last executing test programs: 4.847856351s ago: executing program 3 (id=3932): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df", 0x1}], 0x1, 0x0, 0xf5ff}, 0x0) 4.070618668s ago: executing program 2 (id=3934): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0x6}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES8=r3], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd674b492) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.928727092s ago: executing program 3 (id=3936): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180031000000000000000000000000009500000000000000345a6d9e3fcf08c763a3f8fc67cae7756f9550bef5cc335e1b55db5f4a694e90fdbbd309f49658ebc584ac61956c7549b104723c6d6725d439d935aa022126344001ae5ffa616b7202d47500fb6c01732b9b000000000000000000d5ea656e32eb5fbb0daf497ff85fef446388f1a7305cf56d89c71374b2b0dfe7411159423217108e143d7a4f22d0c64cfe0f2ac62eff7b9223f6972e8ff8485de0b9d7140983c88f110f25ddb8846f4ccbeb859f26eb"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000007111b500000000008510000002000000850000002a000000950022868b3f0000000000009500a505b2000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.928268442s ago: executing program 1 (id=3937): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0xa05, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x25, 0x4}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014ef030000120800040043160000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x78, &(0x7f0000000040)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r2, 0xb702, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0xfdef) 3.795673154s ago: executing program 2 (id=3938): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r0, 0x6, 0x18}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x104000, 0x10000, 0x0, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180d000000000000000000000000000085000010ae00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000100)='./file0\x00') sendmsg$inet(r9, &(0x7f0000002540)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="1b9ec027595aac724be682955770", 0xe}, {&(0x7f0000002380)="32b133b4e8eb815b2a2ee302117537601193e2dcc1db4b8c8fc31509001cd501c75b4b80b907e6759115065ed5d08e877c37dcad80aa6ca2df26fbc5c4edfcb7a71ae08737332f331714d6bfb280a5b430c35438fb94b8dd2109759b", 0x5c}, {&(0x7f0000002400)="de14c4dbb220c4939733aacae7f37004ee27a4ef436fb0ae7e59778dbc9cfeecfbef8dd57ba6b1e4d4285991ab891333e495c9379fbbb606b9459a072736d5aec6c88d76a55efbac91603b0df7d5d8f7fc3138931947705f986fdaa13dd8b9be228816fc6a21989bcd172cacb5847e2a0b6c5371708db8c5d91189e52bfc53a9d7e95f388b35f73de282b3efb620a9f2ba8903c67199ad19", 0x98}], 0x4, &(0x7f0000002500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd3}}], 0x18}, 0x20040045) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.681780457s ago: executing program 3 (id=3939): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x28, 0x1, 0x0, 0xbf, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x18000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=r0, 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5r0, 0x34, 0x1, 0xa6, &(0x7f00000010c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001100)=[0x0], &(0x7f0000001140)=[0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000002140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={@cgroup=r1, 0xb, 0x0, 0x50, &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r5, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x24, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x20, 0x3ebda02f, 0x6, 0xfffffffa, 0x64001, 0xffffffffffffffff, 0x8, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x2000) 3.128487269s ago: executing program 2 (id=3942): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 2.742233288s ago: executing program 1 (id=3944): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x22820000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffbd, @rand_addr=0x64010101}, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000840)="9f5c69622235016455c741ae93d87c77e1a8bab95108ab505972f1726fe58d7f0e60d343c99884770f9ac59d5355b2a887a017f8588c9127f024c96df746e937316e1a492f1f3c2f24b92f13b94142a2ba699ff9"}, {&(0x7f0000000000)="27a33198ca1d86ab7f8814b68ecbe9860dd64978f8e305f579495e75c1939d540215b0", 0xfff4}]}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) syz_clone(0x64000080, &(0x7f0000000140)="724e13fe2780abacc7c8779e637971fee47c200dc87e3aeb9fd59a48fa1ffb66c6ad02c5c60b0b4e26", 0x29, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="cb8c82bc3364605737a196e4d918d138d60e376fc963c8af6e1bd222bdb7de060331c065638c4b3517430662f157586ab3dcc2ec14efe4e25b6807da4de742f81feb05de01c19aaf3f7294f54c4d730aba040ddf091a7d42338489e82f652ae3f121f96314c7df987e1160e7483468c87801f88f5d38827f517b2483cfd33a5be510022f6358e76e1818089d014f95bd898c2b7e438d63935dd0849deec1e3da5e0e62f31857c8012abdd9c4a24577abca85f3e72374bf9f0729a43ba54bc3661b38e09725da1595cabb2fd1b3dcdea3499333d0a27b2dca9679e5f2180db04f111a2cc21f618059e9808afb581a78440f630303fa0a849337") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x4}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x4, 0x86, 0x100, 0xda00, 0x20000, r5, 0xffffff01, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) 2.738383468s ago: executing program 2 (id=3946): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x28, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000bc0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f0", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000480060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000"], 0xcfa4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}, 0x40801) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)=@ax25={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)="e18308168f8955d54db782cfa9029ce7c2974fa8ef17c9a8ce2bf193323ead5dea404bfc9a0d0ede7b2761f097134f7eebe7cf948945d45593bd2fc878ba9cf0e3a9dc03933f0d188bcae1c8ed0a628090a7b6450e0d22ce8889c48fa74a2e2db0e120ccfc1c9fdb70aea1ab5031a6e53259509e196299320086b77dcba4c981c249dd3084232a75c747bc83965adab797d3c0282c03aef9a62030e9a794bd1133c1938db5e2863a29492f8b77ad41f59d1dbe319216049174448255903cfb90c669fc924e227287618766cf926fe4734018e0f1a366c81f5a3e861286", 0xdd}, {&(0x7f0000000540)="0be1b58a91c3d5bb6dbcee5ba2d7fea736c18cd4bf2f13f5e7223765d525f99b8647096c8b818565815bd3f208fe6e5e24293357520da475c00d", 0x3a}, {0x0}], 0x3, &(0x7f0000000c00)=[{0x38, 0x111, 0x7, "4cc212f9890cfa0350224962e72a951d2abe27c15b77360c03a25aa7a706a99000ce"}, {0x10, 0x88, 0x7}, {0x78, 0x115, 0x8a1, "c23f9542896364b6147eb113aa43776ebfd56c301e1c99bcfd7e96c9f94322d8013fd9fd916475c1671fefe5959c711520b08f666bb8335bcda16a4a8b79ed06ab4db12fa9cd2494617bcc1f7e7deac55519464cd95a03aad800"/104}, {0xe8, 0x108, 0xfffffff9, "918deb6e81ec59b6c72835dafb163b4c6abf119becf0b63d431e12df7fe6e1f6f0979bdc21eaa1a4875b2db3b65f522b5441d735d06f1be2d47d7d35ba6d21dfaaecafdfbbe2b3e75e1b92918726ec2cdbf9cb9fa2a4ff3d85ec80334182e620555ab2dcd4a3d2770016f22555fdeb7fe3ef0b14be292d702a072c17b8d23726e84a643df7e20f04bef904b70950f7bd13affe14fd4915403e78e75e418b58dcb5053318dac1db613b8c4cbccfee2b833be665399e809ef3ce16b0d7bdb7603319e726c2bf56ffe532663db71fc1581e42ef"}, {0x70, 0x6, 0x10, "5f5b9a06f68c3e7e900548889a2a2f3a282b80d450cae3f49568e0a72eb20fb7afd92105b03612748d46eaf840a2075d595fa6a7a4d8b781509bd73d2e83d02f806cc749c20e3db4b9e54d18453d673ac8665d016238bccd89d14bce248443"}], 0x218}, 0x1) setsockopt$sock_attach_bpf(r0, 0x6, 0x22, 0x0, 0x0) 2.600372441s ago: executing program 0 (id=3947): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0xbd, 0x0, 0x8, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x28022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x110583, 0x0, 0xfffffffc, 0x6, 0xa5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xf9, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x3, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x207, 0x701a0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18047, 0x9, 0x1, 0x8, 0x23, 0x2, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffff999}) recvmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)=""/122, 0x7a}], 0x6, &(0x7f0000000800)=""/185, 0xb9}, 0x40030022) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="940300008a00000034ffffffe00000008500000000000000950000fd4a000000b561b2872ba605fb6cf77c40a2bbebc84ce0cbeb086b459c3060ca54cb0efa1a7537acc913984f49a8"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x23) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.592275551s ago: executing program 2 (id=3948): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r0, 0x6, 0x18}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x104000, 0x10000, 0x0, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180d000000000000000000000000000085000010ae00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000100)='./file0\x00') sendmsg$inet(r1, &(0x7f0000002540)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000001340)="10b1a1ed5fda8d81690692b32525fc3d942ce923a2ef7f21785e5f3a9f2be4530ac7f0ade71aae06aa960cd64e7b5d4d2d418a5c37d5222527e9a724b1caf02c15609e2854f927e1a2976bf007acac7cf6137ebae2474e4f4666e4729d33fcbfff4deba78cfda8a917c18a8736771f2f1d2458e88a8bb5798cf91e3be5ef542332cb412d0967ad708d1d0db83318341f5dbfa56101c63e1817d7900f817afbe3083f19ffcc8fbcc5764a9b13f80d01dcd3966228c45a85236308524651884439ad894e01361bd2cabd31537031de995f03ae202e47300160edca372128ad3bfa9487a0b949554bc2bfbcae1f78a61f39196491f98ad3433b1c1862318bb5f939403a3d979d8d8ec39a9966d9b284ae737b14bd89c56b8ed970d5741a1a8d56ae058ceebf80311ecb347b2979ffe887a99db6720e23e0a4cf0cb19d268b18492fea41915a2dab896c56ed55a4ec521ea38d98af637f2611cb15c931b6b849df6f14504a4c3d30ea171f75eabdc4a8199e5bb2fc2e1aac997ee3669c076004ebf2ff91b2279cae6f1d2f4b058f16d4f741770c455432cf2784b86f7a09bb0a5b1ef6083d9dbe2b9b36893dc0581580c612ebac261f01937fff49967fb45641d7ebf74b83ced83d871f6515afc12cec9e9d1528781c21339fca60b9914ed4e7e5cf8e9b7b6f65cfd5909e86ce249a5635d40d937ee04355343cc13a82f05c3acd7b4fa1243c632816128befc0f5e571c29c136a157bebbf5bea06c1eb5dc72c0d3317071f0f33e41ad3b06bdb38ab51a9817c541707064b6ec17883805161579167b64667dbd035ff15ff60cd455a2ad45f3069679c778f28474bec157dfc785d2f552f850e3e0ca77ad1a77d57dbb586749bfe74ec3bbd5162757eb08ae8a8fb24654c5fe449c8b34415f03dea83be5219338aedeafdbfd49706d76fb75a07010ca116349a4e5ab0ca1b246082b66886513275c220e40d7ae19d6daf5d8c123fc660d753b21ca93d97c1d31db62b7571f50f4f330e598db71318845094b08110d06957558283cea32ce76e72c5670906428e33fd7d36a3e8ed672f964f9f963a3e1327934a70001aaa875d4e7afe5d16a112b1c9e996e84b7a1bdd35127e29ab7026616c4c96bd89191c59311d3c608c11e2373666403544089de78d03e5e74c3d091c0d615d520d2d7d27a3f8f88190abcc4740f1af13701c2d629259fb5464159a6d0105290653c3e0b2c5c801aaebd94413b84a7acce6175046c197e432648c008abdf51e5a8986dd9ff8af72705299dad85a83c4ed98bff6b216c803cced3c5ac4e51a96872c2b845c7b5b0979ab8fa4507ab3c05f25c6934dda19cb96d79ba27dc20050cf249957872b7305a5b09a785d056d5fb62821fe5ddb7ebb17687086c277d0bdc9aae65e1e146769a7c287ddafac8851ab535b9c62782ed0c227fd4accd1bca8d1da712a2888abcf66a925ea3a4694deefff64410711a4bcd6480eec967fa1261d07b190ca9e62ff1cc6c0989e7e8d7f3587ead2aea8060421301aac5da79b3516c5e38f6b0c285a1bbb59d087fd51b6918ece6800170033c6fddf4cf083a31ac626fc0bee5777cbbdf07780afe9ecc585f05984cc0f8cf40edd02e16322ec2f959f96822b7e6de88eb3e1e11892c4408c1c010a5ef05a0704d708e041b42ab9c4039720c4f870f3d72b1ea6c2615daabece78179ad977d367a800be295fb8c067daf76d10a4b6cf520a73991769febda23199180712131c01c916e7d8414f3512fb3d113b485e3c0d309bfb74ac758f9261b1bdced56e6e6bb3649e1149fae302756e80fce42f9657145a730decb5c922b277dfda8514bd0e2c0afc3eed633e1b87c1375fbd3d1a2ecb585e20a4d92fdd312035e05f4fe30fed3018ee20025c22626f594573100f0a63bf4ea9dadd3f1d032d1325bbacbf9459cf8063d16d51d13b152cb67b165e4a680f9115d91a8b664041d94101d5a0762d16d9ecfb7faa4f9e0db3b6e94bed801fc03917c96321749e3c7e102e645534cbbcfeee79ef164eb99a28ad57e9db97afa34f2033633e29e031f9b21df3c457edc58ba7c88b63fd82af2add62db21be40ec137774d984a67e2a3e2fa789e834df0afd570c885947290f3810b785836e9aa3ee415c063cced2f1f028034b2a2a498a5fe08f43fcbbbde50d382adfe719fb58b418c5095a08c909bb5a16b0c56ef2b7d7350d3d85edbc0aff0a4e8bb96ea9a56802ac4d19663c851e13dd7854829f511ad5f062a3dac38f3f4948c9f7a697cadfc47772aeaf7efed2d17343d23708ae8b1f6583af1a8f2e559bd18a1269b9440ac7f8b05c51357d1c3d5b37eca65855a511b700379317d00c78a300f26737c6b5587a7bb5323971bb5bbded6c1e9bcc1ee1b3ff79e6572da88b38897f108e9b43fb3f2f81a51d229a40ae8bb0d877fb94d3c44e296525ec20502ae9b0b5cf6d7575938d105357077b3a6a57e9ffc022503663a36e233d0156bc9d90179b15c0238f1c4d147548336e296abe895b777ae5a36c15ca4065f3b5e898f7235548f04dc03d3901cb34d480e6affd478f1aba8214d08571350037196010e503cfe18cce4134cbe0b686d512121e6a8c8384917ea952e16014a44dc067711a86841d9ac6c74b80f5048b805e14b8b735aa0a35dc28bf5a75241efefbb700099ae7917bbb78d52fa662926e09dab08f993f74b683f72a36cbe4126ddcda7b7666b7ffb6754aebe6dd68b44db16bc8860fe0974fb4d65ad69e17a292b62e6bccf8d0dde976f9bff31d7d136b536337f81dd9e00fff15699101bdba49d815560cd519e809116eed50b46aa6ff2d2126ca5fdecba85971f43edcaf610abe658557d809c0fa391a9984170c60bb118521f2c5e35814af9c7f329bce0f70e0c512465639ffc79b1906ab3faa715fa6d3dc5d4e101bd497154ca037847a5eb2e3c1d0bc887c2e31f6ee542cef603e66c1eaf919e3d9dfe4dbc98d1209c6bee5c997a1d9272673d2daaf8eb033059575c4b29c45d00f7d7b550a483cb2ea98b888f49fd03003bf4da13219633f2dda591168c5778d9f68b0c9b55a1c626c927957656afd43e5dcb92f45439d08693080ba53cff80509198c66ad8ec0a1f8f397fa35bf2ca6aa76132b4809861d1674642a713e03007e6909dc7c6e0dadac680624ee4a61d71dead6f8c6c6e2363ad786344d42b32e6e8e1bc86e25e4cc3bb378d021183297a48101d4ecaa7016211c657b52f27673d5dedced1a136b6f3a09464a0ea003537f9c10efcc00d7b8f0aab08e50c31fce35939b60673010659791b0d0bc8d131d7e90492ba25df48e8bf6981c3babd07daacd64959a5c7869f0b6fb045102952fa4fc6f0028dd035b3c34e7508821fd50a20c163fef7ace1526bb7d0ebbd6f28dc05c3eb88f0c1370876a7f68853c2eebea85d31d27a34e6476463b69f66c9459196da9e4949610a2377fa497c2f2ed82d463860b11a55842562a98f2d5d954169fcfe0d8e7a2934b2256084fb16a6a37db869ed386be2da51c112c64330c26957b3ae1de0b22d0a01bb543b7b3888ad58da0e2002f92aaf4a416b202aab3f9b2e5e4d906af4c8e9819ec1e405731f8c9e659575bab8ac212a9d84ad1474bc3535d4bd79ce037917fda8d6d7e422b79e3637fb27980cdbd9201c9bf079b26dc07d7460188b01c9ab764c4b2d69b1c6bdfc6d7013e697f0c5599495b1e7413b49078e4e7fe1ab169d925023b1cf616e6ed435399ee32c3ac12cb1df9fa96df5bfc183e251dea2f254075cd8e596c0ae70d6157718a59c7908ecf394e403942c4ab191c7cc1725392aea2dd072562104f6e38fd497372a7a0d7611d483c399b1914f5a73e369ac1d85ed7ccef4a8e1aaa64941a25ea2023557ee4dbdefcee829a6df62928d0ece9fd5a7f7522942aab99c5fd2c03973827853d32950da922b1cc6fb247cf2743cc9a132524d105d1a3b802cb724a86956fed868bb1e754ff84d7a340fa85a06531a8d8870d02bc104a4b41bd6627540aeee43de8e1b15bc8a30297cd3977783f6304f86a88fd0d494e544b95f30f70ae94e8d56add94d4efcdb31060c7acede8da952e71ffc4ae10ea87896e55d101128621a4e36c4c4abcf96a658a544266ee0a7c9cbd7cac4abeb5ad908fb39e8d4dfb94bcd1259e4ae68027659dab8314e74d561b84675589ec09c06e787eb2161eebbd83659ee15928f73ff36ba7fe71507502dc0b486dd15e36ecbc200ce72eb069d7ff1955dbab2180a76ac0d3d3b5f63394dde8634364391d6d85f3ca464f733b4e74a1badf1900be04b233a711972e49cabcbcd72ccf9b0f33a1d33853e0cc9c0ff13ebd17a6df26ba58d2ac4a322929bb10dc930198be69bbb32adecd0b5e92d7c4e9b37236c836dfc77b9e443276db8f00f32b9865e453799038af39a60aea58a80e1c8aa8c14300392f6ff9bebc3c2d02c2891deb05e8979a69b7235778aaed3e06bcd00cf9d33ee4d546f1b239a305fb3150eb8e7536dccde43ccdc334ac9c7d667d8347709bbd85d7913c4fa9e7b3f88084fc3966525fee3d9fe9ec93f4a3ef65df86ca9ca09a3852607dcdc888c4e385a1bad76f0ee5834705963135fc88cefa044304b0b93205fa4629d25dd5a94ccca7ae48b5098d09c2325d2c7c86c2631637a47da7fdc887a26f8bb9a206eaf051a8e04229502d3db07c1b843fce202bda0514656bb5232949116feda2a5fae6be2d08a5c0898a4e73f7966a557fa79febbb90ef1a59d7b1dc52afbaf55cec56390c489ce162fcddf47e367d5afb19c29500d4ba17b0c22bd808d77d73a5fd7dcddf225c4b7a46ccab7af68f2eaac2b8b3a9dd1d6fdd8cd795ee5788892082754c0879e1574515fb4bfc9afca11ee1eddde3acb43178cdaa075bb40d2639a40706648acd95c5e65378e701eae491bd1dd61459ec071962bfb6e98dd2c7282215ee2a8e96b4242a098e24618f53e92ca850d2eb77d1da746fd7896b853bb199454ba64f01ba5e4ac2b899d376cdf1927b716af295c8dd6e2bb44547457ad3a246cb6cc09086676c41055585aaa4608a4f8f3202093a694498e5afee6bf942aa2c7448d7729c57714435303f1f5779a4133b99d92a2668f34b2146ac8d9eea5c90032f20c90d88dfca7b23a123f643d08d111826495be6153085061664c724b8d699c2d070ca4b5196642be9a41982973c3be485018306d21878f6ac1fb8eaba9f4cb4419c862b91b6b662fab61b60e46c29be3e4217370d919a902f11d8311ed41976499007ab09065a4102bff77ee1b323900c4b1096ff16c272a5be2611937fa7f3005ed49eb4cc76da40057cb56728d2bf36876af209ff4f7fd79a3358e55ef83b6060aeaea758aba44da031d82fffc2ceedc09d78e42154f4e87c5e80ea12006ea458e827ccacca9e32db391dc2082652365d3020a0bfa182224e33694310f04a0a71171fec8b9d7be023688210a531b84d872bcf5c6c8a5e029cf500c571bbeae28e33b471b67e7f732914604e73c7a7acc7c7d50f813907dc442ae0342236f25a4f998824c6ada08a5633e84f93dbae283b25ee759aa7d3198b491469556a448a468a0d5546100f60029f5f8aa65bdca45cf55ddd6e09651df01307b71e79715a20a414150110d10e890df1f3b4d5ed306040cad6e10e31be7565f5fcaf9345ed58c55662ab90b801d468e9c947288511703c607649bbce63c926ff2ab3314ba08ecc80ee54fcea7b78b81445c242a5ef92d97c59aeb460b273d9d6e035644d9c838583cb5d0855", 0x1000}, {&(0x7f0000002340)="1b9ec027595aac724be682955770", 0xe}, {&(0x7f0000002380)="32b133b4e8eb815b2a2ee302117537601193e2dcc1db4b8c8fc31509001cd501c75b4b80b907e6759115065ed5d08e877c37dcad80aa6ca2df26fbc5c4edfcb7a71ae08737332f331714d6bfb280a5b430c35438fb94b8dd2109759b", 0x5c}, {&(0x7f0000002400)="de14c4dbb220c4939733aacae7f37004ee27a4ef436fb0ae7e59778dbc9cfeecfbef8dd57ba6b1e4d4285991ab891333e495c9379fbbb606b9459a072736d5aec6c88d76a55efbac91603b0df7d5d8f7fc3138931947705f986fdaa13dd8b9be228816fc6a21989bcd172cacb5847e2a0b6c5371708db8c5d91189e52bfc53a9d7e95f388b35f73de282b3efb620a9f2ba8903c67199ad19", 0x98}], 0x4, &(0x7f0000002500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd3}}], 0x18}, 0x20040045) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000001010000000008000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 2.319993158s ago: executing program 3 (id=3949): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x32, 0x43a1bd79, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @local, 0x7}, 0x80, 0x0}, 0x48084) socketpair(0x26, 0xa, 0x2f, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f43851b2171969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe", 0x96}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2df}, {&(0x7f0000000080)="dd184ca280143e7a697e21dc983c044c8b16cc9d091c033fb489855c8897fa222c90443e2bb5b1654c01640f39176c43b1e79be412748ca2179c04b386cf9e4535522e", 0x43}], 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000001a000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410e000000100000000140000000000000000000000070000000100000000000000"], 0x38}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x880) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1082, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r6, 0x0, 0x36) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1.892446167s ago: executing program 0 (id=3950): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) (fail_nth: 2) 1.892098577s ago: executing program 2 (id=3951): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.838881478s ago: executing program 3 (id=3952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123cffd30000000000000000000000ac1414cf14"], 0xffdd) 1.500751216s ago: executing program 1 (id=3953): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x180c, 0x0, 0x10000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e2978296329cdae664315115bd5dc53136264f16bc9e986a0e5dceec59de7e11990f8a302c2e6213818896e645050f5ce1b2ca9d22974a534e44de0f4f8bf31a58aa3459b182446beffb012fe653e8f25231ec1dbcae747a0382ef6fe4cfebe503e66db579db5d1efc0320590830f84ace48ffd45830fa5bdd8b2bc388e531228a82c04592f02bfe7a0fd0a1dd14ecb46820661cb5bc7c9b260f2f542438cec3eafe5f22ec92201d0c60d8f8cba729", 0xaf}], 0x1}, 0x81) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x113, 0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) 1.188080033s ago: executing program 0 (id=3954): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 994.536408ms ago: executing program 1 (id=3955): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000c30c00000000000095"], &(0x7f0000000180)='syzkaller\x00', 0xb}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x91, 0x7, &(0x7f00000000c0)=""/7, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x7, 0xfffffe01}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x1, 0x4, 0x1, 0x3}, {0x4, 0x5, 0x8, 0x8}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x6e, 0x9, &(0x7f0000000380)="18b18902534ca247ea776849cc6dac979bd3f5761a74a887f3dacfe9d753f423fbc7622061d93c7c609fc09a8f24d8e437d7dbd2563e8d80e6a031d9ab0144778f55771ad33f42cbf55234d496f51ff5bb7ba39130a12ccc5188f10be64084c87ce9b162c299569b192ddb6eb1ae", &(0x7f0000000400)=""/9, 0x7f, 0x0, 0x8e, 0x62, &(0x7f0000000440)="58409c1ad64668648ef2921b8a371d48356643943d09a282498b35c45c0846c2c89e4a4adadfd50d98107b919c6476afb6677961a380cd2bcf3a06ea120bc6bd59c38ddbed2f319103785269a886527db276f29eaad609df22c12746c0897ef373e84f1012b05336b7b48ad2811e9a09c478dd928ed27e077cd1d66ae42ecb7293c5488a8bac147aaa41bd182651", &(0x7f0000000500)="2ce69c66acf57309d703e5d87b3033958291bffa215e52c9cde26e1a0c8319831bf3276a480b2ec04b3393d20e16e19a44d881b6788a07e718a039f0c8b606bb57f9b6c7fc4a0d1f0120e4c632ebd060721f55dd747020a5414489087fc116e3e401", 0x7}, 0x50) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11202, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) 618.857596ms ago: executing program 0 (id=3956): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x28, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000bc0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f0", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000480060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000"], 0xcfa4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}, 0x40801) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)=@ax25={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)="e18308168f8955d54db782cfa9029ce7c2974fa8ef17c9a8ce2bf193323ead5dea404bfc9a0d0ede7b2761f097134f7eebe7cf948945d45593bd2fc878ba9cf0e3a9dc03933f0d188bcae1c8ed0a628090a7b6450e0d22ce8889c48fa74a2e2db0e120ccfc1c9fdb70aea1ab5031a6e53259509e196299320086b77dcba4c981c249dd3084232a75c747bc83965adab797d3c0282c03aef9a62030e9a794bd1133c1938db5e2863a29492f8b77ad41f59d1dbe319216049174448255903cfb90c669fc924e227287618766cf926fe4734018e0f1a366c81f5a3e861286", 0xdd}, {&(0x7f0000000540)="0be1b58a91c3d5bb6dbcee5ba2d7fea736c18cd4bf2f13f5e7223765d525f99b8647096c8b818565815bd3f208fe6e5e24293357520da475c00d", 0x3a}, {0x0}], 0x3, &(0x7f0000000c00)=[{0x10, 0x1af, 0x5}, {0x38, 0x111, 0x7, "4cc212f9890cfa0350224962e72a951d2abe27c15b77360c03a25aa7a706a99000ce"}, {0x10, 0x88, 0x7}, {0x78, 0x115, 0x8a1, "c23f9542896364b6147eb113aa43776ebfd56c301e1c99bcfd7e96c9f94322d8013fd9fd916475c1671fefe5959c711520b08f666bb8335bcda16a4a8b79ed06ab4db12fa9cd2494617bcc1f7e7deac55519464cd95a03aad800"/104}, {0xe8, 0x108, 0xfffffff9, "918deb6e81ec59b6c72835dafb163b4c6abf119becf0b63d431e12df7fe6e1f6f0979bdc21eaa1a4875b2db3b65f522b5441d735d06f1be2d47d7d35ba6d21dfaaecafdfbbe2b3e75e1b92918726ec2cdbf9cb9fa2a4ff3d85ec80334182e620555ab2dcd4a3d2770016f22555fdeb7fe3ef0b14be292d702a072c17b8d23726e84a643df7e20f04bef904b70950f7bd13affe14fd4915403e78e75e418b58dcb5053318dac1db613b8c4cbccfee2b833be665399e809ef3ce16b0d7bdb7603319e726c2bf56ffe532663db71fc1581e42ef"}, {0x70, 0x6, 0x10, "5f5b9a06f68c3e7e900548889a2a2f3a282b80d450cae3f49568e0a72eb20fb7afd92105b03612748d46eaf840a2075d595fa6a7a4d8b781509bd73d2e83d02f806cc749c20e3db4b9e54d18453d673ac8665d016238bccd89d14bce248443"}], 0x228}, 0x1) setsockopt$sock_attach_bpf(r0, 0x6, 0x22, 0x0, 0x0) 550.952097ms ago: executing program 1 (id=3957): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140) (fail_nth: 2) 202.372435ms ago: executing program 0 (id=3958): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140) 77.826858ms ago: executing program 0 (id=3959): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r1 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x56}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0xeb3, 0xf9, &(0x7f0000000780)=""/249, 0x41100, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x3, 0xf, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r0], &(0x7f0000000900)=[{0x1, 0x3, 0xf, 0x5}, {0x5, 0x5, 0xc, 0x9}, {0x0, 0x3, 0x9, 0x7}, {0x1, 0x5, 0x8, 0x5}, {0x3, 0x4, 0x3, 0xb}], 0x10, 0x7fffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000f, 0x4018, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x2e, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffa4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="79100000feeb78d40755f379", @ANYRES32=r0, @ANYBLOB="0000000001000000180000000000000000000000000000000f68f0ff1000000095000000000000009500000000000000346400011000000018480000f9ffffff00000000000000008500000094000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 0s ago: executing program 1 (id=3960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x32, 0x43a1bd79, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @local, 0x7}, 0x80, 0x0}, 0x48084) socketpair(0x26, 0xa, 0x2f, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f43851b2171969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe", 0x96}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2df}, {&(0x7f0000000080)="dd184ca280143e7a697e21dc983c044c8b16cc9d091c033fb489855c8897fa222c90443e2bb5b1654c01640f39176c43b1e79be412748ca2179c04b386cf9e4535522e", 0x43}], 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000001a000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410e000000100000000140000000000000000000000070000000100000000000000"], 0x38}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x880) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1082, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r6, 0x0, 0x36) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) kernel console output (not intermixed with test programs): alloc_fd+0x590/0x640 [ 694.977889][T14405] do_sys_openat2+0x134/0x1d0 [ 694.982624][T14405] ? do_sys_open+0xe0/0xe0 [ 694.987106][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 694.993153][T14405] ? lock_chain_count+0x20/0x20 [ 694.998053][T14405] __x64_sys_openat+0x139/0x160 [ 695.003035][T14405] do_syscall_64+0x55/0xb0 [ 695.007493][T14405] ? clear_bhb_loop+0x40/0x90 [ 695.012204][T14405] ? clear_bhb_loop+0x40/0x90 [ 695.016912][T14405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.022874][T14405] RIP: 0033:0x7f12be99de59 [ 695.027341][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.046991][T14405] RSP: 002b:00007f12bf7c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.055528][T14405] RAX: ffffffffffffffda RBX: 00007f12bec26090 RCX: 00007f12be99de59 [ 695.063539][T14405] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 695.071635][T14405] RBP: 00007f12bf7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 695.079648][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.087650][T14405] R13: 00007f12bec26128 R14: 00007f12bec26090 R15: 00007ffefc27c138 [ 695.095711][T14405] [ 695.180614][T14405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 695.229787][T14407] delete_channel: no stack [ 695.483831][T14417] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3021'. [ 696.015913][ T51] Bluetooth: hci0: unexpected event 0x1c length: 151 > 5 [ 696.278752][T14436] delete_channel: no stack [ 696.470512][T14442] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3032'. [ 697.496090][T14465] delete_channel: no stack [ 697.714859][T14475] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3044'. [ 697.939501][T14473] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3045'. [ 697.958312][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.986895][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.026448][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.056600][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.106141][T14473] batadv_slave_1: entered promiscuous mode [ 698.455866][T12288] Bluetooth: hci4: command 0x0406 tx timeout [ 698.576800][T14490] netlink: 'syz.3.3051': attribute type 64 has an invalid length. [ 698.736806][T14498] delete_channel: no stack [ 698.952664][T14503] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3057'. [ 699.508628][T14512] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3058'. [ 699.545882][T14512] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3058'. [ 699.598988][T14510] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3058'. [ 699.627618][T14512] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3058'. [ 699.724552][T14510] netlink: 'syz.2.3058': attribute type 10 has an invalid length. [ 699.759338][T14510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3058'. [ 699.792748][T14510] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 699.807060][T14510] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.866116][T14510] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 700.128835][T14528] delete_channel: no stack [ 700.962928][ T51] Bluetooth: hci0: unexpected event 0x1c length: 151 > 5 [ 702.960073][T14579] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3079'. [ 703.595957][ T51] Bluetooth: hci4: unexpected event 0x1c length: 151 > 5 [ 704.242445][T14609] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3093'. [ 704.320596][T14611] delete_channel: no stack [ 704.628384][T14617] delete_channel: no stack [ 704.697823][ T51] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 705.285911][T14629] netlink: 'syz.1.3100': attribute type 25 has an invalid length. [ 705.305874][T14629] netlink: 'syz.1.3100': attribute type 6 has an invalid length. [ 705.796534][T14641] delete_channel: no stack [ 706.073576][T14647] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3105'. [ 706.822873][T14666] netlink: 'syz.2.3111': attribute type 11 has an invalid length. [ 706.835791][T14666] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3111'. [ 706.876947][T14665] netlink: 'syz.2.3111': attribute type 11 has an invalid length. [ 706.885006][T14665] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3111'. [ 707.479987][T14677] delete_channel: no stack [ 709.686915][T14704] delete_channel: no stack [ 713.900173][T14711] netlink: 'syz.1.3128': attribute type 21 has an invalid length. [ 713.914990][T14711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3128'. [ 713.947928][T14711] netlink: 'syz.1.3128': attribute type 21 has an invalid length. [ 713.985944][T14711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3128'. [ 714.475139][T14733] delete_channel: no stack [ 715.575073][T14747] FAULT_INJECTION: forcing a failure. [ 715.575073][T14747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.595772][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 715.614636][T14747] CPU: 1 PID: 14747 Comm: syz.0.3142 Not tainted syzkaller #0 [ 715.622204][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.632309][T14747] Call Trace: [ 715.635630][T14747] [ 715.638600][T14747] dump_stack_lvl+0x18c/0x250 [ 715.643374][T14747] ? show_regs_print_info+0x20/0x20 [ 715.648718][T14747] ? load_image+0x420/0x420 [ 715.653573][T14747] ? __might_fault+0xaa/0x120 [ 715.658300][T14747] ? __lock_acquire+0x7d80/0x7d80 [ 715.663473][T14747] should_fail_ex+0x394/0x4c0 [ 715.668214][T14747] _copy_from_user+0x2f/0xe0 [ 715.672860][T14747] __sys_bpf+0x23e/0x890 [ 715.677169][T14747] ? bpf_link_show_fdinfo+0x390/0x390 [ 715.682621][T14747] ? lock_chain_count+0x20/0x20 [ 715.687532][T14747] __x64_sys_bpf+0x7c/0x90 [ 715.691997][T14747] do_syscall_64+0x55/0xb0 [ 715.696482][T14747] ? clear_bhb_loop+0x40/0x90 [ 715.701384][T14747] ? clear_bhb_loop+0x40/0x90 [ 715.706107][T14747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.712054][T14747] RIP: 0033:0x7f12be99de59 [ 715.716543][T14747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.736564][T14747] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.745223][T14747] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 715.753249][T14747] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 715.761270][T14747] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 715.769296][T14747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.777319][T14747] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 715.785442][T14747] [ 716.138954][T14756] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3146'. [ 716.351652][T14762] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3148'. [ 716.687238][T14768] netlink: 'syz.0.3151': attribute type 4 has an invalid length. [ 717.227543][T14786] FAULT_INJECTION: forcing a failure. [ 717.227543][T14786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.265685][T14786] CPU: 0 PID: 14786 Comm: syz.3.3157 Not tainted syzkaller #0 [ 717.273248][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.283362][T14786] Call Trace: [ 717.286696][T14786] [ 717.289696][T14786] dump_stack_lvl+0x18c/0x250 [ 717.294443][T14786] ? show_regs_print_info+0x20/0x20 [ 717.299699][T14786] ? load_image+0x420/0x420 [ 717.304266][T14786] ? __might_fault+0xaa/0x120 [ 717.308993][T14786] ? __lock_acquire+0x7d80/0x7d80 [ 717.314074][T14786] should_fail_ex+0x394/0x4c0 [ 717.318839][T14786] _copy_from_user+0x2f/0xe0 [ 717.323498][T14786] __sys_bpf+0x23e/0x890 [ 717.327801][T14786] ? bpf_link_show_fdinfo+0x390/0x390 [ 717.333248][T14786] ? lock_chain_count+0x20/0x20 [ 717.338168][T14786] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 717.344219][T14786] __x64_sys_bpf+0x7c/0x90 [ 717.348959][T14786] do_syscall_64+0x55/0xb0 [ 717.353434][T14786] ? clear_bhb_loop+0x40/0x90 [ 717.358167][T14786] ? clear_bhb_loop+0x40/0x90 [ 717.362897][T14786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.368857][T14786] RIP: 0033:0x7facb539de59 [ 717.373329][T14786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.393085][T14786] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.401648][T14786] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 717.409680][T14786] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000001 [ 717.417714][T14786] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 717.425745][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.433765][T14786] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 717.441847][T14786] [ 718.209075][T14815] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3169'. [ 718.654478][T14824] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3172'. [ 718.731894][T14828] netlink: 'syz.1.3173': attribute type 29 has an invalid length. [ 718.802418][T14828] netlink: 'syz.1.3173': attribute type 29 has an invalid length. [ 718.834752][T14826] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 718.865395][T14826] syzkaller1: linktype set to 773 [ 718.967983][T14830] netlink: 'syz.1.3173': attribute type 29 has an invalid length. [ 719.289557][T14834] vcan0: entered allmulticast mode [ 719.337324][T14838] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3178'. [ 719.356746][T14838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.388234][T14834] netlink: 'syz.0.3176': attribute type 10 has an invalid length. [ 719.463886][T14834] veth0_macvtap: left promiscuous mode [ 719.501150][T14838] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3178'. [ 720.642718][T14855] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3185'. [ 721.006938][T14864] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3188'. [ 721.034879][T14864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.152744][T14864] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3188'. [ 721.732542][T14880] netlink: 'syz.0.3193': attribute type 10 has an invalid length. [ 721.755833][T14880] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3193'. [ 721.799573][T14885] ƒ: renamed from tunl0 (while UP) [ 722.271299][T14888] netlink: 'syz.2.3195': attribute type 25 has an invalid length. [ 722.299431][T14888] netlink: 'syz.2.3195': attribute type 6 has an invalid length. [ 722.352718][T14896] FAULT_INJECTION: forcing a failure. [ 722.352718][T14896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.395872][T14896] CPU: 1 PID: 14896 Comm: syz.0.3198 Not tainted syzkaller #0 [ 722.403469][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.413702][T14896] Call Trace: [ 722.417255][T14896] [ 722.420265][T14896] dump_stack_lvl+0x18c/0x250 [ 722.425055][T14896] ? show_regs_print_info+0x20/0x20 [ 722.430357][T14896] ? load_image+0x420/0x420 [ 722.435016][T14896] ? __might_fault+0xaa/0x120 [ 722.439791][T14896] ? __lock_acquire+0x7d80/0x7d80 [ 722.444940][T14896] should_fail_ex+0x394/0x4c0 [ 722.449735][T14896] _copy_from_user+0x2f/0xe0 [ 722.454512][T14896] __sys_bpf+0x23e/0x890 [ 722.458877][T14896] ? bpf_link_show_fdinfo+0x390/0x390 [ 722.464399][T14896] ? lock_chain_count+0x20/0x20 [ 722.469373][T14896] __x64_sys_bpf+0x7c/0x90 [ 722.473975][T14896] do_syscall_64+0x55/0xb0 [ 722.478516][T14896] ? clear_bhb_loop+0x40/0x90 [ 722.483273][T14896] ? clear_bhb_loop+0x40/0x90 [ 722.488046][T14896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.494200][T14896] RIP: 0033:0x7f12be99de59 [ 722.498796][T14896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.518589][T14896] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 722.527169][T14896] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 722.535237][T14896] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 722.543310][T14896] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 722.551374][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.559433][T14896] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 722.567566][T14896] [ 722.875889][T14906] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3201'. [ 722.912685][T14906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.972738][T14907] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3201'. [ 723.514285][T14922] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3209'. [ 724.181808][T14931] vcan0: entered allmulticast mode [ 724.226065][T14931] netlink: 'syz.1.3212': attribute type 10 has an invalid length. [ 724.248455][T14931] veth0_macvtap: left promiscuous mode [ 724.551915][T14938] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3215'. [ 724.581935][T14938] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 724.730051][T14938] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3215'. [ 724.987385][T14954] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3220'. [ 725.757208][T14966] vcan0: entered allmulticast mode [ 725.814589][T14971] netlink: 'syz.2.3225': attribute type 10 has an invalid length. [ 725.853892][T14971] veth0_macvtap: left promiscuous mode [ 727.126558][T14998] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3237'. [ 728.620490][T15026] netlink: 'syz.0.3246': attribute type 25 has an invalid length. [ 728.644481][T15026] netlink: 'syz.0.3246': attribute type 6 has an invalid length. [ 729.064917][T15048] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3253'. [ 729.175679][T12288] Bluetooth: hci2: command 0x0406 tx timeout [ 732.480997][T15070] netlink: 'syz.0.3260': attribute type 25 has an invalid length. [ 732.501914][T15070] netlink: 'syz.0.3260': attribute type 6 has an invalid length. [ 732.728284][T15079] FAULT_INJECTION: forcing a failure. [ 732.728284][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.742092][T15079] CPU: 1 PID: 15079 Comm: syz.2.3264 Not tainted syzkaller #0 [ 732.749632][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.759742][T15079] Call Trace: [ 732.763061][T15079] [ 732.766037][T15079] dump_stack_lvl+0x18c/0x250 [ 732.770768][T15079] ? show_regs_print_info+0x20/0x20 [ 732.776009][T15079] ? load_image+0x420/0x420 [ 732.780551][T15079] ? __might_fault+0xaa/0x120 [ 732.785260][T15079] should_fail_ex+0x394/0x4c0 [ 732.789976][T15079] copyin+0x1a/0x90 [ 732.793820][T15079] _copy_from_iter+0x3ec/0x1290 [ 732.798723][T15079] ? copyout_mc+0x70/0x70 [ 732.803096][T15079] ? page_copy_sane+0x16a/0x270 [ 732.807990][T15079] copy_page_from_iter+0x7b/0x100 [ 732.813049][T15079] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 732.818906][T15079] unix_stream_sendmsg+0x562/0xbf0 [ 732.824075][T15079] ? unix_show_fdinfo+0x280/0x280 [ 732.829153][T15079] ? unix_show_fdinfo+0x280/0x280 [ 732.834222][T15079] ? unix_show_fdinfo+0x280/0x280 [ 732.839292][T15079] ____sys_sendmsg+0x61b/0x980 [ 732.844105][T15079] ? __sys_sendmsg_sock+0x30/0x30 [ 732.849267][T15079] ? __import_iovec+0x3fa/0x850 [ 732.854166][T15079] ? import_iovec+0x73/0xa0 [ 732.858712][T15079] ___sys_sendmsg+0x2a6/0x360 [ 732.863443][T15079] ? __sys_sendmsg+0x2b0/0x2b0 [ 732.868262][T15079] ? __lock_acquire+0x7d80/0x7d80 [ 732.873339][T15079] __se_sys_sendmsg+0x1d0/0x2c0 [ 732.878234][T15079] ? perf_trace_preemptirq_template+0x269/0x330 [ 732.884511][T15079] ? __x64_sys_sendmsg+0x80/0x80 [ 732.889499][T15079] ? lockdep_hardirqs_on+0x98/0x150 [ 732.894735][T15079] do_syscall_64+0x55/0xb0 [ 732.899191][T15079] ? clear_bhb_loop+0x40/0x90 [ 732.903929][T15079] ? clear_bhb_loop+0x40/0x90 [ 732.908634][T15079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.914566][T15079] RIP: 0033:0x7f92a599de59 [ 732.919021][T15079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.938654][T15079] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.947106][T15079] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 732.955116][T15079] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000007 [ 732.963120][T15079] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 732.971211][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.979214][T15079] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 732.987231][T15079] [ 733.131112][T15083] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3266'. [ 733.500197][T15091] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.523472][T15091] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3269'. [ 733.701115][T15095] FAULT_INJECTION: forcing a failure. [ 733.701115][T15095] name failslab, interval 1, probability 0, space 0, times 0 [ 733.724452][T15095] CPU: 0 PID: 15095 Comm: syz.0.3270 Not tainted syzkaller #0 [ 733.732110][T15095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.742238][T15095] Call Trace: [ 733.745560][T15095] [ 733.748544][T15095] dump_stack_lvl+0x18c/0x250 [ 733.753351][T15095] ? show_regs_print_info+0x20/0x20 [ 733.758635][T15095] ? load_image+0x420/0x420 [ 733.763201][T15095] ? __might_sleep+0xe0/0xe0 [ 733.767853][T15095] ? __lock_acquire+0x7d80/0x7d80 [ 733.772957][T15095] should_fail_ex+0x394/0x4c0 [ 733.777733][T15095] should_failslab+0x9/0x20 [ 733.782327][T15095] slab_pre_alloc_hook+0x59/0x300 [ 733.787425][T15095] ? tomoyo_encode+0x2ad/0x570 [ 733.792265][T15095] ? tomoyo_encode+0x2ad/0x570 [ 733.797112][T15095] __kmem_cache_alloc_node+0x53/0x250 [ 733.802651][T15095] ? tomoyo_encode+0x2ad/0x570 [ 733.807487][T15095] __kmalloc+0xa7/0x240 [ 733.811714][T15095] tomoyo_encode+0x2ad/0x570 [ 733.816499][T15095] tomoyo_realpath_from_path+0x57c/0x5c0 [ 733.822214][T15095] ? tomoyo_domain+0xd6/0x120 [ 733.826978][T15095] tomoyo_path_number_perm+0x248/0x5e0 [ 733.832524][T15095] ? tomoyo_path_number_perm+0x217/0x5e0 [ 733.838240][T15095] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 733.843783][T15095] ? ksys_write+0x1d2/0x260 [ 733.848404][T15095] ? __fget_files+0x28/0x460 [ 733.853101][T15095] security_file_ioctl+0x70/0xa0 [ 733.858121][T15095] __se_sys_ioctl+0x48/0x170 [ 733.861883][T15100] netlink: 'syz.3.3273': attribute type 21 has an invalid length. [ 733.862765][T15095] do_syscall_64+0x55/0xb0 [ 733.875066][T15095] ? clear_bhb_loop+0x40/0x90 [ 733.879806][T15095] ? clear_bhb_loop+0x40/0x90 [ 733.884551][T15095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.890523][T15095] RIP: 0033:0x7f12be99de59 [ 733.895005][T15095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.914681][T15095] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.923174][T15095] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 733.931217][T15095] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000b [ 733.938468][T15100] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 733.939217][T15095] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 733.954991][T15095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.963031][T15095] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 733.971105][T15095] [ 733.986797][T15095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 734.117243][T15107] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 734.170500][T15107] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 734.186082][T15108] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 734.774124][T15117] syzkaller0: entered promiscuous mode [ 734.789293][T15117] syzkaller0: entered allmulticast mode [ 734.842449][T15122] netlink: 'syz.1.3278': attribute type 10 has an invalid length. [ 734.917536][T15122] syz_tun: entered promiscuous mode [ 734.973226][T15122] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 735.042068][T15124] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.078272][T15124] bridge0: entered allmulticast mode [ 736.013944][T15137] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3283'. [ 736.037384][T15137] netlink: zone id is out of range [ 736.042665][T15137] netlink: zone id is out of range [ 736.049124][T15137] netlink: zone id is out of range [ 736.054313][T15137] netlink: zone id is out of range [ 736.063006][T15137] netlink: zone id is out of range [ 736.068342][T15137] netlink: zone id is out of range [ 736.084662][T15137] netlink: zone id is out of range [ 736.091329][T15137] netlink: zone id is out of range [ 736.101504][T15137] netlink: zone id is out of range [ 736.108015][T15137] netlink: zone id is out of range [ 737.661192][T15128] bridge_slave_1: left allmulticast mode [ 737.669441][T15128] bridge_slave_1: left promiscuous mode [ 737.675763][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.687987][T15128] bridge_slave_0: left allmulticast mode [ 737.694055][T15128] bridge_slave_0: left promiscuous mode [ 737.701502][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.788948][T15129] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3280'. [ 737.819362][T15136] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3283'. [ 738.645325][T15174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3295'. [ 738.711044][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 739.251869][T15188] FAULT_INJECTION: forcing a failure. [ 739.251869][T15188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.271980][T15188] CPU: 0 PID: 15188 Comm: syz.1.3301 Not tainted syzkaller #0 [ 739.279524][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 739.289618][T15188] Call Trace: [ 739.292928][T15188] [ 739.295893][T15188] dump_stack_lvl+0x18c/0x250 [ 739.300620][T15188] ? show_regs_print_info+0x20/0x20 [ 739.305860][T15188] ? load_image+0x420/0x420 [ 739.310432][T15188] ? __might_fault+0xaa/0x120 [ 739.315143][T15188] ? __lock_acquire+0x7d80/0x7d80 [ 739.320206][T15188] should_fail_ex+0x394/0x4c0 [ 739.325060][T15188] _copy_from_user+0x2f/0xe0 [ 739.329679][T15188] __sys_bpf+0x23e/0x890 [ 739.333950][T15188] ? bpf_link_show_fdinfo+0x390/0x390 [ 739.339371][T15188] ? lock_chain_count+0x20/0x20 [ 739.344274][T15188] __x64_sys_bpf+0x7c/0x90 [ 739.348736][T15188] do_syscall_64+0x55/0xb0 [ 739.353202][T15188] ? clear_bhb_loop+0x40/0x90 [ 739.357910][T15188] ? clear_bhb_loop+0x40/0x90 [ 739.362620][T15188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.368905][T15188] RIP: 0033:0x7fbc57f9de59 [ 739.373519][T15188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.393162][T15188] RSP: 002b:00007fbc58da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.401605][T15188] RAX: ffffffffffffffda RBX: 00007fbc58225fa0 RCX: 00007fbc57f9de59 [ 739.409607][T15188] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 739.417609][T15188] RBP: 00007fbc58da3090 R08: 0000000000000000 R09: 0000000000000000 [ 739.425609][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.433661][T15188] R13: 00007fbc58226038 R14: 00007fbc58225fa0 R15: 00007ffce16b8c88 [ 739.441764][T15188] [ 740.020843][T15211] netlink: 'syz.1.3307': attribute type 10 has an invalid length. [ 740.042816][T15211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3307'. [ 740.064002][T15211] ipvlan1: entered promiscuous mode [ 740.070171][T15211] ipvlan1: entered allmulticast mode [ 740.119609][T15211] bridge0: port 3(ipvlan1) entered blocking state [ 740.129235][T15211] bridge0: port 3(ipvlan1) entered disabled state [ 740.183194][T15212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3307'. [ 740.310083][T15219] veth1_macvtap: left promiscuous mode [ 740.317077][T15219] macsec0: entered promiscuous mode [ 740.395896][T15223] veth1_macvtap: entered promiscuous mode [ 740.402005][T15223] macsec0: entered allmulticast mode [ 740.429045][T15223] veth1_macvtap: entered allmulticast mode [ 740.635870][T15230] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3314'. [ 741.516820][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.546942][T15255] bridge0: entered allmulticast mode [ 741.705067][T15255] bridge_slave_1: left allmulticast mode [ 741.742270][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.017005][T15255] bridge_slave_0: left allmulticast mode [ 742.043945][T15255] bridge_slave_0: left promiscuous mode [ 742.128063][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.487150][T15263] IPv6: Can't replace route, no match found [ 742.829809][T15276] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3326'. [ 743.690425][T15296] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3333'. [ 744.535976][T12288] Bluetooth: hci0: command 0x0406 tx timeout [ 744.743892][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.795978][T15306] bridge0: entered allmulticast mode [ 744.902101][T15315] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3338'. [ 745.225188][T15309] bridge_slave_1: left allmulticast mode [ 745.315747][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.434518][T15319] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 745.442703][T15319] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3339'. [ 745.478835][T15309] bridge_slave_0: left allmulticast mode [ 745.515889][T15309] bridge_slave_0: left promiscuous mode [ 745.523493][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.324923][T15311] netlink: 'syz.1.3336': attribute type 10 has an invalid length. [ 746.364040][T15311] team_slave_0: left allmulticast mode [ 746.375285][T15311] team0 (unregistering): Port device team_slave_0 removed [ 746.392152][T15311] team_slave_1: left allmulticast mode [ 746.412318][T15311] team0 (unregistering): Port device team_slave_1 removed [ 746.760030][T15336] IPv6: Can't replace route, no match found [ 746.897004][T15332] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3343'. [ 747.173713][T15349] veth1_macvtap: left promiscuous mode [ 747.182154][T15349] macsec0: entered promiscuous mode [ 747.249411][T15349] veth1_macvtap: entered promiscuous mode [ 747.256998][T15349] macsec0: entered allmulticast mode [ 747.262868][T15349] veth1_macvtap: entered allmulticast mode [ 747.409983][T15356] delete_channel: no stack [ 747.581469][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.588074][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.662883][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.679787][T15360] bridge0: entered allmulticast mode [ 747.791523][T15360] bridge_slave_1: left allmulticast mode [ 747.808491][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.874920][T15360] bridge_slave_0: left allmulticast mode [ 747.891641][T15360] bridge_slave_0: left promiscuous mode [ 747.901284][T15360] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.231850][T15380] netlink: 'syz.0.3360': attribute type 29 has an invalid length. [ 748.253043][T15380] netlink: 'syz.0.3360': attribute type 29 has an invalid length. [ 748.279347][T15380] netlink: 'syz.0.3360': attribute type 29 has an invalid length. [ 748.418334][T15384] delete_channel: no stack [ 748.842869][T15390] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3364'. [ 750.436769][T15409] delete_channel: no stack [ 751.132876][T15423] netlink: 'syz.3.3378': attribute type 29 has an invalid length. [ 751.162724][T15423] netlink: 'syz.3.3378': attribute type 29 has an invalid length. [ 751.194714][T15423] netlink: 'syz.3.3378': attribute type 29 has an invalid length. [ 751.482057][T15429] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3381'. [ 752.031026][T15436] delete_channel: no stack [ 753.522143][T15443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3388'. [ 754.270407][T15458] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 754.316147][T15454] delete_channel: no stack [ 754.497548][T15468] delete_channel: no stack [ 754.583565][T15470] netlink: 'syz.2.3396': attribute type 14 has an invalid length. [ 754.612217][T15470] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3396'. [ 754.721423][T15472] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3397'. [ 754.740888][T15457] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3391'. [ 754.870029][T15475] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3398'. [ 756.593667][T15493] delete_channel: no stack [ 756.602221][T15491] FAULT_INJECTION: forcing a failure. [ 756.602221][T15491] name failslab, interval 1, probability 0, space 0, times 0 [ 756.635833][T15491] CPU: 1 PID: 15491 Comm: syz.2.3405 Not tainted syzkaller #0 [ 756.643388][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 756.653504][T15491] Call Trace: [ 756.656834][T15491] [ 756.659827][T15491] dump_stack_lvl+0x18c/0x250 [ 756.664580][T15491] ? show_regs_print_info+0x20/0x20 [ 756.669861][T15491] ? load_image+0x420/0x420 [ 756.674422][T15491] ? lockdep_hardirqs_on+0x98/0x150 [ 756.679729][T15491] should_fail_ex+0x394/0x4c0 [ 756.684564][T15491] should_failslab+0x9/0x20 [ 756.689138][T15491] slab_pre_alloc_hook+0x59/0x300 [ 756.694240][T15491] ? tomoyo_encode+0x2ad/0x570 [ 756.699076][T15491] ? tomoyo_encode+0x2ad/0x570 [ 756.703918][T15491] __kmem_cache_alloc_node+0x53/0x250 [ 756.709378][T15491] ? tomoyo_encode+0x2ad/0x570 [ 756.714218][T15491] __kmalloc+0xa7/0x240 [ 756.718445][T15491] tomoyo_encode+0x2ad/0x570 [ 756.723154][T15491] tomoyo_realpath_from_path+0x57c/0x5c0 [ 756.728878][T15491] ? tomoyo_domain+0xd6/0x120 [ 756.733742][T15491] tomoyo_path_number_perm+0x248/0x5e0 [ 756.739294][T15491] ? tomoyo_path_number_perm+0x217/0x5e0 [ 756.744994][T15491] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 756.750569][T15491] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 756.756402][T15491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 756.762682][T15491] security_file_ioctl+0x70/0xa0 [ 756.767676][T15491] __se_sys_ioctl+0x48/0x170 [ 756.772313][T15491] do_syscall_64+0x55/0xb0 [ 756.776885][T15491] ? clear_bhb_loop+0x40/0x90 [ 756.781675][T15491] ? clear_bhb_loop+0x40/0x90 [ 756.786480][T15491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.792436][T15491] RIP: 0033:0x7f92a599de59 [ 756.796928][T15491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.816589][T15491] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.825079][T15491] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 756.833201][T15491] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 000000000000000a [ 756.841255][T15491] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 756.849420][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.857438][T15491] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 756.865505][T15491] [ 756.885834][T15491] ERROR: Out of memory at tomoyo_realpath_from_path. [ 757.082215][T15500] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3408'. [ 758.135070][T15524] netlink: 'syz.1.3416': attribute type 29 has an invalid length. [ 758.152248][T15524] netlink: 'syz.1.3416': attribute type 29 has an invalid length. [ 758.162361][T15527] netlink: 'syz.1.3416': attribute type 29 has an invalid length. [ 758.252932][T15519] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3413'. [ 758.686637][T15542] FAULT_INJECTION: forcing a failure. [ 758.686637][T15542] name failslab, interval 1, probability 0, space 0, times 0 [ 758.758949][T15542] CPU: 1 PID: 15542 Comm: syz.0.3423 Not tainted syzkaller #0 [ 758.766506][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.776619][T15542] Call Trace: [ 758.779946][T15542] [ 758.782931][T15542] dump_stack_lvl+0x18c/0x250 [ 758.787689][T15542] ? show_regs_print_info+0x20/0x20 [ 758.792961][T15542] ? load_image+0x420/0x420 [ 758.797531][T15542] ? __lock_acquire+0x7d80/0x7d80 [ 758.802626][T15542] should_fail_ex+0x394/0x4c0 [ 758.807390][T15542] should_failslab+0x9/0x20 [ 758.812275][T15542] slab_pre_alloc_hook+0x59/0x300 [ 758.817385][T15542] ? sctp_stream_init_ext+0x57/0x170 [ 758.822821][T15542] __kmem_cache_alloc_node+0x53/0x250 [ 758.828277][T15542] ? sctp_stream_init_ext+0x57/0x170 [ 758.833627][T15542] kmalloc_trace+0x2a/0xe0 [ 758.838214][T15542] sctp_stream_init_ext+0x57/0x170 [ 758.843397][T15542] sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 758.848840][T15542] ? __asan_memcpy+0x40/0x70 [ 758.853512][T15542] ? sctp_assoc_add_peer+0xcc4/0x1350 [ 758.858975][T15542] ? sctp_connect_new_asoc+0x404/0x6a0 [ 758.864506][T15542] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 758.870382][T15542] ? __sctp_connect+0xd80/0xd80 [ 758.875299][T15542] ? __local_bh_enable_ip+0x13a/0x1c0 [ 758.880785][T15542] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 758.886398][T15542] ? security_sctp_bind_connect+0x89/0xb0 [ 758.892194][T15542] sctp_sendmsg+0x1afa/0x27b0 [ 758.896956][T15542] ? sctp_getsockopt+0xb60/0xb60 [ 758.901973][T15542] ? aa_af_perm+0x330/0x330 [ 758.906555][T15542] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 758.913051][T15542] ? sock_rps_record_flow+0x19/0x3f0 [ 758.918410][T15542] ? inet_sendmsg+0xce/0x2a0 [ 758.923073][T15542] ? inet_send_prepare+0x250/0x250 [ 758.928246][T15542] ____sys_sendmsg+0x61b/0x980 [ 758.933100][T15542] ? __asan_memset+0x22/0x40 [ 758.937759][T15542] ? __sys_sendmsg_sock+0x30/0x30 [ 758.942852][T15542] ? __import_iovec+0x5f2/0x850 [ 758.947794][T15542] ? import_iovec+0x73/0xa0 [ 758.952461][T15542] ___sys_sendmsg+0x2a6/0x360 [ 758.957259][T15542] ? __sys_sendmsg+0x2b0/0x2b0 [ 758.962124][T15542] ? __lock_acquire+0x7d80/0x7d80 [ 758.967283][T15542] __se_sys_sendmsg+0x1d0/0x2c0 [ 758.972219][T15542] ? __x64_sys_sendmsg+0x80/0x80 [ 758.977257][T15542] ? lockdep_hardirqs_on+0x98/0x150 [ 758.982528][T15542] do_syscall_64+0x55/0xb0 [ 758.987008][T15542] ? clear_bhb_loop+0x40/0x90 [ 758.991755][T15542] ? clear_bhb_loop+0x40/0x90 [ 758.996503][T15542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.002467][T15542] RIP: 0033:0x7f12be99de59 [ 759.006954][T15542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.026671][T15542] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.035156][T15542] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 759.043193][T15542] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000004 [ 759.051234][T15542] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 759.059323][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.067353][T15542] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 759.075405][T15542] [ 759.197128][T15545] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3424'. [ 759.218915][T15545] netlink: 'syz.1.3424': attribute type 4 has an invalid length. [ 759.233698][T15545] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3424'. [ 759.350042][T15551] FAULT_INJECTION: forcing a failure. [ 759.350042][T15551] name failslab, interval 1, probability 0, space 0, times 0 [ 759.385445][T15551] CPU: 0 PID: 15551 Comm: syz.3.3427 Not tainted syzkaller #0 [ 759.393011][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 759.403149][T15551] Call Trace: [ 759.406478][T15551] [ 759.409452][T15551] dump_stack_lvl+0x18c/0x250 [ 759.414190][T15551] ? sctp_sendmsg+0x1519/0x27b0 [ 759.419097][T15551] ? ___sys_sendmsg+0x2a6/0x360 [ 759.424015][T15551] ? show_regs_print_info+0x20/0x20 [ 759.429302][T15551] ? load_image+0x420/0x420 [ 759.433998][T15551] should_fail_ex+0x394/0x4c0 [ 759.438756][T15551] should_failslab+0x9/0x20 [ 759.443417][T15551] slab_pre_alloc_hook+0x59/0x300 [ 759.448519][T15551] ? sctp_add_bind_addr+0x8c/0x360 [ 759.453690][T15551] __kmem_cache_alloc_node+0x53/0x250 [ 759.459134][T15551] ? sctp_add_bind_addr+0x8c/0x360 [ 759.464322][T15551] kmalloc_trace+0x2a/0xe0 [ 759.468814][T15551] sctp_add_bind_addr+0x8c/0x360 [ 759.473820][T15551] sctp_copy_local_addr_list+0x31b/0x4e0 [ 759.479516][T15551] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 759.485338][T15551] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 759.491481][T15551] ? sctp_v4_is_any+0x35/0x60 [ 759.496217][T15551] ? sctp_copy_one_addr+0x8c/0x350 [ 759.501407][T15551] sctp_bind_addr_copy+0x189/0x3c0 [ 759.506679][T15551] sctp_connect_new_asoc+0x2f9/0x6a0 [ 759.512048][T15551] ? __sctp_connect+0xd80/0xd80 [ 759.516964][T15551] ? __local_bh_enable_ip+0x13a/0x1c0 [ 759.522404][T15551] ? _local_bh_enable+0xa0/0xa0 [ 759.527317][T15551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 759.533267][T15551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 759.539136][T15551] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 759.544767][T15551] ? security_sctp_bind_connect+0x89/0xb0 [ 759.550569][T15551] sctp_sendmsg+0x1519/0x27b0 [ 759.555332][T15551] ? sctp_getsockopt+0xb60/0xb60 [ 759.560561][T15551] ? aa_af_perm+0x330/0x330 [ 759.565139][T15551] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 759.571637][T15551] ? sock_rps_record_flow+0x19/0x3f0 [ 759.576986][T15551] ? inet_sendmsg+0x7e/0x2a0 [ 759.581638][T15551] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 759.587025][T15551] ? inet_send_prepare+0x250/0x250 [ 759.592207][T15551] ____sys_sendmsg+0x61b/0x980 [ 759.597184][T15551] ? __asan_memset+0x22/0x40 [ 759.602405][T15551] ? __sys_sendmsg_sock+0x30/0x30 [ 759.607516][T15551] ? __import_iovec+0x5f2/0x850 [ 759.612444][T15551] ? import_iovec+0x73/0xa0 [ 759.617018][T15551] ___sys_sendmsg+0x2a6/0x360 [ 759.621788][T15551] ? __sys_sendmsg+0x2b0/0x2b0 [ 759.626663][T15551] ? ktime_get+0x7f/0x280 [ 759.631087][T15551] __se_sys_sendmsg+0x1d0/0x2c0 [ 759.636367][T15551] ? __x64_sys_sendmsg+0x80/0x80 [ 759.641407][T15551] ? lockdep_hardirqs_on+0x98/0x150 [ 759.646678][T15551] do_syscall_64+0x55/0xb0 [ 759.651185][T15551] ? clear_bhb_loop+0x40/0x90 [ 759.655919][T15551] ? clear_bhb_loop+0x40/0x90 [ 759.660645][T15551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.666608][T15551] RIP: 0033:0x7facb539de59 [ 759.671074][T15551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.690770][T15551] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.699250][T15551] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 759.707397][T15551] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000004 [ 759.715518][T15551] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 759.723539][T15551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.731670][T15551] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 759.739737][T15551] [ 760.248898][T15561] netlink: 'syz.1.3431': attribute type 19 has an invalid length. [ 760.256989][T15561] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3431'. [ 760.939966][T15574] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3437'. [ 761.834651][T15599] netlink: 'syz.1.3446': attribute type 10 has an invalid length. [ 761.844332][T15599] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.3446'. [ 761.924210][T15601] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3448'. [ 762.044324][T15614] netlink: 'syz.1.3452': attribute type 10 has an invalid length. [ 762.282402][T15620] netlink: 'syz.2.3453': attribute type 10 has an invalid length. [ 762.291159][T15620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3453'. [ 762.317185][T15620] ipvlan1: entered promiscuous mode [ 762.322771][T15620] ipvlan1: entered allmulticast mode [ 762.363142][T15620] net_ratelimit: 217 callbacks suppressed [ 762.363277][T15620] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 763.865055][T15634] netlink: 'syz.1.3459': attribute type 2 has an invalid length. [ 763.953755][T15634] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3459'. [ 764.112082][T15647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3462'. [ 764.335929][T15646] netlink: 'syz.2.3462': attribute type 19 has an invalid length. [ 764.343919][T15646] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3462'. [ 764.376023][T15641] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3461'. [ 764.763759][T15657] FAULT_INJECTION: forcing a failure. [ 764.763759][T15657] name failslab, interval 1, probability 0, space 0, times 0 [ 764.777370][T15657] CPU: 1 PID: 15657 Comm: syz.3.3466 Not tainted syzkaller #0 [ 764.784945][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.795090][T15657] Call Trace: [ 764.798558][T15657] [ 764.801605][T15657] dump_stack_lvl+0x18c/0x250 [ 764.806374][T15657] ? lock_chain_count+0x20/0x20 [ 764.811325][T15657] ? show_regs_print_info+0x20/0x20 [ 764.816686][T15657] ? load_image+0x420/0x420 [ 764.821322][T15657] should_fail_ex+0x394/0x4c0 [ 764.826073][T15657] should_failslab+0x9/0x20 [ 764.830632][T15657] slab_pre_alloc_hook+0x59/0x300 [ 764.835758][T15657] kmem_cache_alloc+0x5a/0x2c0 [ 764.840634][T15657] ? __inet_hash_connect+0x808/0x1870 [ 764.846124][T15657] __inet_hash_connect+0x808/0x1870 [ 764.851389][T15657] ? inet6_hash_connect+0xe0/0xe0 [ 764.856594][T15657] ? inet_bhash2_reset_saddr+0x80/0x80 [ 764.862132][T15657] ? sk_setup_caps+0x704/0x940 [ 764.866989][T15657] ? inet6_hash_connect+0x7b/0xe0 [ 764.872095][T15657] tcp_v6_connect+0xf50/0x1900 [ 764.877047][T15657] ? tcp_v6_pre_connect+0xf0/0xf0 [ 764.882117][T15657] ? __local_bh_enable_ip+0x13a/0x1c0 [ 764.887546][T15657] ? lockdep_hardirqs_on+0x98/0x150 [ 764.892826][T15657] ? do_raw_spin_unlock+0x121/0x230 [ 764.898102][T15657] ? mptcp_token_new_connect+0x4b9/0x620 [ 764.903930][T15657] mptcp_connect+0x403/0x5e0 [ 764.908603][T15657] __inet_stream_connect+0x254/0xdf0 [ 764.913979][T15657] ? inet_dgram_connect+0x340/0x340 [ 764.919287][T15657] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 764.924558][T15657] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 764.930003][T15657] mptcp_sendmsg+0x144c/0x1670 [ 764.934826][T15657] ? aa_sk_perm+0x83c/0x970 [ 764.939400][T15657] ? aa_sk_perm+0x83c/0x970 [ 764.943982][T15657] ? aa_af_perm+0x330/0x330 [ 764.948659][T15657] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 764.955164][T15657] ? mptcp_shutdown+0x80/0x80 [ 764.959964][T15657] ? inet_send_prepare+0xb2/0x250 [ 764.965080][T15657] ? inet6_sendmsg+0x5f/0xd0 [ 764.969728][T15657] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 764.974993][T15657] ____sys_sendmsg+0x61b/0x980 [ 764.980010][T15657] ? __asan_memset+0x22/0x40 [ 764.984682][T15657] ? __sys_sendmsg_sock+0x30/0x30 [ 764.989787][T15657] ? __import_iovec+0x3fa/0x850 [ 764.994809][T15657] ? import_iovec+0x73/0xa0 [ 764.999384][T15657] ___sys_sendmsg+0x2a6/0x360 [ 765.004140][T15657] ? __sys_sendmsg+0x2b0/0x2b0 [ 765.009029][T15657] ? __lock_acquire+0x7d80/0x7d80 [ 765.014181][T15657] __se_sys_sendmsg+0x1d0/0x2c0 [ 765.019110][T15657] ? __x64_sys_sendmsg+0x80/0x80 [ 765.024152][T15657] ? lockdep_hardirqs_on+0x98/0x150 [ 765.029427][T15657] do_syscall_64+0x55/0xb0 [ 765.033901][T15657] ? clear_bhb_loop+0x40/0x90 [ 765.038630][T15657] ? clear_bhb_loop+0x40/0x90 [ 765.043362][T15657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.049318][T15657] RIP: 0033:0x7facb539de59 [ 765.053873][T15657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.073533][T15657] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.082006][T15657] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 765.090026][T15657] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000005 [ 765.098218][T15657] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 765.106333][T15657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.114359][T15657] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 765.122468][T15657] [ 766.385445][T15678] FAULT_INJECTION: forcing a failure. [ 766.385445][T15678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.427197][T15678] CPU: 0 PID: 15678 Comm: syz.3.3473 Not tainted syzkaller #0 [ 766.434795][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 766.444922][T15678] Call Trace: [ 766.448286][T15678] [ 766.451267][T15678] dump_stack_lvl+0x18c/0x250 [ 766.456036][T15678] ? show_regs_print_info+0x20/0x20 [ 766.461485][T15678] ? load_image+0x420/0x420 [ 766.466070][T15678] ? __might_fault+0xaa/0x120 [ 766.470822][T15678] ? __lock_acquire+0x7d80/0x7d80 [ 766.475928][T15678] should_fail_ex+0x394/0x4c0 [ 766.480675][T15678] _copy_from_iter+0x1cd/0x1290 [ 766.485596][T15678] ? __might_fault+0xaa/0x120 [ 766.490361][T15678] ? copyout_mc+0x70/0x70 [ 766.494759][T15678] ? copyout_mc+0x70/0x70 [ 766.499170][T15678] ? page_copy_sane+0x16a/0x270 [ 766.504081][T15678] copy_page_from_iter+0x7b/0x100 [ 766.509169][T15678] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 766.515073][T15678] tun_get_user+0xc84/0x3d70 [ 766.519750][T15678] ? trace_event_raw_event_lock+0x150/0x240 [ 766.525725][T15678] ? aa_file_perm+0x3e3/0xee0 [ 766.530481][T15678] ? rcu_read_unlock+0xa0/0xa0 [ 766.535336][T15678] ? tun_get+0x1c/0x2e0 [ 766.539558][T15678] ? __lock_acquire+0x7d80/0x7d80 [ 766.544695][T15678] ? tun_get+0x1c/0x2e0 [ 766.548931][T15678] tun_chr_write_iter+0x119/0x200 [ 766.554026][T15678] vfs_write+0x474/0x9a0 [ 766.558360][T15678] ? file_end_write+0x250/0x250 [ 766.563384][T15678] ? __fget_files+0x3fc/0x460 [ 766.568146][T15678] ? __fdget_pos+0x1d8/0x330 [ 766.572790][T15678] ? ksys_write+0x74/0x260 [ 766.577276][T15678] ksys_write+0x151/0x260 [ 766.581671][T15678] ? __ia32_sys_read+0x90/0x90 [ 766.586506][T15678] ? lockdep_hardirqs_on+0x98/0x150 [ 766.591776][T15678] do_syscall_64+0x55/0xb0 [ 766.596255][T15678] ? clear_bhb_loop+0x40/0x90 [ 766.600982][T15678] ? clear_bhb_loop+0x40/0x90 [ 766.605734][T15678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.611699][T15678] RIP: 0033:0x7facb539de59 [ 766.616186][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.635941][T15678] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.644430][T15678] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 766.652460][T15678] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 766.660488][T15678] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 766.668512][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.676532][T15678] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 766.685074][T15678] [ 773.837260][T15690] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3477'. [ 774.014214][T15729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3492'. [ 774.548872][T15749] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3499'. [ 775.046522][T15767] syzkaller0: entered promiscuous mode [ 775.056013][T15767] syzkaller0: entered allmulticast mode [ 775.731464][T15780] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3509'. [ 776.318136][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3515'. [ 776.452478][T15799] netlink: 'syz.3.3515': attribute type 12 has an invalid length. [ 776.475392][T15799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3515'. [ 776.676722][T15811] FAULT_INJECTION: forcing a failure. [ 776.676722][T15811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.690464][T15811] CPU: 1 PID: 15811 Comm: syz.0.3518 Not tainted syzkaller #0 [ 776.697992][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 776.708266][T15811] Call Trace: [ 776.711579][T15811] [ 776.714581][T15811] dump_stack_lvl+0x18c/0x250 [ 776.719347][T15811] ? show_regs_print_info+0x20/0x20 [ 776.724607][T15811] ? load_image+0x420/0x420 [ 776.729163][T15811] ? __might_fault+0xaa/0x120 [ 776.733885][T15811] ? __lock_acquire+0x7d80/0x7d80 [ 776.738948][T15811] should_fail_ex+0x394/0x4c0 [ 776.743670][T15811] _copy_from_user+0x2f/0xe0 [ 776.748306][T15811] ___sys_sendmsg+0x1c7/0x360 [ 776.753041][T15811] ? __sys_sendmsg+0x2b0/0x2b0 [ 776.757868][T15811] ? __lock_acquire+0x7d80/0x7d80 [ 776.763476][T15811] __se_sys_sendmsg+0x1d0/0x2c0 [ 776.768378][T15811] ? __x64_sys_sendmsg+0x80/0x80 [ 776.773723][T15811] ? lockdep_hardirqs_on+0x98/0x150 [ 776.778983][T15811] do_syscall_64+0x55/0xb0 [ 776.783454][T15811] ? clear_bhb_loop+0x40/0x90 [ 776.788208][T15811] ? clear_bhb_loop+0x40/0x90 [ 776.792926][T15811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.798867][T15811] RIP: 0033:0x7f12be99de59 [ 776.803312][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.822957][T15811] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.831415][T15811] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 776.839417][T15811] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 776.847422][T15811] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 776.855424][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.863423][T15811] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 776.871444][T15811] [ 777.301965][T15823] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3524'. [ 778.363626][T15852] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3534'. [ 779.163526][T15864] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3539'. [ 779.219340][T15864] netlink: 'syz.3.3539': attribute type 21 has an invalid length. [ 779.562478][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 779.820322][T15873] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3543'. [ 780.080560][T15878] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3545'. [ 780.141282][T15878] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3545'. [ 780.191119][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3545'. [ 780.289128][T15885] netlink: 'syz.2.3547': attribute type 21 has an invalid length. [ 780.306951][T15885] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3547'. [ 780.533149][T15888] sit0: entered allmulticast mode [ 780.691545][T15895] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 780.820048][T15895] team0: Device veth0_vlan failed to register rx_handler [ 780.883672][ T51] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 781.052509][T15901] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3554'. [ 781.575361][T15926] FAULT_INJECTION: forcing a failure. [ 781.575361][T15926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.598132][T15926] CPU: 0 PID: 15926 Comm: syz.0.3562 Not tainted syzkaller #0 [ 781.605707][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.615833][T15926] Call Trace: [ 781.619609][T15926] [ 781.622734][T15926] dump_stack_lvl+0x18c/0x250 [ 781.627519][T15926] ? show_regs_print_info+0x20/0x20 [ 781.632797][T15926] ? load_image+0x420/0x420 [ 781.637383][T15926] ? __lock_acquire+0x7d80/0x7d80 [ 781.642487][T15926] ? snprintf+0xe9/0x140 [ 781.646816][T15926] should_fail_ex+0x394/0x4c0 [ 781.651588][T15926] _copy_to_user+0x2f/0xa0 [ 781.656078][T15926] simple_read_from_buffer+0xe7/0x150 [ 781.661553][T15926] proc_fail_nth_read+0x1e8/0x260 [ 781.666692][T15926] ? proc_fault_inject_write+0x360/0x360 [ 781.672402][T15926] ? fsnotify_perm+0x271/0x5e0 [ 781.677204][T15926] ? proc_fault_inject_write+0x360/0x360 [ 781.682914][T15926] vfs_read+0x298/0x990 [ 781.687121][T15926] ? kernel_read+0x1e0/0x1e0 [ 781.691760][T15926] ? __fget_files+0x28/0x460 [ 781.696422][T15926] ? __fget_files+0x3fc/0x460 [ 781.701151][T15926] ? __fdget_pos+0x2a3/0x330 [ 781.705809][T15926] ? ksys_read+0x74/0x260 [ 781.710224][T15926] ksys_read+0x151/0x260 [ 781.714512][T15926] ? vfs_write+0x9a0/0x9a0 [ 781.718969][T15926] ? lockdep_hardirqs_on+0x98/0x150 [ 781.724235][T15926] do_syscall_64+0x55/0xb0 [ 781.728686][T15926] ? clear_bhb_loop+0x40/0x90 [ 781.733393][T15926] ? clear_bhb_loop+0x40/0x90 [ 781.738102][T15926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.744037][T15926] RIP: 0033:0x7f12be95e68e [ 781.748487][T15926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 781.768240][T15926] RSP: 002b:00007f12bf7e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.776717][T15926] RAX: ffffffffffffffda RBX: 00007f12bf7e26c0 RCX: 00007f12be95e68e [ 781.784783][T15926] RDX: 000000000000000f RSI: 00007f12bf7e20a0 RDI: 0000000000000005 [ 781.792787][T15926] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 781.800787][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.808902][T15926] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 781.816932][T15926] [ 782.104518][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 783.803306][T15934] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3566'. [ 783.978731][T15945] FAULT_INJECTION: forcing a failure. [ 783.978731][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 784.001349][T15945] CPU: 0 PID: 15945 Comm: syz.0.3570 Not tainted syzkaller #0 [ 784.009077][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.019195][T15945] Call Trace: [ 784.022526][T15945] [ 784.025498][T15945] dump_stack_lvl+0x18c/0x250 [ 784.030251][T15945] ? sctp_sendmsg+0x1519/0x27b0 [ 784.035176][T15945] ? ___sys_sendmsg+0x2a6/0x360 [ 784.040103][T15945] ? show_regs_print_info+0x20/0x20 [ 784.045368][T15945] ? load_image+0x420/0x420 [ 784.049921][T15945] should_fail_ex+0x394/0x4c0 [ 784.054640][T15945] should_failslab+0x9/0x20 [ 784.059187][T15945] slab_pre_alloc_hook+0x59/0x300 [ 784.064258][T15945] ? sctp_add_bind_addr+0x8c/0x360 [ 784.069395][T15945] __kmem_cache_alloc_node+0x53/0x250 [ 784.074906][T15945] ? sctp_add_bind_addr+0x8c/0x360 [ 784.080070][T15945] kmalloc_trace+0x2a/0xe0 [ 784.084564][T15945] sctp_add_bind_addr+0x8c/0x360 [ 784.089536][T15945] sctp_copy_local_addr_list+0x31b/0x4e0 [ 784.095205][T15945] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 784.100962][T15945] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 784.107069][T15945] ? sctp_v4_is_any+0x35/0x60 [ 784.111772][T15945] ? sctp_copy_one_addr+0x8c/0x350 [ 784.116914][T15945] sctp_bind_addr_copy+0xb3/0x3c0 [ 784.121969][T15945] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 784.128343][T15945] sctp_connect_new_asoc+0x2f9/0x6a0 [ 784.133663][T15945] ? __sctp_connect+0xd80/0xd80 [ 784.138563][T15945] ? __local_bh_enable_ip+0x13a/0x1c0 [ 784.143991][T15945] ? _local_bh_enable+0xa0/0xa0 [ 784.148891][T15945] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 784.154746][T15945] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 784.160597][T15945] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 784.166274][T15945] ? security_sctp_bind_connect+0x89/0xb0 [ 784.172030][T15945] sctp_sendmsg+0x1519/0x27b0 [ 784.177372][T15945] ? sctp_getsockopt+0xb60/0xb60 [ 784.182355][T15945] ? aa_af_perm+0x330/0x330 [ 784.186906][T15945] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 784.193363][T15945] ? sock_rps_record_flow+0x19/0x3f0 [ 784.198698][T15945] ? inet_sendmsg+0x7e/0x2a0 [ 784.203316][T15945] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 784.208724][T15945] ? inet_send_prepare+0x250/0x250 [ 784.213878][T15945] ____sys_sendmsg+0x61b/0x980 [ 784.218701][T15945] ? __asan_memset+0x22/0x40 [ 784.223377][T15945] ? __sys_sendmsg_sock+0x30/0x30 [ 784.228554][T15945] ? __import_iovec+0x5f2/0x850 [ 784.233468][T15945] ? import_iovec+0x73/0xa0 [ 784.238009][T15945] ___sys_sendmsg+0x2a6/0x360 [ 784.242818][T15945] ? get_pid_task+0x20/0x1e0 [ 784.247460][T15945] ? __sys_sendmsg+0x2b0/0x2b0 [ 784.252279][T15945] ? __lock_acquire+0x7d80/0x7d80 [ 784.257361][T15945] __se_sys_sendmsg+0x1d0/0x2c0 [ 784.262257][T15945] ? __x64_sys_sendmsg+0x80/0x80 [ 784.267253][T15945] ? lockdep_hardirqs_on+0x98/0x150 [ 784.272497][T15945] do_syscall_64+0x55/0xb0 [ 784.276962][T15945] ? clear_bhb_loop+0x40/0x90 [ 784.281670][T15945] ? clear_bhb_loop+0x40/0x90 [ 784.286375][T15945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.292311][T15945] RIP: 0033:0x7f12be99de59 [ 784.296762][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.316408][T15945] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.324864][T15945] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 784.332894][T15945] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 784.340909][T15945] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 784.348916][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.356918][T15945] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 784.364964][T15945] [ 784.964765][T15961] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3577'. [ 785.258957][T15969] netlink: 'syz.1.3580': attribute type 6 has an invalid length. [ 785.759043][T15972] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3581'. [ 785.770845][T15972] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.3581'. [ 787.079650][T16007] FAULT_INJECTION: forcing a failure. [ 787.079650][T16007] name failslab, interval 1, probability 0, space 0, times 0 [ 787.124413][T16007] CPU: 0 PID: 16007 Comm: syz.2.3594 Not tainted syzkaller #0 [ 787.131994][T16007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 787.142870][T16007] Call Trace: [ 787.146257][T16007] [ 787.149255][T16007] dump_stack_lvl+0x18c/0x250 [ 787.154026][T16007] ? show_regs_print_info+0x20/0x20 [ 787.159317][T16007] ? load_image+0x420/0x420 [ 787.163922][T16007] ? __might_sleep+0xe0/0xe0 [ 787.168623][T16007] ? __lock_acquire+0x7d80/0x7d80 [ 787.173714][T16007] should_fail_ex+0x394/0x4c0 [ 787.178470][T16007] should_failslab+0x9/0x20 [ 787.183222][T16007] slab_pre_alloc_hook+0x59/0x300 [ 787.188331][T16007] ? genl_start+0x1c9/0x6c0 [ 787.192905][T16007] __kmem_cache_alloc_node+0x53/0x250 [ 787.198454][T16007] ? genl_start+0x1c9/0x6c0 [ 787.203016][T16007] kmalloc_trace+0x2a/0xe0 [ 787.207508][T16007] genl_start+0x1c9/0x6c0 [ 787.211907][T16007] __netlink_dump_start+0x43c/0x7a0 [ 787.217179][T16007] genl_family_rcv_msg_dumpit+0x214/0x310 [ 787.222987][T16007] ? genl_rcv_msg+0x7a0/0x7a0 [ 787.227829][T16007] ? genl_get_cmd+0x693/0x930 [ 787.232584][T16007] ? genl_family_rcv_msg_doit+0x310/0x310 [ 787.238377][T16007] ? genl_start+0x6c0/0x6c0 [ 787.243035][T16007] ? genl_dumpit+0x1a0/0x1a0 [ 787.247706][T16007] ? mark_lock+0x94/0x320 [ 787.252195][T16007] genl_rcv_msg+0x5de/0x7a0 [ 787.256855][T16007] ? genl_bind+0x360/0x360 [ 787.261469][T16007] ? ethnl_default_doit+0xba0/0xba0 [ 787.266819][T16007] ? ethnl_default_start+0x560/0x560 [ 787.272289][T16007] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 787.277734][T16007] ? lockdep_hardirqs_on+0x98/0x150 [ 787.283002][T16007] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.289329][T16007] netlink_rcv_skb+0x235/0x4c0 [ 787.294158][T16007] ? genl_bind+0x360/0x360 [ 787.298665][T16007] ? netlink_ack+0x1160/0x1160 [ 787.303521][T16007] ? __lock_acquire+0x7d80/0x7d80 [ 787.308664][T16007] ? down_read+0x1ac/0x2e0 [ 787.313146][T16007] genl_rcv+0x28/0x40 [ 787.317205][T16007] netlink_unicast+0x7b1/0x930 [ 787.322060][T16007] netlink_sendmsg+0x8d0/0xbf0 [ 787.327238][T16007] ? netlink_getsockopt+0x590/0x590 [ 787.332518][T16007] ? apparmor_socket_sendmsg+0x8e/0x330 [ 787.338248][T16007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 787.343610][T16007] ? security_socket_sendmsg+0x80/0xa0 [ 787.349141][T16007] ? netlink_getsockopt+0x590/0x590 [ 787.354433][T16007] ____sys_sendmsg+0x61b/0x980 [ 787.359275][T16007] ? __asan_memset+0x22/0x40 [ 787.363962][T16007] ? __sys_sendmsg_sock+0x30/0x30 [ 787.369321][T16007] ? __import_iovec+0x3fa/0x850 [ 787.374281][T16007] ? import_iovec+0x73/0xa0 [ 787.378845][T16007] ___sys_sendmsg+0x2a6/0x360 [ 787.383595][T16007] ? __sys_sendmsg+0x2b0/0x2b0 [ 787.388445][T16007] ? ktime_get+0x7f/0x280 [ 787.392866][T16007] __se_sys_sendmsg+0x1d0/0x2c0 [ 787.397831][T16007] ? __x64_sys_sendmsg+0x80/0x80 [ 787.402850][T16007] ? lockdep_hardirqs_on+0x98/0x150 [ 787.408104][T16007] do_syscall_64+0x55/0xb0 [ 787.412602][T16007] ? clear_bhb_loop+0x40/0x90 [ 787.418200][T16007] ? clear_bhb_loop+0x40/0x90 [ 787.422938][T16007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.428910][T16007] RIP: 0033:0x7f92a599de59 [ 787.433389][T16007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.453400][T16007] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.461888][T16007] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 787.469946][T16007] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000007 [ 787.477981][T16007] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 787.486004][T16007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.494063][T16007] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 787.502121][T16007] [ 787.653495][T16013] netlink: 'syz.2.3596': attribute type 3 has an invalid length. [ 787.661482][T16013] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3596'. [ 789.654619][T16050] FAULT_INJECTION: forcing a failure. [ 789.654619][T16050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.690666][T16050] CPU: 1 PID: 16050 Comm: syz.3.3611 Not tainted syzkaller #0 [ 789.698229][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 789.708361][T16050] Call Trace: [ 789.711694][T16050] [ 789.714695][T16050] dump_stack_lvl+0x18c/0x250 [ 789.719463][T16050] ? show_regs_print_info+0x20/0x20 [ 789.724742][T16050] ? load_image+0x420/0x420 [ 789.729325][T16050] ? __might_fault+0xaa/0x120 [ 789.734068][T16050] ? __lock_acquire+0x7d80/0x7d80 [ 789.739153][T16050] should_fail_ex+0x394/0x4c0 [ 789.743925][T16050] _copy_from_iter+0x1cd/0x1290 [ 789.748830][T16050] ? __might_fault+0xaa/0x120 [ 789.753545][T16050] ? copyout_mc+0x70/0x70 [ 789.757917][T16050] ? copyout_mc+0x70/0x70 [ 789.762285][T16050] ? __virt_addr_valid+0x10c/0x380 [ 789.767436][T16050] ? page_copy_sane+0x16a/0x270 [ 789.772347][T16050] copy_page_from_iter+0x7b/0x100 [ 789.777414][T16050] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 789.783271][T16050] tun_get_user+0xc84/0x3d70 [ 789.787918][T16050] ? aa_file_perm+0x3e3/0xee0 [ 789.792636][T16050] ? rcu_read_unlock+0xa0/0xa0 [ 789.797497][T16050] ? tun_get+0x1c/0x2e0 [ 789.801719][T16050] ? __lock_acquire+0x7d80/0x7d80 [ 789.806785][T16050] ? tun_get+0x1c/0x2e0 [ 789.810985][T16050] tun_chr_write_iter+0x119/0x200 [ 789.816149][T16050] vfs_write+0x474/0x9a0 [ 789.820478][T16050] ? file_end_write+0x250/0x250 [ 789.825379][T16050] ? __fget_files+0x3fc/0x460 [ 789.830099][T16050] ? __fdget_pos+0x1d8/0x330 [ 789.834721][T16050] ? ksys_write+0x74/0x260 [ 789.839184][T16050] ksys_write+0x151/0x260 [ 789.843558][T16050] ? __ia32_sys_read+0x90/0x90 [ 789.848375][T16050] ? lockdep_hardirqs_on+0x98/0x150 [ 789.853607][T16050] do_syscall_64+0x55/0xb0 [ 789.858063][T16050] ? clear_bhb_loop+0x40/0x90 [ 789.862772][T16050] ? clear_bhb_loop+0x40/0x90 [ 789.867479][T16050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.873496][T16050] RIP: 0033:0x7facb539de59 [ 789.877945][T16050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.897586][T16050] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 789.906068][T16050] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 789.914076][T16050] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 789.922254][T16050] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 789.930249][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 789.938336][T16050] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 789.946360][T16050] [ 790.153984][T16058] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:f5ff:0023 with DS=0x31 [ 791.318218][T16086] sit0: entered allmulticast mode [ 791.361525][T16086] sit0: entered promiscuous mode [ 791.440514][T16091] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3623'. [ 792.070658][T16104] netlink: 'syz.0.3630': attribute type 1 has an invalid length. [ 792.086578][T16104] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3630'. [ 793.340323][T16130] FAULT_INJECTION: forcing a failure. [ 793.340323][T16130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.358969][T16128] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3639'. [ 793.371925][T16130] CPU: 0 PID: 16130 Comm: syz.2.3640 Not tainted syzkaller #0 [ 793.379470][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.389570][T16130] Call Trace: [ 793.392884][T16130] [ 793.395969][T16130] dump_stack_lvl+0x18c/0x250 [ 793.400692][T16130] ? show_regs_print_info+0x20/0x20 [ 793.405930][T16130] ? load_image+0x420/0x420 [ 793.410498][T16130] ? __might_fault+0xaa/0x120 [ 793.415208][T16130] ? __lock_acquire+0x7d80/0x7d80 [ 793.420268][T16130] should_fail_ex+0x394/0x4c0 [ 793.424982][T16130] _copy_from_user+0x2f/0xe0 [ 793.429608][T16130] __sys_bpf+0x23e/0x890 [ 793.433975][T16130] ? bpf_link_show_fdinfo+0x390/0x390 [ 793.439393][T16130] ? lock_chain_count+0x20/0x20 [ 793.444283][T16130] __x64_sys_bpf+0x7c/0x90 [ 793.448737][T16130] do_syscall_64+0x55/0xb0 [ 793.453208][T16130] ? clear_bhb_loop+0x40/0x90 [ 793.457915][T16130] ? clear_bhb_loop+0x40/0x90 [ 793.462622][T16130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.468557][T16130] RIP: 0033:0x7f92a599de59 [ 793.473010][T16130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.492662][T16130] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 793.501113][T16130] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 793.509120][T16130] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 793.517126][T16130] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 793.525125][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.533211][T16130] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 793.541228][T16130] [ 793.901544][T16141] FAULT_INJECTION: forcing a failure. [ 793.901544][T16141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.938921][T16141] CPU: 1 PID: 16141 Comm: syz.3.3644 Not tainted syzkaller #0 [ 793.946568][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.956693][T16141] Call Trace: [ 793.960037][T16141] [ 793.963014][T16141] dump_stack_lvl+0x18c/0x250 [ 793.967759][T16141] ? show_regs_print_info+0x20/0x20 [ 793.973025][T16141] ? load_image+0x420/0x420 [ 793.977586][T16141] ? __might_fault+0xaa/0x120 [ 793.982313][T16141] ? __lock_acquire+0x7d80/0x7d80 [ 793.987400][T16141] should_fail_ex+0x394/0x4c0 [ 793.992146][T16141] _copy_from_user+0x2f/0xe0 [ 793.996785][T16141] __sys_bpf+0x23e/0x890 [ 794.001084][T16141] ? bpf_link_show_fdinfo+0x390/0x390 [ 794.006533][T16141] ? lock_chain_count+0x20/0x20 [ 794.011448][T16141] __x64_sys_bpf+0x7c/0x90 [ 794.015916][T16141] do_syscall_64+0x55/0xb0 [ 794.020387][T16141] ? clear_bhb_loop+0x40/0x90 [ 794.025108][T16141] ? clear_bhb_loop+0x40/0x90 [ 794.029838][T16141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.035792][T16141] RIP: 0033:0x7facb539de59 [ 794.040253][T16141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.060001][T16141] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.068477][T16141] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 794.076523][T16141] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 794.084533][T16141] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 794.092546][T16141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.100561][T16141] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 794.108609][T16141] [ 795.228414][T16160] FAULT_INJECTION: forcing a failure. [ 795.228414][T16160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.296377][T16160] CPU: 1 PID: 16160 Comm: syz.2.3651 Not tainted syzkaller #0 [ 795.303934][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.314045][T16160] Call Trace: [ 795.317374][T16160] [ 795.320356][T16160] dump_stack_lvl+0x18c/0x250 [ 795.325198][T16160] ? show_regs_print_info+0x20/0x20 [ 795.330466][T16160] ? load_image+0x420/0x420 [ 795.335038][T16160] ? __might_fault+0xaa/0x120 [ 795.339796][T16160] ? __lock_acquire+0x7d80/0x7d80 [ 795.344899][T16160] should_fail_ex+0x394/0x4c0 [ 795.349651][T16160] _copy_from_user+0x2f/0xe0 [ 795.354298][T16160] __sys_bpf+0x23e/0x890 [ 795.358600][T16160] ? bpf_link_show_fdinfo+0x390/0x390 [ 795.364057][T16160] ? lock_chain_count+0x20/0x20 [ 795.368984][T16160] __x64_sys_bpf+0x7c/0x90 [ 795.373452][T16160] do_syscall_64+0x55/0xb0 [ 795.377912][T16160] ? clear_bhb_loop+0x40/0x90 [ 795.382619][T16160] ? clear_bhb_loop+0x40/0x90 [ 795.387324][T16160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.393342][T16160] RIP: 0033:0x7f92a599de59 [ 795.397800][T16160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.417465][T16160] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.425919][T16160] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 795.434027][T16160] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 795.442047][T16160] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 795.450065][T16160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.458180][T16160] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 795.466211][T16160] [ 795.888668][T16176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3653'. [ 797.127108][T16187] FAULT_INJECTION: forcing a failure. [ 797.127108][T16187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.144282][T16187] CPU: 0 PID: 16187 Comm: syz.2.3659 Not tainted syzkaller #0 [ 797.151808][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.161910][T16187] Call Trace: [ 797.165236][T16187] [ 797.168211][T16187] dump_stack_lvl+0x18c/0x250 [ 797.172976][T16187] ? show_regs_print_info+0x20/0x20 [ 797.178338][T16187] ? load_image+0x420/0x420 [ 797.182905][T16187] ? __might_fault+0xaa/0x120 [ 797.187655][T16187] ? __lock_acquire+0x7d80/0x7d80 [ 797.192746][T16187] should_fail_ex+0x394/0x4c0 [ 797.197482][T16187] _copy_from_iter+0x1cd/0x1290 [ 797.202401][T16187] ? rcu_is_watching+0x15/0xb0 [ 797.207243][T16187] ? copyout_mc+0x70/0x70 [ 797.211641][T16187] ? __virt_addr_valid+0x10c/0x380 [ 797.216822][T16187] ? __virt_addr_valid+0x10c/0x380 [ 797.222087][T16187] ? __virt_addr_valid+0x10c/0x380 [ 797.227357][T16187] ? __check_object_size+0x4fc/0xa40 [ 797.232699][T16187] netlink_sendmsg+0x76b/0xbf0 [ 797.237535][T16187] ? netlink_getsockopt+0x590/0x590 [ 797.242812][T16187] ? apparmor_socket_sendmsg+0x8e/0x330 [ 797.248512][T16187] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 797.253894][T16187] ? security_socket_sendmsg+0x80/0xa0 [ 797.259418][T16187] ? netlink_getsockopt+0x590/0x590 [ 797.264683][T16187] ____sys_sendmsg+0x61b/0x980 [ 797.269519][T16187] ? __asan_memset+0x22/0x40 [ 797.274164][T16187] ? __sys_sendmsg_sock+0x30/0x30 [ 797.279274][T16187] ? __import_iovec+0x5f2/0x850 [ 797.284193][T16187] ? import_iovec+0x73/0xa0 [ 797.288791][T16187] ___sys_sendmsg+0x2a6/0x360 [ 797.293557][T16187] ? get_pid_task+0x20/0x1e0 [ 797.298231][T16187] ? __sys_sendmsg+0x2b0/0x2b0 [ 797.303110][T16187] ? __lock_acquire+0x7d80/0x7d80 [ 797.308217][T16187] __se_sys_sendmsg+0x1d0/0x2c0 [ 797.313138][T16187] ? __x64_sys_sendmsg+0x80/0x80 [ 797.318159][T16187] ? lockdep_hardirqs_on+0x98/0x150 [ 797.323440][T16187] do_syscall_64+0x55/0xb0 [ 797.327936][T16187] ? clear_bhb_loop+0x40/0x90 [ 797.332707][T16187] ? clear_bhb_loop+0x40/0x90 [ 797.337523][T16187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.343478][T16187] RIP: 0033:0x7f92a599de59 [ 797.347939][T16187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.367613][T16187] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.376088][T16187] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 797.384105][T16187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 797.392137][T16187] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 797.400167][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.408227][T16187] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 797.416268][T16187] [ 797.453775][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 797.701089][T16193] FAULT_INJECTION: forcing a failure. [ 797.701089][T16193] name failslab, interval 1, probability 0, space 0, times 0 [ 797.776170][T16193] CPU: 0 PID: 16193 Comm: syz.0.3660 Not tainted syzkaller #0 [ 797.783754][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.793902][T16193] Call Trace: [ 797.797270][T16193] [ 797.800282][T16193] dump_stack_lvl+0x18c/0x250 [ 797.805071][T16193] ? show_regs_print_info+0x20/0x20 [ 797.810373][T16193] ? load_image+0x420/0x420 [ 797.815001][T16193] ? __might_sleep+0xe0/0xe0 [ 797.819692][T16193] ? __lock_acquire+0x7d80/0x7d80 [ 797.824827][T16193] should_fail_ex+0x394/0x4c0 [ 797.829617][T16193] should_failslab+0x9/0x20 [ 797.834211][T16193] slab_pre_alloc_hook+0x59/0x300 [ 797.839340][T16193] ? __request_module+0x2ed/0x600 [ 797.844481][T16193] ? __request_module+0x2ed/0x600 [ 797.849619][T16193] __kmem_cache_alloc_node+0x53/0x250 [ 797.855103][T16193] ? __request_module+0x2ed/0x600 [ 797.860214][T16193] __kmalloc_node_track_caller+0xa4/0x230 [ 797.866055][T16193] kstrdup+0x3b/0x80 [ 797.870055][T16193] __request_module+0x2ed/0x600 [ 797.875030][T16193] ? module_enforce_rwx_sections+0x150/0x150 [ 797.881115][T16193] ? tcp_set_ulp+0xb1/0x5f0 [ 797.885732][T16193] ? bpf_lsm_capable+0x9/0x10 [ 797.890499][T16193] ? security_capable+0x89/0xb0 [ 797.895453][T16193] ? tcp_set_ulp+0xb1/0x5f0 [ 797.900052][T16193] ? tcp_set_ulp+0xb1/0x5f0 [ 797.904641][T16193] tcp_set_ulp+0x263/0x5f0 [ 797.909153][T16193] do_tcp_setsockopt+0x451/0x1c50 [ 797.914342][T16193] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 797.919843][T16193] ? __fget_files+0x28/0x460 [ 797.924530][T16193] ? aa_sock_opt_perm+0x74/0x100 [ 797.929567][T16193] ? sock_common_setsockopt+0x36/0xc0 [ 797.935028][T16193] ? tcp_setsockopt+0x3d/0xe0 [ 797.939802][T16193] ? tcp_enable_tx_delay+0x70/0x70 [ 797.945012][T16193] ? sock_common_recvmsg+0x190/0x190 [ 797.950400][T16193] do_sock_setsockopt+0x175/0x1a0 [ 797.955556][T16193] ? __fdget+0x180/0x210 [ 797.959903][T16193] __x64_sys_setsockopt+0x182/0x200 [ 797.965224][T16193] do_syscall_64+0x55/0xb0 [ 797.969745][T16193] ? clear_bhb_loop+0x40/0x90 [ 797.974509][T16193] ? clear_bhb_loop+0x40/0x90 [ 797.979285][T16193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.985372][T16193] RIP: 0033:0x7f12be99de59 [ 797.989916][T16193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.009628][T16193] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 798.018145][T16193] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 798.026208][T16193] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000005 [ 798.034275][T16193] RBP: 00007f12bf7e2090 R08: 0000000000000004 R09: 0000000000000000 [ 798.042360][T16193] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 798.050542][T16193] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 798.058670][T16193] [ 798.180814][T16195] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3659'. [ 798.235964][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 798.399800][T16195] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3659'. [ 798.727026][T16207] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3663'. [ 799.008692][T16202] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3659'. [ 799.021835][T16207] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3663'. [ 799.073006][T16201] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3663'. [ 799.116172][T16199] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3663'. [ 799.495699][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 799.532931][T16215] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 799.541471][T16215] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 800.041485][T16225] netlink: 'syz.1.3669': attribute type 10 has an invalid length. [ 800.295916][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 801.123353][T16241] netlink: 'syz.2.3674': attribute type 29 has an invalid length. [ 801.163063][T16241] netlink: 'syz.2.3674': attribute type 29 has an invalid length. [ 801.206438][T16246] netlink: 'syz.2.3674': attribute type 29 has an invalid length. [ 801.214514][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 801.238337][T16241] netlink: 'syz.2.3674': attribute type 10 has an invalid length. [ 801.282185][T16241] geneve0: entered promiscuous mode [ 801.343084][T16252] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3678'. [ 801.393155][T16241] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 801.407056][T16252] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3678'. [ 801.455958][T16248] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3678'. [ 802.993657][T16279] netlink: 'syz.2.3688': attribute type 1 has an invalid length. [ 803.444487][T16306] netlink: 'syz.2.3698': attribute type 17 has an invalid length. [ 803.473559][T16306] netlink: 'syz.2.3698': attribute type 16 has an invalid length. [ 803.483980][T16306] __nla_validate_parse: 4 callbacks suppressed [ 803.483998][T16306] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3698'. [ 804.314724][T16317] FAULT_INJECTION: forcing a failure. [ 804.314724][T16317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.337304][T16317] CPU: 0 PID: 16317 Comm: syz.1.3704 Not tainted syzkaller #0 [ 804.344853][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.354969][T16317] Call Trace: [ 804.358351][T16317] [ 804.361356][T16317] dump_stack_lvl+0x18c/0x250 [ 804.366158][T16317] ? show_regs_print_info+0x20/0x20 [ 804.371442][T16317] ? load_image+0x420/0x420 [ 804.376011][T16317] ? __might_fault+0xaa/0x120 [ 804.380850][T16317] ? __lock_acquire+0x7d80/0x7d80 [ 804.386031][T16317] should_fail_ex+0x394/0x4c0 [ 804.390782][T16317] _copy_from_user+0x2f/0xe0 [ 804.395485][T16317] ___sys_sendmsg+0x1c7/0x360 [ 804.400239][T16317] ? get_pid_task+0x20/0x1e0 [ 804.405427][T16317] ? __sys_sendmsg+0x2b0/0x2b0 [ 804.410340][T16317] ? __lock_acquire+0x7d80/0x7d80 [ 804.415478][T16317] __se_sys_sendmsg+0x1d0/0x2c0 [ 804.420420][T16317] ? __x64_sys_sendmsg+0x80/0x80 [ 804.425475][T16317] ? lockdep_hardirqs_on+0x98/0x150 [ 804.430745][T16317] do_syscall_64+0x55/0xb0 [ 804.435243][T16317] ? clear_bhb_loop+0x40/0x90 [ 804.439969][T16317] ? clear_bhb_loop+0x40/0x90 [ 804.444717][T16317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.450676][T16317] RIP: 0033:0x7fbc57f9de59 [ 804.455153][T16317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.475084][T16317] RSP: 002b:00007fbc58da3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.483662][T16317] RAX: ffffffffffffffda RBX: 00007fbc58225fa0 RCX: 00007fbc57f9de59 [ 804.491705][T16317] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 804.499743][T16317] RBP: 00007fbc58da3090 R08: 0000000000000000 R09: 0000000000000000 [ 804.507781][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.515806][T16317] R13: 00007fbc58226038 R14: 00007fbc58225fa0 R15: 00007ffce16b8c88 [ 804.523952][T16317] [ 805.484960][T16343] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3712'. [ 805.864246][T16351] FAULT_INJECTION: forcing a failure. [ 805.864246][T16351] name failslab, interval 1, probability 0, space 0, times 0 [ 805.877386][T16351] CPU: 0 PID: 16351 Comm: syz.3.3715 Not tainted syzkaller #0 [ 805.884896][T16351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.895080][T16351] Call Trace: [ 805.898393][T16351] [ 805.901430][T16351] dump_stack_lvl+0x18c/0x250 [ 805.906173][T16351] ? show_regs_print_info+0x20/0x20 [ 805.911587][T16351] ? load_image+0x420/0x420 [ 805.916170][T16351] should_fail_ex+0x394/0x4c0 [ 805.920891][T16351] should_failslab+0x9/0x20 [ 805.925532][T16351] slab_pre_alloc_hook+0x59/0x300 [ 805.930604][T16351] ? ida_alloc_range+0x5e7/0x860 [ 805.935615][T16351] __kmem_cache_alloc_node+0x53/0x250 [ 805.941044][T16351] ? ida_alloc_range+0x5e7/0x860 [ 805.946014][T16351] kmalloc_trace+0x2a/0xe0 [ 805.950474][T16351] ida_alloc_range+0x5e7/0x860 [ 805.955285][T16351] ? __xdp_reg_mem_model+0x1fd/0x5a0 [ 805.960720][T16351] ? idr_replace+0x1b0/0x1b0 [ 805.965359][T16351] __xdp_reg_mem_model+0x219/0x5a0 [ 805.970520][T16351] ? kvmalloc_node+0x70/0x180 [ 805.975235][T16351] ? kvmalloc_node+0x70/0x180 [ 805.979946][T16351] ? xdp_reg_mem_model+0x40/0x40 [ 805.984927][T16351] xdp_reg_mem_model+0x22/0x40 [ 805.989783][T16351] bpf_test_run_xdp_live+0x262/0x1b30 [ 805.995201][T16351] ? 0xffffffffa00044c0 [ 805.999387][T16351] ? 0xffffffffa00044c0 [ 806.003572][T16351] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 806.009509][T16351] ? xdp_convert_md_to_buff+0x330/0x330 [ 806.015119][T16351] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 806.021405][T16351] ? _copy_from_user+0xa5/0xe0 [ 806.026247][T16351] ? bpf_test_init+0x119/0x140 [ 806.031046][T16351] ? xdp_convert_md_to_buff+0x5b/0x330 [ 806.036544][T16351] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 806.041948][T16351] ? __lock_acquire+0x7d80/0x7d80 [ 806.047023][T16351] ? dev_put+0x80/0x80 [ 806.051136][T16351] ? dev_put+0x80/0x80 [ 806.055236][T16351] bpf_prog_test_run+0x31f/0x390 [ 806.060218][T16351] __sys_bpf+0x49d/0x890 [ 806.064496][T16351] ? read_tsc+0x9/0x20 [ 806.068603][T16351] ? bpf_link_show_fdinfo+0x390/0x390 [ 806.074026][T16351] ? lock_chain_count+0x20/0x20 [ 806.078908][T16351] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 806.084927][T16351] __x64_sys_bpf+0x7c/0x90 [ 806.089380][T16351] do_syscall_64+0x55/0xb0 [ 806.093842][T16351] ? clear_bhb_loop+0x40/0x90 [ 806.098555][T16351] ? clear_bhb_loop+0x40/0x90 [ 806.103265][T16351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.109223][T16351] RIP: 0033:0x7facb539de59 [ 806.113667][T16351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.133315][T16351] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 806.141786][T16351] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 806.149787][T16351] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 806.157804][T16351] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 806.165818][T16351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.173856][T16351] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 806.181906][T16351] [ 806.819515][T16366] FAULT_INJECTION: forcing a failure. [ 806.819515][T16366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.832877][T16366] CPU: 1 PID: 16366 Comm: syz.0.3719 Not tainted syzkaller #0 [ 806.840520][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.850643][T16366] Call Trace: [ 806.853974][T16366] [ 806.856948][T16366] dump_stack_lvl+0x18c/0x250 [ 806.861700][T16366] ? show_regs_print_info+0x20/0x20 [ 806.866962][T16366] ? load_image+0x420/0x420 [ 806.871542][T16366] ? __lock_acquire+0x7d80/0x7d80 [ 806.876644][T16366] should_fail_ex+0x394/0x4c0 [ 806.881410][T16366] _copy_from_user+0x2f/0xe0 [ 806.886073][T16366] bpf_test_init+0xde/0x140 [ 806.890645][T16366] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 806.896137][T16366] ? __lock_acquire+0x7d80/0x7d80 [ 806.901223][T16366] ? dev_put+0x80/0x80 [ 806.905373][T16366] ? dev_put+0x80/0x80 [ 806.909511][T16366] bpf_prog_test_run+0x31f/0x390 [ 806.914505][T16366] __sys_bpf+0x49d/0x890 [ 806.918791][T16366] ? bpf_link_show_fdinfo+0x390/0x390 [ 806.924216][T16366] ? lock_chain_count+0x20/0x20 [ 806.929111][T16366] __x64_sys_bpf+0x7c/0x90 [ 806.933565][T16366] do_syscall_64+0x55/0xb0 [ 806.938024][T16366] ? clear_bhb_loop+0x40/0x90 [ 806.942734][T16366] ? clear_bhb_loop+0x40/0x90 [ 806.947444][T16366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.953407][T16366] RIP: 0033:0x7f12be99de59 [ 806.957857][T16366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.977594][T16366] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 806.986042][T16366] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 806.994082][T16366] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 807.002097][T16366] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 807.010104][T16366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.018100][T16366] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 807.026119][T16366] [ 807.423998][T16380] netlink: 'syz.3.3726': attribute type 5 has an invalid length. [ 807.444473][T16380] netlink: 'syz.3.3726': attribute type 5 has an invalid length. [ 807.452548][T16380] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3726'. [ 808.311678][T16390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3729'. [ 808.614583][T16400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3733'. [ 809.057432][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.068038][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.355098][T16446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3746'. [ 812.313070][T16460] netlink: 'syz.1.3751': attribute type 12 has an invalid length. [ 812.344057][T16460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3751'. [ 813.920849][T16475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3758'. [ 814.208387][T16481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3761'. [ 814.677718][T16497] netlink: 'syz.0.3765': attribute type 10 has an invalid length. [ 815.307623][T16497] geneve0: entered promiscuous mode [ 815.387541][T16497] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 815.415223][T16504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3768'. [ 815.476881][T16504] FAULT_INJECTION: forcing a failure. [ 815.476881][T16504] name failslab, interval 1, probability 0, space 0, times 0 [ 815.592496][T16504] CPU: 1 PID: 16504 Comm: syz.3.3768 Not tainted syzkaller #0 [ 815.600085][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.610217][T16504] Call Trace: [ 815.613562][T16504] [ 815.616584][T16504] dump_stack_lvl+0x18c/0x250 [ 815.621352][T16504] ? verify_lock_unused+0x140/0x140 [ 815.626655][T16504] ? show_regs_print_info+0x20/0x20 [ 815.631950][T16504] ? load_image+0x420/0x420 [ 815.636546][T16504] ? perf_trace_lock+0xfc/0x3b0 [ 815.641506][T16504] ? trace_event_raw_event_lock+0x240/0x240 [ 815.647491][T16504] ? __nla_validate_parse+0x2701/0x2fd0 [ 815.653126][T16504] should_fail_ex+0x394/0x4c0 [ 815.657867][T16504] should_failslab+0x9/0x20 [ 815.662425][T16504] slab_pre_alloc_hook+0x59/0x300 [ 815.667500][T16504] ? ___neigh_create+0x6f4/0x23d0 [ 815.672662][T16504] ? ___neigh_create+0x6f4/0x23d0 [ 815.677730][T16504] __kmem_cache_alloc_node+0x53/0x250 [ 815.683161][T16504] ? ___neigh_create+0x6f4/0x23d0 [ 815.688230][T16504] __kmalloc+0xa7/0x240 [ 815.692443][T16504] ___neigh_create+0x6f4/0x23d0 [ 815.697346][T16504] ? neigh_lookup+0x364/0x3f0 [ 815.702075][T16504] ? neigh_lookup+0xaf/0x3f0 [ 815.706707][T16504] ? neigh_ifdown+0x30/0x30 [ 815.711276][T16504] neigh_add+0xb18/0xdf0 [ 815.716088][T16504] ? do_raw_spin_unlock+0x121/0x230 [ 815.721434][T16504] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 815.727767][T16504] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 815.734062][T16504] rtnetlink_rcv_msg+0x843/0xf90 [ 815.739040][T16504] ? rtnetlink_rcv_msg+0x220/0xf90 [ 815.744246][T16504] ? rtnetlink_bind+0x80/0x80 [ 815.748997][T16504] ? perf_trace_preemptirq_template+0xac/0x330 [ 815.755221][T16504] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 815.761256][T16504] ? lock_chain_count+0x20/0x20 [ 815.766175][T16504] ? __local_bh_enable_ip+0x13a/0x1c0 [ 815.771612][T16504] ? lockdep_hardirqs_on+0x98/0x150 [ 815.776860][T16504] ? __local_bh_enable_ip+0x13a/0x1c0 [ 815.782281][T16504] ? _local_bh_enable+0xa0/0xa0 [ 815.787199][T16504] ? __dev_queue_xmit+0x275/0x3630 [ 815.792361][T16504] ? __dev_queue_xmit+0x1bc2/0x3630 [ 815.797709][T16504] ? __dev_queue_xmit+0x275/0x3630 [ 815.802900][T16504] ? perf_trace_lock+0xfc/0x3b0 [ 815.807823][T16504] netlink_rcv_skb+0x235/0x4c0 [ 815.812646][T16504] ? rtnetlink_bind+0x80/0x80 [ 815.817376][T16504] ? netlink_ack+0x1160/0x1160 [ 815.822205][T16504] ? __lock_acquire+0x7d80/0x7d80 [ 815.827390][T16504] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.832650][T16504] netlink_unicast+0x7b1/0x930 [ 815.837509][T16504] netlink_sendmsg+0x8d0/0xbf0 [ 815.842341][T16504] ? netlink_getsockopt+0x590/0x590 [ 815.847596][T16504] ? apparmor_socket_sendmsg+0x170/0x330 [ 815.853302][T16504] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 815.858629][T16504] ? security_socket_sendmsg+0x80/0xa0 [ 815.864137][T16504] ? netlink_getsockopt+0x590/0x590 [ 815.869391][T16504] ____sys_sendmsg+0x61b/0x980 [ 815.874564][T16504] ? __asan_memset+0x22/0x40 [ 815.879563][T16504] ? __sys_sendmsg_sock+0x30/0x30 [ 815.884631][T16504] ? __import_iovec+0x5f2/0x850 [ 815.889543][T16504] ? import_iovec+0x73/0xa0 [ 815.894102][T16504] ___sys_sendmsg+0x2a6/0x360 [ 815.899024][T16504] ? __sys_sendmsg+0x2b0/0x2b0 [ 815.903960][T16504] ? __lock_acquire+0x7d80/0x7d80 [ 815.909073][T16504] __se_sys_sendmsg+0x1d0/0x2c0 [ 815.913980][T16504] ? __x64_sys_sendmsg+0x80/0x80 [ 815.918996][T16504] ? lockdep_hardirqs_on+0x98/0x150 [ 815.924275][T16504] do_syscall_64+0x55/0xb0 [ 815.928762][T16504] ? clear_bhb_loop+0x40/0x90 [ 815.933486][T16504] ? clear_bhb_loop+0x40/0x90 [ 815.938206][T16504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.944167][T16504] RIP: 0033:0x7facb539de59 [ 815.948654][T16504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.968409][T16504] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.976901][T16504] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 815.984914][T16504] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000004 [ 815.993037][T16504] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 816.001160][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.009467][T16504] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 816.017583][T16504] [ 816.766145][T16527] netlink: 'syz.3.3773': attribute type 29 has an invalid length. [ 816.884160][T16527] netlink: 'syz.3.3773': attribute type 29 has an invalid length. [ 816.916512][T16530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3773'. [ 817.086700][T16536] netlink: 'syz.2.3776': attribute type 29 has an invalid length. [ 817.147362][T16536] netlink: 'syz.2.3776': attribute type 29 has an invalid length. [ 817.401715][T16532] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3776'. [ 818.253576][T16548] syzkaller0: entered promiscuous mode [ 818.302513][T16548] syzkaller0: entered allmulticast mode [ 818.670893][T16554] sctp: [Deprecated]: syz.3.3784 (pid 16554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.670893][T16554] Use struct sctp_sack_info instead [ 821.314211][T16595] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3799'. [ 821.329260][T16595] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 823.132290][T16613] netlink: 'syz.2.3805': attribute type 2 has an invalid length. [ 823.154688][T16613] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3805'. [ 823.192442][T16615] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 823.204259][T16613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3805'. [ 823.220084][T16615] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3807'. [ 823.240484][T16615] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 823.327115][T16613] netlink: 'syz.2.3805': attribute type 10 has an invalid length. [ 824.180224][T16635] FAULT_INJECTION: forcing a failure. [ 824.180224][T16635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.222239][T16635] CPU: 1 PID: 16635 Comm: syz.0.3814 Not tainted syzkaller #0 [ 824.229893][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.240014][T16635] Call Trace: [ 824.243344][T16635] [ 824.246369][T16635] dump_stack_lvl+0x18c/0x250 [ 824.251118][T16635] ? show_regs_print_info+0x20/0x20 [ 824.256382][T16635] ? load_image+0x420/0x420 [ 824.260989][T16635] ? __might_fault+0xaa/0x120 [ 824.265817][T16635] ? __lock_acquire+0x7d80/0x7d80 [ 824.270920][T16635] should_fail_ex+0x394/0x4c0 [ 824.275664][T16635] _copy_from_iter+0x1cd/0x1290 [ 824.280579][T16635] ? rcu_is_watching+0x15/0xb0 [ 824.285513][T16635] ? copyout_mc+0x70/0x70 [ 824.289920][T16635] ? __virt_addr_valid+0x10c/0x380 [ 824.295108][T16635] ? __virt_addr_valid+0x10c/0x380 [ 824.300284][T16635] ? __virt_addr_valid+0x10c/0x380 [ 824.305472][T16635] ? __check_object_size+0x4fc/0xa40 [ 824.310832][T16635] netlink_sendmsg+0x76b/0xbf0 [ 824.315690][T16635] ? netlink_getsockopt+0x590/0x590 [ 824.321052][T16635] ? apparmor_socket_sendmsg+0x8e/0x330 [ 824.326722][T16635] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 824.332167][T16635] ? security_socket_sendmsg+0x80/0xa0 [ 824.337701][T16635] ? netlink_getsockopt+0x590/0x590 [ 824.342978][T16635] ____sys_sendmsg+0x61b/0x980 [ 824.347822][T16635] ? __asan_memset+0x22/0x40 [ 824.352468][T16635] ? __sys_sendmsg_sock+0x30/0x30 [ 824.357551][T16635] ? __import_iovec+0x5f2/0x850 [ 824.362478][T16635] ? import_iovec+0x73/0xa0 [ 824.367033][T16635] ___sys_sendmsg+0x2a6/0x360 [ 824.371797][T16635] ? get_pid_task+0x20/0x1e0 [ 824.376713][T16635] ? __sys_sendmsg+0x2b0/0x2b0 [ 824.381593][T16635] ? __lock_acquire+0x7d80/0x7d80 [ 824.386716][T16635] __se_sys_sendmsg+0x1d0/0x2c0 [ 824.391651][T16635] ? __x64_sys_sendmsg+0x80/0x80 [ 824.396660][T16635] ? syscall_enter_from_user_mode+0x20/0x80 [ 824.402626][T16635] ? lockdep_hardirqs_on+0x98/0x150 [ 824.407890][T16635] do_syscall_64+0x55/0xb0 [ 824.412402][T16635] ? clear_bhb_loop+0x40/0x90 [ 824.417129][T16635] ? clear_bhb_loop+0x40/0x90 [ 824.421858][T16635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.427985][T16635] RIP: 0033:0x7f12be99de59 [ 824.432451][T16635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.452107][T16635] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.460927][T16635] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 824.468946][T16635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 824.476961][T16635] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 824.484984][T16635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.492991][T16635] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 824.501033][T16635] [ 824.615840][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 825.014848][T16642] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3816'. [ 825.038897][T16642] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3816'. [ 825.336582][T16651] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3814'. [ 825.345975][T16651] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3814'. [ 825.356329][T16639] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3814'. [ 825.421411][T16635] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3814'. [ 825.581729][T16657] sctp: [Deprecated]: syz.1.3820 (pid 16657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.581729][T16657] Use struct sctp_sack_info instead [ 826.489320][T16674] netlink: 'syz.0.3826': attribute type 22 has an invalid length. [ 826.502093][T16674] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.3826'. [ 826.513228][T16673] netlink: 'syz.1.3827': attribute type 39 has an invalid length. [ 826.556499][ T51] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 826.698173][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 827.728332][T16687] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3827'. [ 827.738097][T16687] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3827'. [ 827.748328][T16680] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3827'. [ 827.838294][T16678] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3827'. [ 828.105288][T16692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 828.112625][T16692] IPv6: NLM_F_CREATE should be set when creating new route [ 828.119985][T16692] IPv6: NLM_F_CREATE should be set when creating new route [ 828.127290][T16692] IPv6: NLM_F_CREATE should be set when creating new route [ 828.160973][T16693] netlink: 'syz.0.3831': attribute type 29 has an invalid length. [ 828.171258][T16693] netlink: 'syz.0.3831': attribute type 29 has an invalid length. [ 828.212499][T16695] netlink: 'syz.0.3831': attribute type 29 has an invalid length. [ 828.267824][T16693] netlink: 'syz.0.3831': attribute type 10 has an invalid length. [ 828.366630][T16696] netlink: 'syz.3.3832': attribute type 17 has an invalid length. [ 828.395015][T16696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3832'. [ 828.452601][T16696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.572646][T16703] netlink: 'syz.2.3835': attribute type 39 has an invalid length. [ 828.625616][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 829.291176][T16706] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3835'. [ 829.316203][T16706] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3835'. [ 829.346019][T16714] FAULT_INJECTION: forcing a failure. [ 829.346019][T16714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.376387][T16706] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3835'. [ 829.405992][T16714] CPU: 0 PID: 16714 Comm: syz.3.3838 Not tainted syzkaller #0 [ 829.413581][T16714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 829.423721][T16714] Call Trace: [ 829.427078][T16714] [ 829.430091][T16714] dump_stack_lvl+0x18c/0x250 [ 829.434884][T16714] ? show_regs_print_info+0x20/0x20 [ 829.440190][T16714] ? load_image+0x420/0x420 [ 829.444813][T16714] ? __might_fault+0xaa/0x120 [ 829.449591][T16714] ? __lock_acquire+0x7d80/0x7d80 [ 829.454725][T16714] ? __virt_addr_valid+0x10c/0x380 [ 829.459965][T16714] should_fail_ex+0x394/0x4c0 [ 829.464848][T16714] _copy_from_user+0x2f/0xe0 [ 829.469548][T16714] generic_map_update_batch+0x58c/0x800 [ 829.475233][T16714] ? rcu_read_unlock+0xa0/0xa0 [ 829.480113][T16714] ? __fdget+0x180/0x210 [ 829.484471][T16714] ? rcu_read_unlock+0xa0/0xa0 [ 829.489368][T16714] bpf_map_do_batch+0x3f2/0x600 [ 829.494318][T16714] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 829.500777][T16714] __sys_bpf+0x381/0x890 [ 829.505129][T16714] ? bpf_link_show_fdinfo+0x390/0x390 [ 829.510637][T16714] ? lock_chain_count+0x20/0x20 [ 829.515606][T16714] __x64_sys_bpf+0x7c/0x90 [ 829.520097][T16714] do_syscall_64+0x55/0xb0 [ 829.524568][T16714] ? clear_bhb_loop+0x40/0x90 [ 829.529306][T16714] ? clear_bhb_loop+0x40/0x90 [ 829.534044][T16714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.540010][T16714] RIP: 0033:0x7facb539de59 [ 829.544501][T16714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.564307][T16714] RSP: 002b:00007facb61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 829.572789][T16714] RAX: ffffffffffffffda RBX: 00007facb5625fa0 RCX: 00007facb539de59 [ 829.580910][T16714] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 829.589054][T16714] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 829.597080][T16714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 829.605112][T16714] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 829.613195][T16714] [ 829.639827][T16703] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3835'. [ 830.968431][T16751] tap0: tun_chr_ioctl cmd 1074025677 [ 830.974087][T16751] tap0: linktype set to 270 [ 831.056214][T16755] tap0: tun_chr_ioctl cmd 2148553947 [ 831.617489][T16763] netlink: 'syz.1.3855': attribute type 21 has an invalid length. [ 831.811756][T16769] FAULT_INJECTION: forcing a failure. [ 831.811756][T16769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.848386][T16769] CPU: 0 PID: 16769 Comm: syz.2.3859 Not tainted syzkaller #0 [ 831.856049][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.866171][T16769] Call Trace: [ 831.869499][T16769] [ 831.872469][T16769] dump_stack_lvl+0x18c/0x250 [ 831.877214][T16769] ? show_regs_print_info+0x20/0x20 [ 831.882473][T16769] ? load_image+0x420/0x420 [ 831.887037][T16769] ? __might_fault+0xaa/0x120 [ 831.891947][T16769] ? __lock_acquire+0x7d80/0x7d80 [ 831.897063][T16769] should_fail_ex+0x394/0x4c0 [ 831.901811][T16769] _copy_to_user+0x2f/0xa0 [ 831.906275][T16769] bpf_test_finish+0x25a/0x650 [ 831.911107][T16769] ? dst_hold+0x70/0x70 [ 831.915322][T16769] ? convert_skb_to___skb+0x420/0x420 [ 831.920759][T16769] ? bpf_test_init+0x119/0x140 [ 831.925579][T16769] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 831.931008][T16769] ? __lock_acquire+0x7d80/0x7d80 [ 831.936110][T16769] ? dev_put+0x80/0x80 [ 831.940231][T16769] ? dev_put+0x80/0x80 [ 831.944329][T16769] bpf_prog_test_run+0x31f/0x390 [ 831.949302][T16769] __sys_bpf+0x49d/0x890 [ 831.953573][T16769] ? bpf_link_show_fdinfo+0x390/0x390 [ 831.958989][T16769] ? lock_chain_count+0x20/0x20 [ 831.963873][T16769] __x64_sys_bpf+0x7c/0x90 [ 831.968320][T16769] do_syscall_64+0x55/0xb0 [ 831.972775][T16769] ? clear_bhb_loop+0x40/0x90 [ 831.977480][T16769] ? clear_bhb_loop+0x40/0x90 [ 831.982210][T16769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.988166][T16769] RIP: 0033:0x7f92a599de59 [ 831.992636][T16769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.012289][T16769] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 832.020739][T16769] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 832.028757][T16769] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 832.036762][T16769] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 832.044763][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.052763][T16769] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 832.060789][T16769] [ 832.086819][T16775] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3857'. [ 832.100499][T16775] tc_dump_action: action bad kind [ 832.241731][T16779] netlink: 'syz.1.3861': attribute type 21 has an invalid length. [ 832.280722][T16782] FAULT_INJECTION: forcing a failure. [ 832.280722][T16782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.294592][T16782] CPU: 0 PID: 16782 Comm: syz.3.3862 Not tainted syzkaller #0 [ 832.302141][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.312287][T16782] Call Trace: [ 832.315635][T16782] [ 832.318641][T16782] dump_stack_lvl+0x18c/0x250 [ 832.323451][T16782] ? show_regs_print_info+0x20/0x20 [ 832.328820][T16782] ? load_image+0x420/0x420 [ 832.333468][T16782] ? __lock_acquire+0x7d80/0x7d80 [ 832.338588][T16782] ? snprintf+0xe9/0x140 [ 832.342941][T16782] should_fail_ex+0x394/0x4c0 [ 832.347830][T16782] _copy_to_user+0x2f/0xa0 [ 832.352354][T16782] simple_read_from_buffer+0xe7/0x150 [ 832.357869][T16782] proc_fail_nth_read+0x1e8/0x260 [ 832.363000][T16782] ? proc_fault_inject_write+0x360/0x360 [ 832.368754][T16782] ? fsnotify_perm+0x271/0x5e0 [ 832.373610][T16782] ? proc_fault_inject_write+0x360/0x360 [ 832.379322][T16782] vfs_read+0x298/0x990 [ 832.383556][T16782] ? kernel_read+0x1e0/0x1e0 [ 832.388227][T16782] ? __fget_files+0x28/0x460 [ 832.392894][T16782] ? __fget_files+0x3fc/0x460 [ 832.397679][T16782] ? __fdget_pos+0x2a3/0x330 [ 832.402346][T16782] ? ksys_read+0x74/0x260 [ 832.406755][T16782] ksys_read+0x151/0x260 [ 832.411067][T16782] ? vfs_write+0x9a0/0x9a0 [ 832.415566][T16782] ? lockdep_hardirqs_on+0x98/0x150 [ 832.420863][T16782] do_syscall_64+0x55/0xb0 [ 832.425334][T16782] ? clear_bhb_loop+0x40/0x90 [ 832.430055][T16782] ? clear_bhb_loop+0x40/0x90 [ 832.434785][T16782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.440736][T16782] RIP: 0033:0x7facb535e68e [ 832.445201][T16782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 832.465300][T16782] RSP: 002b:00007facb61ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 832.473773][T16782] RAX: ffffffffffffffda RBX: 00007facb61cd6c0 RCX: 00007facb535e68e [ 832.481792][T16782] RDX: 000000000000000f RSI: 00007facb61cd0a0 RDI: 0000000000000008 [ 832.489899][T16782] RBP: 00007facb61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 832.497921][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.505935][T16782] R13: 00007facb5626038 R14: 00007facb5625fa0 R15: 00007ffe1bfa0848 [ 832.514089][T16782] [ 833.841075][T16811] netlink: 'syz.1.3873': attribute type 21 has an invalid length. [ 836.733432][T16817] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 836.932347][T16821] netlink: 'syz.1.3876': attribute type 21 has an invalid length. [ 837.236410][T16831] netlink: 'syz.0.3880': attribute type 21 has an invalid length. [ 837.321819][T16831] netlink: 'syz.0.3880': attribute type 21 has an invalid length. [ 837.842255][T16836] syzkaller0: entered promiscuous mode [ 837.852133][T16836] syzkaller0: entered allmulticast mode [ 837.975891][T16842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'. [ 840.027082][T16852] netlink: 'syz.3.3888': attribute type 33 has an invalid length. [ 840.034993][T16852] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3888'. [ 840.059195][T16856] netlink: 'syz.3.3888': attribute type 10 has an invalid length. [ 842.016714][T16903] syzkaller0: entered promiscuous mode [ 842.045746][T16903] syzkaller0: entered allmulticast mode [ 842.104296][T16905] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3906'. [ 842.154488][T16905] openvswitch: netlink: Key type 29 is not supported [ 842.561474][T16901] netlink: 'syz.2.3906': attribute type 21 has an invalid length. [ 842.582244][T16911] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3907'. [ 842.628558][T16913] syzkaller0: entered promiscuous mode [ 842.634160][T16913] syzkaller0: entered allmulticast mode [ 842.658250][T16913] FAULT_INJECTION: forcing a failure. [ 842.658250][T16913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.685673][T16913] CPU: 1 PID: 16913 Comm: syz.0.3908 Not tainted syzkaller #0 [ 842.693395][T16913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 842.703519][T16913] Call Trace: [ 842.706846][T16913] [ 842.709827][T16913] dump_stack_lvl+0x18c/0x250 [ 842.714650][T16913] ? show_regs_print_info+0x20/0x20 [ 842.719903][T16913] ? load_image+0x420/0x420 [ 842.724450][T16913] ? __might_fault+0xaa/0x120 [ 842.729170][T16913] ? __lock_acquire+0x7d80/0x7d80 [ 842.734235][T16913] should_fail_ex+0x394/0x4c0 [ 842.739045][T16913] _copy_from_user+0x2f/0xe0 [ 842.743702][T16913] __tun_chr_ioctl+0x8b8/0x2070 [ 842.748706][T16913] ? tun_flow_create+0x310/0x310 [ 842.753709][T16913] ? bpf_lsm_file_ioctl+0x9/0x10 [ 842.758683][T16913] ? security_file_ioctl+0x80/0xa0 [ 842.763833][T16913] ? tun_chr_poll+0x630/0x630 [ 842.768579][T16913] __se_sys_ioctl+0xfd/0x170 [ 842.773209][T16913] do_syscall_64+0x55/0xb0 [ 842.777680][T16913] ? clear_bhb_loop+0x40/0x90 [ 842.782386][T16913] ? clear_bhb_loop+0x40/0x90 [ 842.787100][T16913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.793033][T16913] RIP: 0033:0x7f12be99de59 [ 842.797480][T16913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.817116][T16913] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.826026][T16913] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 842.834034][T16913] RDX: 0000200000000140 RSI: 00000000400454e2 RDI: 0000000000000003 [ 842.842035][T16913] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 842.850039][T16913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.858045][T16913] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 842.866063][T16913] [ 843.553338][T16931] syzkaller0: entered promiscuous mode [ 843.574288][T16931] syzkaller0: entered allmulticast mode [ 843.629201][T16934] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3915'. [ 843.680620][T16934] netlink: 137980 bytes leftover after parsing attributes in process `syz.1.3915'. [ 844.390608][T16950] FAULT_INJECTION: forcing a failure. [ 844.390608][T16950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.403904][T16950] CPU: 1 PID: 16950 Comm: syz.2.3921 Not tainted syzkaller #0 [ 844.411435][T16950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.421553][T16950] Call Trace: [ 844.424881][T16950] [ 844.427897][T16950] dump_stack_lvl+0x18c/0x250 [ 844.432654][T16950] ? show_regs_print_info+0x20/0x20 [ 844.437935][T16950] ? load_image+0x420/0x420 [ 844.442508][T16950] ? __might_fault+0xaa/0x120 [ 844.447244][T16950] ? __lock_acquire+0x7d80/0x7d80 [ 844.452330][T16950] should_fail_ex+0x394/0x4c0 [ 844.457075][T16950] _copy_from_iter+0x1cd/0x1290 [ 844.461980][T16950] ? __might_fault+0xaa/0x120 [ 844.466816][T16950] ? copyout_mc+0x70/0x70 [ 844.471209][T16950] ? copyout_mc+0x70/0x70 [ 844.475601][T16950] ? __virt_addr_valid+0x10c/0x380 [ 844.480787][T16950] ? page_copy_sane+0x16a/0x270 [ 844.485717][T16950] copy_page_from_iter+0x7b/0x100 [ 844.490812][T16950] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 844.496712][T16950] tun_get_user+0xc84/0x3d70 [ 844.501384][T16950] ? aa_file_perm+0x3e3/0xee0 [ 844.506382][T16950] ? rcu_read_unlock+0xa0/0xa0 [ 844.511224][T16950] ? tun_get+0x1c/0x2e0 [ 844.515526][T16950] ? __lock_acquire+0x7d80/0x7d80 [ 844.520691][T16950] ? tun_get+0x1c/0x2e0 [ 844.524888][T16950] tun_chr_write_iter+0x119/0x200 [ 844.529956][T16950] vfs_write+0x474/0x9a0 [ 844.534247][T16950] ? file_end_write+0x250/0x250 [ 844.539288][T16950] ? __fget_files+0x3fc/0x460 [ 844.544071][T16950] ? __fdget_pos+0x1d8/0x330 [ 844.548713][T16950] ? ksys_write+0x74/0x260 [ 844.553182][T16950] ksys_write+0x151/0x260 [ 844.557567][T16950] ? __ia32_sys_read+0x90/0x90 [ 844.562546][T16950] ? lockdep_hardirqs_on+0x98/0x150 [ 844.567827][T16950] do_syscall_64+0x55/0xb0 [ 844.572485][T16950] ? clear_bhb_loop+0x40/0x90 [ 844.577440][T16950] ? clear_bhb_loop+0x40/0x90 [ 844.582184][T16950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.588562][T16950] RIP: 0033:0x7f92a599de59 [ 844.593132][T16950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.612963][T16950] RSP: 002b:00007f92a67cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.621701][T16950] RAX: ffffffffffffffda RBX: 00007f92a5c25fa0 RCX: 00007f92a599de59 [ 844.629736][T16950] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 844.637748][T16950] RBP: 00007f92a67cc090 R08: 0000000000000000 R09: 0000000000000000 [ 844.645841][T16950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.653879][T16950] R13: 00007f92a5c26038 R14: 00007f92a5c25fa0 R15: 00007fff2c3afcc8 [ 844.661941][T16950] [ 846.489122][T16986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3937'. [ 846.543578][T16986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.069853][T16995] netlink: 'syz.3.3940': attribute type 21 has an invalid length. [ 847.089257][T16995] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3940'. [ 847.111735][T16995] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3940'. [ 848.266418][T17019] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 848.274624][T17019] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 848.468947][T17032] FAULT_INJECTION: forcing a failure. [ 848.468947][T17032] name failslab, interval 1, probability 0, space 0, times 0 [ 848.481762][T17032] CPU: 0 PID: 17032 Comm: syz.0.3950 Not tainted syzkaller #0 [ 848.489292][T17032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 848.499409][T17032] Call Trace: [ 848.502738][T17032] [ 848.505713][T17032] dump_stack_lvl+0x18c/0x250 [ 848.510498][T17032] ? show_regs_print_info+0x20/0x20 [ 848.515771][T17032] ? load_image+0x420/0x420 [ 848.520360][T17032] ? __might_sleep+0xe0/0xe0 [ 848.525011][T17032] ? __lock_acquire+0x7d80/0x7d80 [ 848.530093][T17032] should_fail_ex+0x394/0x4c0 [ 848.534825][T17032] should_failslab+0x9/0x20 [ 848.539374][T17032] slab_pre_alloc_hook+0x59/0x300 [ 848.544457][T17032] ? __lock_acquire+0x7d80/0x7d80 [ 848.549537][T17032] kmem_cache_alloc_node+0x5e/0x310 [ 848.554860][T17032] ? __alloc_skb+0x103/0x2c0 [ 848.559523][T17032] __alloc_skb+0x103/0x2c0 [ 848.564001][T17032] netlink_sendmsg+0x66a/0xbf0 [ 848.568862][T17032] ? netlink_getsockopt+0x590/0x590 [ 848.574120][T17032] ? apparmor_socket_sendmsg+0x8e/0x330 [ 848.579713][T17032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 848.585041][T17032] ? security_socket_sendmsg+0x80/0xa0 [ 848.590561][T17032] ? netlink_getsockopt+0x590/0x590 [ 848.595948][T17032] ____sys_sendmsg+0x61b/0x980 [ 848.600867][T17032] ? __asan_memset+0x22/0x40 [ 848.605513][T17032] ? __sys_sendmsg_sock+0x30/0x30 [ 848.610868][T17032] ? __import_iovec+0x5f2/0x850 [ 848.615782][T17032] ? import_iovec+0x73/0xa0 [ 848.620356][T17032] ___sys_sendmsg+0x2a6/0x360 [ 848.625121][T17032] ? get_pid_task+0x20/0x1e0 [ 848.629788][T17032] ? __sys_sendmsg+0x2b0/0x2b0 [ 848.634639][T17032] ? __lock_acquire+0x7d80/0x7d80 [ 848.639752][T17032] __se_sys_sendmsg+0x1d0/0x2c0 [ 848.644670][T17032] ? __x64_sys_sendmsg+0x80/0x80 [ 848.649833][T17032] ? lockdep_hardirqs_on+0x98/0x150 [ 848.655516][T17032] do_syscall_64+0x55/0xb0 [ 848.660093][T17032] ? clear_bhb_loop+0x40/0x90 [ 848.664826][T17032] ? clear_bhb_loop+0x40/0x90 [ 848.669754][T17032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.675727][T17032] RIP: 0033:0x7f12be99de59 [ 848.680199][T17032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.700677][T17032] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.709167][T17032] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 848.717252][T17032] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 848.725259][T17032] RBP: 00007f12bf7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 848.733263][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.741299][T17032] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 848.749447][T17032] [ 848.903275][T17033] syzkaller0: entered promiscuous mode [ 848.909124][T17033] syzkaller0: entered allmulticast mode [ 849.790214][T17069] FAULT_INJECTION: forcing a failure. [ 849.790214][T17069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.815770][T17069] CPU: 1 PID: 17069 Comm: syz.1.3957 Not tainted syzkaller #0 [ 849.823354][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.833563][T17069] Call Trace: [ 849.836911][T17069] [ 849.839902][T17069] dump_stack_lvl+0x18c/0x250 [ 849.844669][T17069] ? show_regs_print_info+0x20/0x20 [ 849.849957][T17069] ? load_image+0x420/0x420 [ 849.854539][T17069] ? __lock_acquire+0x7d80/0x7d80 [ 849.859641][T17069] ? snprintf+0xe9/0x140 [ 849.863955][T17069] should_fail_ex+0x394/0x4c0 [ 849.868707][T17069] _copy_to_user+0x2f/0xa0 [ 849.873174][T17069] simple_read_from_buffer+0xe7/0x150 [ 849.878620][T17069] proc_fail_nth_read+0x1e8/0x260 [ 849.883711][T17069] ? proc_fault_inject_write+0x360/0x360 [ 849.889418][T17069] ? fsnotify_perm+0x271/0x5e0 [ 849.894240][T17069] ? proc_fault_inject_write+0x360/0x360 [ 849.899939][T17069] vfs_read+0x298/0x990 [ 849.904200][T17069] ? kernel_read+0x1e0/0x1e0 [ 849.908852][T17069] ? __fget_files+0x28/0x460 [ 849.913496][T17069] ? __fget_files+0x3fc/0x460 [ 849.918242][T17069] ? __fdget_pos+0x2a3/0x330 [ 849.922892][T17069] ? ksys_read+0x74/0x260 [ 849.927306][T17069] ksys_read+0x151/0x260 [ 849.931618][T17069] ? vfs_write+0x9a0/0x9a0 [ 849.936108][T17069] ? lockdep_hardirqs_on+0x98/0x150 [ 849.941465][T17069] do_syscall_64+0x55/0xb0 [ 849.945952][T17069] ? clear_bhb_loop+0x40/0x90 [ 849.950679][T17069] ? clear_bhb_loop+0x40/0x90 [ 849.955409][T17069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.961445][T17069] RIP: 0033:0x7fbc57f5e68e [ 849.965892][T17069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 849.986920][T17069] RSP: 002b:00007fbc58da2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 849.995366][T17069] RAX: ffffffffffffffda RBX: 00007fbc58da36c0 RCX: 00007fbc57f5e68e [ 850.003385][T17069] RDX: 000000000000000f RSI: 00007fbc58da30a0 RDI: 0000000000000004 [ 850.011588][T17069] RBP: 00007fbc58da3090 R08: 0000000000000000 R09: 0000000000000000 [ 850.019603][T17069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.027609][T17069] R13: 00007fbc58226038 R14: 00007fbc58225fa0 R15: 00007ffce16b8c88 [ 850.035627][T17069] [ 850.484255][ C1] [ 850.484265][ C1] ================================ [ 850.484270][ C1] WARNING: inconsistent lock state [ 850.484289][ C1] syzkaller #0 Not tainted [ 850.484299][ C1] -------------------------------- [ 850.484305][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 850.484313][ C1] syz.0.3959/17084 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 850.484333][ C1] ffff8880308ec238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 850.484395][ C1] {INITIAL USE} state was registered at: [ 850.484402][ C1] lock_acquire+0x19e/0x420 [ 850.484430][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 850.484456][ C1] trie_update_elem+0xcd/0xdf0 [ 850.484479][ C1] bpf_map_update_value+0x64b/0x710 [ 850.484495][ C1] generic_map_update_batch+0x5de/0x800 [ 850.484511][ C1] bpf_map_do_batch+0x3f2/0x600 [ 850.484531][ C1] __sys_bpf+0x381/0x890 [ 850.484548][ C1] __x64_sys_bpf+0x7c/0x90 [ 850.484564][ C1] do_syscall_64+0x55/0xb0 [ 850.484591][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.484626][ C1] irq event stamp: 4258 [ 850.484632][ C1] hardirqs last enabled at (4257): [] perf_swevent_event+0x476/0x570 [ 850.484660][ C1] hardirqs last disabled at (4258): [] exc_debug+0x73/0x140 [ 850.484682][ C1] softirqs last enabled at (2914): [] bpf_prog_load+0x1204/0x1610 [ 850.484707][ C1] softirqs last disabled at (2910): [] bpf_ksym_add+0x2c/0x330 [ 850.484733][ C1] [ 850.484733][ C1] other info that might help us debug this: [ 850.484738][ C1] Possible unsafe locking scenario: [ 850.484738][ C1] [ 850.484743][ C1] CPU0 [ 850.484766][ C1] ---- [ 850.484770][ C1] lock(&trie->lock); [ 850.484782][ C1] [ 850.484786][ C1] lock(&trie->lock); [ 850.484797][ C1] [ 850.484797][ C1] *** DEADLOCK *** [ 850.484797][ C1] [ 850.484801][ C1] no locks held by syz.0.3959/17084. [ 850.484809][ C1] [ 850.484809][ C1] stack backtrace: [ 850.484840][ C1] CPU: 1 PID: 17084 Comm: syz.0.3959 Not tainted syzkaller #0 [ 850.484859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.484871][ C1] Call Trace: [ 850.484879][ C1] <#DB> [ 850.484961][ C1] dump_stack_lvl+0x18c/0x250 [ 850.485007][ C1] ? show_regs_print_info+0x20/0x20 [ 850.485062][ C1] ? print_usage_bug+0x43d/0x6a0 [ 850.485092][ C1] ? verify_lock_unused+0x15/0x140 [ 850.485129][ C1] lock_acquire+0x2c2/0x420 [ 850.485167][ C1] ? trie_delete_elem+0x95/0x680 [ 850.485204][ C1] ? read_lock_is_recursive+0x20/0x20 [ 850.485232][ C1] ? get_user_pages_fast_only+0xa0/0xa0 [ 850.485271][ C1] ? look_up_lock_class+0x75/0x140 [ 850.485310][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 850.485336][ C1] ? trie_delete_elem+0x95/0x680 [ 850.485365][ C1] ? _raw_spin_lock+0x40/0x40 [ 850.485397][ C1] ? perf_prepare_sample+0x1558/0x1db0 [ 850.485442][ C1] trie_delete_elem+0x95/0x680 [ 850.485472][ C1] ? perf_callchain+0x220/0x220 [ 850.485524][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 850.485554][ C1] bpf_overflow_handler+0x1fc/0x510 [ 850.485598][ C1] ? bpf_overflow_handler+0xde/0x510 [ 850.485628][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 850.485679][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 850.485709][ C1] __perf_event_overflow+0x461/0x660 [ 850.485747][ C1] perf_swevent_event+0x319/0x570 [ 850.485776][ C1] ? perf_tp_event+0x1550/0x1550 [ 850.485799][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 850.485857][ C1] perf_bp_event+0x319/0x430 [ 850.485895][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 850.486003][ C1] ? lock_acquire+0x2c2/0x420 [ 850.486048][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 850.486086][ C1] notifier_call_chain+0x18f/0x380 [ 850.486119][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 850.486149][ C1] atomic_notifier_call_chain+0xda/0x180 [ 850.486179][ C1] notify_die+0x145/0x1a0 [ 850.486211][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 850.486257][ C1] ? rcu_is_watching+0x15/0xb0 [ 850.486291][ C1] notify_debug+0x2e/0x50 [ 850.486331][ C1] exc_debug+0xde/0x140 [ 850.486360][ C1] asm_exc_debug+0x1e/0x40 [ 850.486385][ C1] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 850.486404][ C1] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 850.486420][ C1] RSP: 0018:ffffc9000f4e7cb0 EFLAGS: 00040202 [ 850.486434][ C1] RAX: 00306e6170737265 RBX: 0000000000000028 RCX: 0000000000000028 [ 850.486446][ C1] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000f4e7d20 [ 850.486458][ C1] RBP: ffffc9000f4e7dd0 R08: ffffc9000f4e7d47 R09: 1ffff92001e9cfa8 [ 850.486471][ C1] R10: dffffc0000000000 R11: fffff52001e9cfa9 R12: 0000200000000328 [ 850.486484][ C1] R13: 0000200000000300 R14: ffffc9000f4e7d20 R15: 0000200000000300 [ 850.486537][ C1] [ 850.486542][ C1] [ 850.486547][ C1] _copy_from_user+0x8b/0xe0 [ 850.486573][ C1] sock_do_ioctl+0x190/0x310 [ 850.486603][ C1] ? sock_show_fdinfo+0xb0/0xb0 [ 850.486665][ C1] sock_ioctl+0x5be/0x7e0 [ 850.486693][ C1] ? sock_poll+0x3e0/0x3e0 [ 850.486741][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 850.486759][ C1] ? security_file_ioctl+0x80/0xa0 [ 850.486784][ C1] ? sock_poll+0x3e0/0x3e0 [ 850.486805][ C1] __se_sys_ioctl+0xfd/0x170 [ 850.486846][ C1] do_syscall_64+0x55/0xb0 [ 850.486870][ C1] ? clear_bhb_loop+0x40/0x90 [ 850.486900][ C1] ? clear_bhb_loop+0x40/0x90 [ 850.486922][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.486947][ C1] RIP: 0033:0x7f12be99de59 [ 850.486964][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.486978][ C1] RSP: 002b:00007f12bf7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.486996][ C1] RAX: ffffffffffffffda RBX: 00007f12bec25fa0 RCX: 00007f12be99de59 [ 850.487008][ C1] RDX: 0000200000000300 RSI: 0000000000008946 RDI: 000000000000000f [ 850.487019][ C1] RBP: 00007f12bea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 850.487029][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.487039][ C1] R13: 00007f12bec26038 R14: 00007f12bec25fa0 R15: 00007ffefc27c138 [ 850.487092][ C1]