last executing test programs: 2m43.021354279s ago: executing program 2 (id=3722): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) (fail_nth: 5) 2m42.571534658s ago: executing program 2 (id=3724): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e", 0x34}, {&(0x7f0000000100)}], 0x2}, 0x4804) 2m41.947506424s ago: executing program 2 (id=3727): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r3, 0x4, r2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000600)=""/207) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 2m41.730861083s ago: executing program 2 (id=3730): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x4800) 2m41.462484497s ago: executing program 2 (id=3731): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba", 0x5e}], 0x1}, 0x804) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$TUNSETNOCSUM(r1, 0xb701, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x4000000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\n\x00\x00'], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}], 0x1}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x26}, 0x28) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, {0xa, 0x4e23, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0x2000f765) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x41) 2m39.96294558s ago: executing program 2 (id=3733): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 2m24.602524721s ago: executing program 32 (id=3733): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 5.209097128s ago: executing program 4 (id=4441): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x800a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x79f3cf56}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x22, 0x4, 0x783e, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x6f8fbf60ed1c50f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000300)={'wlan1\x00'}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0xffffffffffffff70) close(r1) socket$kcm(0xa, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 5.143851044s ago: executing program 0 (id=4450): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.030325912s ago: executing program 0 (id=4443): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.029902783s ago: executing program 4 (id=4444): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0xfe33) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0xac04, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=0x1, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000b000000072740200f6ffffffdd06300000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89fb, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89fb, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000950000004800000095000000000000000000000000000000802f107c6eefc99cd12c63f1059c0d423a0f9e0003628409c3e383eb6901e7d0cd1d7e429f36576bc8dfd816a157390735c8ff7fffffffffffff157a8220b67b6cc40eb50662a246c5f7ed904653b317bec368fdc8b26b706cb5d8085a791b71a9ac38af41bbd5fa9cebc525ce8c0bc88151e830f3f8b28d2ab50a169f3c44783a"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x34, 0x1, 0x10001, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r5, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x0, 0x8000, 0x10014, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x8000, 0xd79a, 0x5, 0x1, 0x400, 0xd5b, 0x1, 0x0, 0xdb, 0x0, 0x1}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x0, 0x8000, 0x10014, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x8000, 0xd79a, 0x5, 0x1, 0x400, 0xd5b, 0x1, 0x0, 0xdb, 0x0, 0x1}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x29}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.011339924s ago: executing program 1 (id=4445): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.618983508s ago: executing program 3 (id=4446): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700", 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) sendmsg$kcm(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r3, 0x4, r2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 2.576896972s ago: executing program 1 (id=4447): socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe9, 0x0, 0x3, 0x0, 0x0, 0x480000000000000b, 0x2a4ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0xd26c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x7}, {0x2, 0x3, 0x6, 0x8}, {0x0, 0x1, 0xd, 0x8}, {0x5, 0x3, 0x1}], 0x10, 0xfffffe01}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x79f3cf56}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x11, 0x4, 0x783a, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) close(r1) 2.423354385s ago: executing program 0 (id=4448): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0xfffffffffffffee8, &(0x7f0000000100), 0x1}, 0x2142) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r9, 0x8b19, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) 2.416647146s ago: executing program 3 (id=4449): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a0000000f000000000000010000000045002b04000000000000000300000000010000000500000008000000002e5f8ab1dd8788baffc204a25f002e5f61300092df06081778483f27a3"], &(0x7f00000007c0)=""/7, 0x4a, 0x7, 0x1, 0xdd}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 2.347572572s ago: executing program 4 (id=4451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0xfffffffffffffee8, &(0x7f0000000100), 0x1}, 0x2142) 2.209720444s ago: executing program 1 (id=4452): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.426378913s ago: executing program 3 (id=4453): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x800a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x79f3cf56}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x22, 0x4, 0x783e, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x6f8fbf60ed1c50f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000300)={'wlan1\x00'}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0xffffffffffffff70) close(r1) socket$kcm(0xa, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.416918754s ago: executing program 4 (id=4461): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a0000000f000000000000010000000045002b04000000000000000300000000010000000500000008000000002e5f8ab1dd8788baffc204a25f002e5f61300092df06081778483f27a3"], &(0x7f00000007c0)=""/7, 0x4a, 0x7, 0x1, 0xdd}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 1.401257856s ago: executing program 0 (id=4454): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.3506697s ago: executing program 1 (id=4455): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.207822083s ago: executing program 3 (id=4456): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 592.320047ms ago: executing program 1 (id=4457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x27, &(0x7f0000000040), 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 544.950461ms ago: executing program 4 (id=4458): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700", 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) sendmsg$kcm(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r3, 0x4, r2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 479.976137ms ago: executing program 0 (id=4459): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61127d000000000061138c0000000000bf2000000000000016000700071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070300000fff0700670200000c000000360600000ee600f0bf050000000000000f250000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc44}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r5}, &(0x7f00000003c0), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES16=0x0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 402.480474ms ago: executing program 3 (id=4460): socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe9, 0x0, 0x3, 0x0, 0x0, 0x480000000000000b, 0x2a4ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0xd26c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x7}, {0x2, 0x3, 0x6, 0x8}, {0x0, 0x1, 0xd, 0x8}, {0x5, 0x3, 0x1}], 0x10, 0xfffffe01}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x79f3cf56}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x11, 0x4, 0x783a, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) close(r1) 203.366672ms ago: executing program 4 (id=4462): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) 89.157742ms ago: executing program 0 (id=4463): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0xfffffffffffffee8, &(0x7f0000000100), 0x1}, 0x2142) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r9, 0x8b19, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) 88.401712ms ago: executing program 3 (id=4464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x27, &(0x7f0000000040), 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r2, 0x4) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x2f, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94) 0s ago: executing program 1 (id=4465): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r3 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r3, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): c+0xa4/0x230 [ 630.573775][T15585] tomoyo_realpath_from_path+0xe3/0x5d0 [ 630.579387][T15585] tomoyo_path_number_perm+0x248/0x620 [ 630.584925][T15585] ? tomoyo_path_number_perm+0x217/0x620 [ 630.590630][T15585] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 630.596147][T15585] ? ksys_write+0x1c4/0x260 [ 630.600769][T15585] ? __fget_files+0x28/0x4b0 [ 630.605428][T15585] ? __fget_files+0x28/0x4b0 [ 630.610189][T15585] security_file_ioctl+0x70/0xa0 [ 630.615196][T15585] __se_sys_ioctl+0x48/0x170 [ 630.619843][T15585] do_syscall_64+0x55/0xa0 [ 630.624325][T15585] ? clear_bhb_loop+0x40/0x90 [ 630.629053][T15585] ? clear_bhb_loop+0x40/0x90 [ 630.633779][T15585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.639717][T15585] RIP: 0033:0x7fb840b9c629 [ 630.644176][T15585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.663835][T15585] RSP: 002b:00007fb841b30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.672312][T15585] RAX: ffffffffffffffda RBX: 00007fb840e15fa0 RCX: 00007fb840b9c629 [ 630.680340][T15585] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000027 [ 630.688372][T15585] RBP: 00007fb841b30090 R08: 0000000000000000 R09: 0000000000000000 [ 630.696401][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.704423][T15585] R13: 00007fb840e16038 R14: 00007fb840e15fa0 R15: 00007fff788bf938 [ 630.712514][T15585] [ 630.730294][T15585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 630.743707][T15587] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 630.752344][T15587] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2779'. [ 630.828626][T15591] netlink: 'syz.1.2780': attribute type 10 has an invalid length. [ 630.839877][T15591] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2780'. [ 631.383322][T13950] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 632.458782][T15624] netlink: 'syz.3.2791': attribute type 10 has an invalid length. [ 632.473611][T15624] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2791'. [ 633.432323][T15652] netlink: 'syz.3.2803': attribute type 3 has an invalid length. [ 633.463280][T15652] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 633.472845][T15652] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2803'. [ 633.538201][T13950] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 634.297912][T15674] netlink: 'syz.3.2812': attribute type 3 has an invalid length. [ 634.311924][T15674] netlink: 'syz.3.2812': attribute type 1 has an invalid length. [ 634.320715][T15674] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2812'. [ 634.853258][T15684] can: request_module (can-proto-0) failed. [ 634.982276][T15694] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2820'. [ 635.073222][T15697] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2822'. [ 635.141499][T15698] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2821'. [ 635.582737][T15709] FAULT_INJECTION: forcing a failure. [ 635.582737][T15709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.597253][T15709] CPU: 0 PID: 15709 Comm: syz.1.2827 Not tainted syzkaller #0 [ 635.604867][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.615148][T15709] Call Trace: [ 635.618494][T15709] [ 635.621455][T15709] dump_stack_lvl+0x18c/0x250 [ 635.626177][T15709] ? show_regs_print_info+0x20/0x20 [ 635.631416][T15709] ? load_image+0x400/0x400 [ 635.636302][T15709] ? __might_fault+0xaa/0x120 [ 635.641012][T15709] ? __lock_acquire+0x7d40/0x7d40 [ 635.646068][T15709] should_fail_ex+0x39d/0x4d0 [ 635.650785][T15709] _copy_from_user+0x2f/0xe0 [ 635.655410][T15709] __sys_bpf+0x23e/0x890 [ 635.659710][T15709] ? bpf_link_show_fdinfo+0x390/0x390 [ 635.665125][T15709] ? lock_chain_count+0x20/0x20 [ 635.670015][T15709] __x64_sys_bpf+0x7c/0x90 [ 635.674458][T15709] do_syscall_64+0x55/0xa0 [ 635.678916][T15709] ? clear_bhb_loop+0x40/0x90 [ 635.683707][T15709] ? clear_bhb_loop+0x40/0x90 [ 635.688461][T15709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.694420][T15709] RIP: 0033:0x7f0b9779c629 [ 635.698880][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.718521][T15709] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.726970][T15709] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 635.734981][T15709] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 635.743031][T15709] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 635.751124][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.759123][T15709] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 635.767135][T15709] [ 636.094260][T15717] validate_nla: 5 callbacks suppressed [ 636.094279][T15717] netlink: 'syz.1.2831': attribute type 3 has an invalid length. [ 636.123235][T15717] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 636.141359][T15717] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2831'. [ 636.202929][T15723] netlink: 'syz.3.2833': attribute type 10 has an invalid length. [ 636.210930][T15723] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2833'. [ 636.408547][T15731] FAULT_INJECTION: forcing a failure. [ 636.408547][T15731] name failslab, interval 1, probability 0, space 0, times 0 [ 636.427710][T15731] CPU: 1 PID: 15731 Comm: syz.2.2836 Not tainted syzkaller #0 [ 636.435261][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.445373][T15731] Call Trace: [ 636.448702][T15731] [ 636.451687][T15731] dump_stack_lvl+0x18c/0x250 [ 636.456442][T15731] ? show_regs_print_info+0x20/0x20 [ 636.461709][T15731] ? load_image+0x400/0x400 [ 636.466280][T15731] ? __might_sleep+0xe0/0xe0 [ 636.470909][T15731] ? __lock_acquire+0x7d40/0x7d40 [ 636.475982][T15731] should_fail_ex+0x39d/0x4d0 [ 636.480715][T15731] should_failslab+0x9/0x20 [ 636.485261][T15731] slab_pre_alloc_hook+0x59/0x310 [ 636.490335][T15731] ? __get_vm_area_node+0x125/0x370 [ 636.495643][T15731] __kmem_cache_alloc_node+0x53/0x250 [ 636.501071][T15731] ? __get_vm_area_node+0x125/0x370 [ 636.506314][T15731] kmalloc_node_trace+0x26/0xe0 [ 636.511217][T15731] __get_vm_area_node+0x125/0x370 [ 636.516292][T15731] __vmalloc_node_range+0x36e/0x1330 [ 636.521621][T15731] ? netlink_sendmsg+0x602/0xbf0 [ 636.526597][T15731] ? netlink_insert+0x109f/0x13a0 [ 636.531674][T15731] ? netlink_data_ready+0x10/0x10 [ 636.536742][T15731] ? free_vm_area+0x50/0x50 [ 636.541298][T15731] ? netlink_sendmsg+0x602/0xbf0 [ 636.546278][T15731] vmalloc+0x79/0x90 [ 636.550217][T15731] ? netlink_sendmsg+0x602/0xbf0 [ 636.555202][T15731] netlink_sendmsg+0x602/0xbf0 [ 636.560023][T15731] ? netlink_getsockopt+0x590/0x590 [ 636.565263][T15731] ? aa_sock_msg_perm+0x94/0x150 [ 636.570237][T15731] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.575559][T15731] ? security_socket_sendmsg+0x80/0xa0 [ 636.581411][T15731] sock_write_iter+0x2df/0x420 [ 636.586214][T15731] ? sock_read_iter+0x3e0/0x3e0 [ 636.591115][T15731] ? common_file_perm+0x198/0x1f0 [ 636.596197][T15731] vfs_write+0x46c/0x990 [ 636.600501][T15731] ? file_end_write+0x250/0x250 [ 636.605399][T15731] ? __fget_files+0x43d/0x4b0 [ 636.610136][T15731] ? __fdget_pos+0x1d8/0x330 [ 636.614790][T15731] ? ksys_write+0x75/0x260 [ 636.619249][T15731] ksys_write+0x150/0x260 [ 636.623621][T15731] ? __ia32_sys_read+0x90/0x90 [ 636.628430][T15731] ? lockdep_hardirqs_on+0x98/0x150 [ 636.633669][T15731] do_syscall_64+0x55/0xa0 [ 636.638126][T15731] ? clear_bhb_loop+0x40/0x90 [ 636.642839][T15731] ? clear_bhb_loop+0x40/0x90 [ 636.647584][T15731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.653514][T15731] RIP: 0033:0x7fab5279c629 [ 636.657962][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.677610][T15731] RSP: 002b:00007fab535e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.686066][T15731] RAX: ffffffffffffffda RBX: 00007fab52a15fa0 RCX: 00007fab5279c629 [ 636.694073][T15731] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 636.702083][T15731] RBP: 00007fab535e7090 R08: 0000000000000000 R09: 0000000000000000 [ 636.710097][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.718101][T15731] R13: 00007fab52a16038 R14: 00007fab52a15fa0 R15: 00007ffd2261f2f8 [ 636.726218][T15731] [ 636.796204][T15733] netlink: 'syz.1.2837': attribute type 2 has an invalid length. [ 636.824095][T15733] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2837'. [ 636.992175][T15743] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2841'. [ 637.049706][T15745] netlink: 'syz.2.2842': attribute type 3 has an invalid length. [ 637.070857][T15745] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 637.093132][T15745] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2842'. [ 637.197492][T15748] netlink: 'syz.1.2843': attribute type 10 has an invalid length. [ 637.233057][T15748] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2843'. [ 637.690334][T13950] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 640.773126][T15774] netlink: 'syz.3.2851': attribute type 51 has an invalid length. [ 640.912720][T15780] netlink: 'syz.2.2854': attribute type 3 has an invalid length. [ 640.924154][T15780] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 640.931943][T15780] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2854'. [ 641.201134][T15783] netlink: 'syz.3.2856': attribute type 10 has an invalid length. [ 641.225344][T15783] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2856'. [ 641.491831][T15791] FAULT_INJECTION: forcing a failure. [ 641.491831][T15791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.511100][T15791] CPU: 0 PID: 15791 Comm: syz.2.2860 Not tainted syzkaller #0 [ 641.518667][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.528771][T15791] Call Trace: [ 641.532096][T15791] [ 641.535072][T15791] dump_stack_lvl+0x18c/0x250 [ 641.539840][T15791] ? show_regs_print_info+0x20/0x20 [ 641.545114][T15791] ? load_image+0x400/0x400 [ 641.549672][T15791] ? __might_fault+0xaa/0x120 [ 641.554394][T15791] ? __lock_acquire+0x7d40/0x7d40 [ 641.559496][T15791] should_fail_ex+0x39d/0x4d0 [ 641.564236][T15791] _copy_from_user+0x2f/0xe0 [ 641.568864][T15791] ___sys_sendmsg+0x1c7/0x360 [ 641.573583][T15791] ? __sys_sendmsg+0x2a0/0x2a0 [ 641.578416][T15791] ? trace_call_bpf+0xc3/0x6c0 [ 641.583264][T15791] __se_sys_sendmsg+0x1c2/0x2b0 [ 641.588153][T15791] ? __x64_sys_sendmsg+0x80/0x80 [ 641.593148][T15791] ? lockdep_hardirqs_on+0x98/0x150 [ 641.598388][T15791] do_syscall_64+0x55/0xa0 [ 641.602841][T15791] ? clear_bhb_loop+0x40/0x90 [ 641.607545][T15791] ? clear_bhb_loop+0x40/0x90 [ 641.612262][T15791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.618189][T15791] RIP: 0033:0x7fab5279c629 [ 641.622685][T15791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.642333][T15791] RSP: 002b:00007fab535e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.650836][T15791] RAX: ffffffffffffffda RBX: 00007fab52a15fa0 RCX: 00007fab5279c629 [ 641.658841][T15791] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 641.666843][T15791] RBP: 00007fab535e7090 R08: 0000000000000000 R09: 0000000000000000 [ 641.674846][T15791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.682851][T15791] R13: 00007fab52a16038 R14: 00007fab52a15fa0 R15: 00007ffd2261f2f8 [ 641.690878][T15791] [ 642.233114][T13950] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 642.568697][T15806] netlink: 'syz.1.2866': attribute type 3 has an invalid length. [ 642.590099][T15806] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 642.599305][T15806] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2866'. [ 642.665024][T15808] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 642.673830][T15808] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2867'. [ 642.955099][T15820] netlink: 'syz.2.2872': attribute type 3 has an invalid length. [ 642.969829][T15820] netlink: 'syz.2.2872': attribute type 1 has an invalid length. [ 642.978129][T15820] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2872'. [ 643.071672][T15821] FAULT_INJECTION: forcing a failure. [ 643.071672][T15821] name failslab, interval 1, probability 0, space 0, times 0 [ 643.117402][T15821] CPU: 0 PID: 15821 Comm: syz.3.2870 Not tainted syzkaller #0 [ 643.125110][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.135209][T15821] Call Trace: [ 643.138534][T15821] [ 643.141516][T15821] dump_stack_lvl+0x18c/0x250 [ 643.146264][T15821] ? show_regs_print_info+0x20/0x20 [ 643.151536][T15821] ? load_image+0x400/0x400 [ 643.156102][T15821] ? __might_sleep+0xe0/0xe0 [ 643.160747][T15821] ? __lock_acquire+0x7d40/0x7d40 [ 643.165824][T15821] should_fail_ex+0x39d/0x4d0 [ 643.170579][T15821] should_failslab+0x9/0x20 [ 643.175142][T15821] slab_pre_alloc_hook+0x59/0x310 [ 643.180238][T15821] ? kernfs_fop_write_iter+0x159/0x520 [ 643.185761][T15821] ? kernfs_fop_write_iter+0x159/0x520 [ 643.191279][T15821] __kmem_cache_alloc_node+0x53/0x250 [ 643.196712][T15821] ? kernfs_fop_write_iter+0x159/0x520 [ 643.202225][T15821] __kmalloc+0xa4/0x230 [ 643.206424][T15821] kernfs_fop_write_iter+0x159/0x520 [ 643.211783][T15821] vfs_write+0x46c/0x990 [ 643.216107][T15821] ? file_end_write+0x250/0x250 [ 643.221016][T15821] ? __fget_files+0x43d/0x4b0 [ 643.225733][T15821] ? __fdget_pos+0x2a3/0x330 [ 643.230356][T15821] ? ksys_write+0x75/0x260 [ 643.234809][T15821] ksys_write+0x150/0x260 [ 643.239175][T15821] ? __ia32_sys_read+0x90/0x90 [ 643.244059][T15821] ? lockdep_hardirqs_on+0x98/0x150 [ 643.249290][T15821] do_syscall_64+0x55/0xa0 [ 643.253746][T15821] ? clear_bhb_loop+0x40/0x90 [ 643.258445][T15821] ? clear_bhb_loop+0x40/0x90 [ 643.263149][T15821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.269076][T15821] RIP: 0033:0x7fb840b9c629 [ 643.273553][T15821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.293186][T15821] RSP: 002b:00007fb841aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.301622][T15821] RAX: ffffffffffffffda RBX: 00007fb840e16180 RCX: 00007fb840b9c629 [ 643.309629][T15821] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000005 [ 643.317623][T15821] RBP: 00007fb841aee090 R08: 0000000000000000 R09: 0000000000000000 [ 643.325626][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.333620][T15821] R13: 00007fb840e16218 R14: 00007fb840e16180 R15: 00007fff788bf938 [ 643.341624][T15821] [ 643.667668][T15836] netlink: 'syz.2.2877': attribute type 10 has an invalid length. [ 643.680777][T15836] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2877'. [ 644.055414][T15848] netlink: 'syz.0.2879': attribute type 3 has an invalid length. [ 644.074919][T15848] netlink: 'syz.0.2879': attribute type 1 has an invalid length. [ 644.082727][T15848] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2879'. [ 644.421687][T15862] netlink: 'syz.0.2885': attribute type 3 has an invalid length. [ 644.537421][T15863] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2886'. [ 644.663612][T15862] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2885'. [ 645.013920][T15880] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2893'. [ 645.316445][T15885] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.350348][T15885] bond0: (slave team0): Enslaving as an active interface with an up link [ 645.705828][T13950] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 646.466867][T15902] validate_nla: 5 callbacks suppressed [ 646.466884][T15902] netlink: 'syz.1.2897': attribute type 10 has an invalid length. [ 646.486650][T15903] netlink: 'syz.0.2898': attribute type 3 has an invalid length. [ 646.502714][T15903] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 646.510852][T15903] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2898'. [ 646.528561][T15902] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2897'. [ 646.716653][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 646.726842][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 646.742280][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 646.785835][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 646.809509][T15912] netlink: 'syz.1.2902': attribute type 3 has an invalid length. [ 646.818617][T15912] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 646.830347][T15912] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2902'. [ 647.334606][T13950] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 647.961382][T15930] netlink: 'syz.3.2909': attribute type 3 has an invalid length. [ 647.969658][T15930] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 647.977865][T15930] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2909'. [ 648.139725][T15933] netlink: 'syz.0.2910': attribute type 10 has an invalid length. [ 648.150684][T15933] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2910'. [ 648.339419][T15939] netlink: 'syz.3.2913': attribute type 3 has an invalid length. [ 648.382752][T15939] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 648.408258][T15939] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2913'. [ 648.809264][T13950] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 650.041542][T13950] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 650.510600][T15977] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.549232][T15977] bond0: (slave team0): Enslaving as an active interface with an up link [ 651.410230][T13950] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 651.710994][T15998] validate_nla: 10 callbacks suppressed [ 651.711059][T15998] netlink: 'syz.2.2934': attribute type 10 has an invalid length. [ 651.726300][T15998] __nla_validate_parse: 6 callbacks suppressed [ 651.726333][T15998] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2934'. [ 651.874666][T16001] netlink: 'syz.1.2935': attribute type 3 has an invalid length. [ 651.882481][T16001] netlink: 'syz.1.2935': attribute type 1 has an invalid length. [ 651.893107][T16001] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2935'. [ 652.716148][T16024] netlink: 'syz.1.2944': attribute type 3 has an invalid length. [ 652.784853][T16024] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 652.792706][T16024] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2944'. [ 652.914981][T16028] netlink: 'syz.2.2945': attribute type 10 has an invalid length. [ 652.933187][T13950] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 652.937998][T16028] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2945'. [ 653.009594][T16032] netlink: 'syz.3.2946': attribute type 3 has an invalid length. [ 653.018442][T16032] netlink: 'syz.3.2946': attribute type 1 has an invalid length. [ 653.026737][T16032] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2946'. [ 653.369961][T16045] FAULT_INJECTION: forcing a failure. [ 653.369961][T16045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.429117][T16045] CPU: 0 PID: 16045 Comm: syz.1.2953 Not tainted syzkaller #0 [ 653.436668][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.446858][T16045] Call Trace: [ 653.450191][T16045] [ 653.453158][T16045] dump_stack_lvl+0x18c/0x250 [ 653.457900][T16045] ? show_regs_print_info+0x20/0x20 [ 653.463158][T16045] ? load_image+0x400/0x400 [ 653.467724][T16045] ? __might_fault+0xaa/0x120 [ 653.472454][T16045] ? __lock_acquire+0x7d40/0x7d40 [ 653.477536][T16045] should_fail_ex+0x39d/0x4d0 [ 653.482369][T16045] _copy_from_user+0x2f/0xe0 [ 653.487021][T16045] __sys_bpf+0x23e/0x890 [ 653.491319][T16045] ? bpf_link_show_fdinfo+0x390/0x390 [ 653.496761][T16045] ? lock_chain_count+0x20/0x20 [ 653.501673][T16045] __x64_sys_bpf+0x7c/0x90 [ 653.506823][T16045] do_syscall_64+0x55/0xa0 [ 653.511286][T16045] ? clear_bhb_loop+0x40/0x90 [ 653.516009][T16045] ? clear_bhb_loop+0x40/0x90 [ 653.520749][T16045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.526700][T16045] RIP: 0033:0x7f0b9779c629 [ 653.531258][T16045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.550939][T16045] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 653.559394][T16045] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 653.567399][T16045] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 653.575431][T16045] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 653.583444][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.591492][T16045] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 653.599506][T16045] [ 653.782467][T16051] netlink: 'syz.1.2956': attribute type 3 has an invalid length. [ 653.801706][T16051] netlink: 'syz.1.2956': attribute type 1 has an invalid length. [ 653.816519][T16051] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2956'. [ 654.818657][T16065] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2960'. [ 654.851494][T16067] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2961'. [ 655.240361][T16079] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2967'. [ 655.377001][T16081] FAULT_INJECTION: forcing a failure. [ 655.377001][T16081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.408142][T16081] CPU: 1 PID: 16081 Comm: syz.1.2968 Not tainted syzkaller #0 [ 655.415689][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.425808][T16081] Call Trace: [ 655.429143][T16081] [ 655.432127][T16081] dump_stack_lvl+0x18c/0x250 [ 655.436873][T16081] ? show_regs_print_info+0x20/0x20 [ 655.442137][T16081] ? load_image+0x400/0x400 [ 655.446718][T16081] ? __might_fault+0xaa/0x120 [ 655.451450][T16081] ? __lock_acquire+0x7d40/0x7d40 [ 655.456535][T16081] should_fail_ex+0x39d/0x4d0 [ 655.461283][T16081] _copy_from_user+0x2f/0xe0 [ 655.465941][T16081] ___sys_recvmsg+0x176/0x590 [ 655.470678][T16081] ? __sys_recvmsg+0x2a0/0x2a0 [ 655.475497][T16081] ? ksys_write+0x1c4/0x260 [ 655.480067][T16081] ? __fget_files+0x43d/0x4b0 [ 655.484811][T16081] __x64_sys_recvmsg+0x20c/0x2e0 [ 655.489797][T16081] ? ___sys_recvmsg+0x590/0x590 [ 655.494719][T16081] ? lockdep_hardirqs_on+0x98/0x150 [ 655.499972][T16081] do_syscall_64+0x55/0xa0 [ 655.504464][T16081] ? clear_bhb_loop+0x40/0x90 [ 655.509201][T16081] ? clear_bhb_loop+0x40/0x90 [ 655.513927][T16081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.519870][T16081] RIP: 0033:0x7f0b9779c629 [ 655.524337][T16081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.543995][T16081] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 655.552465][T16081] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 655.560488][T16081] RDX: 0000000040000004 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 655.568504][T16081] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 655.576510][T16081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.584510][T16081] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 655.592524][T16081] [ 655.707463][T16089] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2971'. [ 656.488176][T13950] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 656.853172][T16107] validate_nla: 8 callbacks suppressed [ 656.853196][T16107] netlink: 'syz.3.2977': attribute type 3 has an invalid length. [ 656.928397][T16107] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 656.959128][T16107] __nla_validate_parse: 1 callbacks suppressed [ 656.959143][T16107] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2977'. [ 656.976046][T16106] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 656.999642][T16106] syzkaller0: entered promiscuous mode [ 657.016166][T16106] syzkaller0: entered allmulticast mode [ 657.188995][T16119] netlink: 'syz.2.2982': attribute type 3 has an invalid length. [ 657.197210][T16119] netlink: 'syz.2.2982': attribute type 1 has an invalid length. [ 657.205683][T16119] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2982'. [ 659.016843][T16121] netlink: 'syz.3.2981': attribute type 10 has an invalid length. [ 659.027873][T16121] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2981'. [ 659.453819][T16139] netlink: 'syz.3.2989': attribute type 3 has an invalid length. [ 659.461794][T16139] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 659.479986][T16139] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2989'. [ 659.934057][T16150] netlink: 'syz.0.2992': attribute type 3 has an invalid length. [ 659.953247][T16150] netlink: 'syz.0.2992': attribute type 1 has an invalid length. [ 659.972837][T16150] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2992'. [ 660.069175][T13950] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 660.356500][T16155] netlink: 'syz.3.2993': attribute type 10 has an invalid length. [ 660.377858][T16155] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2993'. [ 660.921288][T16170] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3000'. [ 661.252278][T16180] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3004'. [ 661.941339][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 662.347274][T16200] validate_nla: 4 callbacks suppressed [ 662.347294][T16200] netlink: 'syz.0.3012': attribute type 3 has an invalid length. [ 662.368355][T16200] netlink: 'syz.0.3012': attribute type 1 has an invalid length. [ 662.378195][T16200] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3012'. [ 662.638275][T16207] netlink: 'syz.2.3016': attribute type 3 has an invalid length. [ 662.656398][T16207] netlink: 'syz.2.3016': attribute type 1 has an invalid length. [ 662.669351][T16207] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3016'. [ 662.687866][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 663.167836][T16222] netlink: 'syz.2.3022': attribute type 3 has an invalid length. [ 663.187493][T16222] netlink: 'syz.2.3022': attribute type 1 has an invalid length. [ 663.213154][T16222] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3022'. [ 663.242874][T16226] netlink: 'syz.1.3023': attribute type 3 has an invalid length. [ 663.256678][T16226] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 663.265716][T16226] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3023'. [ 663.455366][T16230] netlink: 'syz.1.3026': attribute type 3 has an invalid length. [ 663.471874][T16230] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 663.480985][T16230] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3026'. [ 663.994396][T16246] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3034'. [ 664.229810][T16253] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3036'. [ 664.305879][T16255] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3038'. [ 664.809606][T16267] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3044'. [ 665.082295][T16275] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3049'. [ 668.479942][T16331] validate_nla: 16 callbacks suppressed [ 668.480085][T16331] netlink: 'syz.1.3071': attribute type 10 has an invalid length. [ 668.497773][T16331] __nla_validate_parse: 3 callbacks suppressed [ 668.497817][T16331] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3071'. [ 668.654641][T16336] netlink: 'syz.2.3073': attribute type 3 has an invalid length. [ 668.667442][T16336] netlink: 'syz.2.3073': attribute type 1 has an invalid length. [ 668.675834][T16336] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3073'. [ 668.847343][T16344] netlink: 'syz.1.3077': attribute type 3 has an invalid length. [ 668.855542][T16344] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 668.870079][T16344] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3077'. [ 669.996989][T13950] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 670.437056][T16361] netlink: 'syz.1.3083': attribute type 10 has an invalid length. [ 670.452280][T16361] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3083'. [ 670.573358][T16367] netlink: 'syz.3.3086': attribute type 3 has an invalid length. [ 670.582771][T16367] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 670.593666][T16367] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3086'. [ 673.797402][T16401] netlink: 'syz.0.3095': attribute type 10 has an invalid length. [ 673.817310][T16401] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3095'. [ 673.866502][T16406] netlink: 'syz.2.3097': attribute type 3 has an invalid length. [ 673.880149][T16406] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 673.891888][T16406] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3097'. [ 675.556971][T16430] netlink: 'syz.1.3108': attribute type 10 has an invalid length. [ 675.566609][T16433] netlink: 'syz.0.3109': attribute type 3 has an invalid length. [ 675.567155][T16430] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3108'. [ 675.631333][T16433] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 675.639684][T16433] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3109'. [ 675.908245][T16435] netlink: 'syz.1.3110': attribute type 10 has an invalid length. [ 675.935956][T16435] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3110'. [ 676.626189][T16453] netlink: 'syz.2.3118': attribute type 10 has an invalid length. [ 676.648723][T16453] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3118'. [ 676.703941][T16459] netlink: 'syz.3.3120': attribute type 3 has an invalid length. [ 676.712035][T16459] netlink: 'syz.3.3120': attribute type 1 has an invalid length. [ 676.739459][T16459] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3120'. [ 677.311838][T16470] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3127'. [ 677.866835][T16485] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3132'. [ 677.928873][T16487] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3133'. [ 679.275912][T16515] FAULT_INJECTION: forcing a failure. [ 679.275912][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.305898][T16515] CPU: 0 PID: 16515 Comm: syz.1.3144 Not tainted syzkaller #0 [ 679.313444][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.323551][T16515] Call Trace: [ 679.326874][T16515] [ 679.329846][T16515] dump_stack_lvl+0x18c/0x250 [ 679.334586][T16515] ? show_regs_print_info+0x20/0x20 [ 679.339840][T16515] ? load_image+0x400/0x400 [ 679.344405][T16515] ? __might_fault+0xaa/0x120 [ 679.349194][T16515] ? __lock_acquire+0x7d40/0x7d40 [ 679.354278][T16515] should_fail_ex+0x39d/0x4d0 [ 679.359114][T16515] _copy_from_user+0x2f/0xe0 [ 679.363758][T16515] ___sys_recvmsg+0x176/0x590 [ 679.368478][T16515] ? __sys_recvmsg+0x2a0/0x2a0 [ 679.373278][T16515] ? ksys_write+0x1c4/0x260 [ 679.377819][T16515] ? __fget_files+0x43d/0x4b0 [ 679.382542][T16515] __x64_sys_recvmsg+0x20c/0x2e0 [ 679.387510][T16515] ? ___sys_recvmsg+0x590/0x590 [ 679.392398][T16515] ? lockdep_hardirqs_on+0x98/0x150 [ 679.397630][T16515] do_syscall_64+0x55/0xa0 [ 679.402078][T16515] ? clear_bhb_loop+0x40/0x90 [ 679.406797][T16515] ? clear_bhb_loop+0x40/0x90 [ 679.411587][T16515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.417600][T16515] RIP: 0033:0x7f0b9779c629 [ 679.422053][T16515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.441707][T16515] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 679.450229][T16515] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 679.458236][T16515] RDX: 0000000040000004 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 679.466233][T16515] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 679.474232][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.482229][T16515] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 679.491022][T16515] [ 679.532813][T16517] validate_nla: 5 callbacks suppressed [ 679.532830][T16517] netlink: 'syz.2.3145': attribute type 10 has an invalid length. [ 679.551353][T16517] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3145'. [ 679.683753][T16523] netlink: 'syz.1.3146': attribute type 3 has an invalid length. [ 679.691689][T16523] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 679.701814][T16523] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3146'. [ 680.869647][T16541] FAULT_INJECTION: forcing a failure. [ 680.869647][T16541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.883208][T16541] CPU: 0 PID: 16541 Comm: syz.1.3155 Not tainted syzkaller #0 [ 680.890729][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.900833][T16541] Call Trace: [ 680.904153][T16541] [ 680.907124][T16541] dump_stack_lvl+0x18c/0x250 [ 680.911857][T16541] ? show_regs_print_info+0x20/0x20 [ 680.917114][T16541] ? load_image+0x400/0x400 [ 680.921685][T16541] ? __might_fault+0xaa/0x120 [ 680.926411][T16541] ? __lock_acquire+0x7d40/0x7d40 [ 680.931490][T16541] should_fail_ex+0x39d/0x4d0 [ 680.936229][T16541] _copy_from_user+0x2f/0xe0 [ 680.940869][T16541] __sys_bpf+0x23e/0x890 [ 680.945165][T16541] ? bpf_link_show_fdinfo+0x390/0x390 [ 680.950596][T16541] ? lock_chain_count+0x20/0x20 [ 680.955512][T16541] __x64_sys_bpf+0x7c/0x90 [ 680.959977][T16541] do_syscall_64+0x55/0xa0 [ 680.964452][T16541] ? clear_bhb_loop+0x40/0x90 [ 680.969183][T16541] ? clear_bhb_loop+0x40/0x90 [ 680.973924][T16541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.979865][T16541] RIP: 0033:0x7f0b9779c629 [ 680.984323][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.003984][T16541] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 681.012457][T16541] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 681.020485][T16541] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 681.028503][T16541] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 681.036541][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.044556][T16541] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 681.052609][T16541] [ 681.170761][T16545] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 681.183145][T16545] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3157'. [ 681.291062][T16550] netlink: 'syz.3.3159': attribute type 3 has an invalid length. [ 681.304353][T16550] netlink: 'syz.3.3159': attribute type 1 has an invalid length. [ 681.318387][T16550] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3159'. [ 681.624704][T16560] netlink: 122752 bytes leftover after parsing attributes in process `syz.2.3164'. [ 683.163500][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 683.296883][T16574] netlink: 'syz.2.3169': attribute type 10 has an invalid length. [ 683.306695][T16574] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3169'. [ 683.641231][T16578] netlink: 'syz.1.3170': attribute type 3 has an invalid length. [ 683.733071][T16578] netlink: 'syz.1.3170': attribute type 1 has an invalid length. [ 683.778754][T16578] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3170'. [ 684.596670][T16598] netlink: 'syz.0.3179': attribute type 3 has an invalid length. [ 684.606846][T16598] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 684.625266][T16598] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3179'. [ 686.222986][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.229409][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.182083][T16622] netlink: 'syz.3.3189': attribute type 3 has an invalid length. [ 687.202488][T16622] netlink: 'syz.3.3189': attribute type 1 has an invalid length. [ 687.216871][T16622] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3189'. [ 688.929146][T16651] syzkaller0: entered promiscuous mode [ 688.934951][T16651] syzkaller0: entered allmulticast mode [ 689.113116][T16654] netlink: 'syz.0.3200': attribute type 10 has an invalid length. [ 689.162762][T16654] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3200'. [ 689.542429][T16669] netlink: 'syz.0.3206': attribute type 3 has an invalid length. [ 689.551265][T16669] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 689.559600][T16669] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3206'. [ 692.457967][T16686] netlink: 'syz.1.3212': attribute type 10 has an invalid length. [ 692.470310][T16686] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3212'. [ 692.651223][T16693] netlink: 'syz.3.3215': attribute type 3 has an invalid length. [ 692.673307][T16693] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 692.681122][T16693] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3215'. [ 693.403276][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 693.915555][T16720] netlink: 'syz.1.3223': attribute type 3 has an invalid length. [ 693.933244][T16720] netlink: 'syz.1.3223': attribute type 1 has an invalid length. [ 693.944544][T16720] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3223'. [ 694.468439][T16725] netlink: 'syz.2.3225': attribute type 10 has an invalid length. [ 694.477213][T16725] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3225'. [ 694.530349][T16729] netlink: 'syz.0.3227': attribute type 3 has an invalid length. [ 694.538678][T16729] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 694.546725][T16729] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3227'. [ 694.787488][T16737] netlink: 'syz.1.3231': attribute type 3 has an invalid length. [ 694.801211][T16737] netlink: 'syz.1.3231': attribute type 1 has an invalid length. [ 694.823125][T16737] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3231'. [ 695.047832][T16743] netlink: 122752 bytes leftover after parsing attributes in process `syz.0.3235'. [ 695.446672][T16755] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3240'. [ 695.521551][T16753] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3239'. [ 696.023968][T16771] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3248'. [ 696.036727][T16769] delete_channel: no stack [ 696.041978][T16769] delete_channel: no stack [ 696.248474][T16769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 697.573851][T16811] validate_nla: 8 callbacks suppressed [ 697.573868][T16811] netlink: 'syz.0.3260': attribute type 3 has an invalid length. [ 697.611898][T16811] __nla_validate_parse: 3 callbacks suppressed [ 697.611917][T16811] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3260'. [ 697.805314][T16818] FAULT_INJECTION: forcing a failure. [ 697.805314][T16818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.843364][T16818] CPU: 1 PID: 16818 Comm: syz.3.3264 Not tainted syzkaller #0 [ 697.850919][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 697.861021][T16818] Call Trace: [ 697.864339][T16818] [ 697.867310][T16818] dump_stack_lvl+0x18c/0x250 [ 697.872049][T16818] ? show_regs_print_info+0x20/0x20 [ 697.877306][T16818] ? load_image+0x400/0x400 [ 697.881868][T16818] ? __might_fault+0xaa/0x120 [ 697.886603][T16818] ? __lock_acquire+0x7d40/0x7d40 [ 697.891691][T16818] should_fail_ex+0x39d/0x4d0 [ 697.896431][T16818] _copy_from_user+0x2f/0xe0 [ 697.897335][T16822] netlink: 'syz.0.3266': attribute type 3 has an invalid length. [ 697.901057][T16818] __sys_bpf+0x23e/0x890 [ 697.913067][T16818] ? bpf_link_show_fdinfo+0x390/0x390 [ 697.918497][T16818] ? lock_chain_count+0x20/0x20 [ 697.923402][T16818] __x64_sys_bpf+0x7c/0x90 [ 697.927881][T16818] do_syscall_64+0x55/0xa0 [ 697.932343][T16818] ? clear_bhb_loop+0x40/0x90 [ 697.935686][T16822] netlink: 'syz.0.3266': attribute type 1 has an invalid length. [ 697.937070][T16818] ? clear_bhb_loop+0x40/0x90 [ 697.949531][T16818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.955470][T16818] RIP: 0033:0x7fb840b9c629 [ 697.959927][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.979669][T16818] RSP: 002b:00007fb841b30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.988111][T16818] RAX: ffffffffffffffda RBX: 00007fb840e15fa0 RCX: 00007fb840b9c629 [ 697.996105][T16818] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 698.004102][T16818] RBP: 00007fb841b30090 R08: 0000000000000000 R09: 0000000000000000 [ 698.012102][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.020095][T16818] R13: 00007fb840e16038 R14: 00007fb840e15fa0 R15: 00007fff788bf938 [ 698.028110][T16818] [ 698.031790][T16822] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3266'. [ 698.374577][T16830] netlink: 'syz.3.3270': attribute type 10 has an invalid length. [ 698.393340][T16830] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3270'. [ 698.423106][T16832] netlink: 'syz.1.3271': attribute type 3 has an invalid length. [ 698.432136][T16832] netlink: 'syz.1.3271': attribute type 1 has an invalid length. [ 698.446802][T16832] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3271'. [ 698.842360][T16838] netlink: 'syz.3.3274': attribute type 3 has an invalid length. [ 698.873211][T16838] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3274'. [ 699.161263][T16847] netlink: 'syz.3.3277': attribute type 3 has an invalid length. [ 699.174691][T16847] netlink: 'syz.3.3277': attribute type 1 has an invalid length. [ 699.187233][T16847] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3277'. [ 700.678391][T16857] netlink: 'syz.3.3280': attribute type 10 has an invalid length. [ 700.688985][T16857] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3280'. [ 701.094713][T16868] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3285'. [ 701.146442][T16870] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3286'. [ 702.663501][T16893] validate_nla: 3 callbacks suppressed [ 702.663522][T16893] netlink: 'syz.2.3296': attribute type 3 has an invalid length. [ 702.704601][T16893] netlink: 'syz.2.3296': attribute type 1 has an invalid length. [ 702.712426][T16893] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3296'. [ 702.980672][T16898] netlink: 'syz.0.3298': attribute type 3 has an invalid length. [ 703.001437][T16900] netlink: 'syz.1.3299': attribute type 3 has an invalid length. [ 703.011145][T16898] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 703.021229][T16900] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3299'. [ 703.036475][T16898] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3298'. [ 703.824727][T13950] Bluetooth: hci0: command 0x0406 tx timeout [ 704.658180][T16921] netlink: 'syz.0.3308': attribute type 10 has an invalid length. [ 704.675406][T16921] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3308'. [ 704.826286][T16928] netlink: 'syz.2.3310': attribute type 3 has an invalid length. [ 704.837766][T16928] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3310'. [ 705.483784][T16949] netlink: 'syz.3.3320': attribute type 10 has an invalid length. [ 705.547037][T16949] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3320'. [ 707.907199][T16962] netlink: 'syz.1.3323': attribute type 3 has an invalid length. [ 707.928647][T16962] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3323'. [ 708.456733][T16974] netlink: 'syz.3.3331': attribute type 10 has an invalid length. [ 708.470649][T16974] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3331'. [ 709.060953][T16992] netlink: 'syz.2.3336': attribute type 3 has an invalid length. [ 709.068967][T16992] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3336'. [ 709.494649][T17004] netlink: 'syz.1.3339': attribute type 10 has an invalid length. [ 709.504641][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.512848][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.549877][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.557334][T17004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.565157][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.572479][T17004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.598562][T17004] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 709.700531][T17008] FAULT_INJECTION: forcing a failure. [ 709.700531][T17008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.742787][T17008] CPU: 0 PID: 17008 Comm: syz.3.3341 Not tainted syzkaller #0 [ 709.750327][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.760440][T17008] Call Trace: [ 709.763770][T17008] [ 709.766742][T17008] dump_stack_lvl+0x18c/0x250 [ 709.771502][T17008] ? show_regs_print_info+0x20/0x20 [ 709.776773][T17008] ? load_image+0x400/0x400 [ 709.781340][T17008] ? __might_fault+0xaa/0x120 [ 709.786073][T17008] ? __lock_acquire+0x7d40/0x7d40 [ 709.791167][T17008] should_fail_ex+0x39d/0x4d0 [ 709.795917][T17008] _copy_from_user+0x2f/0xe0 [ 709.800573][T17008] ___sys_sendmsg+0x1c7/0x360 [ 709.805310][T17008] ? __sys_sendmsg+0x2a0/0x2a0 [ 709.810153][T17008] ? __lock_acquire+0x7d40/0x7d40 [ 709.815260][T17008] __se_sys_sendmsg+0x1c2/0x2b0 [ 709.820161][T17008] ? __x64_sys_sendmsg+0x80/0x80 [ 709.825164][T17008] ? lockdep_hardirqs_on+0x98/0x150 [ 709.830418][T17008] do_syscall_64+0x55/0xa0 [ 709.834890][T17008] ? clear_bhb_loop+0x40/0x90 [ 709.839616][T17008] ? clear_bhb_loop+0x40/0x90 [ 709.844343][T17008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.850292][T17008] RIP: 0033:0x7fb840b9c629 [ 709.854755][T17008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.874423][T17008] RSP: 002b:00007fb841b30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.882900][T17008] RAX: ffffffffffffffda RBX: 00007fb840e15fa0 RCX: 00007fb840b9c629 [ 709.890931][T17008] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 709.898961][T17008] RBP: 00007fb841b30090 R08: 0000000000000000 R09: 0000000000000000 [ 709.906992][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.915015][T17008] R13: 00007fb840e16038 R14: 00007fb840e15fa0 R15: 00007fff788bf938 [ 709.923149][T17008] [ 709.975827][T17012] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 710.008006][T17012] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3343'. [ 710.260931][T17019] netlink: 'syz.1.3346': attribute type 3 has an invalid length. [ 710.278122][T17019] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3346'. [ 711.011469][T17034] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 711.056399][T17034] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3353'. [ 711.400789][T17047] netlink: 'syz.2.3358': attribute type 3 has an invalid length. [ 711.439017][T17047] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3358'. [ 711.635464][T17041] syzkaller0: entered allmulticast mode [ 712.440403][T17074] netlink: 'syz.0.3366': attribute type 10 has an invalid length. [ 712.567976][T17074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3366'. [ 712.758940][T17078] netlink: 'syz.1.3368': attribute type 3 has an invalid length. [ 712.767907][T17078] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3368'. [ 713.887606][T17090] netlink: 'syz.1.3381': attribute type 3 has an invalid length. [ 713.932218][T17090] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3381'. [ 714.674080][T17108] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 714.688425][T17108] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3378'. [ 714.751885][T17110] netlink: 'syz.3.3379': attribute type 3 has an invalid length. [ 714.769889][T17110] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3379'. [ 715.069818][T17117] netlink: 'syz.3.3383': attribute type 3 has an invalid length. [ 715.112136][T17117] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3383'. [ 717.252209][T17146] netlink: 'syz.1.3391': attribute type 3 has an invalid length. [ 717.281282][T17146] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3391'. [ 717.407748][T17144] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 717.420263][T17144] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3390'. [ 717.781472][T17164] netlink: 'syz.0.3396': attribute type 3 has an invalid length. [ 717.794259][T17164] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3396'. [ 717.973127][T17167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.565583][T17171] syzkaller0: entered allmulticast mode [ 721.796924][T17189] netlink: 'syz.3.3403': attribute type 3 has an invalid length. [ 721.812207][T17187] netlink: 'syz.0.3404': attribute type 10 has an invalid length. [ 721.821817][T17187] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3404'. [ 721.856866][T17189] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3403'. [ 722.605378][T17206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3413'. [ 722.635560][T17206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3413'. [ 722.681818][T17206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3413'. [ 722.704073][T17206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3413'. [ 724.060334][T17208] syzkaller0: entered allmulticast mode [ 724.128821][T17220] netlink: 'syz.3.3416': attribute type 10 has an invalid length. [ 724.167538][T17220] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3416'. [ 724.491274][T17226] netlink: 'syz.3.3417': attribute type 3 has an invalid length. [ 724.525164][T17226] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3417'. [ 724.548979][T17230] netlink: 'syz.2.3419': attribute type 3 has an invalid length. [ 724.560096][T17230] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3419'. [ 725.141516][T17240] FAULT_INJECTION: forcing a failure. [ 725.141516][T17240] name failslab, interval 1, probability 0, space 0, times 0 [ 725.193373][T17240] CPU: 0 PID: 17240 Comm: syz.0.3423 Not tainted syzkaller #0 [ 725.200929][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.211030][T17240] Call Trace: [ 725.214351][T17240] [ 725.217325][T17240] dump_stack_lvl+0x18c/0x250 [ 725.222067][T17240] ? show_regs_print_info+0x20/0x20 [ 725.227329][T17240] ? load_image+0x400/0x400 [ 725.231891][T17240] ? __might_sleep+0xe0/0xe0 [ 725.236544][T17240] ? __lock_acquire+0x7d40/0x7d40 [ 725.241628][T17240] should_fail_ex+0x39d/0x4d0 [ 725.246374][T17240] should_failslab+0x9/0x20 [ 725.250936][T17240] slab_pre_alloc_hook+0x59/0x310 [ 725.256030][T17240] ? kvmalloc_node+0x70/0x180 [ 725.260773][T17240] ? kvmalloc_node+0x70/0x180 [ 725.265517][T17240] __kmem_cache_alloc_node+0x53/0x250 [ 725.270962][T17240] ? kvmalloc_node+0x70/0x180 [ 725.275728][T17240] __kmalloc_node+0xa4/0x230 [ 725.280384][T17240] kvmalloc_node+0x70/0x180 [ 725.284952][T17240] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 725.290377][T17240] ? 0xffffffffa0004740 [ 725.294566][T17240] ? 0xffffffffa0004740 [ 725.298754][T17240] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 725.304699][T17240] ? 0xffffffffa0004740 [ 725.308901][T17240] ? xdp_convert_md_to_buff+0x330/0x330 [ 725.314782][T17240] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 725.321082][T17240] ? _copy_from_user+0xa5/0xe0 [ 725.325893][T17240] ? bpf_test_init+0x119/0x140 [ 725.330706][T17240] ? xdp_convert_md_to_buff+0x5b/0x330 [ 725.336213][T17240] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 725.341636][T17240] ? dev_put+0x80/0x80 [ 725.345745][T17240] ? dev_put+0x80/0x80 [ 725.349851][T17240] bpf_prog_test_run+0x321/0x390 [ 725.354828][T17240] __sys_bpf+0x49d/0x890 [ 725.359119][T17240] ? bpf_link_show_fdinfo+0x390/0x390 [ 725.364553][T17240] ? lock_chain_count+0x20/0x20 [ 725.369460][T17240] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 725.375544][T17240] __x64_sys_bpf+0x7c/0x90 [ 725.380040][T17240] do_syscall_64+0x55/0xa0 [ 725.384542][T17240] ? clear_bhb_loop+0x40/0x90 [ 725.389320][T17240] ? clear_bhb_loop+0x40/0x90 [ 725.394061][T17240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.400019][T17240] RIP: 0033:0x7ffb2b79c629 [ 725.404497][T17240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.424177][T17240] RSP: 002b:00007ffb2c601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 725.432645][T17240] RAX: ffffffffffffffda RBX: 00007ffb2ba15fa0 RCX: 00007ffb2b79c629 [ 725.440678][T17240] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 725.448695][T17240] RBP: 00007ffb2c601090 R08: 0000000000000000 R09: 0000000000000000 [ 725.456715][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.464722][T17240] R13: 00007ffb2ba16038 R14: 00007ffb2ba15fa0 R15: 00007ffd0d599f38 [ 725.472754][T17240] [ 725.582357][T17244] netlink: 'syz.3.3425': attribute type 10 has an invalid length. [ 725.607285][T17244] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3425'. [ 725.785924][T17253] netlink: 'syz.0.3428': attribute type 3 has an invalid length. [ 726.041156][T17261] netlink: 'syz.1.3430': attribute type 3 has an invalid length. [ 727.022924][T17278] netlink: 'syz.3.3437': attribute type 10 has an invalid length. [ 727.052582][T17278] __nla_validate_parse: 2 callbacks suppressed [ 727.052701][T17278] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3437'. [ 727.142140][T17285] netlink: 'syz.0.3440': attribute type 3 has an invalid length. [ 727.150731][T17285] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3440'. [ 727.219874][T17287] netlink: 'syz.3.3441': attribute type 3 has an invalid length. [ 727.227897][T17287] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3441'. [ 727.358580][T17291] FAULT_INJECTION: forcing a failure. [ 727.358580][T17291] name failslab, interval 1, probability 0, space 0, times 0 [ 727.371772][T17291] CPU: 1 PID: 17291 Comm: syz.0.3443 Not tainted syzkaller #0 [ 727.379288][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.389392][T17291] Call Trace: [ 727.392715][T17291] [ 727.395729][T17291] dump_stack_lvl+0x18c/0x250 [ 727.400464][T17291] ? show_regs_print_info+0x20/0x20 [ 727.405713][T17291] ? load_image+0x400/0x400 [ 727.410264][T17291] ? __might_sleep+0xe0/0xe0 [ 727.414907][T17291] ? __lock_acquire+0x7d40/0x7d40 [ 727.420053][T17291] should_fail_ex+0x39d/0x4d0 [ 727.424800][T17291] should_failslab+0x9/0x20 [ 727.429359][T17291] slab_pre_alloc_hook+0x59/0x310 [ 727.434442][T17291] kmem_cache_alloc+0x5a/0x2d0 [ 727.439416][T17291] ? security_inode_alloc+0x34/0x110 [ 727.444754][T17291] security_inode_alloc+0x34/0x110 [ 727.449906][T17291] inode_init_always+0x8fc/0xc90 [ 727.454876][T17291] new_inode_pseudo+0x95/0x1d0 [ 727.459673][T17291] __sock_create+0x12d/0x940 [ 727.464297][T17291] ? __asan_memset+0x22/0x40 [ 727.468921][T17291] udp_sock_create4+0xcb/0x480 [ 727.473730][T17291] ? erspan_exit_batch_net+0x30/0x30 [ 727.479077][T17291] rxrpc_lookup_local+0xd1f/0x1610 [ 727.484238][T17291] ? rxrpc_local_dont_fragment+0x70/0x70 [ 727.489934][T17291] ? lockdep_hardirqs_on+0x98/0x150 [ 727.495167][T17291] ? _local_bh_enable+0xa0/0xa0 [ 727.500060][T17291] rxrpc_sendmsg+0x30a/0x5b0 [ 727.504686][T17291] ? rxrpc_getsockopt+0x150/0x150 [ 727.509742][T17291] ____sys_sendmsg+0x5ba/0x960 [ 727.514542][T17291] ? __sys_sendmsg_sock+0x30/0x30 [ 727.519610][T17291] ? __import_iovec+0x3fa/0x850 [ 727.524521][T17291] ? import_iovec+0x73/0xa0 [ 727.529066][T17291] ___sys_sendmsg+0x2a6/0x360 [ 727.533777][T17291] ? get_pid_task+0x20/0x1e0 [ 727.538487][T17291] ? __sys_sendmsg+0x2a0/0x2a0 [ 727.543297][T17291] ? __lock_acquire+0x7d40/0x7d40 [ 727.548369][T17291] __se_sys_sendmsg+0x1c2/0x2b0 [ 727.553250][T17291] ? __x64_sys_sendmsg+0x80/0x80 [ 727.558226][T17291] ? lockdep_hardirqs_on+0x98/0x150 [ 727.563456][T17291] do_syscall_64+0x55/0xa0 [ 727.567901][T17291] ? clear_bhb_loop+0x40/0x90 [ 727.572597][T17291] ? clear_bhb_loop+0x40/0x90 [ 727.577301][T17291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.583224][T17291] RIP: 0033:0x7ffb2b79c629 [ 727.587662][T17291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.607344][T17291] RSP: 002b:00007ffb2c601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.615794][T17291] RAX: ffffffffffffffda RBX: 00007ffb2ba15fa0 RCX: 00007ffb2b79c629 [ 727.623795][T17291] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 727.631795][T17291] RBP: 00007ffb2c601090 R08: 0000000000000000 R09: 0000000000000000 [ 727.639805][T17291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.647816][T17291] R13: 00007ffb2ba16038 R14: 00007ffb2ba15fa0 R15: 00007ffd0d599f38 [ 727.655841][T17291] [ 727.667448][T17291] socket: no more sockets [ 729.736120][T17307] netlink: 'syz.1.3449': attribute type 10 has an invalid length. [ 729.754218][T17307] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3449'. [ 729.848469][T17312] netlink: 'syz.0.3451': attribute type 3 has an invalid length. [ 729.856667][T17312] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3451'. [ 729.915344][T17314] netlink: 'syz.2.3452': attribute type 3 has an invalid length. [ 729.934143][T17314] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3452'. [ 730.314934][T17318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.887680][T17346] netlink: 'syz.3.3462': attribute type 10 has an invalid length. [ 731.922524][T17346] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3462'. [ 732.117840][T17349] netlink: 'syz.0.3463': attribute type 3 has an invalid length. [ 732.130328][T17349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3463'. [ 732.218294][T17353] netlink: 'syz.3.3464': attribute type 3 has an invalid length. [ 732.233273][T17353] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3464'. [ 732.801949][T17365] netlink: 'syz.0.3470': attribute type 3 has an invalid length. [ 732.823177][T17365] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3470'. [ 733.725212][T17376] netlink: 'syz.0.3472': attribute type 10 has an invalid length. [ 733.748197][T17376] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3472'. [ 733.784249][T17363] syzkaller0: entered allmulticast mode [ 734.172895][T17381] netlink: 'syz.0.3474': attribute type 3 has an invalid length. [ 734.193848][T17381] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3474'. [ 734.844289][T17389] netlink: 'syz.0.3477': attribute type 3 has an invalid length. [ 734.852094][T17389] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3477'. [ 735.455641][T17403] netlink: 'syz.0.3482': attribute type 10 has an invalid length. [ 735.536148][T17403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3482'. [ 736.619537][T17409] netlink: 'syz.0.3485': attribute type 3 has an invalid length. [ 736.634838][T17409] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3485'. [ 737.472827][T17423] netlink: 'syz.2.3490': attribute type 3 has an invalid length. [ 737.492312][T17423] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3490'. [ 737.750161][T17431] netlink: 'syz.0.3495': attribute type 3 has an invalid length. [ 737.759736][T17431] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3495'. [ 738.025050][T17429] netlink: 'syz.2.3493': attribute type 10 has an invalid length. [ 738.053959][T17429] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3493'. [ 739.376861][T17450] netlink: 'syz.2.3501': attribute type 3 has an invalid length. [ 739.386875][T17450] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3501'. [ 740.872025][T17469] netlink: 'syz.3.3505': attribute type 3 has an invalid length. [ 740.912052][T17469] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3505'. [ 741.221003][T17476] netlink: 'syz.2.3508': attribute type 10 has an invalid length. [ 741.230844][T17476] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3508'. [ 741.352866][T17485] netlink: 'syz.3.3513': attribute type 3 has an invalid length. [ 741.362456][T17485] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3513'. [ 743.109982][T17497] netlink: 'syz.0.3518': attribute type 3 has an invalid length. [ 743.118354][T17497] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3518'. [ 744.138041][T17514] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 744.147179][T17514] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3524'. [ 746.066809][T17517] netlink: 'syz.1.3525': attribute type 3 has an invalid length. [ 746.093137][T17517] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3525'. [ 746.631743][T17528] netlink: 'syz.0.3537': attribute type 3 has an invalid length. [ 746.686396][T17528] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3537'. [ 746.811836][T17533] netlink: 'syz.3.3530': attribute type 3 has an invalid length. [ 746.820953][T17533] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3530'. [ 747.624480][T17550] netlink: 'syz.0.3536': attribute type 10 has an invalid length. [ 747.653723][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.660349][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.687136][T17550] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3536'. [ 748.859054][T17552] FAULT_INJECTION: forcing a failure. [ 748.859054][T17552] name failslab, interval 1, probability 0, space 0, times 0 [ 748.882291][T17552] CPU: 0 PID: 17552 Comm: syz.1.3540 Not tainted syzkaller #0 [ 748.889841][T17552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.899946][T17552] Call Trace: [ 748.903274][T17552] [ 748.906250][T17552] dump_stack_lvl+0x18c/0x250 [ 748.910988][T17552] ? show_regs_print_info+0x20/0x20 [ 748.916243][T17552] ? load_image+0x400/0x400 [ 748.920801][T17552] ? __might_sleep+0xe0/0xe0 [ 748.925452][T17552] ? __lock_acquire+0x7d40/0x7d40 [ 748.930533][T17552] should_fail_ex+0x39d/0x4d0 [ 748.935271][T17552] should_failslab+0x9/0x20 [ 748.939832][T17552] slab_pre_alloc_hook+0x59/0x310 [ 748.944909][T17552] ? __dev_change_flags+0x211/0x6a0 [ 748.950223][T17552] ? dev_change_flags+0x88/0x1a0 [ 748.955218][T17552] ? dev_ioctl+0x7b4/0x1140 [ 748.959774][T17552] ? kvmalloc_node+0x70/0x180 [ 748.964509][T17552] ? kvmalloc_node+0x70/0x180 [ 748.969242][T17552] __kmem_cache_alloc_node+0x53/0x250 [ 748.974685][T17552] ? kvmalloc_node+0x70/0x180 [ 748.979418][T17552] __kmalloc_node+0xa4/0x230 [ 748.984076][T17552] kvmalloc_node+0x70/0x180 [ 748.988636][T17552] pfifo_fast_init+0x10d/0x6a0 [ 748.993452][T17552] qdisc_create_dflt+0x11e/0x430 [ 748.998443][T17552] dev_activate+0x397/0x11a0 [ 749.003100][T17552] __dev_open+0x347/0x430 [ 749.007493][T17552] ? dev_open+0x190/0x190 [ 749.011887][T17552] __dev_change_flags+0x211/0x6a0 [ 749.016988][T17552] ? dev_get_flags+0x1c0/0x1c0 [ 749.021800][T17552] ? mutex_lock_nested+0x20/0x20 [ 749.026799][T17552] dev_change_flags+0x88/0x1a0 [ 749.031646][T17552] dev_ioctl+0x7b4/0x1140 [ 749.036065][T17552] sock_do_ioctl+0x239/0x310 [ 749.040792][T17552] ? sock_show_fdinfo+0xb0/0xb0 [ 749.045708][T17552] sock_ioctl+0x5ba/0x7e0 [ 749.050097][T17552] ? sock_poll+0x3e0/0x3e0 [ 749.054570][T17552] ? bpf_lsm_file_ioctl+0x9/0x10 [ 749.059554][T17552] ? security_file_ioctl+0x80/0xa0 [ 749.064723][T17552] ? sock_poll+0x3e0/0x3e0 [ 749.069197][T17552] __se_sys_ioctl+0xfd/0x170 [ 749.073874][T17552] do_syscall_64+0x55/0xa0 [ 749.078379][T17552] ? clear_bhb_loop+0x40/0x90 [ 749.083107][T17552] ? clear_bhb_loop+0x40/0x90 [ 749.087835][T17552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.093776][T17552] RIP: 0033:0x7f0b9779c629 [ 749.098239][T17552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.117901][T17552] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.126399][T17552] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 749.134416][T17552] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000009 [ 749.142433][T17552] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 749.150481][T17552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.158497][T17552] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 749.166538][T17552] [ 749.212285][T17552] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 749.223157][T17552] pim6reg1: entered promiscuous mode [ 749.228531][T17552] pim6reg1: entered allmulticast mode [ 749.401244][T17556] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 749.409480][T17556] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3541'. [ 749.929819][T17571] netlink: 'syz.3.3543': attribute type 3 has an invalid length. [ 749.937945][T17571] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3543'. [ 750.180081][T17577] netlink: 'syz.2.3547': attribute type 10 has an invalid length. [ 750.203355][T17577] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3547'. [ 750.342442][T17583] netlink: 'syz.3.3551': attribute type 3 has an invalid length. [ 750.351560][T17583] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3551'. [ 752.115257][T17597] netlink: 'syz.0.3556': attribute type 3 has an invalid length. [ 752.133408][T17597] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3556'. [ 752.390754][T17601] netlink: 'syz.2.3558': attribute type 10 has an invalid length. [ 752.432302][T17601] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3558'. [ 754.186904][T17633] netlink: 'syz.1.3569': attribute type 3 has an invalid length. [ 754.210152][T17633] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3569'. [ 755.506885][T17644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3571'. [ 756.771932][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.844073][T17644] bridge_slave_0 (unregistering): left allmulticast mode [ 756.851360][T17644] bridge_slave_0 (unregistering): left promiscuous mode [ 756.859567][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.910696][T17651] netlink: 'syz.2.3573': attribute type 10 has an invalid length. [ 756.925431][T17651] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3573'. [ 757.634156][T17665] netlink: 'syz.1.3579': attribute type 3 has an invalid length. [ 757.694294][T17665] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3579'. [ 758.330331][T17682] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 758.348640][T17682] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3583'. [ 759.117161][T17699] netlink: 'syz.3.3591': attribute type 3 has an invalid length. [ 759.163514][T17699] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3591'. [ 759.744657][T17710] netlink: 'syz.2.3596': attribute type 10 has an invalid length. [ 759.769666][T17714] netlink: 'syz.0.3603': attribute type 3 has an invalid length. [ 759.777807][T17710] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3596'. [ 759.806219][T17714] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3603'. [ 761.612246][T17756] netlink: 'syz.0.3609': attribute type 3 has an invalid length. [ 761.688355][T17756] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3609'. [ 761.801884][T17755] netlink: 'syz.1.3608': attribute type 10 has an invalid length. [ 761.833469][T17755] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3608'. [ 761.971547][T17763] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.3612'. [ 762.066014][T17764] netlink: 'syz.0.3612': attribute type 4 has an invalid length. [ 762.091146][T17765] netlink: 'syz.0.3612': attribute type 4 has an invalid length. [ 762.673212][T17780] FAULT_INJECTION: forcing a failure. [ 762.673212][T17780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.696490][T17777] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3617'. [ 762.697938][T17780] CPU: 1 PID: 17780 Comm: syz.1.3618 Not tainted syzkaller #0 [ 762.713439][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.723538][T17780] Call Trace: [ 762.726865][T17780] [ 762.729839][T17780] dump_stack_lvl+0x18c/0x250 [ 762.734589][T17780] ? show_regs_print_info+0x20/0x20 [ 762.739841][T17780] ? load_image+0x400/0x400 [ 762.742500][T17777] netlink: zone id is out of range [ 762.744504][T17780] ? __might_fault+0xaa/0x120 [ 762.744531][T17780] ? __lock_acquire+0x7d40/0x7d40 [ 762.744559][T17780] should_fail_ex+0x39d/0x4d0 [ 762.744595][T17780] _copy_from_user+0x2f/0xe0 [ 762.744624][T17780] ___sys_sendmsg+0x1c7/0x360 [ 762.744652][T17780] ? __sys_sendmsg+0x2a0/0x2a0 [ 762.744733][T17780] __se_sys_sendmsg+0x1c2/0x2b0 [ 762.744756][T17780] ? __x64_sys_sendmsg+0x80/0x80 [ 762.744790][T17780] ? syscall_enter_from_user_mode+0x2e/0x80 [ 762.744817][T17780] do_syscall_64+0x55/0xa0 [ 762.744845][T17780] ? clear_bhb_loop+0x40/0x90 [ 762.744868][T17780] ? clear_bhb_loop+0x40/0x90 [ 762.744892][T17780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.744915][T17780] RIP: 0033:0x7f0b9779c629 [ 762.744936][T17780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.744963][T17780] RSP: 002b:00007f0b98691028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.759575][T17777] netlink: zone id is out of range [ 762.759836][T17780] RAX: ffffffffffffffda RBX: 00007f0b97a15fa0 RCX: 00007f0b9779c629 [ 762.759858][T17780] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 762.759873][T17780] RBP: 00007f0b98691090 R08: 0000000000000000 R09: 0000000000000000 [ 762.759887][T17780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.759900][T17780] R13: 00007f0b97a16038 R14: 00007f0b97a15fa0 R15: 00007ffc0b7874d8 [ 762.759933][T17780] [ 762.934246][T17777] netlink: zone id is out of range [ 763.102737][T17785] netlink: 'syz.3.3620': attribute type 3 has an invalid length. [ 763.110869][T17785] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3620'. [ 763.299862][T17789] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3622'. [ 763.322237][T17789] netlink: zone id is out of range [ 763.333082][T17789] netlink: zone id is out of range [ 763.338587][T17789] netlink: zone id is out of range [ 763.346180][T17787] netlink: 'syz.1.3621': attribute type 10 has an invalid length. [ 763.380911][T17787] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3621'. [ 763.504706][T17795] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 764.440741][T17818] netlink: 'syz.2.3632': attribute type 10 has an invalid length. [ 764.473400][T17818] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3632'. [ 764.630166][T17824] netlink: 'syz.3.3634': attribute type 10 has an invalid length. [ 764.647770][T17824] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3634'. [ 764.831032][T17828] netlink: 'syz.0.3635': attribute type 10 has an invalid length. [ 764.860018][T17828] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3635'. [ 765.759014][T17848] netlink: 'syz.1.3645': attribute type 10 has an invalid length. [ 766.037495][T17857] netlink: 'syz.1.3650': attribute type 10 has an invalid length. [ 766.862451][T17886] netlink: 'syz.1.3658': attribute type 10 has an invalid length. [ 766.871639][T17886] __nla_validate_parse: 2 callbacks suppressed [ 766.871675][T17886] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3658'. [ 767.095692][T17893] netlink: 'syz.3.3662': attribute type 10 has an invalid length. [ 767.126569][T17893] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3662'. [ 769.088376][T17914] syzkaller0: entered allmulticast mode [ 769.306144][T17931] netlink: 'syz.3.3671': attribute type 10 has an invalid length. [ 769.333184][T17931] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3671'. [ 769.860028][T17942] netlink: 'syz.3.3677': attribute type 10 has an invalid length. [ 769.918046][T17942] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3677'. [ 770.026089][T17939] syzkaller0: entered allmulticast mode [ 770.691737][T17972] netlink: 'syz.2.3685': attribute type 10 has an invalid length. [ 770.772501][T17972] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3685'. [ 771.893770][T17995] netlink: 'syz.2.3689': attribute type 10 has an invalid length. [ 771.909007][T17995] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3689'. [ 772.257600][T18003] netlink: 'syz.2.3694': attribute type 10 has an invalid length. [ 772.293224][T18003] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3694'. [ 773.776007][T18047] netlink: 'syz.2.3702': attribute type 10 has an invalid length. [ 773.834498][T18047] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3702'. [ 774.177285][T18054] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 774.258361][T18054] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3706'. [ 776.386172][T18081] netlink: 'syz.3.3718': attribute type 10 has an invalid length. [ 776.403896][T18081] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3718'. [ 776.762956][T18089] netlink: 'syz.0.3720': attribute type 10 has an invalid length. [ 776.798067][T18089] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3720'. [ 779.746325][T18115] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 779.760490][T18115] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3729'. [ 779.771464][T18122] netlink: 'syz.2.3731': attribute type 10 has an invalid length. [ 779.793401][T18122] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3731'. [ 781.007868][T18150] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3740'. [ 781.018508][T18150] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3740'. [ 781.036820][T18155] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3740'. [ 781.078559][T18150] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3740'. [ 781.282020][T18153] netlink: 'syz.3.3742': attribute type 10 has an invalid length. [ 781.291522][T18153] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3742'. [ 781.312185][T18156] netlink: 'syz.1.3741': attribute type 10 has an invalid length. [ 781.320355][T18156] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3741'. [ 781.893759][T18167] netlink: 'syz.1.3748': attribute type 21 has an invalid length. [ 781.933782][T18167] netlink: 'syz.1.3748': attribute type 6 has an invalid length. [ 783.339611][T18185] netlink: 'syz.0.3752': attribute type 10 has an invalid length. [ 783.356556][T18185] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3752'. [ 783.628850][T18192] netlink: 'syz.0.3754': attribute type 10 has an invalid length. [ 783.651670][T18192] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3754'. [ 783.847336][T18202] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 785.318356][T18215] netlink: 'syz.1.3763': attribute type 10 has an invalid length. [ 785.329129][T18215] __nla_validate_parse: 1 callbacks suppressed [ 785.329148][T18215] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3763'. [ 785.636707][T18221] netlink: 'syz.1.3766': attribute type 10 has an invalid length. [ 785.660953][T18221] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3766'. [ 785.904576][T18231] netlink: 'syz.3.3768': attribute type 21 has an invalid length. [ 785.912473][T18231] netlink: 'syz.3.3768': attribute type 6 has an invalid length. [ 786.031257][T18233] netlink: 'syz.1.3776': attribute type 10 has an invalid length. [ 786.053340][T18233] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3776'. [ 787.184415][T18245] netlink: 'syz.0.3773': attribute type 10 has an invalid length. [ 787.194436][T18245] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3773'. [ 787.762212][T18253] netlink: 'syz.0.3779': attribute type 21 has an invalid length. [ 787.772658][T18253] netlink: 'syz.0.3779': attribute type 6 has an invalid length. [ 789.154633][T18262] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 789.164513][T18262] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3781'. [ 789.185047][T18249] syzkaller0: entered allmulticast mode [ 789.233181][T18266] netlink: 'syz.0.3782': attribute type 3 has an invalid length. [ 789.241180][T18266] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3782'. [ 789.605845][T18275] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3786'. [ 790.427894][T18293] validate_nla: 1 callbacks suppressed [ 790.427937][T18293] netlink: 'syz.1.3792': attribute type 10 has an invalid length. [ 790.483541][T18293] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3792'. [ 792.261075][T18300] netlink: 'syz.0.3795': attribute type 10 has an invalid length. [ 792.270663][T18300] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3795'. [ 793.412205][T18333] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 793.420902][T18333] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3805'. [ 795.801556][T18348] netlink: 'syz.0.3811': attribute type 10 has an invalid length. [ 795.846469][T18348] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3811'. [ 796.432563][T13950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.443726][T13950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.452870][T13950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.474502][T13950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.482825][T13950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 796.491364][T13950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.863114][T18349] chnl_net:caif_netlink_parms(): no params data found [ 797.093268][T18349] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.100499][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.123425][T18349] bridge_slave_0: entered allmulticast mode [ 797.131216][T18349] bridge_slave_0: entered promiscuous mode [ 797.150140][T18349] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.167852][T18349] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.181336][T18349] bridge_slave_1: entered allmulticast mode [ 797.198999][T18349] bridge_slave_1: entered promiscuous mode [ 797.289619][T18349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.360850][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.386157][T18349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.462556][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.486220][T18349] team0: Port device team_slave_0 added [ 797.496072][T18349] team0: Port device team_slave_1 added [ 797.543349][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.612561][T18349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.629877][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.665389][T18349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.689680][T18349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.702809][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.736052][T18349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.782882][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.969261][T18349] hsr_slave_0: entered promiscuous mode [ 798.009518][T18349] hsr_slave_1: entered promiscuous mode [ 798.056161][T18369] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 798.069124][T18369] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3815'. [ 798.122097][T18363] syzkaller0: entered allmulticast mode [ 799.146903][T18378] syzkaller0: entered allmulticast mode [ 799.243528][ T51] Bluetooth: hci1: command tx timeout [ 799.565982][T18349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 799.585258][T18349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 799.639466][T18349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 799.709844][T18349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 800.161028][T18407] netlink: 'syz.3.3820': attribute type 10 has an invalid length. [ 800.177241][T18407] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3820'. [ 800.387818][T18349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.501750][ T12] veth0_to_team: left allmulticast mode [ 800.514235][ T12] veth0_to_team: left promiscuous mode [ 800.520001][ T12] Ÿë: port 1(veth0_to_team) entered disabled state [ 800.550110][ T12] vlan0: left allmulticast mode [ 800.556401][ T12] veth0_vlan: left allmulticast mode [ 800.561760][ T12] vlan0: left promiscuous mode [ 800.577242][ T12] À: port 1(vlan0) entered disabled state [ 800.601802][ T12] hsr_slave_0: left promiscuous mode [ 800.617382][ T12] hsr_slave_1: left promiscuous mode [ 800.626871][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.640481][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.668320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.682344][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.702701][ T12] bridge_slave_1: left allmulticast mode [ 800.709122][ T12] bridge_slave_1: left promiscuous mode [ 800.720952][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.740166][ T12] bridge_slave_0: left allmulticast mode [ 800.746510][ T12] bridge_slave_0: left promiscuous mode [ 800.752425][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.801903][ T12] veth1_macvtap: left promiscuous mode [ 800.811548][ T12] veth0_macvtap: left promiscuous mode [ 800.817593][ T12] veth1_vlan: left promiscuous mode [ 800.824077][ T12] veth0_vlan: left promiscuous mode [ 801.156186][ T12] team0 (unregistering): Port device geneve1 removed [ 801.336770][ T51] Bluetooth: hci1: command tx timeout [ 801.682784][ T12] team0 (unregistering): Port device team_slave_1 removed [ 801.760110][ T12] team0 (unregistering): Port device team_slave_0 removed [ 801.838708][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.902868][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.346036][ T12] bond0 (unregistering): Released all slaves [ 802.451746][T18421] netlink: 'syz.0.3823': attribute type 10 has an invalid length. [ 802.459950][T18421] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3823'. [ 802.611188][T18349] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.649720][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.656961][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.756508][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.763819][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.415061][ T51] Bluetooth: hci1: command tx timeout [ 804.036608][T18349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.153942][T18452] syzkaller0: entered allmulticast mode [ 805.484587][ T51] Bluetooth: hci1: command tx timeout [ 806.479136][T18349] veth0_vlan: entered promiscuous mode [ 806.555355][T18349] veth1_vlan: entered promiscuous mode [ 806.720575][T18349] veth0_macvtap: entered promiscuous mode [ 806.802353][T18349] veth1_macvtap: entered promiscuous mode [ 806.868160][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.885807][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.900069][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.911418][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.929758][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.942186][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.960734][T18349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.997067][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.008090][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.030655][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.041568][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.051773][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.062437][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.085461][T18349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.156496][T18349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.177191][T18349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.202988][T18349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.222020][T18349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.472334][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.515334][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.847455][T15335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.905624][T18519] syzkaller0: entered allmulticast mode [ 807.916774][T15335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.094701][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.101099][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.358852][T18544] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3837'. [ 809.387522][T18544] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3837'. [ 809.416606][T18550] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3837'. [ 810.148310][T18548] syzkaller0: entered allmulticast mode [ 811.702274][T18586] syzkaller0: entered allmulticast mode [ 814.087016][T18635] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3853'. [ 814.110253][T18635] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3853'. [ 814.132079][T18638] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3853'. [ 816.097957][T18661] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3862'. [ 816.140222][T18661] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3862'. [ 816.167294][T18663] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3862'. [ 816.210689][T18661] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3862'. [ 816.259729][T18663] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3862'. [ 818.370385][T18671] netlink: 'syz.1.3856': attribute type 10 has an invalid length. [ 818.378828][T18671] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3856'. [ 818.620311][T18678] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3858'. [ 818.734512][T18678] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3858'. [ 818.761244][T18682] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3858'. [ 818.790257][T18683] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3858'. [ 821.149759][T18716] __nla_validate_parse: 5 callbacks suppressed [ 821.149804][T18716] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3866'. [ 821.185150][T18716] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3866'. [ 821.215446][T18717] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3866'. [ 821.303391][T18721] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3866'. [ 821.634032][T18727] netlink: 'syz.3.3867': attribute type 10 has an invalid length. [ 821.641962][T18727] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3867'. [ 823.438162][T18747] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3871'. [ 823.476567][T18747] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3871'. [ 823.505021][T18750] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3871'. [ 823.552558][T18747] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3871'. [ 823.593346][T18750] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3871'. [ 824.828824][T18758] syzkaller0: entered allmulticast mode [ 827.048830][T18785] __nla_validate_parse: 4 callbacks suppressed [ 827.048871][T18785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3879'. [ 827.078509][T18783] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3878'. [ 827.131165][T18783] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3878'. [ 827.170043][T18785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3879'. [ 827.185219][T18790] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3879'. [ 827.291258][T18791] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3878'. [ 827.344771][T18783] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3878'. [ 827.657792][T18793] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3879'. [ 828.398158][T18795] netlink: 'syz.4.3880': attribute type 10 has an invalid length. [ 828.420274][T18795] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3880'. [ 828.756846][T18811] syzkaller0: entered allmulticast mode [ 828.819823][T18828] netlink: 'syz.1.3885': attribute type 19 has an invalid length. [ 828.846202][T18828] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3885'. [ 830.261096][T18868] netlink: 'syz.1.3892': attribute type 10 has an invalid length. [ 833.239439][T18896] __nla_validate_parse: 23 callbacks suppressed [ 833.239462][T18896] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3899'. [ 833.365420][T18910] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3900'. [ 833.472842][T18910] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3900'. [ 833.517177][T18911] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3900'. [ 833.636474][T18910] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3900'. [ 833.731029][T18919] netlink: 'syz.3.3901': attribute type 21 has an invalid length. [ 833.739550][T18911] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3900'. [ 833.982761][T18926] netlink: 'syz.1.3904': attribute type 10 has an invalid length. [ 833.993274][T18926] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3904'. [ 834.294541][T18939] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3907'. [ 834.308734][T18937] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3906'. [ 834.349104][T18939] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3907'. [ 837.220074][T18994] netlink: 'syz.1.3916': attribute type 10 has an invalid length. [ 838.245727][T19019] __nla_validate_parse: 31 callbacks suppressed [ 838.245795][T19019] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3921'. [ 838.902335][T19019] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3921'. [ 838.947407][T19030] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3921'. [ 839.021085][T19024] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3921'. [ 839.282799][T19045] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3926'. [ 839.314789][T19045] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3926'. [ 839.376681][T19050] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3926'. [ 839.599323][T19045] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3926'. [ 839.842353][T19059] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3930'. [ 839.881703][T19059] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3930'. [ 841.094138][T19090] À: port 1(vlan0) entered blocking state [ 841.100470][T19090] À: port 1(vlan0) entered disabled state [ 841.122386][T19090] vlan0: entered allmulticast mode [ 841.128390][T19090] veth0_vlan: entered allmulticast mode [ 841.136669][T19090] vlan0: entered promiscuous mode [ 841.175169][T19091] À: port 1(vlan0) entered blocking state [ 841.181106][T19091] À: port 1(vlan0) entered forwarding state [ 841.624793][T19111] syzkaller0: entered allmulticast mode [ 843.535124][T19143] syzkaller0: entered allmulticast mode [ 843.609440][T19145] __nla_validate_parse: 54 callbacks suppressed [ 843.609482][T19145] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3962'. [ 843.635653][T19145] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3962'. [ 843.687423][T19149] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3962'. [ 843.750085][T19145] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3962'. [ 843.791766][T19149] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3962'. [ 844.408234][T19166] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3970'. [ 844.417680][T19166] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3970'. [ 844.428476][T19166] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3970'. [ 844.439325][T19166] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3970'. [ 844.450678][T19166] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3970'. [ 845.379765][T19191] syzkaller0: entered allmulticast mode [ 846.878903][T19222] syzkaller0: entered allmulticast mode [ 847.394708][T19241] syzkaller0: entered allmulticast mode [ 847.813600][T19252] syzkaller0: entered allmulticast mode [ 848.468659][T19268] syzkaller0: entered allmulticast mode [ 849.122119][T19283] __nla_validate_parse: 34 callbacks suppressed [ 849.122212][T19283] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4007'. [ 849.215724][T19283] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4007'. [ 849.305456][T19287] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4007'. [ 849.389225][T19286] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4007'. [ 849.436214][T19283] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4007'. [ 849.650364][T19291] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4010'. [ 849.747307][T19291] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4010'. [ 849.830862][T19292] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4010'. [ 849.851688][T19293] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4010'. [ 853.266174][T19330] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4023'. [ 854.197448][T19343] syzkaller0: entered allmulticast mode [ 854.292118][T19346] netlink: 'syz.4.4028': attribute type 10 has an invalid length. [ 854.333499][T19346] __nla_validate_parse: 8 callbacks suppressed [ 854.333539][T19346] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4028'. [ 856.718423][T19365] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4034'. [ 856.755562][T19365] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4034'. [ 856.810835][T19367] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4034'. [ 856.858896][T19365] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4034'. [ 857.115955][T19370] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4036'. [ 857.238937][T19370] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4036'. [ 857.286424][T19372] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4036'. [ 857.308557][T19373] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4036'. [ 857.593318][T19379] netlink: 'syz.3.4038': attribute type 3 has an invalid length. [ 857.601487][T19379] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 857.622311][T19379] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4038'. [ 858.414260][T19395] syzkaller0: entered allmulticast mode [ 858.891564][T19406] netlink: 'syz.3.4047': attribute type 10 has an invalid length. [ 859.052550][T19412] netlink: 'syz.1.4050': attribute type 3 has an invalid length. [ 859.061034][T19412] netlink: 'syz.1.4050': attribute type 1 has an invalid length. [ 859.838144][T19425] __nla_validate_parse: 12 callbacks suppressed [ 859.838213][T19425] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4056'. [ 860.660651][T19425] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4056'. [ 860.702289][T19427] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4056'. [ 860.727640][T19429] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4056'. [ 861.031169][T19439] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4059'. [ 861.102662][T19439] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4059'. [ 861.188730][T19440] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4059'. [ 861.205278][T19439] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4059'. [ 861.499946][T19447] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4062'. [ 861.517425][T19447] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4062'. [ 861.567017][T19451] netlink: 'syz.0.4064': attribute type 3 has an invalid length. [ 861.596992][T19451] netlink: 'syz.0.4064': attribute type 1 has an invalid length. [ 863.209917][T19488] netlink: 'syz.3.4077': attribute type 3 has an invalid length. [ 863.218073][T19488] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 863.686733][T19494] netlink: 'syz.4.4079': attribute type 3 has an invalid length. [ 863.702070][T19494] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 864.049388][T19504] netlink: 'syz.0.4082': attribute type 3 has an invalid length. [ 864.082306][T19504] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 865.491359][T19533] __nla_validate_parse: 31 callbacks suppressed [ 865.491524][T19533] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4091'. [ 865.579927][T19533] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4091'. [ 865.638390][T19534] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4091'. [ 865.650635][T19535] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4091'. [ 866.150568][T19546] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4095'. [ 866.173329][T19544] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4103'. [ 866.180261][T19546] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4095'. [ 866.212186][T19544] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4103'. [ 866.231806][T19549] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4095'. [ 866.247240][T19547] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4103'. [ 867.882449][T19578] netlink: 'syz.3.4105': attribute type 3 has an invalid length. [ 867.903131][T19578] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 870.358807][T19627] netlink: 'syz.1.4120': attribute type 3 has an invalid length. [ 870.379996][T19627] netlink: 'syz.1.4120': attribute type 1 has an invalid length. [ 870.607160][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.613941][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.767505][T19635] __nla_validate_parse: 49 callbacks suppressed [ 870.767567][T19635] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4123'. [ 870.787036][T19635] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4123'. [ 870.820503][T19635] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4123'. [ 870.886433][T19635] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4123'. [ 870.923507][T19637] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4123'. [ 871.118332][T19641] netlink: 'syz.0.4126': attribute type 3 has an invalid length. [ 871.153863][T19641] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 871.161687][T19641] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4126'. [ 871.911453][T19656] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4130'. [ 872.105874][T19656] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4130'. [ 872.186029][T19659] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4130'. [ 872.340612][T19661] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4130'. [ 872.649083][T19673] netlink: 'syz.0.4142': attribute type 3 has an invalid length. [ 872.657054][T19673] netlink: 'syz.0.4142': attribute type 1 has an invalid length. [ 872.786820][T19677] netlink: 'syz.4.4133': attribute type 3 has an invalid length. [ 872.833329][T19677] netlink: 'syz.4.4133': attribute type 1 has an invalid length. [ 873.236738][T19691] netlink: 'syz.3.4141': attribute type 3 has an invalid length. [ 873.248207][T19691] netlink: 'syz.3.4141': attribute type 1 has an invalid length. [ 875.307062][T19711] netlink: 'syz.4.4146': attribute type 3 has an invalid length. [ 875.325974][T19711] netlink: 'syz.4.4146': attribute type 1 has an invalid length. [ 875.799106][T19718] __nla_validate_parse: 23 callbacks suppressed [ 875.799173][T19718] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4149'. [ 875.887964][T19721] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4149'. [ 875.918588][T19718] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4149'. [ 875.971772][T19718] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4149'. [ 876.848432][T19742] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4157'. [ 876.964979][T19742] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4157'. [ 877.039540][T19744] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4157'. [ 877.062481][T19745] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4157'. [ 877.665602][T19757] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4162'. [ 877.680857][T19757] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4162'. [ 880.809218][T19794] __nla_validate_parse: 17 callbacks suppressed [ 880.809289][T19794] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4172'. [ 880.959609][T19797] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4172'. [ 881.379873][T19801] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4175'. [ 881.449463][T19801] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4175'. [ 881.472296][T19803] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4175'. [ 881.515533][T19801] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4175'. [ 881.877618][T19807] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4177'. [ 881.917272][T19807] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4177'. [ 881.958789][T19810] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4177'. [ 881.981531][T19807] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4177'. [ 886.466599][T19908] __nla_validate_parse: 31 callbacks suppressed [ 886.466639][T19908] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4210'. [ 886.525098][T19908] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4210'. [ 886.565170][T19910] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4210'. [ 886.728917][T19913] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4211'. [ 886.746507][T19908] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4210'. [ 886.880723][T19913] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4211'. [ 887.052483][T19918] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4211'. [ 887.083582][T19920] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4211'. [ 887.592633][T19934] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4218'. [ 887.698435][T19934] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4218'. [ 892.149212][T19983] __nla_validate_parse: 18 callbacks suppressed [ 892.149237][T19983] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4232'. [ 892.166265][T19985] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4232'. [ 892.180117][T19986] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4233'. [ 892.204825][T19987] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4232'. [ 892.226645][T19988] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4233'. [ 892.237109][T19989] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4233'. [ 892.380074][T19994] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4234'. [ 892.435173][T19994] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4234'. [ 892.465127][T19995] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4234'. [ 892.508880][T19997] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4235'. [ 897.633927][T20058] __nla_validate_parse: 44 callbacks suppressed [ 897.633944][T20058] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4254'. [ 897.952145][T20073] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4257'. [ 897.968880][T20076] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4259'. [ 897.983495][T20073] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4257'. [ 897.998608][T20076] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4259'. [ 898.061439][T20076] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4259'. [ 898.078467][T20077] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4257'. [ 898.090131][T20073] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4257'. [ 898.134749][T20078] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4259'. [ 898.378902][T20080] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4260'. [ 902.922630][T20164] __nla_validate_parse: 26 callbacks suppressed [ 902.922695][T20164] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4285'. [ 903.029910][T20164] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4285'. [ 903.073485][T20168] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4285'. [ 903.272564][T20169] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4285'. [ 903.402930][T20173] netlink: 'syz.3.4286': attribute type 3 has an invalid length. [ 903.411060][T20173] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 903.419530][T20173] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4286'. [ 906.249535][T20196] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4293'. [ 906.281696][T20196] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4293'. [ 906.321069][T20199] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4293'. [ 906.381119][T20196] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4293'. [ 907.742234][T20203] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4296'. [ 907.931052][T20208] __nla_validate_parse: 7 callbacks suppressed [ 907.931095][T20208] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4306'. [ 907.992664][T20209] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4306'. [ 908.231833][T20217] netlink: 'syz.1.4298': attribute type 3 has an invalid length. [ 908.244610][T20217] netlink: 'syz.1.4298': attribute type 1 has an invalid length. [ 908.252426][T20217] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4298'. [ 908.464116][T20222] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4301'. [ 908.493413][T20222] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4301'. [ 908.527637][T20222] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4301'. [ 908.630439][T20222] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4301'. [ 909.921385][T20235] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4307'. [ 909.972057][T20235] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4307'. [ 909.984620][T20237] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4307'. [ 910.658220][T20255] netlink: 'syz.4.4313': attribute type 3 has an invalid length. [ 910.669129][T20255] netlink: 'syz.4.4313': attribute type 1 has an invalid length. [ 912.970499][T20302] __nla_validate_parse: 24 callbacks suppressed [ 912.970546][T20302] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4329'. [ 913.083789][T20302] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4329'. [ 913.200133][T20311] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4331'. [ 913.241350][T20311] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4331'. [ 913.259800][T20312] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4331'. [ 913.285952][T20311] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4331'. [ 913.355080][T20314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4332'. [ 913.384212][T20311] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4331'. [ 913.419333][T20314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4332'. [ 913.534744][T20315] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4332'. [ 914.191313][T20333] netlink: 'syz.3.4340': attribute type 3 has an invalid length. [ 914.238334][T20333] netlink: 'syz.3.4340': attribute type 1 has an invalid length. [ 915.935299][T20366] netlink: 'syz.4.4351': attribute type 3 has an invalid length. [ 915.944366][T20366] netlink: 'syz.4.4351': attribute type 1 has an invalid length. [ 917.847237][T20402] netlink: 'syz.1.4364': attribute type 3 has an invalid length. [ 917.857471][T20402] netlink: 'syz.1.4364': attribute type 1 has an invalid length. [ 919.200609][T20428] __nla_validate_parse: 36 callbacks suppressed [ 919.200649][T20428] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4372'. [ 919.302289][T20428] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4372'. [ 919.356405][T20430] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4372'. [ 919.386535][T20435] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4375'. [ 919.411050][T20434] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4372'. [ 919.432589][T20435] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4375'. [ 919.476430][T20437] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4375'. [ 919.505577][T20435] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4375'. [ 919.713298][T20441] netlink: 'syz.3.4376': attribute type 3 has an invalid length. [ 919.721247][T20441] netlink: 'syz.3.4376': attribute type 1 has an invalid length. [ 919.730327][T20441] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4376'. [ 921.251437][T20465] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4385'. [ 921.927592][T20477] netlink: 'syz.3.4387': attribute type 3 has an invalid length. [ 921.961180][T20477] netlink: 'syz.3.4387': attribute type 1 has an invalid length. [ 922.465883][T20488] FAULT_INJECTION: forcing a failure. [ 922.465883][T20488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.543224][T20488] CPU: 1 PID: 20488 Comm: syz.3.4389 Not tainted syzkaller #0 [ 922.550773][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.560876][T20488] Call Trace: [ 922.564214][T20488] [ 922.567195][T20488] dump_stack_lvl+0x18c/0x250 [ 922.571950][T20488] ? show_regs_print_info+0x20/0x20 [ 922.577207][T20488] ? load_image+0x400/0x400 [ 922.581779][T20488] ? __might_fault+0xaa/0x120 [ 922.586506][T20488] ? __lock_acquire+0x7d40/0x7d40 [ 922.591594][T20488] should_fail_ex+0x39d/0x4d0 [ 922.596336][T20488] _copy_from_user+0x2f/0xe0 [ 922.600982][T20488] kstrtouint_from_user+0xde/0x170 [ 922.606150][T20488] ? kstrtol_from_user+0x190/0x190 [ 922.611340][T20488] proc_fail_nth_write+0x8f/0x250 [ 922.616457][T20488] ? proc_fail_nth_read+0x260/0x260 [ 922.621726][T20488] ? proc_fail_nth_read+0x260/0x260 [ 922.626987][T20488] vfs_write+0x296/0x990 [ 922.631281][T20488] ? file_end_write+0x250/0x250 [ 922.636178][T20488] ? __fget_files+0x28/0x4b0 [ 922.640816][T20488] ? __fget_files+0x28/0x4b0 [ 922.645459][T20488] ? __fget_files+0x43d/0x4b0 [ 922.650177][T20488] ? __fdget_pos+0x2a3/0x330 [ 922.654800][T20488] ? ksys_write+0x75/0x260 [ 922.659271][T20488] ksys_write+0x150/0x260 [ 922.663644][T20488] ? __ia32_sys_read+0x90/0x90 [ 922.668451][T20488] ? lockdep_hardirqs_on+0x98/0x150 [ 922.673695][T20488] do_syscall_64+0x55/0xa0 [ 922.678150][T20488] ? clear_bhb_loop+0x40/0x90 [ 922.682855][T20488] ? clear_bhb_loop+0x40/0x90 [ 922.687573][T20488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.693501][T20488] RIP: 0033:0x7fb840b5cece [ 922.697944][T20488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 922.717590][T20488] RSP: 002b:00007fb841b2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 922.726218][T20488] RAX: ffffffffffffffda RBX: 00007fb841b306c0 RCX: 00007fb840b5cece [ 922.734216][T20488] RDX: 0000000000000001 RSI: 00007fb841b300a0 RDI: 0000000000000004 [ 922.742231][T20488] RBP: 00007fb841b30090 R08: 0000000000000000 R09: 0000000000000000 [ 922.750229][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.758235][T20488] R13: 00007fb840e16038 R14: 00007fb840e15fa0 R15: 00007fff788bf938 [ 922.766357][T20488] [ 923.893154][T20476] Bluetooth: hci1: command 0x0406 tx timeout [ 924.596976][T20510] __nla_validate_parse: 14 callbacks suppressed [ 924.597018][T20510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4395'. [ 924.642224][T20510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4395'. [ 924.671250][T20511] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4395'. [ 924.690174][T20510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4395'. [ 924.735909][T20510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4395'. [ 924.962023][T20516] netlink: 'syz.4.4398': attribute type 3 has an invalid length. [ 924.974409][T20516] netlink: 'syz.4.4398': attribute type 1 has an invalid length. [ 924.982350][T20516] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.4398'. [ 925.191188][T20520] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4399'. [ 925.203503][T20520] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4399'. [ 925.251713][T20523] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4399'. [ 925.267382][T20520] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4399'. [ 926.893974][T20558] netlink: 'syz.3.4409': attribute type 3 has an invalid length. [ 926.902732][T20558] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 927.275883][T20565] netlink: 'syz.4.4419': attribute type 3 has an invalid length. [ 927.303109][T20565] netlink: 'syz.4.4419': attribute type 1 has an invalid length. [ 929.924761][T20602] netlink: 'syz.3.4423': attribute type 3 has an invalid length. [ 929.932618][T20602] netlink: 'syz.3.4423': attribute type 1 has an invalid length. [ 929.965433][T20602] __nla_validate_parse: 7 callbacks suppressed [ 929.965454][T20602] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4423'. [ 930.168536][T20606] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4424'. [ 930.194606][T20606] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4424'. [ 930.261085][T20607] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4424'. [ 930.327421][T20606] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4424'. [ 930.501979][T20613] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4426'. [ 930.515695][T20613] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4426'. [ 930.552063][T20613] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4426'. [ 930.605810][T20613] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4426'. [ 930.626513][T20615] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4427'. [ 932.035687][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.042055][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.041268][T20644] netlink: 'syz.3.4435': attribute type 3 has an invalid length. [ 933.074457][T20644] netlink: 'syz.3.4435': attribute type 1 has an invalid length. [ 936.012686][T20675] netlink: 'syz.4.4444': attribute type 10 has an invalid length. [ 936.067282][T20681] netlink: 'syz.4.4444': attribute type 9 has an invalid length. [ 936.076055][T20681] __nla_validate_parse: 10 callbacks suppressed [ 936.076070][T20681] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4444'. [ 936.103073][T20679] netlink: 'syz.4.4444': attribute type 9 has an invalid length. [ 936.118632][T20679] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4444'. [ 937.538059][T20690] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4448'. [ 937.593588][T20690] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4448'. [ 937.627901][T20694] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4448'. [ 937.676039][T20690] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4448'. [ 937.740252][T20690] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4448'. [ 939.459308][T20715] netlink: 'syz.1.4457': attribute type 21 has an invalid length. [ 939.839724][T20726] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4463'. [ 939.840789][T20724] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4462'. [ 939.885588][T20726] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4463'. [ 939.944348][T20728] netlink: 'syz.3.4464': attribute type 21 has an invalid length. [ 940.944435][ T29] INFO: task syz.2.3733:18128 blocked for more than 143 seconds. [ 940.962475][ T29] Not tainted syzkaller #0 [ 940.967574][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.976476][ T29] task:syz.2.3733 state:D stack:24616 pid:18128 ppid:14317 flags:0x00004006 [ 940.986836][ T29] Call Trace: [ 940.990172][ T29] [ 940.994551][ T29] __schedule+0x1553/0x45a0 [ 940.999369][ T29] ? rcu_is_watching+0x15/0xb0 [ 941.004333][ T29] ? asan.module_dtor+0x20/0x20 [ 941.009438][ T29] ? trace_contention_end+0x39/0xe0 [ 941.014946][ T29] ? task_work_cancel+0xa5/0x220 [ 941.020172][ T29] ? task_work_cancel_func+0x210/0x210 [ 941.026556][ T29] schedule+0xbd/0x170 [ 941.031389][ T29] ? _free_event+0xfe/0xf30 [ 941.038651][ T29] _free_event+0x174/0xf30 [ 941.043782][ T29] perf_event_release_kernel+0x842/0x8d0 [ 941.049591][ T29] ? __might_sleep+0xe0/0xe0 [ 941.057794][ T29] ? calc_timer_values+0x400/0x400 [ 941.066184][ T29] ? __fput+0x61c/0x970 [ 941.070478][ T29] ? perf_mmap+0x15c0/0x15c0 [ 941.075298][ T29] perf_release+0x3b/0x40 [ 941.079784][ T29] __fput+0x234/0x970 [ 941.083994][ T29] task_work_run+0x1d4/0x260 [ 941.088797][ T29] ? task_work_cancel+0x220/0x220 [ 941.094160][ T29] do_exit+0x95a/0x2460 [ 941.098461][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 941.104914][ T29] ? get_signal+0x1255/0x13f0 [ 941.109716][ T29] ? put_task_struct+0xc0/0xc0 [ 941.114709][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 941.120803][ T29] ? lock_chain_count+0x20/0x20 [ 941.125899][ T29] do_group_exit+0x21b/0x2d0 [ 941.130612][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 941.136301][ T29] get_signal+0x12fc/0x13f0 [ 941.141040][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 941.146849][ T29] ? mutex_unlock+0x10/0x10 [ 941.151560][ T29] ? get_sigframe_size+0x20/0x20 [ 941.156695][ T29] ? ksys_write+0x1fb/0x260 [ 941.161425][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 941.167216][ T29] exit_to_user_mode_loop+0x70/0x110 [ 941.172674][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 941.179949][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 941.185715][ T29] do_syscall_64+0x61/0xa0 [ 941.190299][ T29] ? clear_bhb_loop+0x40/0x90 [ 941.195167][ T29] ? clear_bhb_loop+0x40/0x90 [ 941.200119][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.206334][ T29] RIP: 0033:0x7fab5279c629 [ 941.210908][ T29] RSP: 002b:00007fab535e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 941.219657][ T29] RAX: 0000000000000012 RBX: 00007fab52a15fa0 RCX: 00007fab5279c629 [ 941.227873][ T29] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000006 [ 941.236921][ T29] RBP: 00007fab52832b39 R08: 0000000000000000 R09: 0000000000000000 [ 941.245373][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.253546][ T29] R13: 00007fab52a16038 R14: 00007fab52a15fa0 R15: 00007ffd2261f2f8 [ 941.261805][ T29] [ 941.265068][ T29] [ 941.265068][ T29] Showing all locks held in the system: [ 941.277328][ T29] 1 lock held by rcu_tasks_trace/15: [ 941.282760][ T29] #0: ffffffff8d132cd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 941.295383][ T29] 1 lock held by khungtaskd/29: [ 941.300603][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 941.310724][ T29] 4 locks held by kworker/u4:3/49: [ 941.316425][ T29] #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 941.328115][ T29] #1: ffffc90000ba7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 941.339178][ T29] #2: ffffffff8e3b3310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 941.348833][ T29] #3: ffffffff8d137840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 941.359029][ T29] 2 locks held by getty/5528: [ 941.363896][ T29] #0: ffff88802d8dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 941.373912][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 941.384383][ T29] 2 locks held by kworker/1:10/17559: [ 941.389886][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 941.404650][ T29] #1: ffffc9000eb4fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 941.418152][ T29] 1 lock held by syz.4.4462/20730: [ 941.423799][ T29] #0: ffffffff8d137840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 941.435014][ T29] 2 locks held by syz.1.4465/20731: [ 941.440797][ T29] #0: ffffffff8d187f28 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 941.450581][ T29] #1: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 941.461828][ T29] [ 941.467416][ T29] ============================================= [ 941.467416][ T29] [ 941.476768][ T29] NMI backtrace for cpu 0 [ 941.481159][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 941.488409][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 941.498535][ T29] Call Trace: [ 941.501867][ T29] [ 941.504855][ T29] dump_stack_lvl+0x18c/0x250 [ 941.509624][ T29] ? show_regs_print_info+0x20/0x20 [ 941.514939][ T29] ? load_image+0x400/0x400 [ 941.519569][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 941.524579][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 941.530815][ T29] ? _printk+0xde/0x130 [ 941.535049][ T29] ? load_image+0x400/0x400 [ 941.539621][ T29] ? load_image+0x400/0x400 [ 941.544186][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 941.550312][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 941.556372][ T29] watchdog+0xf3d/0xf80 [ 941.560585][ T29] ? watchdog+0x1e1/0xf80 [ 941.564981][ T29] kthread+0x2fa/0x390 [ 941.569133][ T29] ? hungtask_pm_notify+0x90/0x90 [ 941.574222][ T29] ? kthread_blkcg+0xd0/0xd0 [ 941.578861][ T29] ret_from_fork+0x48/0x80 [ 941.583336][ T29] ? kthread_blkcg+0xd0/0xd0 [ 941.587983][ T29] ret_from_fork_asm+0x11/0x20 [ 941.592816][ T29] [ 941.596883][ T29] Sending NMI from CPU 0 to CPUs 1: [ 941.602167][ C1] NMI backtrace for cpu 1 [ 941.602178][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 941.602198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 941.602209][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 941.602233][ C1] RIP: 0010:__lock_acquire+0x1690/0x7d40 [ 941.602256][ C1] Code: ff ff ff 4c 8d 73 18 4c 89 f0 48 c1 e8 03 42 80 3c 00 00 74 12 4c 89 f7 e8 5d 08 77 00 49 b8 00 00 00 00 00 fc ff df 49 8b 06 <4c> 39 e0 0f 84 28 02 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 [ 941.602270][ C1] RSP: 0018:ffffc90000117340 EFLAGS: 00000046 [ 941.602284][ C1] RAX: bbfc3f9955c1ed46 RBX: ffffffff9134a200 RCX: ffffffff81683900 [ 941.602297][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911bf5e8 [ 941.602307][ C1] RBP: ffffc90000117588 R08: dffffc0000000000 R09: 1ffffffff2237ebd [ 941.602320][ C1] R10: dffffc0000000000 R11: fffffbfff2237ebe R12: bbfc3f9955c1ed46 [ 941.602333][ C1] R13: ffff88801b645a00 R14: ffffffff9134a218 R15: ffff88801b646578 [ 941.602346][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 941.602359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.602371][ C1] CR2: 00007ffb2b9e82f8 CR3: 000000007ecd4000 CR4: 00000000003506e0 [ 941.602386][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 941.602410][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 941.602425][ C1] Call Trace: [ 941.602431][ C1] [ 941.602449][ C1] ? verify_lock_unused+0x140/0x140 [ 941.602470][ C1] ? mark_lock+0x94/0x320 [ 941.602489][ C1] ? verify_lock_unused+0x140/0x140 [ 941.602507][ C1] ? __lock_acquire+0x1273/0x7d40 [ 941.602533][ C1] lock_acquire+0x19e/0x420 [ 941.602551][ C1] ? wg_noise_handshake_create_initiation+0x143/0x8d0 [ 941.602582][ C1] ? __might_sleep+0xe0/0xe0 [ 941.602610][ C1] ? read_lock_is_recursive+0x20/0x20 [ 941.602630][ C1] ? __might_sleep+0xe0/0xe0 [ 941.602649][ C1] ? wait_for_random_bytes+0x1e1/0x250 [ 941.602674][ C1] ? read_lock_is_recursive+0x20/0x20 [ 941.602692][ C1] ? __lock_acquire+0x1347/0x7d40 [ 941.602711][ C1] down_write+0x97/0x200 [ 941.602736][ C1] ? wg_noise_handshake_create_initiation+0x143/0x8d0 [ 941.602771][ C1] ? down_read_killable+0x340/0x340 [ 941.602799][ C1] ? down_read+0x1ac/0x2e0 [ 941.602825][ C1] wg_noise_handshake_create_initiation+0x143/0x8d0 [ 941.602854][ C1] ? is_dynamic_key+0x260/0x260 [ 941.602876][ C1] ? wg_noise_set_static_identity_private_key+0x150/0x150 [ 941.602909][ C1] ? mark_lock+0x94/0x320 [ 941.602930][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 941.602955][ C1] ? lock_chain_count+0x20/0x20 [ 941.602977][ C1] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 941.602999][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 941.603017][ C1] ? ktime_get_coarse_with_offset+0x88/0x190 [ 941.603038][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 941.603058][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 941.603078][ C1] ? try_to_wake_up+0x70a/0x1190 [ 941.603094][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 941.603115][ C1] ? ktime_get_coarse_with_offset+0x145/0x190 [ 941.603138][ C1] wg_packet_handshake_send_worker+0x18f/0x350 [ 941.603157][ C1] ? wg_prev_queue_dequeue+0x220/0x220 [ 941.603182][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 941.603200][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 941.603222][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 941.603243][ C1] process_scheduled_works+0xa5d/0x15d0 [ 941.603276][ C1] ? assign_work+0x430/0x430 [ 941.603299][ C1] ? assign_work+0x3d0/0x430 [ 941.603321][ C1] worker_thread+0xa55/0xfc0 [ 941.603353][ C1] kthread+0x2fa/0x390 [ 941.603369][ C1] ? pr_cont_work+0x560/0x560 [ 941.603390][ C1] ? kthread_blkcg+0xd0/0xd0 [ 941.603405][ C1] ret_from_fork+0x48/0x80 [ 941.603426][ C1] ? kthread_blkcg+0xd0/0xd0 [ 941.603442][ C1] ret_from_fork_asm+0x11/0x20 [ 941.603471][ C1] [ 941.990587][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 941.997492][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 942.004729][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 942.015698][ T29] Call Trace: [ 942.019011][ T29] [ 942.021983][ T29] dump_stack_lvl+0x18c/0x250 [ 942.026723][ T29] ? show_regs_print_info+0x20/0x20 [ 942.031970][ T29] ? load_image+0x400/0x400 [ 942.036538][ T29] panic+0x2dc/0x730 [ 942.040473][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 942.046166][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 942.050716][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 942.056357][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 942.062657][ T29] watchdog+0xf7c/0xf80 [ 942.066854][ T29] ? watchdog+0x1e1/0xf80 [ 942.071657][ T29] kthread+0x2fa/0x390 [ 942.075755][ T29] ? hungtask_pm_notify+0x90/0x90 [ 942.080818][ T29] ? kthread_blkcg+0xd0/0xd0 [ 942.085440][ T29] ret_from_fork+0x48/0x80 [ 942.089888][ T29] ? kthread_blkcg+0xd0/0xd0 [ 942.094515][ T29] ret_from_fork_asm+0x11/0x20 [ 942.099350][ T29] [ 942.102988][ T29] Kernel Offset: disabled [ 942.107341][ T29] Rebooting in 86400 seconds..