x2b0 [ 3037.121634][T20074] ? __x64_sys_sendmsg+0x80/0x80 [ 3037.126611][T20074] ? lockdep_hardirqs_on+0x94/0x140 [ 3037.131844][T20074] do_syscall_64+0x4c/0xa0 [ 3037.136294][T20074] ? clear_bhb_loop+0x60/0xb0 [ 3037.141002][T20074] ? clear_bhb_loop+0x60/0xb0 [ 3037.145707][T20074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3037.151624][T20074] RIP: 0033:0x7fb69d99e199 [ 3037.156076][T20074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3037.175709][T20074] RSP: 002b:00007fb69e792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3037.184154][T20074] RAX: ffffffffffffffda RBX: 00007fb69dc25fa0 RCX: 00007fb69d99e199 [ 3037.192150][T20074] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000003 [ 3037.200150][T20074] RBP: 00007fb69e792090 R08: 0000000000000000 R09: 0000000000000000 [ 3037.208143][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3037.216133][T20074] R13: 00007fb69dc26038 R14: 00007fb69dc25fa0 R15: 00007ffd32dc0b08 [ 3037.224143][T20074] [ 3037.229367][T20067] device veth1_macvtap entered promiscuous mode [ 3037.252624][T20067] device macsec0 entered promiscuous mode [ 3037.359481][T20074] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15787'. [ 3038.719528][T20100] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15798'. [ 3039.327278][T20109] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15801'. [ 3040.449139][T20127] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15807'. [ 3040.913306][T20137] FAULT_INJECTION: forcing a failure. [ 3040.913306][T20137] name failslab, interval 1, probability 0, space 0, times 0 [ 3040.963013][T20136] validate_nla: 8 callbacks suppressed [ 3040.963032][T20136] netlink: 'syz.0.15810': attribute type 10 has an invalid length. [ 3041.045066][T20136] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15810'. [ 3041.056045][T20137] CPU: 0 PID: 20137 Comm: syz.4.15811 Not tainted syzkaller #0 [ 3041.063659][T20137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3041.073804][T20137] Call Trace: [ 3041.077130][T20137] [ 3041.080134][T20137] dump_stack_lvl+0x188/0x24e [ 3041.084869][T20137] ? show_regs_print_info+0x12/0x12 [ 3041.090119][T20137] ? load_image+0x410/0x410 [ 3041.094676][T20137] ? __might_sleep+0xd0/0xd0 [ 3041.099305][T20137] ? __lock_acquire+0x7ea0/0x7ea0 [ 3041.104394][T20137] should_fail_ex+0x390/0x4c0 [ 3041.109144][T20137] should_failslab+0x5/0x20 [ 3041.113702][T20137] slab_pre_alloc_hook+0x59/0x300 [ 3041.118778][T20137] ? security_sk_alloc+0x47/0x130 [ 3041.123870][T20137] __kmem_cache_alloc_node+0x4f/0x270 [ 3041.129305][T20137] ? security_sk_alloc+0x47/0x130 [ 3041.134383][T20137] __kmalloc+0xa3/0x240 [ 3041.138630][T20137] security_sk_alloc+0x47/0x130 [ 3041.143559][T20137] sk_prot_alloc+0x101/0x210 [ 3041.148211][T20137] sk_alloc+0x36/0x330 [ 3041.152347][T20137] inet_create+0x759/0xf60 [ 3041.156834][T20137] ? inet_create+0x9e/0xf60 [ 3041.161493][T20137] __sock_create+0x49a/0x940 [ 3041.166146][T20137] udp_sock_create4+0xc2/0x480 [ 3041.170994][T20137] ? free_zapped_rcu+0x1f0/0x1f0 [ 3041.176073][T20137] ? erspan_exit_batch_net+0x20/0x20 [ 3041.181412][T20137] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3041.187356][T20137] ? rcu_is_watching+0x11/0xa0 [ 3041.192187][T20137] rxrpc_lookup_local+0xe00/0x1600 [ 3041.197408][T20137] ? rxrpc_process_local_events+0xa40/0xa40 [ 3041.203374][T20137] ? lockdep_hardirqs_on+0x94/0x140 [ 3041.208635][T20137] ? _local_bh_enable+0xa0/0xa0 [ 3041.213552][T20137] rxrpc_sendmsg+0x3e7/0x890 [ 3041.218194][T20137] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3041.223537][T20137] ? rxrpc_getsockopt+0x150/0x150 [ 3041.228609][T20137] ____sys_sendmsg+0x5ed/0x9a0 [ 3041.233422][T20137] ? __lock_acquire+0x7ea0/0x7ea0 [ 3041.238509][T20137] ? __sys_sendmsg_sock+0x30/0x30 [ 3041.243581][T20137] ? __import_iovec+0x306/0x510 [ 3041.248498][T20137] ? import_iovec+0x6f/0xa0 [ 3041.253066][T20137] ___sys_sendmsg+0x2a2/0x360 [ 3041.257813][T20137] ? __sys_sendmsg+0x2a0/0x2a0 [ 3041.262651][T20137] ? __lock_acquire+0x7ea0/0x7ea0 [ 3041.267766][T20137] __se_sys_sendmsg+0x1c3/0x2b0 [ 3041.272668][T20137] ? __x64_sys_sendmsg+0x80/0x80 [ 3041.277678][T20137] ? lockdep_hardirqs_on+0x94/0x140 [ 3041.282948][T20137] do_syscall_64+0x4c/0xa0 [ 3041.287413][T20137] ? clear_bhb_loop+0x60/0xb0 [ 3041.292164][T20137] ? clear_bhb_loop+0x60/0xb0 [ 3041.296903][T20137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3041.302847][T20137] RIP: 0033:0x7fbe8d59e199 [ 3041.307483][T20137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3041.327173][T20137] RSP: 002b:00007fbe8e470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3041.335656][T20137] RAX: ffffffffffffffda RBX: 00007fbe8d826090 RCX: 00007fbe8d59e199 [ 3041.343676][T20137] RDX: 000000000000dc00 RSI: 0000200000000080 RDI: 0000000000000008 [ 3041.351689][T20137] RBP: 00007fbe8e470090 R08: 0000000000000000 R09: 0000000000000000 [ 3041.359709][T20137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3041.367728][T20137] R13: 00007fbe8d826128 R14: 00007fbe8d826090 R15: 00007ffff0b49608 [ 3041.375775][T20137] [ 3042.031697][T20146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15814'. [ 3043.358484][T20160] netlink: 'syz.3.15817': attribute type 10 has an invalid length. [ 3043.390676][T20160] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15817'. [ 3044.146892][T20172] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3044.603273][T20172] device veth1_macvtap left promiscuous mode [ 3044.609925][T20172] device macsec0 left promiscuous mode [ 3045.576588][T20196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15828'. [ 3045.616318][T20200] netlink: 'syz.1.15829': attribute type 29 has an invalid length. [ 3045.687967][T20200] netlink: 'syz.1.15829': attribute type 29 has an invalid length. [ 3045.770788][T20199] netlink: 'syz.3.15830': attribute type 10 has an invalid length. [ 3045.779222][T20199] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15830'. [ 3045.860611][T20201] netlink: 'syz.1.15829': attribute type 29 has an invalid length. [ 3045.868868][T20204] netlink: 'syz.1.15829': attribute type 29 has an invalid length. [ 3045.940651][T20208] netlink: 'syz.1.15829': attribute type 29 has an invalid length. [ 3045.986662][T20213] netlink: 'syz.2.15835': attribute type 29 has an invalid length. [ 3046.020603][T20213] netlink: 'syz.2.15835': attribute type 29 has an invalid length. [ 3046.055086][T20213] netlink: 'syz.2.15835': attribute type 29 has an invalid length. [ 3046.203902][T20216] netlink: 'syz.2.15835': attribute type 29 has an invalid length. [ 3046.225394][T20213] FAULT_INJECTION: forcing a failure. [ 3046.225394][T20213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3046.340957][T20215] netlink: 'syz.0.15836': attribute type 16 has an invalid length. [ 3046.359954][T20213] CPU: 1 PID: 20213 Comm: syz.2.15835 Not tainted syzkaller #0 [ 3046.367615][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3046.377717][T20213] Call Trace: [ 3046.381037][T20213] [ 3046.384011][T20213] dump_stack_lvl+0x188/0x24e [ 3046.388750][T20213] ? show_regs_print_info+0x12/0x12 [ 3046.394006][T20213] ? load_image+0x410/0x410 [ 3046.398553][T20213] ? __lock_acquire+0x7ea0/0x7ea0 [ 3046.403629][T20213] ? perf_trace_lock+0xf8/0x390 [ 3046.408539][T20213] should_fail_ex+0x390/0x4c0 [ 3046.413288][T20213] _copy_from_user+0x2c/0x170 [ 3046.418022][T20213] ___sys_recvmsg+0x170/0x590 [ 3046.422754][T20213] ? __sys_recvmsg+0x2a0/0x2a0 [ 3046.427580][T20213] ? common_file_perm+0x171/0x1c0 [ 3046.432679][T20213] ? __fget_files+0x3fc/0x460 [ 3046.437435][T20213] __x64_sys_recvmsg+0x20d/0x2e0 [ 3046.442425][T20213] ? ___sys_recvmsg+0x590/0x590 [ 3046.447344][T20213] ? lockdep_hardirqs_on+0x94/0x140 [ 3046.452602][T20213] do_syscall_64+0x4c/0xa0 [ 3046.457070][T20213] ? clear_bhb_loop+0x60/0xb0 [ 3046.461791][T20213] ? clear_bhb_loop+0x60/0xb0 [ 3046.466517][T20213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3046.472458][T20213] RIP: 0033:0x7fb504f9e199 [ 3046.476916][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3046.496571][T20213] RSP: 002b:00007fb505e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3046.505075][T20213] RAX: ffffffffffffffda RBX: 00007fb505225fa0 RCX: 00007fb504f9e199 [ 3046.513096][T20213] RDX: 0000000040002020 RSI: 0000200000001300 RDI: 0000000000000003 [ 3046.521124][T20213] RBP: 00007fb505e36090 R08: 0000000000000000 R09: 0000000000000000 [ 3046.529148][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3046.537170][T20213] R13: 00007fb505226038 R14: 00007fb505225fa0 R15: 00007fffc7164038 [ 3046.545260][T20213] [ 3046.592325][T20215] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15836'. [ 3047.619844][T20239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15843'. [ 3048.164644][T20245] netlink: 'syz.1.15845': attribute type 10 has an invalid length. [ 3048.183086][T20245] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15845'. [ 3048.523140][T20261] netlink: 'syz.1.15848': attribute type 16 has an invalid length. [ 3048.562109][T20262] netlink: 'syz.4.15851': attribute type 29 has an invalid length. [ 3048.608826][T20261] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15848'. [ 3048.679544][T20262] netlink: 'syz.4.15851': attribute type 29 has an invalid length. [ 3048.705022][T20264] netlink: 'syz.4.15851': attribute type 29 has an invalid length. [ 3048.829845][T20262] netlink: 55 bytes leftover after parsing attributes in process `syz.4.15851'. [ 3049.272735][T20269] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15853'. [ 3049.369109][T20275] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3049.498399][T20275] device veth1_macvtap left promiscuous mode [ 3049.517308][T20275] device macsec0 left promiscuous mode [ 3049.577557][T20280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15856'. [ 3049.649998][T20278] device veth1_macvtap entered promiscuous mode [ 3049.666619][T20278] device macsec0 entered promiscuous mode [ 3049.677389][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3050.061886][T20285] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15858'. [ 3051.346457][T20309] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3051.634152][T20309] device veth1_macvtap left promiscuous mode [ 3051.716863][T20309] device macsec0 left promiscuous mode [ 3051.824463][T20311] device veth1_macvtap entered promiscuous mode [ 3051.881157][T20311] device macsec0 entered promiscuous mode [ 3051.955018][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3052.286706][T20323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15868'. [ 3052.473415][T20328] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3052.619032][T20331] device veth1_macvtap left promiscuous mode [ 3052.753169][T20328] device veth1_macvtap entered promiscuous mode [ 3052.767059][T20328] device macsec0 entered promiscuous mode [ 3052.845789][T20330] validate_nla: 4 callbacks suppressed [ 3052.845879][T20330] netlink: 'syz.3.15871': attribute type 10 has an invalid length. [ 3052.896378][T20330] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15871'. [ 3053.328197][T20345] netlink: 'syz.4.15875': attribute type 16 has an invalid length. [ 3053.548621][T20345] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15875'. [ 3056.052330][T20369] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3056.332408][T20369] device veth1_macvtap left promiscuous mode [ 3056.355471][T20369] device macsec0 left promiscuous mode [ 3056.459211][T20373] device veth1_macvtap entered promiscuous mode [ 3056.471310][T20379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15882'. [ 3056.495522][T20373] device macsec0 entered promiscuous mode [ 3056.935525][T20388] netlink: 'syz.0.15886': attribute type 16 has an invalid length. [ 3056.955297][T20388] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15886'. [ 3057.373641][T20391] netlink: 'syz.4.15887': attribute type 10 has an invalid length. [ 3057.500975][T20391] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15887'. [ 3058.767024][T20416] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3058.874421][T20416] device veth1_macvtap left promiscuous mode [ 3058.890953][T20416] device macsec0 left promiscuous mode [ 3058.975287][T20417] device veth1_macvtap entered promiscuous mode [ 3058.990036][T20417] device macsec0 entered promiscuous mode [ 3059.004361][T20420] netlink: 'syz.0.15895': attribute type 21 has an invalid length. [ 3059.020521][T20420] netlink: 'syz.0.15895': attribute type 3 has an invalid length. [ 3059.031418][T20420] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15895'. [ 3059.063337][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3059.098329][T20424] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15897'. [ 3060.182826][T20437] netlink: 'syz.3.15902': attribute type 10 has an invalid length. [ 3060.212976][T20437] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15902'. [ 3060.545598][T20444] netlink: 'syz.2.15903': attribute type 16 has an invalid length. [ 3060.583183][T20444] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15903'. [ 3060.938760][T20455] netlink: 'syz.4.15906': attribute type 1 has an invalid length. [ 3060.947807][T20455] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.15906'. [ 3061.240827][T20468] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15910'. [ 3061.291832][T20471] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3061.338254][T20470] netlink: 'syz.1.15911': attribute type 21 has an invalid length. [ 3061.386252][T20470] netlink: 'syz.1.15911': attribute type 3 has an invalid length. [ 3061.407592][T20470] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15911'. [ 3063.468356][T20510] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3063.789107][T20514] netlink: 'syz.3.15921': attribute type 16 has an invalid length. [ 3063.852192][T20514] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15921'. [ 3064.568024][T20529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15924'. [ 3065.057141][T20540] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3065.158571][T20540] device veth1_macvtap left promiscuous mode [ 3065.187199][T20540] device macsec0 left promiscuous mode [ 3065.327129][T20545] device veth1_macvtap entered promiscuous mode [ 3065.353849][T20545] device macsec0 entered promiscuous mode [ 3065.385921][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3065.409820][T20544] netlink: 'syz.2.15930': attribute type 10 has an invalid length. [ 3065.427114][T20544] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15930'. [ 3065.462063][T20547] netlink: 'syz.0.15931': attribute type 21 has an invalid length. [ 3065.480885][T20547] netlink: 'syz.0.15931': attribute type 3 has an invalid length. [ 3065.508789][T20547] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15931'. [ 3065.579927][T20549] netlink: 'syz.1.15932': attribute type 10 has an invalid length. [ 3065.589285][T20549] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15932'. [ 3065.699092][T20556] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3065.732155][T20557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15935'. [ 3065.867250][T20559] netlink: 'syz.3.15934': attribute type 16 has an invalid length. [ 3065.910181][T20559] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15934'. [ 3068.013365][T20576] netlink: 'syz.2.15949': attribute type 10 has an invalid length. [ 3068.060267][T20576] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15949'. [ 3069.303760][T20605] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3069.439860][T20605] device veth1_macvtap left promiscuous mode [ 3069.454288][T20605] device macsec0 left promiscuous mode [ 3069.505326][T20606] device veth1_macvtap entered promiscuous mode [ 3069.512000][T20606] device macsec0 entered promiscuous mode [ 3069.524894][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3069.679124][T20608] netlink: 'syz.2.15947': attribute type 21 has an invalid length. [ 3069.688057][T20608] netlink: 'syz.2.15947': attribute type 3 has an invalid length. [ 3069.698287][T20608] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15947'. [ 3069.806351][T20612] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15948'. [ 3069.851098][T20610] netlink: 'syz.0.15946': attribute type 10 has an invalid length. [ 3069.865808][T20610] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15946'. [ 3070.005396][T20614] device veth1_macvtap left promiscuous mode [ 3070.030717][T20614] device macsec0 left promiscuous mode [ 3070.126569][T20618] device veth1_macvtap entered promiscuous mode [ 3070.135924][T20618] device macsec0 entered promiscuous mode [ 3071.163682][T20642] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3071.196512][T20638] netlink: 'syz.0.15970': attribute type 3 has an invalid length. [ 3071.282477][T20638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15970'. [ 3071.485239][T20642] device veth1_macvtap entered promiscuous mode [ 3071.497074][T20642] device macsec0 entered promiscuous mode [ 3071.588808][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3072.065984][T20653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15960'. [ 3072.895961][T20662] netlink: 'syz.1.15965': attribute type 10 has an invalid length. [ 3072.907986][T20662] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15965'. [ 3072.952204][T20668] device veth1_macvtap left promiscuous mode [ 3072.979392][T20668] device macsec0 left promiscuous mode [ 3073.103591][T20672] device veth1_macvtap entered promiscuous mode [ 3073.126622][T20672] device macsec0 entered promiscuous mode [ 3073.463136][T20679] netlink: 'syz.1.15972': attribute type 10 has an invalid length. [ 3073.478253][T20679] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15972'. [ 3076.825387][T20692] netlink: 140 bytes leftover after parsing attributes in process `syz.3.15975'. [ 3077.126306][T20702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15978'. [ 3077.763221][T20714] device veth1_macvtap left promiscuous mode [ 3077.769662][T20714] device macsec0 left promiscuous mode [ 3077.938235][T20721] device veth1_macvtap entered promiscuous mode [ 3077.957344][T20721] device macsec0 entered promiscuous mode [ 3077.982238][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3078.190020][T20734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15990'. [ 3078.718859][T20747] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16005'. [ 3078.744806][T20748] netlink: 'syz.4.15996': attribute type 2 has an invalid length. [ 3078.839021][T20748] netlink: 'syz.4.15996': attribute type 8 has an invalid length. [ 3079.029481][T20748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15996'. [ 3079.433847][T20755] FAULT_INJECTION: forcing a failure. [ 3079.433847][T20755] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.446968][T20755] CPU: 0 PID: 20755 Comm: syz.0.15998 Not tainted syzkaller #0 [ 3079.454569][T20755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3079.464669][T20755] Call Trace: [ 3079.467979][T20755] [ 3079.470949][T20755] dump_stack_lvl+0x188/0x24e [ 3079.475680][T20755] ? show_regs_print_info+0x12/0x12 [ 3079.480974][T20755] ? load_image+0x410/0x410 [ 3079.485530][T20755] ? verify_lock_unused+0x140/0x140 [ 3079.490780][T20755] should_fail_ex+0x390/0x4c0 [ 3079.495519][T20755] should_failslab+0x5/0x20 [ 3079.500052][T20755] slab_pre_alloc_hook+0x59/0x300 [ 3079.505170][T20755] ? ref_tracker_alloc+0x14f/0x490 [ 3079.510318][T20755] __kmem_cache_alloc_node+0x4f/0x270 [ 3079.515725][T20755] ? ref_tracker_alloc+0x14f/0x490 [ 3079.520871][T20755] kmalloc_trace+0x26/0xe0 [ 3079.525315][T20755] ref_tracker_alloc+0x14f/0x490 [ 3079.530294][T20755] ? ref_tracker_dir_print+0x150/0x150 [ 3079.535791][T20755] ? __lock_acquire+0x7ea0/0x7ea0 [ 3079.540864][T20755] ? rcu_is_watching+0x11/0xa0 [ 3079.545661][T20755] dst_init+0xb1/0x400 [ 3079.549852][T20755] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 3079.555527][T20755] dst_alloc+0x12a/0x160 [ 3079.559813][T20755] ip6_pol_route+0xa3f/0x13b0 [ 3079.564517][T20755] ? ip6_pol_route+0x162/0x13b0 [ 3079.569397][T20755] ? trace_fib6_table_lookup+0x250/0x250 [ 3079.575093][T20755] fib6_rule_lookup+0x35c/0x5e0 [ 3079.579973][T20755] ? ip6_route_output_flags_noref+0x390/0x390 [ 3079.586075][T20755] ? fib6_lookup+0x2d0/0x2d0 [ 3079.590704][T20755] ? read_lock_is_recursive+0x10/0x10 [ 3079.596119][T20755] ? __ipv6_addr_type+0x234/0x2e0 [ 3079.601174][T20755] ? ip6_route_output_flags_noref+0x230/0x390 [ 3079.607359][T20755] ip6_route_output_flags+0xe3/0x330 [ 3079.612673][T20755] ? ip6_route_output_flags+0x27/0x330 [ 3079.618166][T20755] ip6_dst_lookup_tail+0x1a7/0x1600 [ 3079.623430][T20755] ? copyin+0xe7/0x120 [ 3079.627536][T20755] ? _copy_from_iter+0x48f/0x1130 [ 3079.632603][T20755] ? ip6_dst_lookup+0x60/0x60 [ 3079.637309][T20755] ? copyout_mc+0x110/0x110 [ 3079.641841][T20755] ? txopt_get+0x76/0x3f0 [ 3079.646205][T20755] ? txopt_get+0x76/0x3f0 [ 3079.650607][T20755] ? txopt_get+0x340/0x3f0 [ 3079.655064][T20755] ? tomoyo_check_acl+0x378/0x3f0 [ 3079.660128][T20755] ? fl6_sock_lookup+0xc0/0xc0 [ 3079.664931][T20755] ip6_dst_lookup_flow+0x44/0xd0 [ 3079.669930][T20755] rawv6_sendmsg+0xcb2/0x1710 [ 3079.674652][T20755] ? compat_rawv6_ioctl+0x60/0x60 [ 3079.679816][T20755] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 3079.686266][T20755] ? aa_sock_msg_perm+0x94/0x150 [ 3079.691279][T20755] ? inet_sendmsg+0x7a/0x2a0 [ 3079.695904][T20755] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3079.701220][T20755] ? inet_send_prepare+0x250/0x250 [ 3079.706371][T20755] ____sys_sendmsg+0x5ed/0x9a0 [ 3079.711197][T20755] ? __sys_sendmsg_sock+0x30/0x30 [ 3079.716249][T20755] ? __import_iovec+0x306/0x510 [ 3079.721141][T20755] ? import_iovec+0x6f/0xa0 [ 3079.725684][T20755] ___sys_sendmsg+0x2a2/0x360 [ 3079.730399][T20755] ? __sys_sendmsg+0x2a0/0x2a0 [ 3079.735214][T20755] ? __lock_acquire+0x7ea0/0x7ea0 [ 3079.740336][T20755] __se_sys_sendmsg+0x1c3/0x2b0 [ 3079.745217][T20755] ? perf_trace_preemptirq_template+0x268/0x320 [ 3079.751515][T20755] ? __x64_sys_sendmsg+0x80/0x80 [ 3079.756502][T20755] ? lockdep_hardirqs_on+0x94/0x140 [ 3079.761743][T20755] do_syscall_64+0x4c/0xa0 [ 3079.766189][T20755] ? clear_bhb_loop+0x60/0xb0 [ 3079.770892][T20755] ? clear_bhb_loop+0x60/0xb0 [ 3079.775609][T20755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3079.781536][T20755] RIP: 0033:0x7f950579e199 [ 3079.785981][T20755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3079.805617][T20755] RSP: 002b:00007f9506595028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3079.814065][T20755] RAX: ffffffffffffffda RBX: 00007f9505a25fa0 RCX: 00007f950579e199 [ 3079.822067][T20755] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000005 [ 3079.830498][T20755] RBP: 00007f9506595090 R08: 0000000000000000 R09: 0000000000000000 [ 3079.838496][T20755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3079.846490][T20755] R13: 00007f9505a26038 R14: 00007f9505a25fa0 R15: 00007ffd80565658 [ 3079.854530][T20755] [ 3080.822656][T20770] netlink: 'syz.0.16000': attribute type 29 has an invalid length. [ 3080.859633][T20770] netlink: 'syz.0.16000': attribute type 16 has an invalid length. [ 3080.880379][T20770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16000'. [ 3081.062292][T20777] device veth1_macvtap left promiscuous mode [ 3081.074892][T20777] device macsec0 left promiscuous mode [ 3081.130065][T20778] device veth1_macvtap entered promiscuous mode [ 3081.136716][T20778] device macsec0 entered promiscuous mode [ 3081.145455][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3081.563150][T20790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16009'. [ 3081.596525][T20792] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.16010'. [ 3081.613285][T20792] netlink: 7906 bytes leftover after parsing attributes in process `syz.2.16010'. [ 3081.674725][T20794] FAULT_INJECTION: forcing a failure. [ 3081.674725][T20794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3081.690729][T20794] CPU: 0 PID: 20794 Comm: syz.0.16011 Not tainted syzkaller #0 [ 3081.698353][T20794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3081.708455][T20794] Call Trace: [ 3081.711780][T20794] [ 3081.714927][T20794] dump_stack_lvl+0x188/0x24e [ 3081.719682][T20794] ? show_regs_print_info+0x12/0x12 [ 3081.725007][T20794] ? load_image+0x410/0x410 [ 3081.729573][T20794] ? __might_fault+0xa6/0x120 [ 3081.734324][T20794] should_fail_ex+0x390/0x4c0 [ 3081.739128][T20794] copyin+0x1b/0x120 [ 3081.743098][T20794] _copy_from_iter+0x447/0x1130 [ 3081.748021][T20794] ? copyout_mc+0x110/0x110 [ 3081.752590][T20794] ? __virt_addr_valid+0x188/0x540 [ 3081.757859][T20794] ? __virt_addr_valid+0x188/0x540 [ 3081.763032][T20794] ? __virt_addr_valid+0x467/0x540 [ 3081.768211][T20794] ? __phys_addr_symbol+0x2b/0x70 [ 3081.773300][T20794] ? __check_object_size+0x4f6/0xa70 [ 3081.778636][T20794] netlink_sendmsg+0x755/0xbd0 [ 3081.783456][T20794] ? netlink_getsockopt+0x550/0x550 [ 3081.788716][T20794] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3081.794348][T20794] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3081.799702][T20794] ? security_socket_sendmsg+0x7c/0xa0 [ 3081.805220][T20794] ? netlink_getsockopt+0x550/0x550 [ 3081.810461][T20794] ____sys_sendmsg+0x5ed/0x9a0 [ 3081.815271][T20794] ? __sys_sendmsg_sock+0x30/0x30 [ 3081.820324][T20794] ? __import_iovec+0x306/0x510 [ 3081.825297][T20794] ? import_iovec+0x6f/0xa0 [ 3081.829862][T20794] ___sys_sendmsg+0x2a2/0x360 [ 3081.834589][T20794] ? __sys_sendmsg+0x2a0/0x2a0 [ 3081.839432][T20794] ? __lock_acquire+0x7ea0/0x7ea0 [ 3081.844538][T20794] __se_sys_sendmsg+0x1c3/0x2b0 [ 3081.849443][T20794] ? __x64_sys_sendmsg+0x80/0x80 [ 3081.854446][T20794] ? lockdep_hardirqs_on+0x94/0x140 [ 3081.859746][T20794] do_syscall_64+0x4c/0xa0 [ 3081.864212][T20794] ? clear_bhb_loop+0x60/0xb0 [ 3081.868936][T20794] ? clear_bhb_loop+0x60/0xb0 [ 3081.873672][T20794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3081.879613][T20794] RIP: 0033:0x7f950579e199 [ 3081.884084][T20794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3081.903743][T20794] RSP: 002b:00007f9506595028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3081.912213][T20794] RAX: ffffffffffffffda RBX: 00007f9505a25fa0 RCX: 00007f950579e199 [ 3081.920244][T20794] RDX: 0000000014040800 RSI: 0000200000000080 RDI: 0000000000000003 [ 3081.928272][T20794] RBP: 00007f9506595090 R08: 0000000000000000 R09: 0000000000000000 [ 3081.936295][T20794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3081.944357][T20794] R13: 00007f9505a26038 R14: 00007f9505a25fa0 R15: 00007ffd80565658 [ 3081.952401][T20794] [ 3081.962388][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.968830][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.466882][T20810] device veth1_macvtap left promiscuous mode [ 3082.488587][T20810] device macsec0 left promiscuous mode [ 3082.605104][T20811] device veth1_macvtap entered promiscuous mode [ 3082.627038][T20811] device macsec0 entered promiscuous mode [ 3083.089542][T20825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16022'. [ 3083.473341][T20829] FAULT_INJECTION: forcing a failure. [ 3083.473341][T20829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3083.502546][T20829] CPU: 1 PID: 20829 Comm: syz.1.16023 Not tainted syzkaller #0 [ 3083.510340][T20829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3083.520456][T20829] Call Trace: [ 3083.523779][T20829] [ 3083.526751][T20829] dump_stack_lvl+0x188/0x24e [ 3083.531486][T20829] ? show_regs_print_info+0x12/0x12 [ 3083.536742][T20829] ? load_image+0x410/0x410 [ 3083.541303][T20829] ? __lock_acquire+0x7ea0/0x7ea0 [ 3083.546390][T20829] ? lockdep_hardirqs_on+0x94/0x140 [ 3083.551689][T20829] should_fail_ex+0x390/0x4c0 [ 3083.556433][T20829] _copy_from_user+0x2c/0x170 [ 3083.561171][T20829] __copy_msghdr+0x384/0x560 [ 3083.565813][T20829] ___sys_sendmsg+0x210/0x360 [ 3083.570555][T20829] ? __sys_sendmsg+0x2a0/0x2a0 [ 3083.575398][T20829] ? ktime_get+0x7b/0x270 [ 3083.579816][T20829] __se_sys_sendmsg+0x1c3/0x2b0 [ 3083.584746][T20829] ? __x64_sys_sendmsg+0x80/0x80 [ 3083.589758][T20829] do_syscall_64+0x4c/0xa0 [ 3083.594220][T20829] ? clear_bhb_loop+0x60/0xb0 [ 3083.598950][T20829] ? clear_bhb_loop+0x60/0xb0 [ 3083.603679][T20829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3083.609632][T20829] RIP: 0033:0x7f1c12f9e199 [ 3083.614091][T20829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3083.633744][T20829] RSP: 002b:00007f1c13ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3083.642248][T20829] RAX: ffffffffffffffda RBX: 00007f1c13226090 RCX: 00007f1c12f9e199 [ 3083.650265][T20829] RDX: 0000000000020000 RSI: 0000200000001e80 RDI: 000000000000000f [ 3083.658277][T20829] RBP: 00007f1c13ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 3083.666326][T20829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3083.674430][T20829] R13: 00007f1c13226128 R14: 00007f1c13226090 R15: 00007ffcdcc586b8 [ 3083.682467][T20829] [ 3083.740493][T22031] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 3085.642885][T20832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16024'. [ 3085.695698][T20840] netlink: 'syz.1.16028': attribute type 15 has an invalid length. [ 3085.782655][T20840] netlink: 'syz.1.16028': attribute type 7 has an invalid length. [ 3085.863784][T20840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16028'. [ 3085.966296][T20845] netlink: 'syz.3.16027': attribute type 2 has an invalid length. [ 3086.050983][T20845] netlink: 10 bytes leftover after parsing attributes in process `syz.3.16027'. [ 3086.781854][T20864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16033'. [ 3086.854737][T20861] netlink: 'syz.1.16032': attribute type 16 has an invalid length. [ 3086.892809][T20861] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16032'. [ 3086.986213][T20869] netlink: 'syz.2.16034': attribute type 16 has an invalid length. [ 3087.040474][T20869] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16034'. [ 3087.276078][T20871] netlink: 'syz.3.16035': attribute type 21 has an invalid length. [ 3087.292585][T20871] netlink: 'syz.3.16035': attribute type 3 has an invalid length. [ 3087.320635][T20871] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16035'. [ 3087.384956][T20878] FAULT_INJECTION: forcing a failure. [ 3087.384956][T20878] name failslab, interval 1, probability 0, space 0, times 0 [ 3087.427807][T20878] CPU: 1 PID: 20878 Comm: syz.4.16038 Not tainted syzkaller #0 [ 3087.435446][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3087.445543][T20878] Call Trace: [ 3087.448861][T20878] [ 3087.451844][T20878] dump_stack_lvl+0x188/0x24e [ 3087.456587][T20878] ? show_regs_print_info+0x12/0x12 [ 3087.461842][T20878] ? load_image+0x410/0x410 [ 3087.466398][T20878] ? __lock_acquire+0x7ea0/0x7ea0 [ 3087.471481][T20878] should_fail_ex+0x390/0x4c0 [ 3087.476218][T20878] should_failslab+0x5/0x20 [ 3087.480771][T20878] slab_pre_alloc_hook+0x59/0x300 [ 3087.485849][T20878] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 3087.491453][T20878] __kmem_cache_alloc_node+0x4f/0x270 [ 3087.496912][T20878] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 3087.502502][T20878] __kmalloc+0xa3/0x240 [ 3087.506690][T20878] bpf_prog_test_run_skb+0x23e/0x18e0 [ 3087.512108][T20878] ? __fget_files+0x28/0x460 [ 3087.516732][T20878] ? __fget_files+0x3fc/0x460 [ 3087.521462][T20878] ? cpu_online+0xa0/0xa0 [ 3087.525823][T20878] bpf_prog_test_run+0x31c/0x390 [ 3087.530830][T20878] __sys_bpf+0x62b/0x780 [ 3087.535107][T20878] ? bpf_link_show_fdinfo+0x380/0x380 [ 3087.540524][T20878] ? lock_chain_count+0x20/0x20 [ 3087.545412][T20878] __x64_sys_bpf+0x78/0x90 [ 3087.549861][T20878] do_syscall_64+0x4c/0xa0 [ 3087.554307][T20878] ? clear_bhb_loop+0x60/0xb0 [ 3087.559010][T20878] ? clear_bhb_loop+0x60/0xb0 [ 3087.563718][T20878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3087.569643][T20878] RIP: 0033:0x7fbe8d59e199 [ 3087.574095][T20878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3087.593770][T20878] RSP: 002b:00007fbe8e491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3087.602225][T20878] RAX: ffffffffffffffda RBX: 00007fbe8d825fa0 RCX: 00007fbe8d59e199 [ 3087.610225][T20878] RDX: 0000000000000047 RSI: 00002000000002c0 RDI: 000000000000000a [ 3087.618223][T20878] RBP: 00007fbe8e491090 R08: 0000000000000000 R09: 0000000000000000 [ 3087.626223][T20878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3087.634222][T20878] R13: 00007fbe8d826038 R14: 00007fbe8d825fa0 R15: 00007ffff0b49608 [ 3087.642239][T20878] [ 3087.761236][T20876] netlink: 'syz.0.16036': attribute type 10 has an invalid length. [ 3087.779899][T20876] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16036'. [ 3089.038479][T20905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16045'. [ 3091.844171][T20912] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16047'. [ 3092.076917][T20924] netlink: 'syz.1.16049': attribute type 16 has an invalid length. [ 3092.092440][T20924] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16049'. [ 3092.524702][T20926] netlink: 'syz.1.16050': attribute type 16 has an invalid length. [ 3092.536301][T20926] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16050'. [ 3093.304249][T20947] netlink: 'syz.2.16053': attribute type 16 has an invalid length. [ 3093.322585][T20945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16058'. [ 3093.328570][T20947] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16053'. [ 3093.618156][T20956] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3093.759151][T20954] device veth1_macvtap left promiscuous mode [ 3093.769053][T20954] device macsec0 left promiscuous mode [ 3093.861536][T20954] device veth1_macvtap entered promiscuous mode [ 3093.868500][T20954] device macsec0 entered promiscuous mode [ 3093.917104][T26449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3093.943554][T20958] netlink: 'syz.0.16061': attribute type 21 has an invalid length. [ 3093.969949][T20958] netlink: 'syz.0.16061': attribute type 3 has an invalid length. [ 3094.007959][T20958] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16061'. [ 3094.147417][T20963] netlink: 'syz.4.16062': attribute type 16 has an invalid length. [ 3094.158019][T20963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16062'. [ 3094.357005][T20970] netlink: 'syz.1.16074': attribute type 16 has an invalid length. [ 3094.436295][T20970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16074'. [ 3094.477784][T20967] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16063'. [ 3094.500767][T20969] netlink: 'syz.3.16064': attribute type 16 has an invalid length. [ 3094.509252][T20969] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16064'. [ 3095.739600][T20998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16073'. [ 3095.925689][T21004] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3096.009668][T21004] device veth1_macvtap left promiscuous mode [ 3096.019382][T21004] device macsec0 left promiscuous mode [ 3096.164975][T21006] device veth1_macvtap entered promiscuous mode [ 3096.200599][T21006] device macsec0 entered promiscuous mode [ 3096.287047][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3096.391748][T21009] netlink: 'syz.0.16077': attribute type 21 has an invalid length. [ 3096.423332][T21009] netlink: 'syz.0.16077': attribute type 3 has an invalid length. [ 3096.490720][T21009] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16077'. [ 3096.551102][T21011] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16078'. [ 3096.851951][T21019] FAULT_INJECTION: forcing a failure. [ 3096.851951][T21019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3096.961289][T21019] CPU: 0 PID: 21019 Comm: syz.1.16080 Not tainted syzkaller #0 [ 3096.968949][T21019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3096.979070][T21019] Call Trace: [ 3096.982402][T21019] [ 3096.985388][T21019] dump_stack_lvl+0x188/0x24e [ 3096.990147][T21019] ? show_regs_print_info+0x12/0x12 [ 3096.995427][T21019] ? load_image+0x410/0x410 [ 3096.999997][T21019] ? __lock_acquire+0x7ea0/0x7ea0 [ 3097.005107][T21019] ? __kmem_cache_alloc_node+0x19d/0x270 [ 3097.010813][T21019] should_fail_ex+0x390/0x4c0 [ 3097.015579][T21019] _copy_from_user+0x2c/0x170 [ 3097.020330][T21019] ____sys_sendmsg+0x31a/0x9a0 [ 3097.025166][T21019] ? __sys_sendmsg_sock+0x30/0x30 [ 3097.030257][T21019] ? __import_iovec+0x306/0x510 [ 3097.035248][T21019] ? import_iovec+0x6f/0xa0 [ 3097.039823][T21019] ___sys_sendmsg+0x2a2/0x360 [ 3097.044575][T21019] ? __sys_sendmsg+0x2a0/0x2a0 [ 3097.049427][T21019] ? __lock_acquire+0x7ea0/0x7ea0 [ 3097.054564][T21019] __se_sys_sendmsg+0x1c3/0x2b0 [ 3097.059481][T21019] ? __x64_sys_sendmsg+0x80/0x80 [ 3097.064504][T21019] ? lockdep_hardirqs_on+0x94/0x140 [ 3097.069772][T21019] do_syscall_64+0x4c/0xa0 [ 3097.074245][T21019] ? clear_bhb_loop+0x60/0xb0 [ 3097.077044][T21023] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16081'. [ 3097.078960][T21019] ? clear_bhb_loop+0x60/0xb0 [ 3097.078996][T21019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3097.098878][T21019] RIP: 0033:0x7f1c12f9e199 [ 3097.103356][T21019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3097.123032][T21019] RSP: 002b:00007f1c13f08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3097.131523][T21019] RAX: ffffffffffffffda RBX: 00007f1c13225fa0 RCX: 00007f1c12f9e199 [ 3097.139552][T21019] RDX: 0000000000040050 RSI: 0000200000000980 RDI: 0000000000000003 [ 3097.147601][T21019] RBP: 00007f1c13f08090 R08: 0000000000000000 R09: 0000000000000000 [ 3097.155638][T21019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3097.163668][T21019] R13: 00007f1c13226038 R14: 00007f1c13225fa0 R15: 00007ffcdcc586b8 [ 3097.171709][T21019] [ 3097.684880][T21034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16088'. [ 3098.077971][T21041] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16086'. [ 3098.604183][T21045] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3098.877000][T21054] validate_nla: 2 callbacks suppressed [ 3098.877037][T21054] netlink: 'syz.3.16092': attribute type 21 has an invalid length. [ 3098.919762][T21054] netlink: 'syz.3.16092': attribute type 3 has an invalid length. [ 3099.393697][T21063] netlink: 'syz.3.16093': attribute type 16 has an invalid length. [ 3099.405223][T21063] __nla_validate_parse: 1 callbacks suppressed [ 3099.405320][T21063] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16093'. [ 3099.639574][T21067] FAULT_INJECTION: forcing a failure. [ 3099.639574][T21067] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.680329][T21067] CPU: 1 PID: 21067 Comm: syz.4.16094 Not tainted syzkaller #0 [ 3099.687967][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3099.698097][T21067] Call Trace: [ 3099.701419][T21067] [ 3099.704396][T21067] dump_stack_lvl+0x188/0x24e [ 3099.709145][T21067] ? show_regs_print_info+0x12/0x12 [ 3099.714396][T21067] ? load_image+0x410/0x410 [ 3099.718951][T21067] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3099.724990][T21067] ? __lock_acquire+0x7ea0/0x7ea0 [ 3099.730069][T21067] ? lock_chain_count+0x20/0x20 [ 3099.734990][T21067] should_fail_ex+0x390/0x4c0 [ 3099.739721][T21067] should_failslab+0x5/0x20 [ 3099.744253][T21067] slab_pre_alloc_hook+0x59/0x300 [ 3099.749317][T21067] kmem_cache_alloc+0x56/0x2f0 [ 3099.754124][T21067] ? __build_skb+0x27/0x3b0 [ 3099.758674][T21067] __build_skb+0x27/0x3b0 [ 3099.763053][T21067] ? build_skb+0x14/0x230 [ 3099.767439][T21067] build_skb+0x1e/0x230 [ 3099.771639][T21067] bpf_prog_test_run_skb+0x38d/0x18e0 [ 3099.777061][T21067] ? __fget_files+0x28/0x460 [ 3099.781699][T21067] ? __fget_files+0x3fc/0x460 [ 3099.786427][T21067] ? cpu_online+0xa0/0xa0 [ 3099.790800][T21067] bpf_prog_test_run+0x31c/0x390 [ 3099.795786][T21067] __sys_bpf+0x62b/0x780 [ 3099.800070][T21067] ? bpf_link_show_fdinfo+0x380/0x380 [ 3099.805499][T21067] ? lock_chain_count+0x20/0x20 [ 3099.810421][T21067] __x64_sys_bpf+0x78/0x90 [ 3099.814872][T21067] do_syscall_64+0x4c/0xa0 [ 3099.819316][T21067] ? clear_bhb_loop+0x60/0xb0 [ 3099.824018][T21067] ? clear_bhb_loop+0x60/0xb0 [ 3099.828741][T21067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3099.834668][T21067] RIP: 0033:0x7fbe8d59e199 [ 3099.839115][T21067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3099.858754][T21067] RSP: 002b:00007fbe8e491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3099.867283][T21067] RAX: ffffffffffffffda RBX: 00007fbe8d825fa0 RCX: 00007fbe8d59e199 [ 3099.875305][T21067] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 3099.883303][T21067] RBP: 00007fbe8e491090 R08: 0000000000000000 R09: 0000000000000000 [ 3099.891413][T21067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3099.899430][T21067] R13: 00007fbe8d826038 R14: 00007fbe8d825fa0 R15: 00007ffff0b49608 [ 3099.907461][T21067] [ 3100.617303][T21086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16100'. [ 3100.804216][T21090] FAULT_INJECTION: forcing a failure. [ 3100.804216][T21090] name failslab, interval 1, probability 0, space 0, times 0 [ 3100.822854][T21090] CPU: 0 PID: 21090 Comm: syz.2.16101 Not tainted syzkaller #0 [ 3100.830472][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3100.840572][T21090] Call Trace: [ 3100.843910][T21090] [ 3100.846886][T21090] dump_stack_lvl+0x188/0x24e [ 3100.851646][T21090] ? show_regs_print_info+0x12/0x12 [ 3100.856908][T21090] ? load_image+0x410/0x410 [ 3100.861462][T21090] ? __lock_acquire+0x7ea0/0x7ea0 [ 3100.866559][T21090] should_fail_ex+0x390/0x4c0 [ 3100.871322][T21090] should_failslab+0x5/0x20 [ 3100.875870][T21090] slab_pre_alloc_hook+0x59/0x300 [ 3100.880944][T21090] ? security_sk_alloc+0x47/0x130 [ 3100.886022][T21090] __kmem_cache_alloc_node+0x4f/0x270 [ 3100.891458][T21090] ? security_sk_alloc+0x47/0x130 [ 3100.896640][T21090] __kmalloc+0xa3/0x240 [ 3100.900941][T21090] ? sk_prot_alloc+0xe7/0x210 [ 3100.905677][T21090] security_sk_alloc+0x47/0x130 [ 3100.910609][T21090] sk_prot_alloc+0x101/0x210 [ 3100.915253][T21090] ? sk_alloc+0x20/0x330 [ 3100.919553][T21090] sk_alloc+0x36/0x330 [ 3100.923729][T21090] ? bpf_ctx_init+0x154/0x190 [ 3100.928464][T21090] bpf_prog_test_run_skb+0x36d/0x18e0 [ 3100.933984][T21090] ? __fget_files+0x28/0x460 [ 3100.938629][T21090] ? __fget_files+0x3fc/0x460 [ 3100.943366][T21090] ? cpu_online+0xa0/0xa0 [ 3100.947746][T21090] bpf_prog_test_run+0x31c/0x390 [ 3100.952740][T21090] __sys_bpf+0x62b/0x780 [ 3100.957044][T21090] ? bpf_link_show_fdinfo+0x380/0x380 [ 3100.962505][T21090] ? lock_chain_count+0x20/0x20 [ 3100.967401][T21090] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3100.973446][T21090] __x64_sys_bpf+0x78/0x90 [ 3100.977923][T21090] do_syscall_64+0x4c/0xa0 [ 3100.982388][T21090] ? clear_bhb_loop+0x60/0xb0 [ 3100.987118][T21090] ? clear_bhb_loop+0x60/0xb0 [ 3100.991858][T21090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3100.997841][T21090] RIP: 0033:0x7fb504f9e199 [ 3101.002291][T21090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3101.021940][T21090] RSP: 002b:00007fb505e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3101.030378][T21090] RAX: ffffffffffffffda RBX: 00007fb505226090 RCX: 00007fb504f9e199 [ 3101.038385][T21090] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3101.046516][T21090] RBP: 00007fb505e15090 R08: 0000000000000000 R09: 0000000000000000 [ 3101.054507][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3101.062528][T21090] R13: 00007fb505226128 R14: 00007fb505226090 R15: 00007fffc7164038 [ 3101.070548][T21090] [ 3101.278886][T21093] netlink: 'syz.1.16103': attribute type 21 has an invalid length. [ 3101.305482][T21093] netlink: 'syz.1.16103': attribute type 3 has an invalid length. [ 3101.332204][T21093] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16103'. [ 3101.771475][T21107] netlink: 'syz.0.16106': attribute type 16 has an invalid length. [ 3101.779943][T21107] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16106'. [ 3102.068937][T21120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16111'. [ 3102.954119][T21138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16116'. [ 3104.386673][T21156] netlink: 'syz.1.16120': attribute type 21 has an invalid length. [ 3104.410558][T21156] netlink: 'syz.1.16120': attribute type 3 has an invalid length. [ 3104.418812][T21156] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16120'. [ 3104.736245][T21160] netlink: 'syz.1.16123': attribute type 16 has an invalid length. [ 3104.745116][T21160] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16123'. [ 3104.919825][T21167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16125'. [ 3105.002138][T21165] FAULT_INJECTION: forcing a failure. [ 3105.002138][T21165] name failslab, interval 1, probability 0, space 0, times 0 [ 3105.039181][T21165] CPU: 1 PID: 21165 Comm: syz.0.16124 Not tainted syzkaller #0 [ 3105.046834][T21165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3105.056981][T21165] Call Trace: [ 3105.060303][T21165] [ 3105.063268][T21165] dump_stack_lvl+0x188/0x24e [ 3105.068000][T21165] ? show_regs_print_info+0x12/0x12 [ 3105.073247][T21165] ? load_image+0x410/0x410 [ 3105.077802][T21165] ? __might_sleep+0xd0/0xd0 [ 3105.082434][T21165] ? __lock_acquire+0x7ea0/0x7ea0 [ 3105.087516][T21165] should_fail_ex+0x390/0x4c0 [ 3105.092258][T21165] should_failslab+0x5/0x20 [ 3105.096810][T21165] slab_pre_alloc_hook+0x59/0x300 [ 3105.101884][T21165] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 3105.107669][T21165] __kmem_cache_alloc_node+0x4f/0x270 [ 3105.113183][T21165] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 3105.118962][T21165] __kmalloc+0xa3/0x240 [ 3105.123169][T21165] tomoyo_realpath_from_path+0xe2/0x5c0 [ 3105.128779][T21165] ? tomoyo_domain+0xd2/0x120 [ 3105.133517][T21165] ? tomoyo_path_number_perm+0x205/0x650 [ 3105.139206][T21165] tomoyo_path_number_perm+0x22f/0x650 [ 3105.144765][T21165] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3105.150307][T21165] ? __fget_files+0x28/0x460 [ 3105.154943][T21165] security_file_ioctl+0x6c/0xa0 [ 3105.159913][T21165] __se_sys_ioctl+0x48/0x170 [ 3105.164541][T21165] do_syscall_64+0x4c/0xa0 [ 3105.168991][T21165] ? clear_bhb_loop+0x60/0xb0 [ 3105.173698][T21165] ? clear_bhb_loop+0x60/0xb0 [ 3105.178431][T21165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3105.184350][T21165] RIP: 0033:0x7f950579e199 [ 3105.188792][T21165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3105.208430][T21165] RSP: 002b:00007f9506595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3105.216881][T21165] RAX: ffffffffffffffda RBX: 00007f9505a25fa0 RCX: 00007f950579e199 [ 3105.224882][T21165] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000008 [ 3105.232875][T21165] RBP: 00007f9506595090 R08: 0000000000000000 R09: 0000000000000000 [ 3105.240867][T21165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3105.248859][T21165] R13: 00007f9505a26038 R14: 00007f9505a25fa0 R15: 00007ffd80565658 [ 3105.256869][T21165] [ 3105.518146][T21181] FAULT_INJECTION: forcing a failure. [ 3105.518146][T21181] name failslab, interval 1, probability 0, space 0, times 0 [ 3105.557091][T21181] CPU: 1 PID: 21181 Comm: syz.2.16131 Not tainted syzkaller #0 [ 3105.564779][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3105.574888][T21181] Call Trace: [ 3105.578221][T21181] [ 3105.581207][T21181] dump_stack_lvl+0x188/0x24e [ 3105.585950][T21181] ? show_regs_print_info+0x12/0x12 [ 3105.591250][T21181] ? load_image+0x410/0x410 [ 3105.595804][T21181] ? __might_sleep+0xd0/0xd0 [ 3105.600441][T21181] ? __lock_acquire+0x7ea0/0x7ea0 [ 3105.605528][T21181] should_fail_ex+0x390/0x4c0 [ 3105.610276][T21181] should_failslab+0x5/0x20 [ 3105.614820][T21181] slab_pre_alloc_hook+0x59/0x300 [ 3105.619894][T21181] ? __lock_acquire+0x7ea0/0x7ea0 [ 3105.624979][T21181] kmem_cache_alloc_lru+0x49/0x2e0 [ 3105.630155][T21181] ? __d_alloc+0x2e/0x6e0 [ 3105.634537][T21181] __d_alloc+0x2e/0x6e0 [ 3105.638732][T21181] ? d_alloc_pseudo+0xe/0x70 [ 3105.643415][T21181] d_alloc_pseudo+0x19/0x70 [ 3105.647974][T21181] alloc_file_pseudo+0xe0/0x200 [ 3105.652971][T21181] ? alloc_empty_file_noaccount+0x80/0x80 [ 3105.653702][T21165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3105.658724][T21181] ? alloc_perf_context+0x230/0x2d0 [ 3105.658764][T21181] anon_inode_getfile+0xc1/0x1a0 [ 3105.675796][T21181] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 3105.681528][T21181] ? __fget_files+0x3fc/0x460 [ 3105.686307][T21181] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3105.692013][T21181] ? lockdep_hardirqs_on+0x94/0x140 [ 3105.697269][T21181] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 3105.702957][T21181] do_syscall_64+0x4c/0xa0 [ 3105.707430][T21181] ? clear_bhb_loop+0x60/0xb0 [ 3105.712157][T21181] ? clear_bhb_loop+0x60/0xb0 [ 3105.716897][T21181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3105.722850][T21181] RIP: 0033:0x7fb504f9e199 [ 3105.727311][T21181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3105.747098][T21181] RSP: 002b:00007fb505e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3105.755573][T21181] RAX: ffffffffffffffda RBX: 00007fb505225fa0 RCX: 00007fb504f9e199 [ 3105.763597][T21181] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000540 [ 3105.771615][T21181] RBP: 00007fb505e36090 R08: 0000000000000000 R09: 0000000000000000 [ 3105.779635][T21181] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 3105.787653][T21181] R13: 00007fb505226038 R14: 00007fb505225fa0 R15: 00007fffc7164038 [ 3105.795693][T21181] [ 3106.005271][T21193] netlink: 'syz.3.16134': attribute type 21 has an invalid length. [ 3106.030740][T21193] netlink: 'syz.3.16134': attribute type 3 has an invalid length. [ 3106.038995][T21193] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16134'. [ 3106.208518][T21202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16137'. [ 3106.381175][T21203] netlink: 'syz.2.16138': attribute type 16 has an invalid length. [ 3106.389810][T21203] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16138'. [ 3107.665701][T21221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16143'. [ 3107.791765][T21221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16143'. [ 3107.978318][T21232] FAULT_INJECTION: forcing a failure. [ 3107.978318][T21232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3108.010219][T21232] CPU: 1 PID: 21232 Comm: syz.2.16145 Not tainted syzkaller #0 [ 3108.017878][T21232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3108.027994][T21232] Call Trace: [ 3108.031319][T21232] [ 3108.034293][T21232] dump_stack_lvl+0x188/0x24e [ 3108.039034][T21232] ? show_regs_print_info+0x12/0x12 [ 3108.044293][T21232] ? load_image+0x410/0x410 [ 3108.048851][T21232] ? __lock_acquire+0x7ea0/0x7ea0 [ 3108.053949][T21232] ? snprintf+0xe5/0x140 [ 3108.058253][T21232] should_fail_ex+0x390/0x4c0 [ 3108.062999][T21232] _copy_to_user+0x2c/0x130 [ 3108.067561][T21232] simple_read_from_buffer+0xe3/0x150 [ 3108.072999][T21232] proc_fail_nth_read+0x1a6/0x220 [ 3108.078088][T21232] ? proc_fault_inject_write+0x310/0x310 [ 3108.083787][T21232] ? fsnotify_perm+0x248/0x550 [ 3108.088609][T21232] ? proc_fault_inject_write+0x310/0x310 [ 3108.094300][T21232] vfs_read+0x2db/0x960 [ 3108.098558][T21232] ? kernel_read+0x1e0/0x1e0 [ 3108.103224][T21232] ? __fget_files+0x28/0x460 [ 3108.107918][T21232] ? __fget_files+0x3fc/0x460 [ 3108.112669][T21232] ? __fdget_pos+0x2ae/0x360 [ 3108.117317][T21232] ? ksys_read+0x70/0x260 [ 3108.121709][T21232] ksys_read+0x14d/0x260 [ 3108.126020][T21232] ? vfs_write+0x9a0/0x9a0 [ 3108.130500][T21232] ? lockdep_hardirqs_on+0x94/0x140 [ 3108.135760][T21232] do_syscall_64+0x4c/0xa0 [ 3108.140227][T21232] ? clear_bhb_loop+0x60/0xb0 [ 3108.144959][T21232] ? clear_bhb_loop+0x60/0xb0 [ 3108.149949][T21232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3108.155898][T21232] RIP: 0033:0x7fb504f5e9ce [ 3108.160359][T21232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3108.180021][T21232] RSP: 002b:00007fb505e35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3108.188497][T21232] RAX: ffffffffffffffda RBX: 00007fb505e366c0 RCX: 00007fb504f5e9ce [ 3108.196519][T21232] RDX: 000000000000000f RSI: 00007fb505e360a0 RDI: 0000000000000004 [ 3108.204541][T21232] RBP: 00007fb505e36090 R08: 0000000000000000 R09: 0000000000000000 [ 3108.212559][T21232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3108.220585][T21232] R13: 00007fb505226038 R14: 00007fb505225fa0 R15: 00007fffc7164038 [ 3108.228625][T21232] [ 3108.972035][T21246] netlink: 'syz.0.16148': attribute type 21 has an invalid length. [ 3109.065450][T21246] netlink: 'syz.0.16148': attribute type 3 has an invalid length. [ 3109.090549][T21246] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16148'. [ 3109.166817][T21252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16150'. [ 3109.581043][T21260] netlink: 'syz.0.16151': attribute type 29 has an invalid length. [ 3109.612408][T21260] netlink: 'syz.0.16151': attribute type 29 has an invalid length. [ 3109.631441][T21260] netlink: 'syz.0.16151': attribute type 29 has an invalid length. [ 3110.030312][T21272] netlink: 'syz.1.16155': attribute type 16 has an invalid length. [ 3110.038368][T21272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16155'. [ 3110.215933][T21275] FAULT_INJECTION: forcing a failure. [ 3110.215933][T21275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3110.294001][T21275] CPU: 0 PID: 21275 Comm: syz.0.16157 Not tainted syzkaller #0 [ 3110.301642][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3110.311738][T21275] Call Trace: [ 3110.315075][T21275] [ 3110.318052][T21275] dump_stack_lvl+0x188/0x24e [ 3110.322796][T21275] ? show_regs_print_info+0x12/0x12 [ 3110.328044][T21275] ? load_image+0x410/0x410 [ 3110.332597][T21275] ? __lock_acquire+0x7ea0/0x7ea0 [ 3110.337684][T21275] should_fail_ex+0x390/0x4c0 [ 3110.342427][T21275] _copy_from_user+0x2c/0x170 [ 3110.347155][T21275] bpf_prog_test_run_skb+0x263/0x18e0 [ 3110.352617][T21275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3110.358828][T21275] ? lockdep_hardirqs_on+0x94/0x140 [ 3110.364077][T21275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3110.370285][T21275] ? cpu_online+0xa0/0xa0 [ 3110.374672][T21275] ? cpu_online+0xa0/0xa0 [ 3110.379089][T21275] bpf_prog_test_run+0x31c/0x390 [ 3110.384085][T21275] __sys_bpf+0x62b/0x780 [ 3110.388380][T21275] ? bpf_link_show_fdinfo+0x380/0x380 [ 3110.393847][T21275] ? lock_chain_count+0x20/0x20 [ 3110.398742][T21275] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3110.404794][T21275] __x64_sys_bpf+0x78/0x90 [ 3110.409262][T21275] do_syscall_64+0x4c/0xa0 [ 3110.413725][T21275] ? clear_bhb_loop+0x60/0xb0 [ 3110.418465][T21275] ? clear_bhb_loop+0x60/0xb0 [ 3110.423191][T21275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3110.429132][T21275] RIP: 0033:0x7f950579e199 [ 3110.433588][T21275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3110.453273][T21275] RSP: 002b:00007f9506595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3110.461736][T21275] RAX: ffffffffffffffda RBX: 00007f9505a25fa0 RCX: 00007f950579e199 [ 3110.469845][T21275] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 3110.477858][T21275] RBP: 00007f9506595090 R08: 0000000000000000 R09: 0000000000000000 [ 3110.485879][T21275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3110.493903][T21275] R13: 00007f9505a26038 R14: 00007f9505a25fa0 R15: 00007ffd80565658 [ 3110.501930][T21275] [ 3110.613463][T21284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16163'. [ 3111.450500][T21283] netlink: 'syz.1.16162': attribute type 21 has an invalid length. [ 3111.458612][T21283] netlink: 'syz.1.16162': attribute type 3 has an invalid length. [ 3111.470453][T21283] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16162'. [ 3114.419056][T21318] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16171'. [ 3114.779324][T21328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16175'. [ 3115.135686][T21334] netlink: 'syz.2.16177': attribute type 21 has an invalid length. [ 3115.150753][T21334] netlink: 'syz.2.16177': attribute type 3 has an invalid length. [ 3115.159033][T21334] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16177'. [ 3115.924317][T21362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16186'. [ 3116.598033][T21374] FAULT_INJECTION: forcing a failure. [ 3116.598033][T21374] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.613845][T21374] CPU: 0 PID: 21374 Comm: syz.3.16191 Not tainted syzkaller #0 [ 3116.621455][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3116.631643][T21374] Call Trace: [ 3116.635001][T21374] [ 3116.637969][T21374] dump_stack_lvl+0x188/0x24e [ 3116.642707][T21374] ? show_regs_print_info+0x12/0x12 [ 3116.647957][T21374] ? load_image+0x410/0x410 [ 3116.652508][T21374] ? __might_sleep+0xd0/0xd0 [ 3116.657144][T21374] ? __lock_acquire+0x7ea0/0x7ea0 [ 3116.662229][T21374] should_fail_ex+0x390/0x4c0 [ 3116.666970][T21374] should_failslab+0x5/0x20 [ 3116.671524][T21374] slab_pre_alloc_hook+0x59/0x300 [ 3116.676627][T21374] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 3116.682417][T21374] __kmem_cache_alloc_node+0x4f/0x270 [ 3116.687845][T21374] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 3116.693620][T21374] __kmalloc+0xa3/0x240 [ 3116.697831][T21374] tomoyo_realpath_from_path+0xe2/0x5c0 [ 3116.703438][T21374] ? tomoyo_domain+0xd2/0x120 [ 3116.708173][T21374] ? tomoyo_path_number_perm+0x205/0x650 [ 3116.713864][T21374] tomoyo_path_number_perm+0x22f/0x650 [ 3116.719382][T21374] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3116.724895][T21374] ? irqentry_enter+0x33/0x50 [ 3116.729673][T21374] ? __fget_files+0x28/0x460 [ 3116.734345][T21374] security_file_ioctl+0x6c/0xa0 [ 3116.739341][T21374] __se_sys_ioctl+0x48/0x170 [ 3116.743988][T21374] do_syscall_64+0x4c/0xa0 [ 3116.748452][T21374] ? clear_bhb_loop+0x60/0xb0 [ 3116.753184][T21374] ? clear_bhb_loop+0x60/0xb0 [ 3116.757921][T21374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3116.763869][T21374] RIP: 0033:0x7fb69d99e199 [ 3116.768326][T21374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3116.787985][T21374] RSP: 002b:00007fb69e792028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3116.796453][T21374] RAX: ffffffffffffffda RBX: 00007fb69dc25fa0 RCX: 00007fb69d99e199 [ 3116.804490][T21374] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000006 [ 3116.812513][T21374] RBP: 00007fb69e792090 R08: 0000000000000000 R09: 0000000000000000 [ 3116.820535][T21374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3116.828683][T21374] R13: 00007fb69dc26038 R14: 00007fb69dc25fa0 R15: 00007ffd32dc0b08 [ 3116.836728][T21374] [ 3116.910533][T21374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3117.096664][T21382] netlink: 'syz.2.16193': attribute type 13 has an invalid length. [ 3117.191606][T21382] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16193'. [ 3117.853691][T21390] netlink: 'syz.3.16194': attribute type 21 has an invalid length. [ 3117.867777][T21390] netlink: 'syz.3.16194': attribute type 3 has an invalid length. [ 3117.883955][T21390] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16194'. [ 3118.106220][T21396] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.16198'. [ 3118.115871][T21396] tc_dump_action: action bad kind [ 3118.315758][T21403] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16201'. [ 3118.487757][T21409] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16204'. [ 3118.523658][T21411] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16204'. [ 3119.177806][T21421] netlink: 'syz.3.16208': attribute type 21 has an invalid length. [ 3119.197979][T21421] netlink: 'syz.3.16208': attribute type 3 has an invalid length. [ 3119.218921][T21421] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16208'. [ 3119.398555][T21428] mac80211_hwsim hwsim82 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3119.484840][T21435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16214'. [ 3119.791801][T21443] netlink: 'syz.4.16217': attribute type 10 has an invalid length. [ 3120.004316][T21450] netlink: 'syz.3.16219': attribute type 2 has an invalid length. [ 3120.077189][T21450] netlink: 'syz.3.16219': attribute type 8 has an invalid length. [ 3120.220470][T21450] __nla_validate_parse: 1 callbacks suppressed [ 3120.220491][T21450] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16219'. [ 3121.396926][T21471] netlink: 'syz.4.16224': attribute type 21 has an invalid length. [ 3121.411800][T21471] netlink: 'syz.4.16224': attribute type 3 has an invalid length. [ 3121.440552][T21471] netlink: 144 bytes leftover after parsing attributes in process `syz.4.16224'. [ 3121.792063][T21479] FAULT_INJECTION: forcing a failure. [ 3121.792063][T21479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3121.832725][T21479] CPU: 0 PID: 21479 Comm: syz.4.16227 Not tainted syzkaller #0 [ 3121.840372][T21479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3121.850470][T21479] Call Trace: [ 3121.853794][T21479] [ 3121.856770][T21479] dump_stack_lvl+0x188/0x24e [ 3121.861509][T21479] ? show_regs_print_info+0x12/0x12 [ 3121.866803][T21479] ? load_image+0x410/0x410 [ 3121.871366][T21479] should_fail_ex+0x390/0x4c0 [ 3121.876120][T21479] _copy_from_user+0x2c/0x170 [ 3121.880846][T21479] __sys_bpf+0x2ea/0x780 [ 3121.885141][T21479] ? bpf_link_show_fdinfo+0x380/0x380 [ 3121.890584][T21479] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3121.896832][T21479] __x64_sys_bpf+0x78/0x90 [ 3121.901308][T21479] do_syscall_64+0x4c/0xa0 [ 3121.905776][T21479] ? clear_bhb_loop+0x60/0xb0 [ 3121.910510][T21479] ? clear_bhb_loop+0x60/0xb0 [ 3121.915235][T21479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3121.921171][T21479] RIP: 0033:0x7fbe8d59e199 [ 3121.925648][T21479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3121.945302][T21479] RSP: 002b:00007fbe8e491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3121.953773][T21479] RAX: ffffffffffffffda RBX: 00007fbe8d825fa0 RCX: 00007fbe8d59e199 [ 3121.961799][T21479] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 3121.969814][T21479] RBP: 00007fbe8e491090 R08: 0000000000000000 R09: 0000000000000000 [ 3121.977836][T21479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3121.985845][T21479] R13: 00007fbe8d826038 R14: 00007fbe8d825fa0 R15: 00007ffff0b49608 [ 3121.993875][T21479] [ 3122.059866][T21481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16228'. [ 3122.926515][T21484] netlink: 10 bytes leftover after parsing attributes in process `syz.3.16230'. [ 3123.809609][T21510] netlink: 'syz.1.16235': attribute type 3 has an invalid length. [ 3123.840034][T21510] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16235'. [ 3125.473479][T21495] netlink: 'syz.0.16231': attribute type 10 has an invalid length. [ 3125.481697][T21495] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16231'. [ 3125.676134][T21516] netlink: 'syz.3.16236': attribute type 10 has an invalid length. [ 3125.687562][T21516] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16236'. [ 3125.714789][T21516] FAULT_INJECTION: forcing a failure. [ 3125.714789][T21516] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.738673][T21516] CPU: 1 PID: 21516 Comm: syz.3.16236 Not tainted syzkaller #0 [ 3125.746317][T21516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3125.756488][T21516] Call Trace: [ 3125.759823][T21516] [ 3125.762796][T21516] dump_stack_lvl+0x188/0x24e [ 3125.767549][T21516] ? show_regs_print_info+0x12/0x12 [ 3125.772802][T21516] ? load_image+0x410/0x410 [ 3125.777355][T21516] ? __might_sleep+0xd0/0xd0 [ 3125.782073][T21516] ? __lock_acquire+0x7ea0/0x7ea0 [ 3125.787162][T21516] should_fail_ex+0x390/0x4c0 [ 3125.791905][T21516] should_failslab+0x5/0x20 [ 3125.796452][T21516] slab_pre_alloc_hook+0x59/0x300 [ 3125.801530][T21516] ? fib_nl2rule+0x330/0x1bb0 [ 3125.806351][T21516] __kmem_cache_alloc_node+0x4f/0x270 [ 3125.811784][T21516] ? fib_nl2rule+0x330/0x1bb0 [ 3125.816517][T21516] __kmalloc+0xa3/0x240 [ 3125.820756][T21516] fib_nl2rule+0x330/0x1bb0 [ 3125.825332][T21516] ? __lock_acquire+0x7ea0/0x7ea0 [ 3125.830461][T21516] ? finish_task_switch+0x262/0x8e0 [ 3125.836244][T21516] ? lockdep_hardirqs_on+0x94/0x140 [ 3125.841606][T21516] ? fib_nl_newrule+0x1e40/0x1e40 [ 3125.846697][T21516] ? __nla_parse+0x3c/0x50 [ 3125.851165][T21516] fib_nl_newrule+0x34f/0x1e40 [ 3125.855990][T21516] ? __mutex_lock+0x7ec/0xae0 [ 3125.860706][T21516] ? __lock_acquire+0x7ea0/0x7ea0 [ 3125.865795][T21516] ? fib_rules_seq_read+0xf0/0xf0 [ 3125.870876][T21516] ? do_raw_spin_unlock+0x11d/0x230 [ 3125.876160][T21516] ? fib_rules_seq_read+0xf0/0xf0 [ 3125.881278][T21516] rtnetlink_rcv_msg+0x863/0xfb0 [ 3125.886277][T21516] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 3125.891478][T21516] ? rtnetlink_bind+0x80/0x80 [ 3125.896202][T21516] ? __local_bh_enable_ip+0x136/0x1c0 [ 3125.901624][T21516] ? lockdep_hardirqs_on+0x94/0x140 [ 3125.906893][T21516] ? __local_bh_enable_ip+0x136/0x1c0 [ 3125.912318][T21516] ? _local_bh_enable+0xa0/0xa0 [ 3125.917227][T21516] ? __dev_queue_xmit+0x281/0x3810 [ 3125.922388][T21516] ? __dev_queue_xmit+0x281/0x3810 [ 3125.927528][T21516] ? __dev_queue_xmit+0x1d84/0x3810 [ 3125.932753][T21516] ? __dev_queue_xmit+0x281/0x3810 [ 3125.937893][T21516] ? ref_tracker_free+0x682/0x830 [ 3125.942961][T21516] ? refcount_inc+0x70/0x70 [ 3125.947525][T21516] ? memcpy+0x3c/0x60 [ 3125.951598][T21516] ? __copy_skb_header+0x3ba/0x4f0 [ 3125.956763][T21516] ? __skb_clone+0x446/0x6c0 [ 3125.961432][T21516] netlink_rcv_skb+0x1ef/0x440 [ 3125.966248][T21516] ? rtnetlink_bind+0x80/0x80 [ 3125.970974][T21516] ? netlink_ack+0x1160/0x1160 [ 3125.975826][T21516] ? netlink_deliver_tap+0x2e/0x1b0 [ 3125.981083][T21516] netlink_unicast+0x7ad/0x920 [ 3125.985912][T21516] netlink_sendmsg+0x8ad/0xbd0 [ 3125.990732][T21516] ? netlink_getsockopt+0x550/0x550 [ 3125.995986][T21516] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3126.001592][T21516] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3126.006926][T21516] ? security_socket_sendmsg+0x7c/0xa0 [ 3126.012446][T21516] ? netlink_getsockopt+0x550/0x550 [ 3126.017699][T21516] ____sys_sendmsg+0x5ed/0x9a0 [ 3126.022551][T21516] ? __sys_sendmsg_sock+0x30/0x30 [ 3126.027626][T21516] ? __import_iovec+0x306/0x510 [ 3126.032543][T21516] ? import_iovec+0x6f/0xa0 [ 3126.037112][T21516] ___sys_sendmsg+0x2a2/0x360 [ 3126.041855][T21516] ? __sys_sendmsg+0x2a0/0x2a0 [ 3126.046672][T21516] ? __lock_acquire+0x7ea0/0x7ea0 [ 3126.051779][T21516] __se_sys_sendmsg+0x1c3/0x2b0 [ 3126.056694][T21516] ? __x64_sys_sendmsg+0x80/0x80 [ 3126.061691][T21516] ? lockdep_hardirqs_on+0x94/0x140 [ 3126.066916][T21516] do_syscall_64+0x4c/0xa0 [ 3126.071351][T21516] ? clear_bhb_loop+0x60/0xb0 [ 3126.076046][T21516] ? clear_bhb_loop+0x60/0xb0 [ 3126.080755][T21516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3126.086722][T21516] RIP: 0033:0x7fb69d99e199 [ 3126.091173][T21516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3126.110812][T21516] RSP: 002b:00007fb69e792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3126.119254][T21516] RAX: ffffffffffffffda RBX: 00007fb69dc25fa0 RCX: 00007fb69d99e199 [ 3126.127240][T21516] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 3126.135234][T21516] RBP: 00007fb69e792090 R08: 0000000000000000 R09: 0000000000000000 [ 3126.143230][T21516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3126.151238][T21516] R13: 00007fb69dc26038 R14: 00007fb69dc25fa0 R15: 00007ffd32dc0b08 [ 3126.159258][T21516] [ 3126.210282][T21524] netlink: 'syz.1.16238': attribute type 21 has an invalid length. [ 3126.231747][T21524] netlink: 'syz.1.16238': attribute type 3 has an invalid length. [ 3126.250458][T21524] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16238'. [ 3126.436819][T21533] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16241'. [ 3128.060231][T21551] device syzkaller0 entered promiscuous mode [ 3128.108363][T21558] netlink: 'syz.4.16249': attribute type 2 has an invalid length. [ 3128.123783][T21558] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16249'. [ 3130.261711][T21563] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3130.292348][T21571] netlink: 'syz.4.16254': attribute type 21 has an invalid length. [ 3130.310206][T21571] netlink: 'syz.4.16254': attribute type 3 has an invalid length. [ 3130.318102][T21571] netlink: 144 bytes leftover after parsing attributes in process `syz.4.16254'. [ 3130.496533][T21578] FAULT_INJECTION: forcing a failure. [ 3130.496533][T21578] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.509631][T21578] CPU: 0 PID: 21578 Comm: syz.3.16257 Not tainted syzkaller #0 [ 3130.517229][T21578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3130.527516][T21578] Call Trace: [ 3130.530820][T21578] [ 3130.533775][T21578] dump_stack_lvl+0x188/0x24e [ 3130.538491][T21578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3130.544697][T21578] ? show_regs_print_info+0x12/0x12 [ 3130.549955][T21578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3130.556189][T21578] ? dump_stack+0x5/0x12 [ 3130.560473][T21578] should_fail_ex+0x390/0x4c0 [ 3130.565197][T21578] should_failslab+0x5/0x20 [ 3130.569731][T21578] slab_pre_alloc_hook+0x59/0x300 [ 3130.574787][T21578] ? ip6_pol_route+0x162/0x13b0 [ 3130.579668][T21578] kmem_cache_alloc+0x56/0x2f0 [ 3130.584461][T21578] ? dst_alloc+0x101/0x160 [ 3130.588912][T21578] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 3130.594581][T21578] dst_alloc+0x101/0x160 [ 3130.598865][T21578] ip6_pol_route+0xa3f/0x13b0 [ 3130.603570][T21578] ? ip6_pol_route+0x162/0x13b0 [ 3130.608454][T21578] ? trace_fib6_table_lookup+0x250/0x250 [ 3130.614130][T21578] fib6_rule_lookup+0x35c/0x5e0 [ 3130.619010][T21578] ? ip6_route_output_flags_noref+0x390/0x390 [ 3130.625107][T21578] ? fib6_lookup+0x2d0/0x2d0 [ 3130.629731][T21578] ? read_lock_is_recursive+0x10/0x10 [ 3130.635136][T21578] ? __ipv6_addr_type+0x234/0x2e0 [ 3130.640187][T21578] ? ip6_route_output_flags_noref+0x230/0x390 [ 3130.646287][T21578] ip6_route_output_flags+0xe3/0x330 [ 3130.651605][T21578] ? ip6_route_output_flags+0x27/0x330 [ 3130.657124][T21578] ip6_dst_lookup_tail+0x1a7/0x1600 [ 3130.662359][T21578] ? lock_chain_count+0x20/0x20 [ 3130.667249][T21578] ? ip6_dst_lookup+0x60/0x60 [ 3130.671954][T21578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3130.678137][T21578] ? lockdep_hardirqs_on+0x94/0x140 [ 3130.683383][T21578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3130.689662][T21578] ? security_sk_classify_flow+0x12/0x90 [ 3130.695339][T21578] ip6_dst_lookup_flow+0x44/0xd0 [ 3130.700311][T21578] rawv6_sendmsg+0xcb2/0x1710 [ 3130.705030][T21578] ? irqentry_enter+0x33/0x50 [ 3130.709788][T21578] ? lock_chain_count+0x20/0x20 [ 3130.714683][T21578] ? compat_rawv6_ioctl+0x60/0x60 [ 3130.719759][T21578] ? aa_sock_msg_perm+0x94/0x150 [ 3130.724743][T21578] ? inet_sendmsg+0x7a/0x2a0 [ 3130.729361][T21578] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3130.734676][T21578] ? inet_send_prepare+0x250/0x250 [ 3130.739818][T21578] ____sys_sendmsg+0x5ed/0x9a0 [ 3130.744638][T21578] ? __sys_sendmsg_sock+0x30/0x30 [ 3130.749691][T21578] ? __import_iovec+0x306/0x510 [ 3130.754586][T21578] ? import_iovec+0x6f/0xa0 [ 3130.759126][T21578] ___sys_sendmsg+0x2a2/0x360 [ 3130.763867][T21578] ? __sys_sendmsg+0x2a0/0x2a0 [ 3130.768705][T21578] __se_sys_sendmsg+0x1c3/0x2b0 [ 3130.773588][T21578] ? __x64_sys_sendmsg+0x80/0x80 [ 3130.778572][T21578] do_syscall_64+0x4c/0xa0 [ 3130.783021][T21578] ? clear_bhb_loop+0x60/0xb0 [ 3130.787730][T21578] ? clear_bhb_loop+0x60/0xb0 [ 3130.792436][T21578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3130.798363][T21578] RIP: 0033:0x7fb69d99e199 [ 3130.802820][T21578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3130.822475][T21578] RSP: 002b:00007fb69e792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3130.830919][T21578] RAX: ffffffffffffffda RBX: 00007fb69dc25fa0 RCX: 00007fb69d99e199 [ 3130.838917][T21578] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 000000000000000b [ 3130.846919][T21578] RBP: 00007fb69e792090 R08: 0000000000000000 R09: 0000000000000000 [ 3130.854916][T21578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3130.862910][T21578] R13: 00007fb69dc26038 R14: 00007fb69dc25fa0 R15: 00007ffd32dc0b08 [ 3130.870928][T21578] [ 3131.964450][ C0] [ 3131.964462][ C0] ================================ [ 3131.964468][ C0] WARNING: inconsistent lock state [ 3131.964504][ C0] syzkaller #0 Not tainted [ 3131.964515][ C0] -------------------------------- [ 3131.964521][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 3131.964548][ C0] syz.4.16264/21606 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 3131.964570][ C0] ffffffff8da840b8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x84/0xd60 [ 3131.964629][ C0] {INITIAL USE} state was registered at: [ 3131.964637][ C0] lock_acquire+0x1bc/0x4a0 [ 3131.964665][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 3131.964683][ C0] kernfs_rename_ns+0x55d/0x990 [ 3131.964706][ C0] sysfs_rename_link_ns+0x171/0x1b0 [ 3131.964808][ C0] device_rename+0x11c/0x1a0 [ 3131.964857][ C0] dev_change_name+0x37b/0x910 [ 3131.964878][ C0] do_setlink+0x967/0x29c0 [ 3131.964898][ C0] rtnl_newlink+0x16e4/0x1f90 [ 3131.964916][ C0] rtnetlink_rcv_msg+0x863/0xfb0 [ 3131.964936][ C0] netlink_rcv_skb+0x1ef/0x440 [ 3131.964962][ C0] netlink_unicast+0x7ad/0x920 [ 3131.964980][ C0] netlink_sendmsg+0x8ad/0xbd0 [ 3131.965000][ C0] __sys_sendto+0x497/0x650 [ 3131.965017][ C0] __x64_sys_sendto+0xda/0xf0 [ 3131.965034][ C0] do_syscall_64+0x4c/0xa0 [ 3131.965056][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3131.965081][ C0] irq event stamp: 3138 [ 3131.965088][ C0] hardirqs last enabled at (3137): [] pcpu_memcg_post_alloc_hook+0x26d/0x490 [ 3131.965123][ C0] hardirqs last disabled at (3138): [] exc_debug+0x6e/0x130 [ 3131.965152][ C0] softirqs last enabled at (2920): [] bpf_map_alloc_id+0x87/0xd0 [ 3131.965186][ C0] softirqs last disabled at (2918): [] bpf_map_alloc_id+0x21/0xd0 [ 3131.965219][ C0] [ 3131.965219][ C0] other info that might help us debug this: [ 3131.965225][ C0] Possible unsafe locking scenario: [ 3131.965225][ C0] [ 3131.965230][ C0] CPU0 [ 3131.965234][ C0] ---- [ 3131.965238][ C0] lock(kernfs_rename_lock); [ 3131.965251][ C0] [ 3131.965255][ C0] lock(kernfs_rename_lock); [ 3131.965267][ C0] [ 3131.965267][ C0] *** DEADLOCK *** [ 3131.965267][ C0] [ 3131.965271][ C0] no locks held by syz.4.16264/21606. [ 3131.965280][ C0] [ 3131.965280][ C0] stack backtrace: [ 3131.965286][ C0] CPU: 0 PID: 21606 Comm: syz.4.16264 Not tainted syzkaller #0 [ 3131.965305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3131.965316][ C0] Call Trace: [ 3131.965323][ C0] <#DB> [ 3131.965331][ C0] dump_stack_lvl+0x188/0x24e [ 3131.965362][ C0] ? show_regs_print_info+0x12/0x12 [ 3131.965395][ C0] ? print_usage_bug+0x43d/0x6a0 [ 3131.965425][ C0] ? verify_lock_unused+0x15/0x140 [ 3131.965458][ C0] lock_acquire+0x2df/0x4a0 [ 3131.965485][ C0] ? perf_trace_lock_acquire+0x342/0x3f0 [ 3131.965513][ C0] ? kernfs_path_from_node+0x84/0xd60 [ 3131.965540][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3131.965570][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 3131.965599][ C0] ? look_up_lock_class+0x75/0x140 [ 3131.965634][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 3131.965653][ C0] ? kernfs_path_from_node+0x84/0xd60 [ 3131.965677][ C0] ? _raw_spin_lock+0x40/0x40 [ 3131.965695][ C0] ? rcu_is_watching+0x11/0xa0 [ 3131.965725][ C0] ? lock_release+0xcf/0x920 [ 3131.965754][ C0] ? percpu_ref_tryget+0x15/0x180 [ 3131.965795][ C0] kernfs_path_from_node+0x84/0xd60 [ 3131.965819][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 3131.965855][ C0] ? kernfs_name+0x140/0x140 [ 3131.965879][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 3131.965908][ C0] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 3131.965936][ C0] get_mm_memcg_path+0xb9/0x360 [ 3131.965970][ C0] __mmap_lock_do_trace_acquire_returned+0xe7/0x390 [ 3131.966006][ C0] ? get_mm_memcg_path+0x360/0x360 [ 3131.966064][ C0] ? __init_rwsem+0x160/0x160 [ 3131.966112][ C0] stack_map_get_build_id_offset+0x699/0x9d0 [ 3131.966143][ C0] ? pcpu_freelist_pop+0x126/0x180 [ 3131.966171][ C0] ? __pcpu_freelist_pop+0x850/0x850 [ 3131.966199][ C0] ? __bpf_get_stackid+0x920/0x920 [ 3131.966233][ C0] __bpf_get_stackid+0x55d/0x920 [ 3131.966268][ C0] bpf_prog_12712c88fd19bd5b+0x21/0x25 [ 3131.966289][ C0] bpf_overflow_handler+0x50b/0x790 [ 3131.966318][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 3131.966341][ C0] ? perf_swevent_overflow+0x230/0x230 [ 3131.966373][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 3131.966408][ C0] __perf_event_overflow+0x457/0x630 [ 3131.966445][ C0] perf_swevent_event+0x315/0x570 [ 3131.966479][ C0] ? perf_tp_event+0xc10/0xc10 [ 3131.966523][ C0] perf_bp_event+0x311/0x3f0 [ 3131.966555][ C0] ? perf_trace_lock_acquire+0x342/0x3f0 [ 3131.966580][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 3131.966663][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3131.966701][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3131.966738][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 3131.966779][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 3131.966802][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3131.966830][ C0] notify_die+0x141/0x1a0 [ 3131.966855][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 3131.966896][ C0] notify_debug+0x20/0x30 [ 3131.966919][ C0] exc_debug+0xd9/0x130 [ 3131.966949][ C0] asm_exc_debug+0x1a/0x40 [ 3131.966969][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 3131.966995][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 3131.967012][ C0] RSP: 0018:ffffc9000ce17b40 EFLAGS: 00050202 [ 3131.967029][ C0] RAX: ffffffff8416c501 RBX: 0000000000000060 RCX: 000000000000005f [ 3131.967042][ C0] RDX: 0000000000000060 RSI: 0000200000000301 RDI: ffffc9000dcc3049 [ 3131.967055][ C0] RBP: 0000000000000000 R08: ffffc9000dcc30a7 R09: 1ffff92001b98614 [ 3131.967069][ C0] R10: dffffc0000000000 R11: fffff52001b98615 R12: 00007fffffffefa0 [ 3131.967083][ C0] R13: 0000000000000060 R14: ffffc9000dcc3048 R15: 0000200000000300 [ 3131.967105][ C0] ? _copy_from_user+0xa1/0x170 [ 3131.967137][ C0] [ 3131.967143][ C0] [ 3131.967148][ C0] _copy_from_user+0xf4/0x170 [ 3131.967174][ C0] copy_from_bpfptr+0x67/0x80 [ 3131.967203][ C0] bpf_prog_load+0xb40/0x1530 [ 3131.967245][ C0] ? map_freeze+0x390/0x390 [ 3131.967291][ C0] ? __might_fault+0xa6/0x120 [ 3131.967328][ C0] ? __might_fault+0xa6/0x120 [ 3131.967349][ C0] ? __might_fault+0xc2/0x120 [ 3131.967368][ C0] ? __might_fault+0xa6/0x120 [ 3131.967390][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 3131.967412][ C0] ? security_bpf+0x7a/0xa0 [ 3131.967435][ C0] __sys_bpf+0x5b8/0x780 [ 3131.967466][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 3131.967513][ C0] ? lock_chain_count+0x20/0x20 [ 3131.967552][ C0] __x64_sys_bpf+0x78/0x90 [ 3131.967580][ C0] do_syscall_64+0x4c/0xa0 [ 3131.967603][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3131.967626][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3131.967652][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3131.967674][ C0] RIP: 0033:0x7fbe8d59e199 [ 3131.967690][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3131.967707][ C0] RSP: 002b:00007fbe8e491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3131.967726][ C0] RAX: ffffffffffffffda RBX: 00007fbe8d825fa0 RCX: 00007fbe8d59e199 [ 3131.967741][ C0] RDX: 0000000000000090 RSI: 0000200000000240 RDI: 0000000000000005 [ 3131.967754][ C0] RBP: 00007fbe8d635888 R08: 0000000000000000 R09: 0000000000000000 [ 3131.967774][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3131.967785][ C0] R13: 00007fbe8d826038 R14: 00007fbe8d825fa0 R15: 00007ffff0b49608 [ 3131.967818][ C0] [ 3132.839314][T21613] netlink: 'syz.3.16268': attribute type 21 has an invalid length. [ 3132.858913][T21613] netlink: 'syz.3.16268': attribute type 3 has an invalid length. [ 3132.868642][T21613] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16268'. [ 3140.362749][T16505] Bluetooth: hci0: command 0x0406 tx timeout