last executing test programs: 23.908577615s ago: executing program 3 (id=2166): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x9b}, @generic={0x78, 0x1, 0x0, 0x6, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 22.864691917s ago: executing program 3 (id=2173): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e62e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900060000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0x29, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.95582241s ago: executing program 3 (id=2186): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000180), 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc80) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 19.920894651s ago: executing program 2 (id=2187): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{r3}, &(0x7f0000001440), &(0x7f0000001480)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffce7}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002001f0001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.719041663s ago: executing program 2 (id=2188): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000008cce3281e5d9ea0e22708bc5c84ee71bda8990e3cc36957845072c17590fd694bafd29cb6103aec4fcf7da88"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, 0xfffffffffffffffc, &(0x7f0000000400)=r4}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001c80)={&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000001b40)=[{&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f0000000800)=""/188, 0xbc}, {&(0x7f00000009c0)=""/78, 0x4e}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/247, 0xf7}], 0x8, &(0x7f0000001bc0)=""/137, 0x89}, 0xc0000060) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2b, 'perf_event'}, {0x2b, 'perf_event'}, {0x2d, 'devices'}]}, 0x21) sendmsg$sock(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) 19.712873133s ago: executing program 0 (id=2189): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}, 0xfc80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18, 0x1000000}, 0x0) 19.668897184s ago: executing program 1 (id=2190): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2000000) 19.379088477s ago: executing program 2 (id=2191): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x9b}, @generic={0x78, 0x1, 0x0, 0x6, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 19.231366369s ago: executing program 3 (id=2192): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10060) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000040452542200000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000090098000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x4, 0x9, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='-prio '], 0xe) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2af65e27b03ba876, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611008000000000063000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x10}, 0x94) 19.180626799s ago: executing program 1 (id=2193): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map, r0, 0x30, 0x24}, 0x20) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x6000, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.10712917s ago: executing program 0 (id=2194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000000000000850000f4c5ac3f00b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c50fcb6037823cde7adffacd00135d22d72d885add40f1e1061fb7682718fdda2a8a3768c29155ef60134f49502a0daa5b1b", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) socketpair(0x8, 0x8, 0x2, &(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000000000000850000f4c5ac3f00b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c50fcb6037823cde7adffacd00135d22d72d885add40f1e1061fb7682718fdda2a8a3768c29155ef60134f49502a0daa5b1b", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) socketpair(0x8, 0x8, 0x2, &(0x7f0000000240)) (async) 18.992885452s ago: executing program 0 (id=2195): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x4, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000400bd47c3f7ef0252c07d0f1f001006000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x28}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x23, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000b708000003e52e677b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008279c0ff08000000850000003b000000852000000200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000400000000000000", @ANYRESHEX, @ANYBLOB="0000000001000000bf91000000000000b742a00d4d7fc96d5700000084000000b7000000000000009500000000000000a0f5a1cc808488c9517524e13124c92464eea328bb855d765008743005e45def11fd21ca54c982faf3381ce2f7263d638956983ed2c116c13ad6ebc7e25eaa302dc4e376fa8a30d401e134333075c070c91d56e3c6956771aa33f27baca97d715e7919a09dde501442ddb6c4013acc352798f8bd3a6d4f1b511392d6e8cff91c40f87c9e05e441", @ANYRESHEX=r0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 18.991749261s ago: executing program 2 (id=2196): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900060000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0x29, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.928803402s ago: executing program 1 (id=2197): socketpair(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18, 0x300}, 0x0) 18.442869908s ago: executing program 1 (id=2198): socketpair(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x15, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x35}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x3, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000001440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001480)=[{0x5, 0x3, 0x4, 0x4}, {0x1, 0x5, 0x4}, {0x5, 0x2, 0x10, 0x7}, {0x3, 0x1, 0x3, 0xb}, {0x5, 0x1, 0x5, 0xc}, {0x0, 0x4, 0x1, 0x1}, {0x0, 0x2, 0xf, 0x8}, {0x4, 0x3, 0x4}], 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x0, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1, 0x6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=r6, r1, 0x38, 0x14, 0x0, @void, @value=r1, @void, @void, r5}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x80631, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x40, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xe79, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, 0x0) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000016c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@map=r11, r0, 0x6, 0x2014, 0xffffffffffffffff, @value=r12, @void, @void, @void, r5}, 0x20) socket$kcm(0x21, 0x2, 0xa) r13 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 18.339337349s ago: executing program 0 (id=2199): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x0, 0xf8, 0x2b, &(0x7f0000000580)="a512a67f20563df831c06b3d7514e3c1eafe9e003eefa99f41bdaa9dfc8078799e1d6b3e6672be0a4d5d96e78d3dbd3ffa2fb127d78ef26d0fecfe601c652319dd332faf9c427d44a1bbe7b43a810a164122220f37772ade112d92e1d2be144471391627ca47623a8578b470d323f87351ed5df2d8cb08ece87020f6628ae8e82afcb9491c5974e50b1c6ff730dddc5dadbb602f0420b7a8645854f5cab18de355b91c7f134deac25a7d9cb87cbc7f3d185ba3cefa892ecc1449cfdac68d21ed0e789a6458f94d7742d882015a9057dbf8576c1e6e3255df1572c88f7d5cdb247c689d6108af2600af711066416039b49736431c5c46d37a", &(0x7f0000000080)=""/43, 0x6, 0x0, 0xb4, 0xd6, &(0x7f00000003c0)="73bff8a003bafdf020508a36e06b829703c68cad33213d089548730a0fa1556ec3a8647b5739789d430e12db13ae5e5af24aac70dd4ba201c944b95d0a50f6523454a23b489cd47181d07ab08917d1d804be681e7a3eaa776592fc55dbe6c28955a30d573e24759289baac7145a9b5e4c46851e3e0667a6c10150e438e019393b6641359c4bffffd51f680e11f2f853a25ebe3c721232bda0fee2dc311539d53cb828830ef3bae4fc758b9e7b74d3d50f0d59194", &(0x7f0000000a80)="c1d5eaa9fbb9ec20eaccbcb360dc72ba0ae6cfb708d74ac3cf36c2aca8669f5d59bbc403de54c0a22c4be5f5bc4725c9c951ea05c0fd23b5ed07f3cb36df68745a963219d3e9f77e5c0da3a4bf22e7e30f85306321d5acf0ed0ef9e9f06caa17ed9690317d28e4121aadffa73afcd7527fa0c0386309afed9213278531690bdd44ff8f1a9847059ec693f85edbed27f57a68c3eb114739ef6e4fcc544b8de56e16e96ec488b06275fda815ebbac2674995d4fbe1f2c4b7be7e9d6ca8b36d9a3776008c8c4736caaeb8f8a5e42d2be199caaeff1edbf9", 0x3, 0x0, 0x4be69126}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000080)}, 0x900000004000000) 18.143857302s ago: executing program 3 (id=2200): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000180), 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc80) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 17.586483138s ago: executing program 1 (id=2201): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x64004084) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000300)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x2, '\x00', 0x0, r7, 0x4000001, 0x1, 0x6}, 0x50) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 17.40807889s ago: executing program 0 (id=2202): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r1 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000700), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="507bfc9c4f7ab4"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xca081, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r3) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0xc008744c, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}, 0xfc80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 17.3779952s ago: executing program 3 (id=2203): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) (async) getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000000000000000005516f343000000000061825dbb0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getpid() (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/225, 0xe1, 0x0, &(0x7f0000000480)=""/90, 0x5a}}, 0x10) 17.267259992s ago: executing program 2 (id=2204): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 16.919161195s ago: executing program 2 (id=2205): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000180), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (fail_nth: 6) 16.641235528s ago: executing program 0 (id=2206): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000a40)="ad", &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dd2bc8e10f0464bc47490e12e8197ed3d64fd1d5b36555da", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020200f00000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x9, 0x0, 0x6, 0x86e47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x806}, 0xc0, 0x3, 0x0, 0x3, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 15.484925712s ago: executing program 1 (id=2207): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x4, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000400bd47c3f7ef0252c07d0f1f001006000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x28}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x23, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000b708000003e52e677b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008279c0ff08000000850000003b000000852000000200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000400000000000000", @ANYRESHEX, @ANYBLOB="0000000001000000bf91000000000000b742a00d4d7fc96d5700000084000000b7000000000000009500000000000000a0f5a1cc808488c9517524e13124c92464eea328bb855d765008743005e45def11fd21ca54c982faf3381ce2f7263d638956983ed2c116c13ad6ebc7e25eaa302dc4e376fa8a30d401e134333075c070c91d56e3c6956771aa33f27baca97d715e7919a09dde501442ddb6c4013acc352798f8bd3a6d4f1b511392d6e8cff91c40f87c9e05e441", @ANYRESHEX=r0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.211617035s ago: executing program 32 (id=2203): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) (async) getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000000000000000005516f343000000000061825dbb0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getpid() (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/225, 0xe1, 0x0, &(0x7f0000000480)=""/90, 0x5a}}, 0x10) 1.154687747s ago: executing program 33 (id=2206): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000a40)="ad", &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dd2bc8e10f0464bc47490e12e8197ed3d64fd1d5b36555da", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020200f00000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x9, 0x0, 0x6, 0x86e47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x806}, 0xc0, 0x3, 0x0, 0x3, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.073648568s ago: executing program 34 (id=2205): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000180), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (fail_nth: 6) 0s ago: executing program 35 (id=2207): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x4, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000400bd47c3f7ef0252c07d0f1f001006000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x28}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x23, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000b708000003e52e677b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008279c0ff08000000850000003b000000852000000200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000400000000000000", @ANYRESHEX, @ANYBLOB="0000000001000000bf91000000000000b742a00d4d7fc96d5700000084000000b7000000000000009500000000000000a0f5a1cc808488c9517524e13124c92464eea328bb855d765008743005e45def11fd21ca54c982faf3381ce2f7263d638956983ed2c116c13ad6ebc7e25eaa302dc4e376fa8a30d401e134333075c070c91d56e3c6956771aa33f27baca97d715e7919a09dde501442ddb6c4013acc352798f8bd3a6d4f1b511392d6e8cff91c40f87c9e05e441", @ANYRESHEX=r0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): netlink: 'syz.3.1538': attribute type 6 has an invalid length. [ 320.281461][T11330] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1538'. [ 320.294808][T11335] netlink: 'syz.0.1539': attribute type 29 has an invalid length. [ 320.786002][T11361] FAULT_INJECTION: forcing a failure. [ 320.786002][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.817522][T11361] CPU: 1 PID: 11361 Comm: syz.3.1545 Not tainted syzkaller #0 [ 320.825113][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.835260][T11361] Call Trace: [ 320.838800][T11361] [ 320.841811][T11361] dump_stack_lvl+0x18c/0x250 [ 320.846604][T11361] ? show_regs_print_info+0x20/0x20 [ 320.851910][T11361] ? load_image+0x420/0x420 [ 320.856529][T11361] ? __might_fault+0xaa/0x120 [ 320.861303][T11361] ? __lock_acquire+0x7d40/0x7d40 [ 320.866435][T11361] should_fail_ex+0x39d/0x4d0 [ 320.871235][T11361] _copy_from_user+0x2f/0xe0 [ 320.875922][T11361] ____sys_sendmsg+0x2fd/0x960 [ 320.880780][T11361] ? __lock_acquire+0x7d40/0x7d40 [ 320.885912][T11361] ? __sys_sendmsg_sock+0x30/0x30 [ 320.891007][T11361] ? __import_iovec+0x3fa/0x850 [ 320.895961][T11361] ? import_iovec+0x73/0xa0 [ 320.900565][T11361] ___sys_sendmsg+0x2a6/0x360 [ 320.905323][T11361] ? get_pid_task+0x20/0x1e0 [ 320.910016][T11361] ? __sys_sendmsg+0x2a0/0x2a0 [ 320.914906][T11361] ? __lock_acquire+0x7d40/0x7d40 [ 320.920176][T11361] __se_sys_sendmsg+0x1c2/0x2b0 [ 320.925108][T11361] ? __x64_sys_sendmsg+0x80/0x80 [ 320.930146][T11361] ? lockdep_hardirqs_on+0x98/0x150 [ 320.935450][T11361] do_syscall_64+0x55/0xa0 [ 320.939916][T11361] ? clear_bhb_loop+0x40/0x90 [ 320.944690][T11361] ? clear_bhb_loop+0x40/0x90 [ 320.949429][T11361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.955393][T11361] RIP: 0033:0x7f8cf4b9cdd9 [ 320.959956][T11361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.979640][T11361] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.988122][T11361] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 320.996155][T11361] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 321.004183][T11361] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 321.012206][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.020248][T11361] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 321.028321][T11361] [ 321.686585][T11386] FAULT_INJECTION: forcing a failure. [ 321.686585][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 321.768319][T11386] CPU: 1 PID: 11386 Comm: syz.2.1550 Not tainted syzkaller #0 [ 321.775897][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.786006][T11386] Call Trace: [ 321.789334][T11386] [ 321.792310][T11386] dump_stack_lvl+0x18c/0x250 [ 321.797053][T11386] ? show_regs_print_info+0x20/0x20 [ 321.802321][T11386] ? load_image+0x420/0x420 [ 321.806896][T11386] ? __might_sleep+0xe0/0xe0 [ 321.811550][T11386] ? __lock_acquire+0x7d40/0x7d40 [ 321.815105][T11384] netlink: 'syz.1.1551': attribute type 29 has an invalid length. [ 321.816621][T11386] should_fail_ex+0x39d/0x4d0 [ 321.816665][T11386] should_failslab+0x9/0x20 [ 321.816696][T11386] slab_pre_alloc_hook+0x59/0x310 [ 321.816736][T11386] kmem_cache_alloc+0x5a/0x2d0 [ 321.816767][T11386] ? security_inode_alloc+0x34/0x110 [ 321.848994][T11386] security_inode_alloc+0x34/0x110 [ 321.854163][T11386] inode_init_always+0x8fc/0xc90 [ 321.859232][T11386] new_inode_pseudo+0x95/0x1d0 [ 321.864124][T11386] __sock_create+0x12d/0x940 [ 321.868765][T11386] ? __asan_memset+0x22/0x40 [ 321.873398][T11386] udp_sock_create4+0xcb/0x480 [ 321.878213][T11386] ? erspan_exit_batch_net+0x30/0x30 [ 321.883556][T11386] rxrpc_lookup_local+0xd1f/0x1610 [ 321.888722][T11386] ? rxrpc_local_dont_fragment+0x70/0x70 [ 321.894397][T11386] ? lockdep_hardirqs_on+0x98/0x150 [ 321.899647][T11386] ? _local_bh_enable+0xa0/0xa0 [ 321.904541][T11386] rxrpc_sendmsg+0x30a/0x5b0 [ 321.909174][T11386] ? rxrpc_getsockopt+0x150/0x150 [ 321.914254][T11386] ____sys_sendmsg+0x5ba/0x960 [ 321.919068][T11386] ? __lock_acquire+0x7d40/0x7d40 [ 321.924144][T11386] ? __sys_sendmsg_sock+0x30/0x30 [ 321.929213][T11386] ? __import_iovec+0x3fa/0x850 [ 321.934100][T11386] ? import_iovec+0x73/0xa0 [ 321.938630][T11386] ___sys_sendmsg+0x2a6/0x360 [ 321.943349][T11386] ? get_pid_task+0x20/0x1e0 [ 321.947984][T11386] ? __sys_sendmsg+0x2a0/0x2a0 [ 321.952797][T11386] ? __lock_acquire+0x7d40/0x7d40 [ 321.957871][T11386] __se_sys_sendmsg+0x1c2/0x2b0 [ 321.962760][T11386] ? __x64_sys_sendmsg+0x80/0x80 [ 321.967794][T11386] ? lockdep_hardirqs_on+0x98/0x150 [ 321.973048][T11386] do_syscall_64+0x55/0xa0 [ 321.977511][T11386] ? clear_bhb_loop+0x40/0x90 [ 321.982232][T11386] ? clear_bhb_loop+0x40/0x90 [ 321.986952][T11386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.992885][T11386] RIP: 0033:0x7f9dff39cdd9 [ 321.997332][T11386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.016970][T11386] RSP: 002b:00007f9e002c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.025458][T11386] RAX: ffffffffffffffda RBX: 00007f9dff616090 RCX: 00007f9dff39cdd9 [ 322.033460][T11386] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 322.041463][T11386] RBP: 00007f9e002c7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.049463][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.057580][T11386] R13: 00007f9dff616128 R14: 00007f9dff616090 R15: 00007fff2ceb6fd8 [ 322.065600][T11386] [ 322.111643][T11384] netlink: 'syz.1.1551': attribute type 29 has an invalid length. [ 322.124333][T11386] socket: no more sockets [ 322.135312][T11391] netlink: 'syz.1.1551': attribute type 29 has an invalid length. [ 322.153432][T11389] netlink: 'syz.1.1551': attribute type 29 has an invalid length. [ 322.165944][T11377] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1549'. [ 322.268077][T11377] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1549'. [ 324.680562][T11448] validate_nla: 6 callbacks suppressed [ 324.681163][T11448] netlink: 'syz.1.1562': attribute type 6 has an invalid length. [ 324.698637][T11448] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1562'. [ 324.771856][T11448] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 324.790108][T11448] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1562'. [ 325.219034][T11475] delete_channel: no stack [ 325.242840][T11475] delete_channel: no stack [ 326.534170][T11493] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1575'. [ 326.592207][T11499] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 326.624590][T11499] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 326.649734][T11503] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 326.671370][T11499] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 326.773777][T11495] netlink: 'syz.1.1577': attribute type 6 has an invalid length. [ 326.790279][T11495] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1577'. [ 326.875008][T11495] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 326.896561][T11495] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1577'. [ 328.157139][T11560] netlink: 'syz.3.1592': attribute type 6 has an invalid length. [ 328.195515][T11560] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1592'. [ 328.429539][T11550] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 328.491217][T11550] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1592'. [ 328.616031][T11576] FAULT_INJECTION: forcing a failure. [ 328.616031][T11576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.639650][T11576] CPU: 1 PID: 11576 Comm: syz.0.1597 Not tainted syzkaller #0 [ 328.647304][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.657421][T11576] Call Trace: [ 328.660751][T11576] [ 328.663732][T11576] dump_stack_lvl+0x18c/0x250 [ 328.668494][T11576] ? show_regs_print_info+0x20/0x20 [ 328.673779][T11576] ? load_image+0x420/0x420 [ 328.678395][T11576] ? __lock_acquire+0x7d40/0x7d40 [ 328.683480][T11576] ? snprintf+0xe9/0x140 [ 328.687868][T11576] should_fail_ex+0x39d/0x4d0 [ 328.692652][T11576] _copy_to_user+0x2f/0xa0 [ 328.697185][T11576] simple_read_from_buffer+0xe7/0x150 [ 328.702640][T11576] proc_fail_nth_read+0x1e8/0x260 [ 328.707737][T11576] ? proc_fault_inject_write+0x360/0x360 [ 328.713448][T11576] ? fsnotify_perm+0x271/0x5e0 [ 328.718331][T11576] ? proc_fault_inject_write+0x360/0x360 [ 328.724034][T11576] vfs_read+0x28b/0x970 [ 328.728264][T11576] ? kernel_read+0x1e0/0x1e0 [ 328.732928][T11576] ? __fget_files+0x28/0x4b0 [ 328.737587][T11576] ? __fget_files+0x28/0x4b0 [ 328.742245][T11576] ? __fget_files+0x43d/0x4b0 [ 328.746997][T11576] ? __fdget_pos+0x2a3/0x330 [ 328.751648][T11576] ? ksys_read+0x75/0x260 [ 328.756044][T11576] ksys_read+0x150/0x260 [ 328.760437][T11576] ? vfs_write+0x990/0x990 [ 328.764924][T11576] ? lockdep_hardirqs_on+0x98/0x150 [ 328.770197][T11576] do_syscall_64+0x55/0xa0 [ 328.774674][T11576] ? clear_bhb_loop+0x40/0x90 [ 328.779419][T11576] ? clear_bhb_loop+0x40/0x90 [ 328.784165][T11576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.790120][T11576] RIP: 0033:0x7f69c655d60e [ 328.794586][T11576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.814249][T11576] RSP: 002b:00007f69c749cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.822738][T11576] RAX: ffffffffffffffda RBX: 00007f69c749d6c0 RCX: 00007f69c655d60e [ 328.830789][T11576] RDX: 000000000000000f RSI: 00007f69c749d0a0 RDI: 0000000000000007 [ 328.838828][T11576] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 328.846865][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.854931][T11576] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 328.862982][T11576] [ 329.364734][T11592] FAULT_INJECTION: forcing a failure. [ 329.364734][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 329.399948][T11592] CPU: 0 PID: 11592 Comm: syz.3.1602 Not tainted syzkaller #0 [ 329.407553][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.417680][T11592] Call Trace: [ 329.421016][T11592] [ 329.423998][T11592] dump_stack_lvl+0x18c/0x250 [ 329.428777][T11592] ? show_regs_print_info+0x20/0x20 [ 329.434040][T11592] ? load_image+0x420/0x420 [ 329.438611][T11592] ? __might_sleep+0xe0/0xe0 [ 329.443259][T11592] ? __lock_acquire+0x7d40/0x7d40 [ 329.448356][T11592] ? __put_user_ns+0x50/0x50 [ 329.453008][T11592] should_fail_ex+0x39d/0x4d0 [ 329.457783][T11592] should_failslab+0x9/0x20 [ 329.462350][T11592] slab_pre_alloc_hook+0x59/0x310 [ 329.467449][T11592] ? rxrpc_alloc_bundle+0x78/0x580 [ 329.472617][T11592] __kmem_cache_alloc_node+0x53/0x250 [ 329.478049][T11592] ? do_raw_spin_lock+0x11f/0x2c0 [ 329.483146][T11592] ? rxrpc_alloc_bundle+0x78/0x580 [ 329.488321][T11592] kmalloc_trace+0x2a/0xe0 [ 329.492806][T11592] rxrpc_alloc_bundle+0x78/0x580 [ 329.497805][T11592] rxrpc_look_up_bundle+0x395/0x930 [ 329.503078][T11592] rxrpc_new_client_call+0xbcd/0x1410 [ 329.508536][T11592] rxrpc_do_sendmsg+0xe03/0x12d0 [ 329.513559][T11592] ? rxrpc_propose_abort+0x200/0x200 [ 329.518916][T11592] ? __local_bh_enable_ip+0x13a/0x1c0 [ 329.524371][T11592] ? rxrpc_sendmsg+0x391/0x5b0 [ 329.529186][T11592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 329.534540][T11592] ? rxrpc_getsockopt+0x150/0x150 [ 329.539631][T11592] ____sys_sendmsg+0x5ba/0x960 [ 329.544462][T11592] ? __lock_acquire+0x7d40/0x7d40 [ 329.549558][T11592] ? __sys_sendmsg_sock+0x30/0x30 [ 329.554644][T11592] ? __import_iovec+0x3fa/0x850 [ 329.559559][T11592] ? import_iovec+0x73/0xa0 [ 329.564129][T11592] ___sys_sendmsg+0x2a6/0x360 [ 329.568860][T11592] ? get_pid_task+0x20/0x1e0 [ 329.573510][T11592] ? __sys_sendmsg+0x2a0/0x2a0 [ 329.578357][T11592] ? __lock_acquire+0x7d40/0x7d40 [ 329.583469][T11592] __se_sys_sendmsg+0x1c2/0x2b0 [ 329.588387][T11592] ? __x64_sys_sendmsg+0x80/0x80 [ 329.593405][T11592] ? lockdep_hardirqs_on+0x98/0x150 [ 329.598704][T11592] do_syscall_64+0x55/0xa0 [ 329.603185][T11592] ? clear_bhb_loop+0x40/0x90 [ 329.607921][T11592] ? clear_bhb_loop+0x40/0x90 [ 329.612660][T11592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.618618][T11592] RIP: 0033:0x7f8cf4b9cdd9 [ 329.623086][T11592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.642844][T11592] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.651319][T11592] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 329.659350][T11592] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 329.667379][T11592] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.675413][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.683440][T11592] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 329.691499][T11592] [ 330.081928][T11614] FAULT_INJECTION: forcing a failure. [ 330.081928][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 330.107000][T11614] CPU: 1 PID: 11614 Comm: syz.2.1608 Not tainted syzkaller #0 [ 330.114573][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.124701][T11614] Call Trace: [ 330.128055][T11614] [ 330.131042][T11614] dump_stack_lvl+0x18c/0x250 [ 330.135804][T11614] ? show_regs_print_info+0x20/0x20 [ 330.141058][T11614] ? load_image+0x420/0x420 [ 330.145701][T11614] ? __might_sleep+0xe0/0xe0 [ 330.150341][T11614] ? __lock_acquire+0x7d40/0x7d40 [ 330.155422][T11614] should_fail_ex+0x39d/0x4d0 [ 330.160160][T11614] should_failslab+0x9/0x20 [ 330.164712][T11614] slab_pre_alloc_hook+0x59/0x310 [ 330.169815][T11614] kmem_cache_alloc+0x5a/0x2d0 [ 330.174640][T11614] ? rxrpc_alloc_call+0x272/0xc20 [ 330.179716][T11614] ? rxrpc_alloc_call+0x78/0xc20 [ 330.184715][T11614] rxrpc_alloc_call+0x272/0xc20 [ 330.189626][T11614] rxrpc_new_client_call+0xed/0x1410 [ 330.194974][T11614] rxrpc_do_sendmsg+0xe03/0x12d0 [ 330.200001][T11614] ? rxrpc_propose_abort+0x200/0x200 [ 330.205343][T11614] ? __local_bh_enable_ip+0x13a/0x1c0 [ 330.210866][T11614] ? rxrpc_sendmsg+0x391/0x5b0 [ 330.215672][T11614] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 330.221007][T11614] ? rxrpc_getsockopt+0x150/0x150 [ 330.226107][T11614] ____sys_sendmsg+0x5ba/0x960 [ 330.230916][T11614] ? __lock_acquire+0x7d40/0x7d40 [ 330.235998][T11614] ? __sys_sendmsg_sock+0x30/0x30 [ 330.241094][T11614] ? __import_iovec+0x3fa/0x850 [ 330.246004][T11614] ? import_iovec+0x73/0xa0 [ 330.250570][T11614] ___sys_sendmsg+0x2a6/0x360 [ 330.255289][T11614] ? get_pid_task+0x20/0x1e0 [ 330.259929][T11614] ? __sys_sendmsg+0x2a0/0x2a0 [ 330.264777][T11614] ? __lock_acquire+0x7d40/0x7d40 [ 330.269885][T11614] __se_sys_sendmsg+0x1c2/0x2b0 [ 330.274790][T11614] ? __x64_sys_sendmsg+0x80/0x80 [ 330.279820][T11614] ? lockdep_hardirqs_on+0x98/0x150 [ 330.285091][T11614] do_syscall_64+0x55/0xa0 [ 330.289549][T11614] ? clear_bhb_loop+0x40/0x90 [ 330.294272][T11614] ? clear_bhb_loop+0x40/0x90 [ 330.298989][T11614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.304929][T11614] RIP: 0033:0x7f9dff39cdd9 [ 330.309385][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.329032][T11614] RSP: 002b:00007f9e002e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.337486][T11614] RAX: ffffffffffffffda RBX: 00007f9dff615fa0 RCX: 00007f9dff39cdd9 [ 330.345591][T11614] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 330.353609][T11614] RBP: 00007f9e002e8090 R08: 0000000000000000 R09: 0000000000000000 [ 330.361622][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.369635][T11614] R13: 00007f9dff616038 R14: 00007f9dff615fa0 R15: 00007fff2ceb6fd8 [ 330.377680][T11614] [ 330.390086][T11615] validate_nla: 4 callbacks suppressed [ 330.390103][T11615] netlink: 'syz.3.1607': attribute type 6 has an invalid length. [ 330.432282][T11615] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1607'. [ 331.001647][T11627] netlink: 'syz.0.1611': attribute type 29 has an invalid length. [ 331.017979][T11627] netlink: 'syz.0.1611': attribute type 29 has an invalid length. [ 331.030647][T11631] netlink: 'syz.0.1611': attribute type 29 has an invalid length. [ 331.126492][T11627] netlink: 'syz.0.1611': attribute type 29 has an invalid length. [ 331.473685][T11615] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 331.483576][T11615] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1607'. [ 332.297515][T11655] FAULT_INJECTION: forcing a failure. [ 332.297515][T11655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.373577][T11655] CPU: 0 PID: 11655 Comm: syz.0.1619 Not tainted syzkaller #0 [ 332.381170][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.391283][T11655] Call Trace: [ 332.394624][T11655] [ 332.397606][T11655] dump_stack_lvl+0x18c/0x250 [ 332.402354][T11655] ? show_regs_print_info+0x20/0x20 [ 332.407632][T11655] ? load_image+0x420/0x420 [ 332.412212][T11655] ? __lock_acquire+0x7d40/0x7d40 [ 332.417297][T11655] ? __virt_addr_valid+0x18c/0x540 [ 332.422476][T11655] should_fail_ex+0x39d/0x4d0 [ 332.427234][T11655] _copy_from_user+0x2f/0xe0 [ 332.431889][T11655] bpf_test_init+0xde/0x140 [ 332.436462][T11655] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 332.441924][T11655] ? dev_put+0x80/0x80 [ 332.446081][T11655] ? dev_put+0x80/0x80 [ 332.450209][T11655] bpf_prog_test_run+0x321/0x390 [ 332.455210][T11655] __sys_bpf+0x49d/0x890 [ 332.459513][T11655] ? bpf_link_show_fdinfo+0x390/0x390 [ 332.464962][T11655] ? lock_chain_count+0x20/0x20 [ 332.469880][T11655] __x64_sys_bpf+0x7c/0x90 [ 332.474368][T11655] do_syscall_64+0x55/0xa0 [ 332.478837][T11655] ? clear_bhb_loop+0x40/0x90 [ 332.483587][T11655] ? clear_bhb_loop+0x40/0x90 [ 332.488328][T11655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.494272][T11655] RIP: 0033:0x7f69c659cdd9 [ 332.498737][T11655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.518490][T11655] RSP: 002b:00007f69c749d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.526975][T11655] RAX: ffffffffffffffda RBX: 00007f69c6815fa0 RCX: 00007f69c659cdd9 [ 332.535008][T11655] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 332.543027][T11655] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 332.551045][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.559068][T11655] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 332.567110][T11655] [ 333.789244][T11680] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 333.809379][T11680] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1624'. [ 334.578204][T11679] netlink: 'syz.3.1624': attribute type 6 has an invalid length. [ 334.609488][T11679] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1624'. [ 334.956309][T11694] netlink: 'syz.3.1628': attribute type 29 has an invalid length. [ 334.988007][T11694] netlink: 'syz.3.1628': attribute type 29 has an invalid length. [ 335.239699][T11714] FAULT_INJECTION: forcing a failure. [ 335.239699][T11714] name failslab, interval 1, probability 0, space 0, times 0 [ 335.253746][T11714] CPU: 0 PID: 11714 Comm: syz.1.1632 Not tainted syzkaller #0 [ 335.261275][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.271372][T11714] Call Trace: [ 335.274679][T11714] [ 335.277642][T11714] dump_stack_lvl+0x18c/0x250 [ 335.282369][T11714] ? show_regs_print_info+0x20/0x20 [ 335.287610][T11714] ? load_image+0x420/0x420 [ 335.292160][T11714] ? __might_sleep+0xe0/0xe0 [ 335.296794][T11714] ? __lock_acquire+0x7d40/0x7d40 [ 335.301862][T11714] should_fail_ex+0x39d/0x4d0 [ 335.306585][T11714] should_failslab+0x9/0x20 [ 335.311134][T11714] slab_pre_alloc_hook+0x59/0x310 [ 335.316208][T11714] ? rxrpc_alloc_peer+0x7e/0x340 [ 335.321188][T11714] __kmem_cache_alloc_node+0x53/0x250 [ 335.326613][T11714] ? rxrpc_alloc_peer+0x7e/0x340 [ 335.331594][T11714] kmalloc_trace+0x2a/0xe0 [ 335.336047][T11714] rxrpc_alloc_peer+0x7e/0x340 [ 335.340852][T11714] rxrpc_lookup_peer+0x3f4/0x850 [ 335.345834][T11714] rxrpc_new_client_call+0xb99/0x1410 [ 335.351245][T11714] rxrpc_do_sendmsg+0xe03/0x12d0 [ 335.356233][T11714] ? rxrpc_propose_abort+0x200/0x200 [ 335.361574][T11714] ? rxrpc_sendmsg+0x391/0x5b0 [ 335.366369][T11714] ? rxrpc_getsockopt+0x150/0x150 [ 335.371432][T11714] ____sys_sendmsg+0x5ba/0x960 [ 335.376224][T11714] ? __lock_acquire+0x7d40/0x7d40 [ 335.381292][T11714] ? __sys_sendmsg_sock+0x30/0x30 [ 335.386345][T11714] ? __import_iovec+0x3fa/0x850 [ 335.391327][T11714] ? import_iovec+0x73/0xa0 [ 335.395866][T11714] ___sys_sendmsg+0x2a6/0x360 [ 335.400663][T11714] ? get_pid_task+0x20/0x1e0 [ 335.405290][T11714] ? __sys_sendmsg+0x2a0/0x2a0 [ 335.410103][T11714] ? __lock_acquire+0x7d40/0x7d40 [ 335.415183][T11714] __se_sys_sendmsg+0x1c2/0x2b0 [ 335.420066][T11714] ? __x64_sys_sendmsg+0x80/0x80 [ 335.425044][T11714] ? lockdep_hardirqs_on+0x98/0x150 [ 335.430281][T11714] do_syscall_64+0x55/0xa0 [ 335.434730][T11714] ? clear_bhb_loop+0x40/0x90 [ 335.439447][T11714] ? clear_bhb_loop+0x40/0x90 [ 335.444160][T11714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.450090][T11714] RIP: 0033:0x7ff75839cdd9 [ 335.454554][T11714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.474188][T11714] RSP: 002b:00007ff75920b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.482639][T11714] RAX: ffffffffffffffda RBX: 00007ff758615fa0 RCX: 00007ff75839cdd9 [ 335.490645][T11714] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 335.498656][T11714] RBP: 00007ff75920b090 R08: 0000000000000000 R09: 0000000000000000 [ 335.506653][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.514649][T11714] R13: 00007ff758616038 R14: 00007ff758615fa0 R15: 00007ffd0546ae48 [ 335.522668][T11714] [ 335.966299][T11732] validate_nla: 2 callbacks suppressed [ 335.966316][T11732] netlink: 'syz.3.1636': attribute type 6 has an invalid length. [ 335.993798][T11732] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1636'. [ 336.068424][T11739] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 336.076553][T11739] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1636'. [ 336.830004][T11742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.894389][T11744] FAULT_INJECTION: forcing a failure. [ 336.894389][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 336.943816][T11744] CPU: 1 PID: 11744 Comm: syz.0.1640 Not tainted syzkaller #0 [ 336.951416][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.961556][T11744] Call Trace: [ 336.964899][T11744] [ 336.967904][T11744] dump_stack_lvl+0x18c/0x250 [ 336.972691][T11744] ? show_regs_print_info+0x20/0x20 [ 336.978001][T11744] ? load_image+0x420/0x420 [ 336.982611][T11744] ? __might_sleep+0xe0/0xe0 [ 336.987379][T11744] ? __lock_acquire+0x7d40/0x7d40 [ 336.992502][T11744] should_fail_ex+0x39d/0x4d0 [ 336.997294][T11744] should_failslab+0x9/0x20 [ 337.001886][T11744] slab_pre_alloc_hook+0x59/0x310 [ 337.007027][T11744] kmem_cache_alloc+0x5a/0x2d0 [ 337.011908][T11744] ? rxrpc_alloc_call+0x272/0xc20 [ 337.017022][T11744] ? rxrpc_alloc_call+0x78/0xc20 [ 337.022040][T11744] rxrpc_alloc_call+0x272/0xc20 [ 337.026996][T11744] rxrpc_new_client_call+0xed/0x1410 [ 337.032397][T11744] rxrpc_do_sendmsg+0xe03/0x12d0 [ 337.037471][T11744] ? rxrpc_propose_abort+0x200/0x200 [ 337.042835][T11744] ? __local_bh_enable_ip+0x13a/0x1c0 [ 337.048298][T11744] ? rxrpc_sendmsg+0x391/0x5b0 [ 337.053126][T11744] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 337.058469][T11744] ? rxrpc_getsockopt+0x150/0x150 [ 337.063546][T11744] ____sys_sendmsg+0x5ba/0x960 [ 337.068362][T11744] ? __lock_acquire+0x7d40/0x7d40 [ 337.073456][T11744] ? __sys_sendmsg_sock+0x30/0x30 [ 337.078527][T11744] ? __import_iovec+0x3fa/0x850 [ 337.083455][T11744] ? import_iovec+0x73/0xa0 [ 337.088022][T11744] ___sys_sendmsg+0x2a6/0x360 [ 337.092756][T11744] ? get_pid_task+0x20/0x1e0 [ 337.097423][T11744] ? __sys_sendmsg+0x2a0/0x2a0 [ 337.102292][T11744] ? __lock_acquire+0x7d40/0x7d40 [ 337.107436][T11744] __se_sys_sendmsg+0x1c2/0x2b0 [ 337.112351][T11744] ? __x64_sys_sendmsg+0x80/0x80 [ 337.117385][T11744] ? lockdep_hardirqs_on+0x98/0x150 [ 337.122655][T11744] do_syscall_64+0x55/0xa0 [ 337.127116][T11744] ? clear_bhb_loop+0x40/0x90 [ 337.131850][T11744] ? clear_bhb_loop+0x40/0x90 [ 337.136594][T11744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.142550][T11744] RIP: 0033:0x7f69c659cdd9 [ 337.147016][T11744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.166677][T11744] RSP: 002b:00007f69c749d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.175163][T11744] RAX: ffffffffffffffda RBX: 00007f69c6815fa0 RCX: 00007f69c659cdd9 [ 337.183182][T11744] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 337.191238][T11744] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 337.199258][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.207280][T11744] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 337.215344][T11744] [ 338.786018][T11764] netlink: 'syz.0.1644': attribute type 29 has an invalid length. [ 338.853521][T11764] netlink: 'syz.0.1644': attribute type 29 has an invalid length. [ 339.110850][T11765] netlink: 'syz.0.1644': attribute type 29 has an invalid length. [ 339.119947][T11767] netlink: 'syz.0.1644': attribute type 29 has an invalid length. [ 340.087567][T11789] FAULT_INJECTION: forcing a failure. [ 340.087567][T11789] name failslab, interval 1, probability 0, space 0, times 0 [ 340.129737][T11789] CPU: 1 PID: 11789 Comm: syz.1.1648 Not tainted syzkaller #0 [ 340.137306][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.147451][T11789] Call Trace: [ 340.150781][T11789] [ 340.153762][T11789] dump_stack_lvl+0x18c/0x250 [ 340.158508][T11789] ? show_regs_print_info+0x20/0x20 [ 340.163771][T11789] ? load_image+0x420/0x420 [ 340.168334][T11789] ? __lock_acquire+0x7d40/0x7d40 [ 340.173413][T11789] should_fail_ex+0x39d/0x4d0 [ 340.178161][T11789] should_failslab+0x9/0x20 [ 340.182721][T11789] slab_pre_alloc_hook+0x59/0x310 [ 340.187817][T11789] kmem_cache_alloc+0x5a/0x2d0 [ 340.192641][T11789] ? sk_prot_alloc+0x57/0x210 [ 340.197384][T11789] sk_prot_alloc+0x57/0x210 [ 340.201942][T11789] ? sk_alloc+0x24/0x360 [ 340.206223][T11789] sk_alloc+0x3a/0x360 [ 340.210332][T11789] inet_create+0x7a0/0xfe0 [ 340.214785][T11789] ? inet_create+0x9c/0xfe0 [ 340.219324][T11789] __sock_create+0x4a6/0x940 [ 340.223956][T11789] udp_sock_create4+0xcb/0x480 [ 340.228769][T11789] ? erspan_exit_batch_net+0x30/0x30 [ 340.234105][T11789] rxrpc_lookup_local+0xd1f/0x1610 [ 340.239350][T11789] ? rxrpc_local_dont_fragment+0x70/0x70 [ 340.245035][T11789] ? lockdep_hardirqs_on+0x98/0x150 [ 340.250274][T11789] ? _local_bh_enable+0xa0/0xa0 [ 340.255172][T11789] rxrpc_sendmsg+0x30a/0x5b0 [ 340.259794][T11789] ? rxrpc_getsockopt+0x150/0x150 [ 340.264844][T11789] ____sys_sendmsg+0x5ba/0x960 [ 340.269638][T11789] ? __lock_acquire+0x7d40/0x7d40 [ 340.274706][T11789] ? __sys_sendmsg_sock+0x30/0x30 [ 340.279766][T11789] ? __import_iovec+0x3fa/0x850 [ 340.284661][T11789] ? import_iovec+0x73/0xa0 [ 340.289197][T11789] ___sys_sendmsg+0x2a6/0x360 [ 340.293906][T11789] ? get_pid_task+0x20/0x1e0 [ 340.298548][T11789] ? __sys_sendmsg+0x2a0/0x2a0 [ 340.303358][T11789] ? __lock_acquire+0x7d40/0x7d40 [ 340.308441][T11789] __se_sys_sendmsg+0x1c2/0x2b0 [ 340.313327][T11789] ? __x64_sys_sendmsg+0x80/0x80 [ 340.318304][T11789] ? lockdep_hardirqs_on+0x98/0x150 [ 340.323539][T11789] do_syscall_64+0x55/0xa0 [ 340.327990][T11789] ? clear_bhb_loop+0x40/0x90 [ 340.332700][T11789] ? clear_bhb_loop+0x40/0x90 [ 340.337416][T11789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.343342][T11789] RIP: 0033:0x7ff75839cdd9 [ 340.347783][T11789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.367417][T11789] RSP: 002b:00007ff7591ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.375865][T11789] RAX: ffffffffffffffda RBX: 00007ff758616090 RCX: 00007ff75839cdd9 [ 340.383871][T11789] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 340.391874][T11789] RBP: 00007ff7591ea090 R08: 0000000000000000 R09: 0000000000000000 [ 340.399917][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.407918][T11789] R13: 00007ff758616128 R14: 00007ff758616090 R15: 00007ffd0546ae48 [ 340.415937][T11789] [ 340.620197][T11800] netlink: 'syz.1.1651': attribute type 6 has an invalid length. [ 340.628122][T11800] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1651'. [ 340.648752][T11800] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 340.674031][T11800] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1651'. [ 340.835654][T11807] netlink: 'syz.0.1653': attribute type 27 has an invalid length. [ 340.844640][T11807] netlink: 'syz.0.1653': attribute type 3 has an invalid length. [ 340.860557][T11807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1653'. [ 341.269185][T11828] netlink: 'syz.1.1657': attribute type 29 has an invalid length. [ 341.297488][T11828] netlink: 'syz.1.1657': attribute type 29 has an invalid length. [ 341.310709][T11831] netlink: 'syz.1.1657': attribute type 29 has an invalid length. [ 341.333997][T11828] netlink: 'syz.1.1657': attribute type 29 has an invalid length. [ 342.267755][T11853] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 342.279508][T11853] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1663'. [ 343.950430][T11851] netlink: 'syz.0.1663': attribute type 6 has an invalid length. [ 343.958269][T11851] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1663'. [ 344.666629][T11890] netlink: 'syz.1.1672': attribute type 29 has an invalid length. [ 344.693903][T11890] netlink: 'syz.1.1672': attribute type 29 has an invalid length. [ 344.709078][T11890] netlink: 'syz.1.1672': attribute type 29 has an invalid length. [ 344.724323][T11890] netlink: 'syz.1.1672': attribute type 29 has an invalid length. [ 344.870473][T11893] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1673'. [ 345.112523][T11898] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1674'. [ 345.129968][T11898] openvswitch: netlink: Duplicate key (type 0). [ 345.159011][T11895] netlink: 751 bytes leftover after parsing attributes in process `syz.2.1674'. [ 346.017896][T11906] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1677'. [ 346.204335][T11932] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1682'. [ 346.691378][T11945] validate_nla: 1 callbacks suppressed [ 346.691421][T11945] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 346.707735][T11945] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 346.728876][T11945] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 346.741662][T11945] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 347.406736][T11981] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 347.414944][T11981] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1692'. [ 347.451802][T11969] netlink: 'syz.0.1693': attribute type 21 has an invalid length. [ 347.463842][T11969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1693'. [ 347.475681][T11974] netlink: 'syz.1.1692': attribute type 6 has an invalid length. [ 347.506933][T11974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1692'. [ 347.712292][T11988] FAULT_INJECTION: forcing a failure. [ 347.712292][T11988] name failslab, interval 1, probability 0, space 0, times 0 [ 347.737758][T11988] CPU: 1 PID: 11988 Comm: syz.0.1698 Not tainted syzkaller #0 [ 347.745384][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.755517][T11988] Call Trace: [ 347.758855][T11988] [ 347.761846][T11988] dump_stack_lvl+0x18c/0x250 [ 347.766618][T11988] ? show_regs_print_info+0x20/0x20 [ 347.771903][T11988] ? load_image+0x420/0x420 [ 347.776489][T11988] ? __might_sleep+0xe0/0xe0 [ 347.781168][T11988] ? __lock_acquire+0x7d40/0x7d40 [ 347.786284][T11988] should_fail_ex+0x39d/0x4d0 [ 347.791052][T11988] should_failslab+0x9/0x20 [ 347.795630][T11988] slab_pre_alloc_hook+0x59/0x310 [ 347.800728][T11988] ? lock_chain_count+0x20/0x20 [ 347.805649][T11988] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 347.810754][T11988] __kmem_cache_alloc_node+0x53/0x250 [ 347.816207][T11988] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 347.822195][T11988] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 347.827304][T11988] kmalloc_trace+0x2a/0xe0 [ 347.831799][T11988] rxrpc_alloc_txbuf+0x7b/0x8a0 [ 347.836723][T11988] ? remove_wait_queue+0x33/0x120 [ 347.841799][T11988] ? none_how_much_data+0x29/0xa0 [ 347.846874][T11988] rxrpc_send_data+0xb73/0x2950 [ 347.851785][T11988] ? rxrpc_send_data+0x24f/0x2950 [ 347.856856][T11988] ? mark_lock+0x94/0x320 [ 347.861280][T11988] ? rxrpc_do_sendmsg+0x12d0/0x12d0 [ 347.866569][T11988] ? do_task_dead+0xd0/0xd0 [ 347.871166][T11988] rxrpc_do_sendmsg+0x10c6/0x12d0 [ 347.876283][T11988] ? rxrpc_propose_abort+0x200/0x200 [ 347.881633][T11988] ? __local_bh_enable_ip+0x13a/0x1c0 [ 347.887187][T11988] ? rxrpc_sendmsg+0x391/0x5b0 [ 347.892005][T11988] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 347.897363][T11988] ? rxrpc_getsockopt+0x150/0x150 [ 347.902440][T11988] ____sys_sendmsg+0x5ba/0x960 [ 347.907332][T11988] ? __lock_acquire+0x7d40/0x7d40 [ 347.912419][T11988] ? __sys_sendmsg_sock+0x30/0x30 [ 347.917485][T11988] ? __import_iovec+0x3fa/0x850 [ 347.922396][T11988] ? import_iovec+0x73/0xa0 [ 347.926943][T11988] ___sys_sendmsg+0x2a6/0x360 [ 347.931664][T11988] ? get_pid_task+0x20/0x1e0 [ 347.936335][T11988] ? __sys_sendmsg+0x2a0/0x2a0 [ 347.941179][T11988] ? __lock_acquire+0x7d40/0x7d40 [ 347.946295][T11988] __se_sys_sendmsg+0x1c2/0x2b0 [ 347.951264][T11988] ? __x64_sys_sendmsg+0x80/0x80 [ 347.956343][T11988] ? lockdep_hardirqs_on+0x98/0x150 [ 347.961626][T11988] do_syscall_64+0x55/0xa0 [ 347.966109][T11988] ? clear_bhb_loop+0x40/0x90 [ 347.970852][T11988] ? clear_bhb_loop+0x40/0x90 [ 347.975613][T11988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.981826][T11988] RIP: 0033:0x7f69c659cdd9 [ 347.986309][T11988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.005973][T11988] RSP: 002b:00007f69c749d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.014449][T11988] RAX: ffffffffffffffda RBX: 00007f69c6815fa0 RCX: 00007f69c659cdd9 [ 348.022472][T11988] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 348.030492][T11988] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 348.038521][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.046544][T11988] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 348.054590][T11988] [ 348.439219][T12011] FAULT_INJECTION: forcing a failure. [ 348.439219][T12011] name failslab, interval 1, probability 0, space 0, times 0 [ 348.480924][T12011] CPU: 1 PID: 12011 Comm: syz.3.1703 Not tainted syzkaller #0 [ 348.488511][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.498650][T12011] Call Trace: [ 348.501990][T12011] [ 348.504989][T12011] dump_stack_lvl+0x18c/0x250 [ 348.509777][T12011] ? show_regs_print_info+0x20/0x20 [ 348.515050][T12011] ? load_image+0x420/0x420 [ 348.519633][T12011] ? __might_sleep+0xe0/0xe0 [ 348.524298][T12011] ? __lock_acquire+0x7d40/0x7d40 [ 348.529403][T12011] should_fail_ex+0x39d/0x4d0 [ 348.534176][T12011] should_failslab+0x9/0x20 [ 348.538757][T12011] slab_pre_alloc_hook+0x59/0x310 [ 348.543870][T12011] ? rxrpc_alloc_peer+0x7e/0x340 [ 348.548890][T12011] __kmem_cache_alloc_node+0x53/0x250 [ 348.554353][T12011] ? rxrpc_alloc_peer+0x7e/0x340 [ 348.559390][T12011] kmalloc_trace+0x2a/0xe0 [ 348.563895][T12011] rxrpc_alloc_peer+0x7e/0x340 [ 348.568858][T12011] rxrpc_lookup_peer+0x3f4/0x850 [ 348.573910][T12011] rxrpc_new_client_call+0xb99/0x1410 [ 348.579380][T12011] rxrpc_do_sendmsg+0xe03/0x12d0 [ 348.584426][T12011] ? rxrpc_propose_abort+0x200/0x200 [ 348.589802][T12011] ? __local_bh_enable_ip+0x13a/0x1c0 [ 348.595320][T12011] ? rxrpc_sendmsg+0x391/0x5b0 [ 348.600186][T12011] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.605561][T12011] ? rxrpc_getsockopt+0x150/0x150 [ 348.610766][T12011] ____sys_sendmsg+0x5ba/0x960 [ 348.615611][T12011] ? __lock_acquire+0x7d40/0x7d40 [ 348.620740][T12011] ? __sys_sendmsg_sock+0x30/0x30 [ 348.625850][T12011] ? __import_iovec+0x3fa/0x850 [ 348.630801][T12011] ? import_iovec+0x73/0xa0 [ 348.635393][T12011] ___sys_sendmsg+0x2a6/0x360 [ 348.640186][T12011] ? get_pid_task+0x20/0x1e0 [ 348.644868][T12011] ? __sys_sendmsg+0x2a0/0x2a0 [ 348.649761][T12011] ? __lock_acquire+0x7d40/0x7d40 [ 348.654932][T12011] __se_sys_sendmsg+0x1c2/0x2b0 [ 348.659872][T12011] ? __x64_sys_sendmsg+0x80/0x80 [ 348.664923][T12011] ? lockdep_hardirqs_on+0x98/0x150 [ 348.670277][T12011] do_syscall_64+0x55/0xa0 [ 348.674801][T12011] ? clear_bhb_loop+0x40/0x90 [ 348.679573][T12011] ? clear_bhb_loop+0x40/0x90 [ 348.684360][T12011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.690335][T12011] RIP: 0033:0x7f8cf4b9cdd9 [ 348.694821][T12011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.714695][T12011] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.723190][T12011] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 348.731234][T12011] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 348.739288][T12011] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.747328][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.755379][T12011] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 348.763457][T12011] [ 348.811924][T12014] syzkaller0: entered promiscuous mode [ 348.874153][T12014] syzkaller0: entered allmulticast mode [ 348.964674][T12018] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 348.978265][T12018] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 349.013839][T12018] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 349.938226][T12040] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1708'. [ 352.076577][T12026] validate_nla: 2 callbacks suppressed [ 352.076645][T12026] netlink: 'syz.3.1708': attribute type 6 has an invalid length. [ 352.090631][T12026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1708'. [ 352.302941][T12059] FAULT_INJECTION: forcing a failure. [ 352.302941][T12059] name failslab, interval 1, probability 0, space 0, times 0 [ 352.339939][T12059] CPU: 0 PID: 12059 Comm: syz.0.1715 Not tainted syzkaller #0 [ 352.347499][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.357607][T12059] Call Trace: [ 352.360982][T12059] [ 352.363966][T12059] dump_stack_lvl+0x18c/0x250 [ 352.368716][T12059] ? show_regs_print_info+0x20/0x20 [ 352.373985][T12059] ? load_image+0x420/0x420 [ 352.378559][T12059] ? __might_sleep+0xe0/0xe0 [ 352.383211][T12059] ? __lock_acquire+0x7d40/0x7d40 [ 352.388297][T12059] should_fail_ex+0x39d/0x4d0 [ 352.393045][T12059] should_failslab+0x9/0x20 [ 352.397592][T12059] slab_pre_alloc_hook+0x59/0x310 [ 352.402656][T12059] ? __lock_acquire+0x7d40/0x7d40 [ 352.407797][T12059] ? kvmalloc_node+0x70/0x180 [ 352.412506][T12059] ? kvmalloc_node+0x70/0x180 [ 352.417221][T12059] __kmem_cache_alloc_node+0x53/0x250 [ 352.422719][T12059] ? __schedule_delayed_monitor_work+0x200/0x200 [ 352.429090][T12059] ? kvmalloc_node+0x70/0x180 [ 352.433809][T12059] __kmalloc_node+0xa4/0x230 [ 352.438452][T12059] kvmalloc_node+0x70/0x180 [ 352.443081][T12059] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 352.448497][T12059] ? 0xffffffffa00044c0 [ 352.452684][T12059] ? 0xffffffffa00044c0 [ 352.456861][T12059] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 352.462788][T12059] ? 0xffffffffa00044c0 [ 352.467063][T12059] ? xdp_convert_md_to_buff+0x330/0x330 [ 352.472668][T12059] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 352.478948][T12059] ? _copy_from_user+0xa5/0xe0 [ 352.483757][T12059] ? bpf_test_init+0x119/0x140 [ 352.488556][T12059] ? xdp_convert_md_to_buff+0x5b/0x330 [ 352.494051][T12059] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 352.499471][T12059] ? dev_put+0x80/0x80 [ 352.503580][T12059] ? dev_put+0x80/0x80 [ 352.507684][T12059] bpf_prog_test_run+0x321/0x390 [ 352.512658][T12059] __sys_bpf+0x49d/0x890 [ 352.516937][T12059] ? bpf_link_show_fdinfo+0x390/0x390 [ 352.522349][T12059] ? lock_chain_count+0x20/0x20 [ 352.527237][T12059] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 352.533257][T12059] __x64_sys_bpf+0x7c/0x90 [ 352.537701][T12059] do_syscall_64+0x55/0xa0 [ 352.542151][T12059] ? clear_bhb_loop+0x40/0x90 [ 352.546872][T12059] ? clear_bhb_loop+0x40/0x90 [ 352.551586][T12059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.557517][T12059] RIP: 0033:0x7f69c659cdd9 [ 352.561966][T12059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.581612][T12059] RSP: 002b:00007f69c749d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.590144][T12059] RAX: ffffffffffffffda RBX: 00007f69c6815fa0 RCX: 00007f69c659cdd9 [ 352.598155][T12059] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 352.606159][T12059] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 352.614163][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.622178][T12059] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 352.630216][T12059] [ 352.971201][T12077] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 352.983505][T12077] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 353.552667][T12077] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 353.642855][T12082] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 354.381483][T12116] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1727'. [ 354.394512][T12116] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 354.405839][T12111] netlink: 'syz.3.1726': attribute type 6 has an invalid length. [ 354.449921][T12111] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1726'. [ 354.596423][T12111] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 354.634584][T12111] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1726'. [ 354.706657][T12126] FAULT_INJECTION: forcing a failure. [ 354.706657][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 354.729530][T12126] CPU: 1 PID: 12126 Comm: syz.0.1729 Not tainted syzkaller #0 [ 354.737098][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.747310][T12126] Call Trace: [ 354.750646][T12126] [ 354.753644][T12126] dump_stack_lvl+0x18c/0x250 [ 354.758417][T12126] ? show_regs_print_info+0x20/0x20 [ 354.763698][T12126] ? load_image+0x420/0x420 [ 354.768285][T12126] ? __might_sleep+0xe0/0xe0 [ 354.773031][T12126] ? __lock_acquire+0x7d40/0x7d40 [ 354.778120][T12126] ? trace_event_raw_event_lock+0x250/0x250 [ 354.784099][T12126] should_fail_ex+0x39d/0x4d0 [ 354.788860][T12126] should_failslab+0x9/0x20 [ 354.793440][T12126] slab_pre_alloc_hook+0x59/0x310 [ 354.798545][T12126] ? rxrpc_alloc_bundle+0x78/0x580 [ 354.803706][T12126] __kmem_cache_alloc_node+0x53/0x250 [ 354.809128][T12126] ? do_raw_spin_lock+0x11f/0x2c0 [ 354.814287][T12126] ? rxrpc_alloc_bundle+0x78/0x580 [ 354.819454][T12126] kmalloc_trace+0x2a/0xe0 [ 354.823930][T12126] rxrpc_alloc_bundle+0x78/0x580 [ 354.828908][T12126] rxrpc_look_up_bundle+0x395/0x930 [ 354.834174][T12126] ? _raw_spin_unlock+0x28/0x40 [ 354.839069][T12126] rxrpc_new_client_call+0xbcd/0x1410 [ 354.844527][T12126] rxrpc_do_sendmsg+0xe03/0x12d0 [ 354.849568][T12126] ? rxrpc_propose_abort+0x200/0x200 [ 354.854952][T12126] ? rxrpc_sendmsg+0x391/0x5b0 [ 354.859777][T12126] ? rxrpc_getsockopt+0x150/0x150 [ 354.864974][T12126] ____sys_sendmsg+0x5ba/0x960 [ 354.869808][T12126] ? __lock_acquire+0x7d40/0x7d40 [ 354.874925][T12126] ? __sys_sendmsg_sock+0x30/0x30 [ 354.879985][T12126] ? __import_iovec+0x3fa/0x850 [ 354.884878][T12126] ? import_iovec+0x73/0xa0 [ 354.889469][T12126] ___sys_sendmsg+0x2a6/0x360 [ 354.894231][T12126] ? __sys_sendmsg+0x2a0/0x2a0 [ 354.899061][T12126] ? __lock_acquire+0x7d40/0x7d40 [ 354.904164][T12126] __se_sys_sendmsg+0x1c2/0x2b0 [ 354.909049][T12126] ? __x64_sys_sendmsg+0x80/0x80 [ 354.914040][T12126] ? lockdep_hardirqs_on+0x98/0x150 [ 354.919281][T12126] do_syscall_64+0x55/0xa0 [ 354.923842][T12126] ? clear_bhb_loop+0x40/0x90 [ 354.928697][T12126] ? clear_bhb_loop+0x40/0x90 [ 354.933439][T12126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.939416][T12126] RIP: 0033:0x7f69c659cdd9 [ 354.943884][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.963623][T12126] RSP: 002b:00007f69c749d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.972101][T12126] RAX: ffffffffffffffda RBX: 00007f69c6815fa0 RCX: 00007f69c659cdd9 [ 354.980144][T12126] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 354.988152][T12126] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.996158][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.004184][T12126] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 355.012213][T12126] [ 355.373915][T12130] netlink: 'syz.0.1732': attribute type 29 has an invalid length. [ 355.391588][T12130] netlink: 'syz.0.1732': attribute type 29 has an invalid length. [ 355.405553][T12130] netlink: 'syz.0.1732': attribute type 29 has an invalid length. [ 356.261780][T12147] FAULT_INJECTION: forcing a failure. [ 356.261780][T12147] name failslab, interval 1, probability 0, space 0, times 0 [ 356.275123][T12147] CPU: 1 PID: 12147 Comm: syz.1.1737 Not tainted syzkaller #0 [ 356.282763][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.292908][T12147] Call Trace: [ 356.296260][T12147] [ 356.299256][T12147] dump_stack_lvl+0x18c/0x250 [ 356.304040][T12147] ? show_regs_print_info+0x20/0x20 [ 356.309332][T12147] ? load_image+0x420/0x420 [ 356.313941][T12147] ? __might_sleep+0xe0/0xe0 [ 356.318616][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 356.323748][T12147] should_fail_ex+0x39d/0x4d0 [ 356.328543][T12147] should_failslab+0x9/0x20 [ 356.333139][T12147] slab_pre_alloc_hook+0x59/0x310 [ 356.338290][T12147] ? rxrpc_alloc_peer+0x7e/0x340 [ 356.343322][T12147] __kmem_cache_alloc_node+0x53/0x250 [ 356.348817][T12147] ? rxrpc_alloc_peer+0x7e/0x340 [ 356.353857][T12147] kmalloc_trace+0x2a/0xe0 [ 356.358373][T12147] rxrpc_alloc_peer+0x7e/0x340 [ 356.363224][T12147] rxrpc_lookup_peer+0x3f4/0x850 [ 356.368294][T12147] rxrpc_new_client_call+0xb99/0x1410 [ 356.373746][T12147] rxrpc_do_sendmsg+0xe03/0x12d0 [ 356.378807][T12147] ? rxrpc_propose_abort+0x200/0x200 [ 356.384164][T12147] ? __local_bh_enable_ip+0x13a/0x1c0 [ 356.389668][T12147] ? rxrpc_sendmsg+0x391/0x5b0 [ 356.394502][T12147] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 356.399843][T12147] ? rxrpc_getsockopt+0x150/0x150 [ 356.404930][T12147] ____sys_sendmsg+0x5ba/0x960 [ 356.409760][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 356.414890][T12147] ? __sys_sendmsg_sock+0x30/0x30 [ 356.419966][T12147] ? __import_iovec+0x3fa/0x850 [ 356.424891][T12147] ? import_iovec+0x73/0xa0 [ 356.429473][T12147] ___sys_sendmsg+0x2a6/0x360 [ 356.434217][T12147] ? get_pid_task+0x20/0x1e0 [ 356.438884][T12147] ? __sys_sendmsg+0x2a0/0x2a0 [ 356.443766][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 356.448915][T12147] __se_sys_sendmsg+0x1c2/0x2b0 [ 356.453829][T12147] ? __x64_sys_sendmsg+0x80/0x80 [ 356.458866][T12147] ? lockdep_hardirqs_on+0x98/0x150 [ 356.464132][T12147] do_syscall_64+0x55/0xa0 [ 356.468595][T12147] ? clear_bhb_loop+0x40/0x90 [ 356.473335][T12147] ? clear_bhb_loop+0x40/0x90 [ 356.478085][T12147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.484046][T12147] RIP: 0033:0x7ff75839cdd9 [ 356.488529][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.508196][T12147] RSP: 002b:00007ff75920b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.516669][T12147] RAX: ffffffffffffffda RBX: 00007ff758615fa0 RCX: 00007ff75839cdd9 [ 356.524696][T12147] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 356.532729][T12147] RBP: 00007ff75920b090 R08: 0000000000000000 R09: 0000000000000000 [ 356.540751][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.548779][T12147] R13: 00007ff758616038 R14: 00007ff758615fa0 R15: 00007ffd0546ae48 [ 356.556844][T12147] [ 356.722146][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1738'. [ 357.234971][T12172] FAULT_INJECTION: forcing a failure. [ 357.234971][T12172] name failslab, interval 1, probability 0, space 0, times 0 [ 357.278675][T12172] CPU: 0 PID: 12172 Comm: syz.2.1742 Not tainted syzkaller #0 [ 357.286286][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.296400][T12172] Call Trace: [ 357.299727][T12172] [ 357.302703][T12172] dump_stack_lvl+0x18c/0x250 [ 357.307453][T12172] ? show_regs_print_info+0x20/0x20 [ 357.312717][T12172] ? load_image+0x420/0x420 [ 357.317281][T12172] ? __might_sleep+0xe0/0xe0 [ 357.321954][T12172] ? __lock_acquire+0x7d40/0x7d40 [ 357.327038][T12172] should_fail_ex+0x39d/0x4d0 [ 357.331773][T12172] should_failslab+0x9/0x20 [ 357.336320][T12172] slab_pre_alloc_hook+0x59/0x310 [ 357.341381][T12172] ? percpu_ref_put+0x12/0x100 [ 357.346168][T12172] ? apparmor_sk_alloc_security+0x77/0x100 [ 357.352008][T12172] __kmem_cache_alloc_node+0x53/0x250 [ 357.357429][T12172] ? apparmor_sk_alloc_security+0x77/0x100 [ 357.363277][T12172] kmalloc_trace+0x2a/0xe0 [ 357.367731][T12172] apparmor_sk_alloc_security+0x77/0x100 [ 357.373402][T12172] security_sk_alloc+0x6e/0xa0 [ 357.378201][T12172] sk_prot_alloc+0x101/0x210 [ 357.382869][T12172] sk_alloc+0x3a/0x360 [ 357.386984][T12172] inet_create+0x7a0/0xfe0 [ 357.391433][T12172] ? inet_create+0x9c/0xfe0 [ 357.395978][T12172] __sock_create+0x4a6/0x940 [ 357.400610][T12172] udp_sock_create4+0xcb/0x480 [ 357.405414][T12172] ? erspan_exit_batch_net+0x30/0x30 [ 357.410747][T12172] rxrpc_lookup_local+0xd1f/0x1610 [ 357.415900][T12172] ? rxrpc_local_dont_fragment+0x70/0x70 [ 357.421570][T12172] ? lockdep_hardirqs_on+0x98/0x150 [ 357.426822][T12172] ? _local_bh_enable+0xa0/0xa0 [ 357.431729][T12172] rxrpc_sendmsg+0x30a/0x5b0 [ 357.436363][T12172] ? rxrpc_getsockopt+0x150/0x150 [ 357.441420][T12172] ____sys_sendmsg+0x5ba/0x960 [ 357.446218][T12172] ? __lock_acquire+0x7d40/0x7d40 [ 357.451286][T12172] ? __sys_sendmsg_sock+0x30/0x30 [ 357.456341][T12172] ? __import_iovec+0x3fa/0x850 [ 357.461225][T12172] ? import_iovec+0x73/0xa0 [ 357.465757][T12172] ___sys_sendmsg+0x2a6/0x360 [ 357.470458][T12172] ? get_pid_task+0x20/0x1e0 [ 357.475086][T12172] ? __sys_sendmsg+0x2a0/0x2a0 [ 357.479892][T12172] ? __lock_acquire+0x7d40/0x7d40 [ 357.484966][T12172] __se_sys_sendmsg+0x1c2/0x2b0 [ 357.489845][T12172] ? __x64_sys_sendmsg+0x80/0x80 [ 357.494826][T12172] ? lockdep_hardirqs_on+0x98/0x150 [ 357.500059][T12172] do_syscall_64+0x55/0xa0 [ 357.504503][T12172] ? clear_bhb_loop+0x40/0x90 [ 357.509213][T12172] ? clear_bhb_loop+0x40/0x90 [ 357.513928][T12172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.519853][T12172] RIP: 0033:0x7f9dff39cdd9 [ 357.524300][T12172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.544031][T12172] RSP: 002b:00007f9e002c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.552481][T12172] RAX: ffffffffffffffda RBX: 00007f9dff616090 RCX: 00007f9dff39cdd9 [ 357.560485][T12172] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 357.568481][T12172] RBP: 00007f9e002c7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.576510][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.584505][T12172] R13: 00007f9dff616128 R14: 00007f9dff616090 R15: 00007fff2ceb6fd8 [ 357.592538][T12172] [ 357.597071][T12166] validate_nla: 1 callbacks suppressed [ 357.597086][T12166] netlink: 'syz.1.1739': attribute type 6 has an invalid length. [ 357.610570][T12166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1739'. [ 357.747788][T12159] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 357.757203][T12159] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1739'. [ 358.114513][T12189] netlink: 'syz.1.1746': attribute type 29 has an invalid length. [ 358.138322][T12189] netlink: 'syz.1.1746': attribute type 29 has an invalid length. [ 358.156235][T12189] netlink: 'syz.1.1746': attribute type 29 has an invalid length. [ 358.177615][T12189] netlink: 'syz.1.1746': attribute type 29 has an invalid length. [ 358.258627][T12202] netlink: 'syz.2.1749': attribute type 10 has an invalid length. [ 358.274478][T12202] hsr0: entered promiscuous mode [ 358.291680][T12202] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.315868][T12202] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 358.327509][T12202] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 358.340701][T12202] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 358.454158][T12207] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1750'. [ 359.159407][T12219] netlink: 'syz.0.1754': attribute type 6 has an invalid length. [ 359.170973][T12219] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1754'. [ 359.357956][T12219] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 359.370011][T12219] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1754'. [ 359.578109][T12240] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1759'. [ 359.918599][T12254] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1763'. [ 360.076860][T12257] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 360.622602][T12276] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1770'. [ 360.791652][T12266] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1769'. [ 360.870656][T12266] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1769'. [ 362.356173][T12326] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1784'. [ 362.430994][T12330] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1784'. [ 363.104753][T12357] FAULT_INJECTION: forcing a failure. [ 363.104753][T12357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.136578][T12357] CPU: 0 PID: 12357 Comm: syz.0.1793 Not tainted syzkaller #0 [ 363.144139][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.154259][T12357] Call Trace: [ 363.157589][T12357] [ 363.160563][T12357] dump_stack_lvl+0x18c/0x250 [ 363.165320][T12357] ? show_regs_print_info+0x20/0x20 [ 363.170587][T12357] ? load_image+0x420/0x420 [ 363.175160][T12357] ? __lock_acquire+0x7d40/0x7d40 [ 363.180254][T12357] ? snprintf+0xe9/0x140 [ 363.184567][T12357] should_fail_ex+0x39d/0x4d0 [ 363.189319][T12357] _copy_to_user+0x2f/0xa0 [ 363.193801][T12357] simple_read_from_buffer+0xe7/0x150 [ 363.199256][T12357] proc_fail_nth_read+0x1e8/0x260 [ 363.204350][T12357] ? proc_fault_inject_write+0x360/0x360 [ 363.210040][T12357] ? fsnotify_perm+0x271/0x5e0 [ 363.214870][T12357] ? proc_fault_inject_write+0x360/0x360 [ 363.220577][T12357] vfs_read+0x28b/0x970 [ 363.224814][T12357] ? kernel_read+0x1e0/0x1e0 [ 363.229471][T12357] ? __fget_files+0x28/0x4b0 [ 363.234125][T12357] ? __fget_files+0x28/0x4b0 [ 363.238810][T12357] ? __fget_files+0x43d/0x4b0 [ 363.243559][T12357] ? __fdget_pos+0x2a3/0x330 [ 363.248220][T12357] ? ksys_read+0x75/0x260 [ 363.252616][T12357] ksys_read+0x150/0x260 [ 363.256931][T12357] ? vfs_write+0x990/0x990 [ 363.261412][T12357] ? lockdep_hardirqs_on+0x98/0x150 [ 363.266673][T12357] do_syscall_64+0x55/0xa0 [ 363.271142][T12357] ? clear_bhb_loop+0x40/0x90 [ 363.275881][T12357] ? clear_bhb_loop+0x40/0x90 [ 363.280621][T12357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.286566][T12357] RIP: 0033:0x7f69c655d60e [ 363.291027][T12357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.310695][T12357] RSP: 002b:00007f69c749cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.319173][T12357] RAX: ffffffffffffffda RBX: 00007f69c749d6c0 RCX: 00007f69c655d60e [ 363.327217][T12357] RDX: 000000000000000f RSI: 00007f69c749d0a0 RDI: 0000000000000005 [ 363.335250][T12357] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 363.343273][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.351381][T12357] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 363.359413][T12357] [ 363.444745][T12369] FAULT_INJECTION: forcing a failure. [ 363.444745][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 363.459878][T12369] CPU: 0 PID: 12369 Comm: syz.1.1795 Not tainted syzkaller #0 [ 363.467421][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.477536][T12369] Call Trace: [ 363.480860][T12369] [ 363.483842][T12369] dump_stack_lvl+0x18c/0x250 [ 363.488595][T12369] ? show_regs_print_info+0x20/0x20 [ 363.493944][T12369] ? load_image+0x420/0x420 [ 363.498507][T12369] ? __might_sleep+0xe0/0xe0 [ 363.503154][T12369] ? __lock_acquire+0x7d40/0x7d40 [ 363.508238][T12369] ? __put_user_ns+0x50/0x50 [ 363.512888][T12369] should_fail_ex+0x39d/0x4d0 [ 363.517633][T12369] should_failslab+0x9/0x20 [ 363.522193][T12369] slab_pre_alloc_hook+0x59/0x310 [ 363.527267][T12369] ? rxrpc_alloc_bundle+0x78/0x580 [ 363.532413][T12369] __kmem_cache_alloc_node+0x53/0x250 [ 363.537822][T12369] ? do_raw_spin_lock+0x11f/0x2c0 [ 363.542909][T12369] ? rxrpc_alloc_bundle+0x78/0x580 [ 363.548053][T12369] kmalloc_trace+0x2a/0xe0 [ 363.552511][T12369] rxrpc_alloc_bundle+0x78/0x580 [ 363.557486][T12369] rxrpc_look_up_bundle+0x395/0x930 [ 363.562743][T12369] rxrpc_new_client_call+0xbcd/0x1410 [ 363.568154][T12369] rxrpc_do_sendmsg+0xe03/0x12d0 [ 363.573152][T12369] ? rxrpc_propose_abort+0x200/0x200 [ 363.578474][T12369] ? __local_bh_enable_ip+0x13a/0x1c0 [ 363.583895][T12369] ? rxrpc_sendmsg+0x391/0x5b0 [ 363.588688][T12369] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 363.594009][T12369] ? rxrpc_getsockopt+0x150/0x150 [ 363.599062][T12369] ____sys_sendmsg+0x5ba/0x960 [ 363.603858][T12369] ? __lock_acquire+0x7d40/0x7d40 [ 363.608922][T12369] ? __sys_sendmsg_sock+0x30/0x30 [ 363.613970][T12369] ? __import_iovec+0x3fa/0x850 [ 363.618857][T12369] ? import_iovec+0x73/0xa0 [ 363.623395][T12369] ___sys_sendmsg+0x2a6/0x360 [ 363.628102][T12369] ? get_pid_task+0x20/0x1e0 [ 363.632830][T12369] ? __sys_sendmsg+0x2a0/0x2a0 [ 363.637645][T12369] ? __lock_acquire+0x7d40/0x7d40 [ 363.642730][T12369] __se_sys_sendmsg+0x1c2/0x2b0 [ 363.647611][T12369] ? __x64_sys_sendmsg+0x80/0x80 [ 363.652591][T12369] ? lockdep_hardirqs_on+0x98/0x150 [ 363.657830][T12369] do_syscall_64+0x55/0xa0 [ 363.662288][T12369] ? clear_bhb_loop+0x40/0x90 [ 363.667002][T12369] ? clear_bhb_loop+0x40/0x90 [ 363.671719][T12369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.677654][T12369] RIP: 0033:0x7ff75839cdd9 [ 363.682096][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.701947][T12369] RSP: 002b:00007ff75920b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.710401][T12369] RAX: ffffffffffffffda RBX: 00007ff758615fa0 RCX: 00007ff75839cdd9 [ 363.718408][T12369] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 363.726414][T12369] RBP: 00007ff75920b090 R08: 0000000000000000 R09: 0000000000000000 [ 363.734424][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.742430][T12369] R13: 00007ff758616038 R14: 00007ff758615fa0 R15: 00007ffd0546ae48 [ 363.750449][T12369] [ 363.935688][T12379] validate_nla: 12 callbacks suppressed [ 363.935709][T12379] netlink: 'syz.3.1799': attribute type 21 has an invalid length. [ 363.989043][T12381] netlink: 'syz.3.1799': attribute type 1 has an invalid length. [ 364.012230][T12381] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1799'. [ 364.027511][T12377] netlink: 'syz.1.1797': attribute type 29 has an invalid length. [ 364.068120][T12377] netlink: 'syz.1.1797': attribute type 29 has an invalid length. [ 364.095911][T12380] netlink: 'syz.1.1797': attribute type 29 has an invalid length. [ 364.140996][T12386] netlink: 'syz.1.1797': attribute type 29 has an invalid length. [ 364.397407][T12378] netlink: 'syz.2.1798': attribute type 6 has an invalid length. [ 364.407039][T12378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1798'. [ 364.443898][T12378] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 364.478005][T12378] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1798'. [ 364.751295][T12403] ÿ: renamed from bond_slave_0 (while UP) [ 365.373223][T12410] FAULT_INJECTION: forcing a failure. [ 365.373223][T12410] name failslab, interval 1, probability 0, space 0, times 0 [ 365.418518][T12410] CPU: 1 PID: 12410 Comm: syz.3.1806 Not tainted syzkaller #0 [ 365.426081][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.436191][T12410] Call Trace: [ 365.439514][T12410] [ 365.442510][T12410] dump_stack_lvl+0x18c/0x250 [ 365.447261][T12410] ? show_regs_print_info+0x20/0x20 [ 365.452539][T12410] ? load_image+0x420/0x420 [ 365.457101][T12410] ? __might_sleep+0xe0/0xe0 [ 365.461734][T12410] ? __lock_acquire+0x7d40/0x7d40 [ 365.466801][T12410] should_fail_ex+0x39d/0x4d0 [ 365.471531][T12410] should_failslab+0x9/0x20 [ 365.476080][T12410] slab_pre_alloc_hook+0x59/0x310 [ 365.481148][T12410] ? kvmalloc_node+0x70/0x180 [ 365.485868][T12410] ? kvmalloc_node+0x70/0x180 [ 365.490584][T12410] __kmem_cache_alloc_node+0x53/0x250 [ 365.495998][T12410] ? kvmalloc_node+0x70/0x180 [ 365.500711][T12410] __kmalloc_node+0xa4/0x230 [ 365.505368][T12410] kvmalloc_node+0x70/0x180 [ 365.509917][T12410] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 365.515346][T12410] ? 0xffffffffa00044c0 [ 365.519537][T12410] ? 0xffffffffa00044c0 [ 365.523737][T12410] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 365.529670][T12410] ? 0xffffffffa00044c0 [ 365.533855][T12410] ? xdp_convert_md_to_buff+0x330/0x330 [ 365.539471][T12410] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 365.545750][T12410] ? _copy_from_user+0xa5/0xe0 [ 365.550555][T12410] ? bpf_test_init+0x119/0x140 [ 365.555344][T12410] ? xdp_convert_md_to_buff+0x5b/0x330 [ 365.560839][T12410] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 365.566252][T12410] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 365.572445][T12410] ? lockdep_hardirqs_on+0x98/0x150 [ 365.577678][T12410] ? dev_put+0x80/0x80 [ 365.581793][T12410] ? dev_put+0x80/0x80 [ 365.585904][T12410] bpf_prog_test_run+0x321/0x390 [ 365.590878][T12410] __sys_bpf+0x49d/0x890 [ 365.595155][T12410] ? bpf_link_show_fdinfo+0x390/0x390 [ 365.600567][T12410] ? lock_chain_count+0x20/0x20 [ 365.605532][T12410] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 365.611554][T12410] __x64_sys_bpf+0x7c/0x90 [ 365.615997][T12410] do_syscall_64+0x55/0xa0 [ 365.620437][T12410] ? clear_bhb_loop+0x40/0x90 [ 365.625232][T12410] ? clear_bhb_loop+0x40/0x90 [ 365.629954][T12410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.636351][T12410] RIP: 0033:0x7f8cf4b9cdd9 [ 365.640878][T12410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.660518][T12410] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.668962][T12410] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 365.676968][T12410] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 365.684980][T12410] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 365.692980][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.700977][T12410] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 365.709008][T12410] [ 365.740821][T12420] -: renamed from syzkaller0 [ 366.008194][T12431] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1811'. [ 366.448574][T12447] netlink: 'syz.0.1816': attribute type 29 has an invalid length. [ 366.735245][T12447] netlink: 'syz.0.1816': attribute type 29 has an invalid length. [ 366.771831][T12443] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1814'. [ 366.925928][T12443] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1814'. [ 367.042835][T12467] FAULT_INJECTION: forcing a failure. [ 367.042835][T12467] name failslab, interval 1, probability 0, space 0, times 0 [ 367.059357][T12467] CPU: 0 PID: 12467 Comm: syz.1.1819 Not tainted syzkaller #0 [ 367.066907][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.077012][T12467] Call Trace: [ 367.080323][T12467] [ 367.083283][T12467] dump_stack_lvl+0x18c/0x250 [ 367.088023][T12467] ? show_regs_print_info+0x20/0x20 [ 367.093262][T12467] ? load_image+0x420/0x420 [ 367.097808][T12467] ? __might_sleep+0xe0/0xe0 [ 367.102444][T12467] ? __lock_acquire+0x7d40/0x7d40 [ 367.107513][T12467] should_fail_ex+0x39d/0x4d0 [ 367.112245][T12467] should_failslab+0x9/0x20 [ 367.116786][T12467] slab_pre_alloc_hook+0x59/0x310 [ 367.121851][T12467] ? lock_chain_count+0x20/0x20 [ 367.126737][T12467] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 367.131810][T12467] __kmem_cache_alloc_node+0x53/0x250 [ 367.137225][T12467] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 367.143163][T12467] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 367.148228][T12467] kmalloc_trace+0x2a/0xe0 [ 367.152755][T12467] rxrpc_alloc_txbuf+0x7b/0x8a0 [ 367.157686][T12467] ? remove_wait_queue+0x33/0x120 [ 367.162746][T12467] ? none_how_much_data+0x29/0xa0 [ 367.167813][T12467] rxrpc_send_data+0xb73/0x2950 [ 367.172715][T12467] ? rxrpc_send_data+0x24f/0x2950 [ 367.177780][T12467] ? mark_lock+0x94/0x320 [ 367.182179][T12467] ? rxrpc_do_sendmsg+0x12d0/0x12d0 [ 367.187427][T12467] ? do_task_dead+0xd0/0xd0 [ 367.191992][T12467] rxrpc_do_sendmsg+0x10c6/0x12d0 [ 367.197073][T12467] ? rxrpc_propose_abort+0x200/0x200 [ 367.202414][T12467] ? rxrpc_sendmsg+0x391/0x5b0 [ 367.207214][T12467] ? rxrpc_getsockopt+0x150/0x150 [ 367.212271][T12467] ____sys_sendmsg+0x5ba/0x960 [ 367.217066][T12467] ? __lock_acquire+0x7d40/0x7d40 [ 367.222129][T12467] ? __sys_sendmsg_sock+0x30/0x30 [ 367.227178][T12467] ? __import_iovec+0x3fa/0x850 [ 367.232163][T12467] ? import_iovec+0x73/0xa0 [ 367.236701][T12467] ___sys_sendmsg+0x2a6/0x360 [ 367.241417][T12467] ? __sys_sendmsg+0x2a0/0x2a0 [ 367.246238][T12467] ? __lock_acquire+0x7d40/0x7d40 [ 367.251334][T12467] __se_sys_sendmsg+0x1c2/0x2b0 [ 367.256224][T12467] ? __x64_sys_sendmsg+0x80/0x80 [ 367.261216][T12467] ? lockdep_hardirqs_on+0x98/0x150 [ 367.266458][T12467] do_syscall_64+0x55/0xa0 [ 367.270906][T12467] ? clear_bhb_loop+0x40/0x90 [ 367.275702][T12467] ? clear_bhb_loop+0x40/0x90 [ 367.280422][T12467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.286353][T12467] RIP: 0033:0x7ff75839cdd9 [ 367.290805][T12467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.310456][T12467] RSP: 002b:00007ff75920b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.318907][T12467] RAX: ffffffffffffffda RBX: 00007ff758615fa0 RCX: 00007ff75839cdd9 [ 367.326921][T12467] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 367.334927][T12467] RBP: 00007ff75920b090 R08: 0000000000000000 R09: 0000000000000000 [ 367.342925][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.350927][T12467] R13: 00007ff758616038 R14: 00007ff758615fa0 R15: 00007ffd0546ae48 [ 367.358957][T12467] [ 368.519007][T12502] FAULT_INJECTION: forcing a failure. [ 368.519007][T12502] name failslab, interval 1, probability 0, space 0, times 0 [ 368.536410][T12502] CPU: 0 PID: 12502 Comm: syz.3.1829 Not tainted syzkaller #0 [ 368.543993][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.554130][T12502] Call Trace: [ 368.557481][T12502] [ 368.560488][T12502] dump_stack_lvl+0x18c/0x250 [ 368.565277][T12502] ? show_regs_print_info+0x20/0x20 [ 368.570581][T12502] ? load_image+0x420/0x420 [ 368.575467][T12502] ? __might_sleep+0xe0/0xe0 [ 368.580160][T12502] ? __lock_acquire+0x7d40/0x7d40 [ 368.585276][T12502] ? __put_user_ns+0x50/0x50 [ 368.589964][T12502] should_fail_ex+0x39d/0x4d0 [ 368.594754][T12502] should_failslab+0x9/0x20 [ 368.599346][T12502] slab_pre_alloc_hook+0x59/0x310 [ 368.604469][T12502] ? rxrpc_alloc_bundle+0x78/0x580 [ 368.609663][T12502] __kmem_cache_alloc_node+0x53/0x250 [ 368.615102][T12502] ? do_raw_spin_lock+0x11f/0x2c0 [ 368.620209][T12502] ? rxrpc_alloc_bundle+0x78/0x580 [ 368.625414][T12502] kmalloc_trace+0x2a/0xe0 [ 368.629919][T12502] rxrpc_alloc_bundle+0x78/0x580 [ 368.634929][T12502] rxrpc_look_up_bundle+0x395/0x930 [ 368.640235][T12502] rxrpc_new_client_call+0xbcd/0x1410 [ 368.645701][T12502] rxrpc_do_sendmsg+0xe03/0x12d0 [ 368.650762][T12502] ? rxrpc_propose_abort+0x200/0x200 [ 368.656110][T12502] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.661607][T12502] ? rxrpc_sendmsg+0x391/0x5b0 [ 368.666420][T12502] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 368.671766][T12502] ? rxrpc_getsockopt+0x150/0x150 [ 368.676859][T12502] ____sys_sendmsg+0x5ba/0x960 [ 368.681675][T12502] ? __lock_acquire+0x7d40/0x7d40 [ 368.686778][T12502] ? __sys_sendmsg_sock+0x30/0x30 [ 368.691946][T12502] ? __import_iovec+0x3fa/0x850 [ 368.696892][T12502] ? import_iovec+0x73/0xa0 [ 368.701463][T12502] ___sys_sendmsg+0x2a6/0x360 [ 368.706191][T12502] ? get_pid_task+0x20/0x1e0 [ 368.711023][T12502] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.715896][T12502] ? __lock_acquire+0x7d40/0x7d40 [ 368.721038][T12502] __se_sys_sendmsg+0x1c2/0x2b0 [ 368.726032][T12502] ? __x64_sys_sendmsg+0x80/0x80 [ 368.731061][T12502] ? lockdep_hardirqs_on+0x98/0x150 [ 368.736329][T12502] do_syscall_64+0x55/0xa0 [ 368.740803][T12502] ? clear_bhb_loop+0x40/0x90 [ 368.745533][T12502] ? clear_bhb_loop+0x40/0x90 [ 368.750277][T12502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.756230][T12502] RIP: 0033:0x7f8cf4b9cdd9 [ 368.760697][T12502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.780445][T12502] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.788915][T12502] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 368.796933][T12502] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 368.804946][T12502] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 368.812984][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.821014][T12502] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 368.829085][T12502] [ 369.239796][T12516] validate_nla: 4 callbacks suppressed [ 369.239816][T12516] netlink: 'syz.2.1828': attribute type 6 has an invalid length. [ 369.320696][T12516] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1828'. [ 369.411366][T12507] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 369.452514][T12523] FAULT_INJECTION: forcing a failure. [ 369.452514][T12523] name failslab, interval 1, probability 0, space 0, times 0 [ 369.460742][T12518] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 369.474639][T12507] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1828'. [ 369.502967][T12518] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 369.506339][T12523] CPU: 0 PID: 12523 Comm: syz.3.1833 Not tainted syzkaller #0 [ 369.518632][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.528741][T12523] Call Trace: [ 369.532060][T12523] [ 369.535038][T12523] dump_stack_lvl+0x18c/0x250 [ 369.539788][T12523] ? show_regs_print_info+0x20/0x20 [ 369.545057][T12523] ? load_image+0x420/0x420 [ 369.549624][T12523] ? __might_sleep+0xe0/0xe0 [ 369.554272][T12523] ? __lock_acquire+0x7d40/0x7d40 [ 369.559345][T12523] ? __asan_memset+0x22/0x40 [ 369.564013][T12523] should_fail_ex+0x39d/0x4d0 [ 369.568755][T12523] should_failslab+0x9/0x20 [ 369.573318][T12523] slab_pre_alloc_hook+0x59/0x310 [ 369.578407][T12523] ? __kthread_create_on_node+0x116/0x3f0 [ 369.584188][T12523] __kmem_cache_alloc_node+0x53/0x250 [ 369.589638][T12523] ? __kthread_create_on_node+0x116/0x3f0 [ 369.595401][T12523] kmalloc_trace+0x2a/0xe0 [ 369.599863][T12523] ? rxrpc_direct_abort+0x330/0x330 [ 369.605125][T12523] __kthread_create_on_node+0x116/0x3f0 [ 369.610731][T12523] ? kthread_create_on_node+0x140/0x140 [ 369.616340][T12523] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 369.622388][T12523] ? rxrpc_direct_abort+0x330/0x330 [ 369.627657][T12523] ? rxrpc_direct_abort+0x330/0x330 [ 369.632920][T12523] kthread_create_on_node+0xec/0x140 [ 369.638267][T12523] ? __local_bh_enable_ip+0x13a/0x1c0 [ 369.643712][T12523] ? tsk_fork_get_node+0x70/0x70 [ 369.648711][T12523] ? __local_bh_enable_ip+0x13a/0x1c0 [ 369.654171][T12523] rxrpc_lookup_local+0xff3/0x1610 [ 369.659369][T12523] ? rxrpc_local_dont_fragment+0x70/0x70 [ 369.665441][T12523] ? none_clear+0x10/0x10 [ 369.669838][T12523] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 369.675994][T12523] ? lockdep_hardirqs_on+0x98/0x150 [ 369.681275][T12523] ? _local_bh_enable+0xa0/0xa0 [ 369.686195][T12523] rxrpc_sendmsg+0x30a/0x5b0 [ 369.690852][T12523] ? rxrpc_getsockopt+0x150/0x150 [ 369.695942][T12523] ____sys_sendmsg+0x5ba/0x960 [ 369.700768][T12523] ? __lock_acquire+0x7d40/0x7d40 [ 369.700882][T12526] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 369.705837][T12523] ? __sys_sendmsg_sock+0x30/0x30 [ 369.718736][T12523] ? __import_iovec+0x3fa/0x850 [ 369.723640][T12523] ? import_iovec+0x73/0xa0 [ 369.728191][T12523] ___sys_sendmsg+0x2a6/0x360 [ 369.732997][T12523] ? __sys_sendmsg+0x2a0/0x2a0 [ 369.737821][T12523] ? __lock_acquire+0x7d40/0x7d40 [ 369.742926][T12523] __se_sys_sendmsg+0x1c2/0x2b0 [ 369.747812][T12523] ? __x64_sys_sendmsg+0x80/0x80 [ 369.752807][T12523] ? lockdep_hardirqs_on+0x98/0x150 [ 369.758050][T12523] do_syscall_64+0x55/0xa0 [ 369.762496][T12523] ? clear_bhb_loop+0x40/0x90 [ 369.767214][T12523] ? clear_bhb_loop+0x40/0x90 [ 369.771988][T12523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.777932][T12523] RIP: 0033:0x7f8cf4b9cdd9 [ 369.782428][T12523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.802073][T12523] RSP: 002b:00007f8cf2dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.810563][T12523] RAX: ffffffffffffffda RBX: 00007f8cf4e16090 RCX: 00007f8cf4b9cdd9 [ 369.818563][T12523] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 369.826561][T12523] RBP: 00007f8cf2dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.834564][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.842584][T12523] R13: 00007f8cf4e16128 R14: 00007f8cf4e16090 R15: 00007ffde41c8b28 [ 369.850622][T12523] [ 369.876921][T12518] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 370.578889][T12564] netlink: 'syz.1.1842': attribute type 8 has an invalid length. [ 370.587288][T12564] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 370.595743][T12564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1842'. [ 371.178524][T12566] netlink: 'syz.2.1845': attribute type 6 has an invalid length. [ 371.230380][T12566] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1845'. [ 371.405404][T12566] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 371.575060][T12566] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1845'. [ 372.530631][T12611] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1854'. [ 372.948032][T12626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1858'. [ 373.190348][T12631] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1859'. [ 373.278329][T12628] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1859'. [ 374.838858][T12690] validate_nla: 15 callbacks suppressed [ 374.838879][T12690] netlink: 'syz.0.1873': attribute type 6 has an invalid length. [ 374.856389][T12690] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1873'. [ 374.932156][T12690] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 374.940171][T12690] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1873'. [ 375.353029][T12713] FAULT_INJECTION: forcing a failure. [ 375.353029][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 375.369691][T12713] CPU: 1 PID: 12713 Comm: syz.3.1879 Not tainted syzkaller #0 [ 375.377261][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.387389][T12713] Call Trace: [ 375.390733][T12713] [ 375.393726][T12713] dump_stack_lvl+0x18c/0x250 [ 375.398490][T12713] ? show_regs_print_info+0x20/0x20 [ 375.403773][T12713] ? load_image+0x420/0x420 [ 375.408353][T12713] ? __might_sleep+0xe0/0xe0 [ 375.413011][T12713] ? __lock_acquire+0x7d40/0x7d40 [ 375.418115][T12713] should_fail_ex+0x39d/0x4d0 [ 375.422880][T12713] should_failslab+0x9/0x20 [ 375.427467][T12713] slab_pre_alloc_hook+0x59/0x310 [ 375.432568][T12713] ? lock_chain_count+0x20/0x20 [ 375.437478][T12713] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 375.442579][T12713] __kmem_cache_alloc_node+0x53/0x250 [ 375.448031][T12713] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 375.454002][T12713] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 375.459110][T12713] kmalloc_trace+0x2a/0xe0 [ 375.463607][T12713] rxrpc_alloc_txbuf+0x7b/0x8a0 [ 375.468536][T12713] ? remove_wait_queue+0x33/0x120 [ 375.473632][T12713] ? none_how_much_data+0x29/0xa0 [ 375.478741][T12713] rxrpc_send_data+0xb73/0x2950 [ 375.483698][T12713] ? rxrpc_send_data+0x24f/0x2950 [ 375.488821][T12713] ? mark_lock+0x94/0x320 [ 375.493375][T12713] ? rxrpc_do_sendmsg+0x12d0/0x12d0 [ 375.498678][T12713] ? do_task_dead+0xd0/0xd0 [ 375.503259][T12713] ? do_raw_spin_unlock+0x121/0x230 [ 375.508560][T12713] rxrpc_do_sendmsg+0x10c6/0x12d0 [ 375.513681][T12713] ? rxrpc_propose_abort+0x200/0x200 [ 375.519036][T12713] ? __local_bh_enable_ip+0x13a/0x1c0 [ 375.524560][T12713] ? rxrpc_sendmsg+0x391/0x5b0 [ 375.529398][T12713] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 375.534761][T12713] ? rxrpc_getsockopt+0x150/0x150 [ 375.539865][T12713] ____sys_sendmsg+0x5ba/0x960 [ 375.544765][T12713] ? __lock_acquire+0x7d40/0x7d40 [ 375.549882][T12713] ? __sys_sendmsg_sock+0x30/0x30 [ 375.555000][T12713] ? __import_iovec+0x3fa/0x850 [ 375.559936][T12713] ? import_iovec+0x73/0xa0 [ 375.564510][T12713] ___sys_sendmsg+0x2a6/0x360 [ 375.569343][T12713] ? get_pid_task+0x20/0x1e0 [ 375.574019][T12713] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.578906][T12713] ? __lock_acquire+0x7d40/0x7d40 [ 375.584053][T12713] __se_sys_sendmsg+0x1c2/0x2b0 [ 375.588988][T12713] ? __x64_sys_sendmsg+0x80/0x80 [ 375.594034][T12713] ? lockdep_hardirqs_on+0x98/0x150 [ 375.599395][T12713] do_syscall_64+0x55/0xa0 [ 375.603880][T12713] ? clear_bhb_loop+0x40/0x90 [ 375.608633][T12713] ? clear_bhb_loop+0x40/0x90 [ 375.613382][T12713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.619344][T12713] RIP: 0033:0x7f8cf4b9cdd9 [ 375.623833][T12713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.643607][T12713] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.652099][T12713] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 375.660151][T12713] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 375.668216][T12713] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.676268][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.684322][T12713] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 375.692433][T12713] [ 375.840339][T12719] netlink: 'syz.1.1881': attribute type 4 has an invalid length. [ 375.848462][T12719] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1881'. [ 375.997618][T12725] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 376.032087][T12725] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 376.064166][T12727] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 376.113984][T12725] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 377.194416][T12744] netlink: 'syz.1.1888': attribute type 6 has an invalid length. [ 377.205121][T12744] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1888'. [ 377.303754][T12745] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 377.314116][T12745] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1888'. [ 377.350595][T12754] FAULT_INJECTION: forcing a failure. [ 377.350595][T12754] name failslab, interval 1, probability 0, space 0, times 0 [ 377.365829][T12754] CPU: 0 PID: 12754 Comm: syz.3.1890 Not tainted syzkaller #0 [ 377.373370][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.383483][T12754] Call Trace: [ 377.386811][T12754] [ 377.389783][T12754] dump_stack_lvl+0x18c/0x250 [ 377.394542][T12754] ? show_regs_print_info+0x20/0x20 [ 377.399806][T12754] ? load_image+0x420/0x420 [ 377.404373][T12754] ? __might_sleep+0xe0/0xe0 [ 377.409023][T12754] ? __lock_acquire+0x7d40/0x7d40 [ 377.414109][T12754] should_fail_ex+0x39d/0x4d0 [ 377.418856][T12754] should_failslab+0x9/0x20 [ 377.423422][T12754] slab_pre_alloc_hook+0x59/0x310 [ 377.428516][T12754] ? page_pool_create+0x71/0x5c0 [ 377.433511][T12754] __kmem_cache_alloc_node+0x53/0x250 [ 377.438951][T12754] ? page_pool_create+0x71/0x5c0 [ 377.443973][T12754] kmalloc_node_trace+0x26/0xe0 [ 377.448917][T12754] page_pool_create+0x71/0x5c0 [ 377.453788][T12754] bpf_test_run_xdp_live+0x203/0x1b20 [ 377.459230][T12754] ? bpf_dispatcher_xdp+0x800/0x1000 [ 377.464573][T12754] ? bpf_dispatcher_xdp+0x800/0x1000 [ 377.469912][T12754] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 377.475858][T12754] ? bpf_dispatcher_xdp+0x800/0x1000 [ 377.481196][T12754] ? xdp_convert_md_to_buff+0x330/0x330 [ 377.486803][T12754] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.493014][T12754] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 377.499305][T12754] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 377.504745][T12754] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.510941][T12754] ? lockdep_hardirqs_on+0x98/0x150 [ 377.516181][T12754] ? dev_put+0x80/0x80 [ 377.520293][T12754] ? audit_tree_destroy_watch+0x20/0x20 [ 377.525879][T12754] ? dev_put+0x80/0x80 [ 377.529991][T12754] bpf_prog_test_run+0x321/0x390 [ 377.534962][T12754] __sys_bpf+0x49d/0x890 [ 377.539247][T12754] ? bpf_link_show_fdinfo+0x390/0x390 [ 377.544667][T12754] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.550895][T12754] __x64_sys_bpf+0x7c/0x90 [ 377.555348][T12754] do_syscall_64+0x55/0xa0 [ 377.559797][T12754] ? clear_bhb_loop+0x40/0x90 [ 377.564518][T12754] ? clear_bhb_loop+0x40/0x90 [ 377.569236][T12754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.575174][T12754] RIP: 0033:0x7f8cf4b9cdd9 [ 377.579629][T12754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.599369][T12754] RSP: 002b:00007f8cf2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.607830][T12754] RAX: ffffffffffffffda RBX: 00007f8cf4e15fa0 RCX: 00007f8cf4b9cdd9 [ 377.615841][T12754] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 377.623849][T12754] RBP: 00007f8cf2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.631852][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.639852][T12754] R13: 00007f8cf4e16038 R14: 00007f8cf4e15fa0 R15: 00007ffde41c8b28 [ 377.647958][T12754] [ 378.257469][T12775] netlink: 'syz.2.1897': attribute type 29 has an invalid length. [ 378.497928][T12795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.734202][T12801] FAULT_INJECTION: forcing a failure. [ 378.734202][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.754000][T12801] CPU: 0 PID: 12801 Comm: syz.1.1903 Not tainted syzkaller #0 [ 378.761561][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.771858][T12801] Call Trace: [ 378.775186][T12801] [ 378.778172][T12801] dump_stack_lvl+0x18c/0x250 [ 378.782927][T12801] ? show_regs_print_info+0x20/0x20 [ 378.788214][T12801] ? load_image+0x420/0x420 [ 378.792790][T12801] ? __lock_acquire+0x7d40/0x7d40 [ 378.797966][T12801] ? snprintf+0xe9/0x140 [ 378.802277][T12801] should_fail_ex+0x39d/0x4d0 [ 378.807037][T12801] _copy_to_user+0x2f/0xa0 [ 378.811522][T12801] simple_read_from_buffer+0xe7/0x150 [ 378.817056][T12801] proc_fail_nth_read+0x1e8/0x260 [ 378.822154][T12801] ? proc_fault_inject_write+0x360/0x360 [ 378.827856][T12801] ? fsnotify_perm+0x271/0x5e0 [ 378.832689][T12801] ? proc_fault_inject_write+0x360/0x360 [ 378.838395][T12801] vfs_read+0x28b/0x970 [ 378.842636][T12801] ? kernel_read+0x1e0/0x1e0 [ 378.847294][T12801] ? __fget_files+0x28/0x4b0 [ 378.851948][T12801] ? __fget_files+0x28/0x4b0 [ 378.856611][T12801] ? __fget_files+0x43d/0x4b0 [ 378.861370][T12801] ? __fdget_pos+0x2a3/0x330 [ 378.866040][T12801] ? ksys_read+0x75/0x260 [ 378.870446][T12801] ksys_read+0x150/0x260 [ 378.874772][T12801] ? vfs_write+0x990/0x990 [ 378.879263][T12801] ? lockdep_hardirqs_on+0x98/0x150 [ 378.884531][T12801] do_syscall_64+0x55/0xa0 [ 378.889007][T12801] ? clear_bhb_loop+0x40/0x90 [ 378.893750][T12801] ? clear_bhb_loop+0x40/0x90 [ 378.898497][T12801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.904456][T12801] RIP: 0033:0x7ff75835d60e [ 378.908915][T12801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.928603][T12801] RSP: 002b:00007ff75920afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.937081][T12801] RAX: ffffffffffffffda RBX: 00007ff75920b6c0 RCX: 00007ff75835d60e [ 378.945110][T12801] RDX: 000000000000000f RSI: 00007ff75920b0a0 RDI: 0000000000000005 [ 378.953137][T12801] RBP: 00007ff75920b090 R08: 0000000000000000 R09: 0000000000000000 [ 378.961174][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.969196][T12801] R13: 00007ff758616038 R14: 00007ff758615fa0 R15: 00007ffd0546ae48 [ 378.977256][T12801] [ 378.988869][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.995382][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.729283][T12799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1902'. [ 379.782071][T12799] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1902'. [ 379.993454][T12817] validate_nla: 5 callbacks suppressed [ 379.993477][T12817] netlink: 'syz.1.1914': attribute type 6 has an invalid length. [ 380.037539][T12817] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1914'. [ 380.136372][T12817] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 380.177853][T12817] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1914'. [ 381.447180][T12859] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 381.693032][T12859] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 381.723451][T12877] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 381.740794][T12877] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1916'. [ 381.779736][T12873] netlink: 'syz.0.1916': attribute type 6 has an invalid length. [ 381.817410][T12873] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1916'. [ 381.870916][T12868] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 381.894901][T12872] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 381.993522][T12880] netlink: 'syz.2.1918': attribute type 29 has an invalid length. [ 382.011989][T12880] netlink: 'syz.2.1918': attribute type 29 has an invalid length. [ 382.507615][T12892] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1919'. [ 382.614283][T12883] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1919'. [ 383.494514][T12908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1924'. [ 383.566709][T12908] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1924'. [ 384.338829][T12920] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1927'. [ 384.407159][T12920] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1927'. [ 384.969006][T12941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1932'. [ 385.013736][T12941] validate_nla: 17 callbacks suppressed [ 385.013759][T12941] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 385.029448][T12941] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1932'. [ 385.615663][T12966] netlink: 'syz.3.1937': attribute type 6 has an invalid length. [ 385.626384][T12966] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1937'. [ 385.756505][T12964] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 385.769974][T12964] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1937'. [ 385.883421][T12969] netlink: 'syz.2.1938': attribute type 6 has an invalid length. [ 385.959641][T12969] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 386.097374][T12979] netlink: 'syz.1.1939': attribute type 29 has an invalid length. [ 386.141535][T12979] netlink: 'syz.1.1939': attribute type 29 has an invalid length. [ 386.187328][T12984] netlink: 'syz.1.1939': attribute type 29 has an invalid length. [ 386.214671][T12981] netlink: 'syz.1.1939': attribute type 29 has an invalid length. [ 386.309597][ T11] tipc: Subscription rejected, illegal request [ 386.486164][T12993] netlink: 'syz.2.1944': attribute type 29 has an invalid length. [ 387.544514][T13008] __nla_validate_parse: 4 callbacks suppressed [ 387.544534][T13008] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1950'. [ 387.585625][T13012] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1950'. [ 387.918881][T13020] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1952'. [ 387.999938][T13020] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1952'. [ 388.159446][ T1130] tipc: Subscription rejected, illegal request [ 388.554291][T13035] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1957'. [ 388.716301][T13035] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1957'. [ 389.184184][T13056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1963'. [ 389.617253][T13056] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1963'. [ 390.211636][T13079] validate_nla: 28 callbacks suppressed [ 390.211656][T13079] netlink: 'syz.0.1967': attribute type 6 has an invalid length. [ 390.236509][T13079] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1967'. [ 390.343405][T13076] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 390.358616][T13076] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1967'. [ 390.698060][T13082] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 390.744255][T13086] netlink: 'syz.0.1978': attribute type 29 has an invalid length. [ 390.765218][ T1130] tipc: Subscription rejected, illegal request [ 391.074652][T13082] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 391.089163][T13086] netlink: 'syz.0.1978': attribute type 29 has an invalid length. [ 391.105203][T13090] netlink: 'syz.0.1978': attribute type 29 has an invalid length. [ 391.118510][T13093] netlink: 'syz.0.1978': attribute type 29 has an invalid length. [ 391.130758][T13089] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 391.140434][T13084] netlink: 'syz.2.1970': attribute type 6 has an invalid length. [ 393.318483][T13124] __nla_validate_parse: 4 callbacks suppressed [ 393.318504][T13124] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1977'. [ 393.357221][T13132] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1979'. [ 393.391629][T13135] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1980'. [ 393.421853][T13124] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1977'. [ 393.503129][T13135] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1980'. [ 393.646639][T13131] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1979'. [ 395.043868][T13170] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1988'. [ 395.083729][T13166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1987'. [ 395.175748][T13163] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1988'. [ 395.241521][T13166] validate_nla: 25 callbacks suppressed [ 395.241543][T13166] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 395.304638][T13166] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1987'. [ 395.979411][T13188] netlink: 'syz.2.1991': attribute type 6 has an invalid length. [ 396.096177][T13189] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 396.589269][T13199] netlink: 'syz.0.1994': attribute type 6 has an invalid length. [ 396.763396][T13199] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 397.058676][T13234] netlink: 'syz.1.2001': attribute type 21 has an invalid length. [ 397.189888][T13237] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 397.220718][T13237] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 397.246379][T13239] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 397.304329][T13237] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 398.786535][T13290] __nla_validate_parse: 8 callbacks suppressed [ 398.786553][T13290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2018'. [ 399.225137][T13309] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2020'. [ 399.303677][T13305] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2020'. [ 399.878930][T13324] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2026'. [ 399.935413][T13324] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2026'. [ 400.594604][T13349] validate_nla: 10 callbacks suppressed [ 400.594626][T13349] netlink: 'syz.1.2032': attribute type 6 has an invalid length. [ 400.618241][T13349] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2032'. [ 400.840230][T13359] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 400.889271][T13359] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 400.912764][T13360] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 400.942216][T13346] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 400.943966][T13359] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 400.966707][T13361] netlink: 'syz.0.2035': attribute type 8 has an invalid length. [ 400.983117][T13346] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2032'. [ 401.027820][T13361] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 401.091155][T13361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2035'. [ 402.002976][T13398] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2043'. [ 402.168028][T13387] netlink: 'syz.2.2041': attribute type 6 has an invalid length. [ 402.193979][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2041'. [ 402.299235][T13387] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 403.807251][T13429] __nla_validate_parse: 3 callbacks suppressed [ 403.807272][T13429] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2053'. [ 404.549019][T13443] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2057'. [ 404.634995][T13436] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2057'. [ 404.941224][T13458] FAULT_INJECTION: forcing a failure. [ 404.941224][T13458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.969927][T13458] CPU: 1 PID: 13458 Comm: syz.0.2059 Not tainted syzkaller #0 [ 404.977521][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.987656][T13458] Call Trace: [ 404.991089][T13458] [ 404.994091][T13458] dump_stack_lvl+0x18c/0x250 [ 404.998880][T13458] ? show_regs_print_info+0x20/0x20 [ 405.004152][T13458] ? load_image+0x420/0x420 [ 405.008880][T13458] ? __might_fault+0xaa/0x120 [ 405.013664][T13458] ? __lock_acquire+0x7d40/0x7d40 [ 405.018799][T13458] should_fail_ex+0x39d/0x4d0 [ 405.023581][T13458] _copy_from_user+0x2f/0xe0 [ 405.028257][T13458] kstrtouint_from_user+0xde/0x170 [ 405.033459][T13458] ? kstrtol_from_user+0x190/0x190 [ 405.038776][T13458] proc_fail_nth_write+0x8f/0x250 [ 405.043903][T13458] ? proc_fail_nth_read+0x260/0x260 [ 405.049207][T13458] ? proc_fail_nth_read+0x260/0x260 [ 405.054486][T13458] vfs_write+0x296/0x990 [ 405.058830][T13458] ? file_end_write+0x250/0x250 [ 405.063770][T13458] ? __fget_files+0x28/0x4b0 [ 405.068499][T13458] ? __fget_files+0x28/0x4b0 [ 405.073198][T13458] ? __fget_files+0x43d/0x4b0 [ 405.077982][T13458] ? __fdget_pos+0x2a3/0x330 [ 405.082656][T13458] ? ksys_write+0x75/0x260 [ 405.087156][T13458] ksys_write+0x150/0x260 [ 405.091573][T13458] ? __ia32_sys_read+0x90/0x90 [ 405.096458][T13458] ? lockdep_hardirqs_on+0x98/0x150 [ 405.101774][T13458] do_syscall_64+0x55/0xa0 [ 405.106256][T13458] ? clear_bhb_loop+0x40/0x90 [ 405.111003][T13458] ? clear_bhb_loop+0x40/0x90 [ 405.115751][T13458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.121736][T13458] RIP: 0033:0x7f69c655d60e [ 405.126236][T13458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.145919][T13458] RSP: 002b:00007f69c749cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.154410][T13458] RAX: ffffffffffffffda RBX: 00007f69c749d6c0 RCX: 00007f69c655d60e [ 405.162548][T13458] RDX: 0000000000000001 RSI: 00007f69c749d0a0 RDI: 0000000000000006 [ 405.170607][T13458] RBP: 00007f69c749d090 R08: 0000000000000000 R09: 0000000000000000 [ 405.178664][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.186708][T13458] R13: 00007f69c6816038 R14: 00007f69c6815fa0 R15: 00007ffe4ce1e0f8 [ 405.194782][T13458] [ 405.533510][T13465] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2062'. [ 406.614808][T13476] validate_nla: 8 callbacks suppressed [ 406.614838][T13476] netlink: 'syz.0.2066': attribute type 29 has an invalid length. [ 406.631648][T13476] netlink: 'syz.0.2066': attribute type 29 has an invalid length. [ 406.683756][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 406.709770][T13479] netlink: 'syz.0.2066': attribute type 29 has an invalid length. [ 406.740189][T13476] netlink: 'syz.0.2066': attribute type 29 has an invalid length. [ 407.796763][T13498] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2071'. [ 407.825914][T13500] FAULT_INJECTION: forcing a failure. [ 407.825914][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 407.843764][T13498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.862049][T13500] CPU: 1 PID: 13500 Comm: syz.2.2072 Not tainted syzkaller #0 [ 407.869599][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.879710][T13500] Call Trace: [ 407.883038][T13500] [ 407.886019][T13500] dump_stack_lvl+0x18c/0x250 [ 407.890776][T13500] ? show_regs_print_info+0x20/0x20 [ 407.896043][T13500] ? load_image+0x420/0x420 [ 407.900610][T13500] ? __might_sleep+0xe0/0xe0 [ 407.905260][T13500] ? __lock_acquire+0x7d40/0x7d40 [ 407.910347][T13500] should_fail_ex+0x39d/0x4d0 [ 407.915105][T13500] should_failslab+0x9/0x20 [ 407.919673][T13500] slab_pre_alloc_hook+0x59/0x310 [ 407.924774][T13500] ? rxrpc_alloc_peer+0x7e/0x340 [ 407.929770][T13500] __kmem_cache_alloc_node+0x53/0x250 [ 407.935212][T13500] ? rxrpc_alloc_peer+0x7e/0x340 [ 407.940212][T13500] kmalloc_trace+0x2a/0xe0 [ 407.944697][T13500] rxrpc_alloc_peer+0x7e/0x340 [ 407.949527][T13500] rxrpc_lookup_peer+0x3f4/0x850 [ 407.954542][T13500] rxrpc_new_client_call+0xb99/0x1410 [ 407.959989][T13500] rxrpc_do_sendmsg+0xe03/0x12d0 [ 407.965025][T13500] ? rxrpc_propose_abort+0x200/0x200 [ 407.970391][T13500] ? rxrpc_sendmsg+0x391/0x5b0 [ 407.975219][T13500] ? rxrpc_getsockopt+0x150/0x150 [ 407.980400][T13500] ____sys_sendmsg+0x5ba/0x960 [ 407.985241][T13500] ? __lock_acquire+0x7d40/0x7d40 [ 407.990341][T13500] ? __sys_sendmsg_sock+0x30/0x30 [ 407.995419][T13500] ? __import_iovec+0x3fa/0x850 [ 408.000337][T13500] ? import_iovec+0x73/0xa0 [ 408.004908][T13500] ___sys_sendmsg+0x2a6/0x360 [ 408.009633][T13500] ? get_pid_task+0x20/0x1e0 [ 408.014285][T13500] ? __sys_sendmsg+0x2a0/0x2a0 [ 408.019134][T13500] ? __lock_acquire+0x7d40/0x7d40 [ 408.024243][T13500] __se_sys_sendmsg+0x1c2/0x2b0 [ 408.029154][T13500] ? __x64_sys_sendmsg+0x80/0x80 [ 408.034162][T13500] ? lockdep_hardirqs_on+0x98/0x150 [ 408.039420][T13500] do_syscall_64+0x55/0xa0 [ 408.043894][T13500] ? clear_bhb_loop+0x40/0x90 [ 408.048628][T13500] ? clear_bhb_loop+0x40/0x90 [ 408.053373][T13500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.059340][T13500] RIP: 0033:0x7f9dff39cdd9 [ 408.063807][T13500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.083482][T13500] RSP: 002b:00007f9e002c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.091933][T13500] RAX: ffffffffffffffda RBX: 00007f9dff616090 RCX: 00007f9dff39cdd9 [ 408.099945][T13500] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 408.107966][T13500] RBP: 00007f9e002c7090 R08: 0000000000000000 R09: 0000000000000000 [ 408.115975][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.123977][T13500] R13: 00007f9dff616128 R14: 00007f9dff616090 R15: 00007fff2ceb6fd8 [ 408.131996][T13500] [ 408.500643][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 408.763355][T13517] syzkaller0: entered promiscuous mode [ 408.768985][T13517] syzkaller0: entered allmulticast mode [ 411.473231][T13536] netlink: 'syz.2.2081': attribute type 29 has an invalid length. [ 413.165720][T13536] netlink: 'syz.2.2081': attribute type 29 has an invalid length. [ 413.174069][T13539] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2082'. [ 415.081541][T13580] netlink: 'syz.1.2094': attribute type 29 has an invalid length. [ 415.230381][T13580] netlink: 'syz.1.2094': attribute type 29 has an invalid length. [ 415.258054][T13575] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2093'. [ 415.318745][T13586] netlink: 'syz.1.2094': attribute type 29 has an invalid length. [ 415.371232][T13588] netlink: 'syz.1.2094': attribute type 29 has an invalid length. [ 417.549952][T13627] netlink: 'syz.1.2109': attribute type 29 has an invalid length. [ 417.570238][T13627] netlink: 'syz.1.2109': attribute type 29 has an invalid length. [ 417.594353][T13635] netlink: 'syz.1.2109': attribute type 29 has an invalid length. [ 417.634786][T13627] netlink: 'syz.1.2109': attribute type 29 has an invalid length. [ 417.775736][T13644] netlink: 'syz.3.2113': attribute type 2 has an invalid length. [ 417.785829][T13644] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2113'. [ 418.211410][T13653] ip6gretap0: refused to change device tx_queue_len [ 418.768455][T13681] delete_channel: no stack [ 418.791925][T13681] delete_channel: no stack [ 419.096937][T13694] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 419.111991][T13694] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 419.137025][T13697] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 419.167785][T13694] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 421.203031][T13751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2145'. [ 422.036204][T13770] netlink: 'syz.0.2149': attribute type 29 has an invalid length. [ 422.063044][T13770] netlink: 'syz.0.2149': attribute type 29 has an invalid length. [ 422.114065][T13780] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2150'. [ 422.143086][T13770] netlink: 'syz.0.2149': attribute type 29 has an invalid length. [ 422.173505][T13770] netlink: 'syz.0.2149': attribute type 29 has an invalid length. [ 422.832807][T13793] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2156'. [ 422.871969][T13793] hsr_slave_0: left promiscuous mode [ 422.933585][T13793] hsr_slave_1: left promiscuous mode [ 423.000978][T13798] FAULT_INJECTION: forcing a failure. [ 423.000978][T13798] name failslab, interval 1, probability 0, space 0, times 0 [ 423.103205][T13798] CPU: 1 PID: 13798 Comm: syz.1.2155 Not tainted syzkaller #0 [ 423.110788][T13798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.120911][T13798] Call Trace: [ 423.124249][T13798] [ 423.127219][T13798] dump_stack_lvl+0x18c/0x250 [ 423.131969][T13798] ? show_regs_print_info+0x20/0x20 [ 423.137243][T13798] ? load_image+0x420/0x420 [ 423.141822][T13798] ? __might_sleep+0xe0/0xe0 [ 423.146479][T13798] ? __lock_acquire+0x7d40/0x7d40 [ 423.151573][T13798] should_fail_ex+0x39d/0x4d0 [ 423.156336][T13798] should_failslab+0x9/0x20 [ 423.160901][T13798] slab_pre_alloc_hook+0x59/0x310 [ 423.166011][T13798] kmem_cache_alloc+0x5a/0x2d0 [ 423.170829][T13798] ? rxrpc_alloc_call+0x272/0xc20 [ 423.175892][T13798] ? rxrpc_alloc_call+0x78/0xc20 [ 423.180863][T13798] rxrpc_alloc_call+0x272/0xc20 [ 423.185749][T13798] rxrpc_new_client_call+0xed/0x1410 [ 423.191078][T13798] rxrpc_do_sendmsg+0xe03/0x12d0 [ 423.196066][T13798] ? rxrpc_propose_abort+0x200/0x200 [ 423.201390][T13798] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.206809][T13798] ? rxrpc_sendmsg+0x391/0x5b0 [ 423.211603][T13798] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.216925][T13798] ? rxrpc_getsockopt+0x150/0x150 [ 423.221996][T13798] ____sys_sendmsg+0x5ba/0x960 [ 423.226797][T13798] ? __lock_acquire+0x7d40/0x7d40 [ 423.231861][T13798] ? __sys_sendmsg_sock+0x30/0x30 [ 423.236913][T13798] ? __import_iovec+0x3fa/0x850 [ 423.241805][T13798] ? import_iovec+0x73/0xa0 [ 423.246354][T13798] ___sys_sendmsg+0x2a6/0x360 [ 423.251075][T13798] ? get_pid_task+0x20/0x1e0 [ 423.255719][T13798] ? __sys_sendmsg+0x2a0/0x2a0 [ 423.260531][T13798] ? __lock_acquire+0x7d40/0x7d40 [ 423.265613][T13798] __se_sys_sendmsg+0x1c2/0x2b0 [ 423.270499][T13798] ? __x64_sys_sendmsg+0x80/0x80 [ 423.275476][T13798] ? lockdep_hardirqs_on+0x98/0x150 [ 423.280709][T13798] do_syscall_64+0x55/0xa0 [ 423.285155][T13798] ? clear_bhb_loop+0x40/0x90 [ 423.289863][T13798] ? clear_bhb_loop+0x40/0x90 [ 423.294577][T13798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.300502][T13798] RIP: 0033:0x7ff75839cdd9 [ 423.305009][T13798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.324684][T13798] RSP: 002b:00007ff7591ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.333127][T13798] RAX: ffffffffffffffda RBX: 00007ff758616090 RCX: 00007ff75839cdd9 [ 423.341236][T13798] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 423.349236][T13798] RBP: 00007ff7591ea090 R08: 0000000000000000 R09: 0000000000000000 [ 423.357237][T13798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.365232][T13798] R13: 00007ff758616128 R14: 00007ff758616090 R15: 00007ffd0546ae48 [ 423.373249][T13798] [ 424.057838][T13836] FAULT_INJECTION: forcing a failure. [ 424.057838][T13836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.078063][T13836] CPU: 1 PID: 13836 Comm: syz.3.2163 Not tainted syzkaller #0 [ 424.085627][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.095741][T13836] Call Trace: [ 424.099069][T13836] [ 424.102051][T13836] dump_stack_lvl+0x18c/0x250 [ 424.106809][T13836] ? show_regs_print_info+0x20/0x20 [ 424.112086][T13836] ? load_image+0x420/0x420 [ 424.116672][T13836] ? __lock_acquire+0x7d40/0x7d40 [ 424.121767][T13836] ? snprintf+0xe9/0x140 [ 424.126077][T13836] should_fail_ex+0x39d/0x4d0 [ 424.130839][T13836] _copy_to_user+0x2f/0xa0 [ 424.135319][T13836] simple_read_from_buffer+0xe7/0x150 [ 424.140770][T13836] proc_fail_nth_read+0x1e8/0x260 [ 424.145862][T13836] ? proc_fault_inject_write+0x360/0x360 [ 424.151567][T13836] ? fsnotify_perm+0x271/0x5e0 [ 424.156404][T13836] ? proc_fault_inject_write+0x360/0x360 [ 424.162095][T13836] vfs_read+0x28b/0x970 [ 424.166303][T13836] ? kernel_read+0x1e0/0x1e0 [ 424.170928][T13836] ? __fget_files+0x28/0x4b0 [ 424.175554][T13836] ? __fget_files+0x28/0x4b0 [ 424.180188][T13836] ? __fget_files+0x43d/0x4b0 [ 424.184903][T13836] ? __fdget_pos+0x2a3/0x330 [ 424.189537][T13836] ? ksys_read+0x75/0x260 [ 424.193990][T13836] ksys_read+0x150/0x260 [ 424.198266][T13836] ? vfs_write+0x990/0x990 [ 424.202722][T13836] ? lockdep_hardirqs_on+0x98/0x150 [ 424.207960][T13836] do_syscall_64+0x55/0xa0 [ 424.212403][T13836] ? clear_bhb_loop+0x40/0x90 [ 424.217124][T13836] ? clear_bhb_loop+0x40/0x90 [ 424.221852][T13836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.227777][T13836] RIP: 0033:0x7f8cf4b5d60e [ 424.232224][T13836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.251861][T13836] RSP: 002b:00007f8cf2dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.260306][T13836] RAX: ffffffffffffffda RBX: 00007f8cf2dd56c0 RCX: 00007f8cf4b5d60e [ 424.268305][T13836] RDX: 000000000000000f RSI: 00007f8cf2dd50a0 RDI: 0000000000000007 [ 424.276300][T13836] RBP: 00007f8cf2dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 424.284300][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.292301][T13836] R13: 00007f8cf4e16128 R14: 00007f8cf4e16090 R15: 00007ffde41c8b28 [ 424.300323][T13836] [ 424.819422][T13852] netlink: 'syz.2.2167': attribute type 33 has an invalid length. [ 424.829595][T13852] netlink: 'syz.2.2167': attribute type 3 has an invalid length. [ 424.837393][T13852] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2167'. [ 424.894082][T13849] netlink: 'syz.1.2168': attribute type 4 has an invalid length. [ 425.035541][T13857] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2166'. [ 425.188848][T13841] netlink: 'syz.0.2165': attribute type 6 has an invalid length. [ 425.215786][T13841] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2165'. [ 425.364295][T13841] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 425.389970][T13841] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2165'. [ 426.280361][T13874] netlink: 'syz.3.2173': attribute type 6 has an invalid length. [ 426.288194][T13874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2173'. [ 427.958757][T13874] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 427.979494][T13874] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2173'. [ 429.282828][T13955] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2191'. [ 429.444087][T13959] netlink: 'syz.3.2192': attribute type 29 has an invalid length. [ 429.522715][T13959] netlink: 'syz.3.2192': attribute type 29 has an invalid length. [ 429.543629][T13966] netlink: 'syz.3.2192': attribute type 29 has an invalid length. [ 429.947431][T13971] netlink: 'syz.3.2192': attribute type 29 has an invalid length. [ 430.245079][T13984] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2199'. [ 430.539194][T13984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.775394][T13972] netlink: 'syz.2.2196': attribute type 6 has an invalid length. [ 430.838261][T13972] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2196'. [ 430.864944][T13999] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 430.961887][T13972] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 430.970797][T13972] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2196'. [ 431.222831][T14004] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 431.243444][T14004] dvmrp1: linktype set to 823 [ 432.384862][T14020] FAULT_INJECTION: forcing a failure. [ 432.384862][T14020] name failslab, interval 1, probability 0, space 0, times 0 [ 432.419521][T14020] CPU: 1 PID: 14020 Comm: syz.2.2205 Not tainted syzkaller #0 [ 432.427086][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.437205][T14020] Call Trace: [ 432.440534][T14020] [ 432.443509][T14020] dump_stack_lvl+0x18c/0x250 [ 432.448307][T14020] ? show_regs_print_info+0x20/0x20 [ 432.453595][T14020] ? load_image+0x420/0x420 [ 432.458169][T14020] ? __might_sleep+0xe0/0xe0 [ 432.462810][T14020] ? __lock_acquire+0x7d40/0x7d40 [ 432.467885][T14020] ? __put_user_ns+0x50/0x50 [ 432.472532][T14020] should_fail_ex+0x39d/0x4d0 [ 432.477278][T14020] should_failslab+0x9/0x20 [ 432.481839][T14020] slab_pre_alloc_hook+0x59/0x310 [ 432.486934][T14020] ? rxrpc_alloc_bundle+0x78/0x580 [ 432.492100][T14020] __kmem_cache_alloc_node+0x53/0x250 [ 432.497532][T14020] ? do_raw_spin_lock+0x11f/0x2c0 [ 432.502613][T14020] ? rxrpc_alloc_bundle+0x78/0x580 [ 432.507772][T14020] kmalloc_trace+0x2a/0xe0 [ 432.512255][T14020] rxrpc_alloc_bundle+0x78/0x580 [ 432.517287][T14020] rxrpc_look_up_bundle+0x395/0x930 [ 432.522546][T14020] rxrpc_new_client_call+0xbcd/0x1410 [ 432.527980][T14020] rxrpc_do_sendmsg+0xe03/0x12d0 [ 432.532997][T14020] ? rxrpc_propose_abort+0x200/0x200 [ 432.538338][T14020] ? __local_bh_enable_ip+0x13a/0x1c0 [ 432.543773][T14020] ? rxrpc_sendmsg+0x391/0x5b0 [ 432.548585][T14020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 432.553928][T14020] ? rxrpc_getsockopt+0x150/0x150 [ 432.559002][T14020] ____sys_sendmsg+0x5ba/0x960 [ 432.563812][T14020] ? __lock_acquire+0x7d40/0x7d40 [ 432.568896][T14020] ? __sys_sendmsg_sock+0x30/0x30 [ 432.573991][T14020] ? __import_iovec+0x3fa/0x850 [ 432.578990][T14020] ? import_iovec+0x73/0xa0 [ 432.583550][T14020] ___sys_sendmsg+0x2a6/0x360 [ 432.588271][T14020] ? get_pid_task+0x20/0x1e0 [ 432.592926][T14020] ? __sys_sendmsg+0x2a0/0x2a0 [ 432.597772][T14020] ? __lock_acquire+0x7d40/0x7d40 [ 432.602880][T14020] __se_sys_sendmsg+0x1c2/0x2b0 [ 432.607791][T14020] ? __x64_sys_sendmsg+0x80/0x80 [ 432.612807][T14020] ? lockdep_hardirqs_on+0x98/0x150 [ 432.618069][T14020] do_syscall_64+0x55/0xa0 [ 432.622536][T14020] ? clear_bhb_loop+0x40/0x90 [ 432.627354][T14020] ? clear_bhb_loop+0x40/0x90 [ 432.632082][T14020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.638048][T14020] RIP: 0033:0x7f9dff39cdd9 [ 432.642521][T14020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.662179][T14020] RSP: 002b:00007f9e002a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.670649][T14020] RAX: ffffffffffffffda RBX: 00007f9dff616180 RCX: 00007f9dff39cdd9 [ 432.678674][T14020] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 432.686701][T14020] RBP: 00007f9e002a6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.694720][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.702735][T14020] R13: 00007f9dff616218 R14: 00007f9dff616180 R15: 00007fff2ceb6fd8 [ 432.710772][T14020] [ 446.658352][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.668494][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.677316][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.695515][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.704281][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 446.712274][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.161539][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.178754][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.187115][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.200664][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.208614][ T5780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 448.216816][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.300875][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 448.315097][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 448.324746][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 448.333759][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 448.343000][ T5780] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 448.350962][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 448.769737][ T5785] Bluetooth: hci4: command tx timeout [ 449.016662][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 449.026094][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 449.035278][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 449.043731][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 449.052177][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 449.059970][ T5780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 450.289783][ T5785] Bluetooth: hci5: command tx timeout [ 450.439891][ T5785] Bluetooth: hci6: command tx timeout [ 450.849645][ T5785] Bluetooth: hci4: command tx timeout [ 451.079749][ T5785] Bluetooth: hci7: command tx timeout [ 452.359727][ T5785] Bluetooth: hci5: command tx timeout [ 452.529732][ T5785] Bluetooth: hci6: command tx timeout [ 452.924529][ T5785] Bluetooth: hci4: command tx timeout [ 453.169752][ T5785] Bluetooth: hci7: command tx timeout [ 454.439764][ T5785] Bluetooth: hci5: command tx timeout [ 454.609619][ T5785] Bluetooth: hci6: command tx timeout [ 455.014458][ T5785] Bluetooth: hci4: command tx timeout [ 455.239535][ T5785] Bluetooth: hci7: command tx timeout [ 456.519590][ T5785] Bluetooth: hci5: command tx timeout [ 456.689637][ T5785] Bluetooth: hci6: command tx timeout [ 457.319531][ T5785] Bluetooth: hci7: command tx timeout [ 507.316590][ T5780] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.329634][ T5780] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.337823][ T5780] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.346248][ T5780] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.358461][ T5780] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 507.366138][ T5780] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 509.101287][ T5780] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 509.111217][ T5780] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 509.119553][ T5780] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 509.128787][ T5780] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 509.137611][ T5780] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 509.145319][ T5780] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 509.232606][ T5785] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 509.247523][ T5785] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 509.256332][ T5785] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 509.268789][ T5785] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 509.277244][ T5785] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 509.292267][ T5785] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 509.409986][ T5785] Bluetooth: hci8: command tx timeout [ 509.835794][ T5780] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 509.849377][ T5780] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 509.858175][ T5780] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 509.870703][ T5780] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 509.878774][ T5780] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 509.889620][ T5780] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 511.249846][ T5780] Bluetooth: hci9: command tx timeout [ 511.329817][ T5780] Bluetooth: hci10: command tx timeout [ 511.479654][ T5780] Bluetooth: hci8: command tx timeout [ 511.959714][ T5780] Bluetooth: hci11: command tx timeout [ 513.319990][ T5780] Bluetooth: hci9: command tx timeout [ 513.409712][ T5780] Bluetooth: hci10: command tx timeout [ 513.569641][ T5780] Bluetooth: hci8: command tx timeout [ 514.045348][ T5780] Bluetooth: hci11: command tx timeout [ 515.409789][ T5780] Bluetooth: hci9: command tx timeout [ 515.479783][ T5780] Bluetooth: hci10: command tx timeout [ 515.649877][ T5780] Bluetooth: hci8: command tx timeout [ 516.135406][ T5780] Bluetooth: hci11: command tx timeout [ 517.479703][ T5780] Bluetooth: hci9: command tx timeout [ 517.559771][ T5780] Bluetooth: hci10: command tx timeout [ 518.199578][ T5780] Bluetooth: hci11: command tx timeout [ 536.489362][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 536.496236][ C0] rcu: 0-....: (10394 ticks this GP) idle=731c/1/0x4000000000000000 softirq=42442/42444 fqs=4323 [ 536.507851][ C0] rcu: hardirqs softirqs csw/system [ 536.514294][ C0] rcu: number: 1334711 0 0 [ 536.520737][ C0] rcu: cputime: 18157 34322 70 ==> 52480(ms) [ 536.528677][ C0] rcu: (t=10500 jiffies g=51141 q=2721 ncpus=2) [ 536.535047][ C0] CPU: 0 PID: 14010 Comm: syz.3.2203 Not tainted syzkaller #0 [ 536.542539][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.552626][ C0] RIP: 0010:rcu_read_unlock_special+0x83/0x4d0 [ 536.558839][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 6e 02 92 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 536.578479][ C0] RSP: 0018:ffffc900000074a0 EFLAGS: 00000206 [ 536.584580][ C0] RAX: 72169763eaceef00 RBX: 1ffff92000000e98 RCX: 72169763eaceef00 [ 536.592592][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 536.600594][ C0] RBP: ffffc90000007568 R08: ffffffff911c6637 R09: 1ffffffff2238cc6 [ 536.608593][ C0] R10: dffffc0000000000 R11: fffffbfff2238cc7 R12: ffffffff8d137300 [ 536.616630][ C0] R13: dffffc0000000000 R14: ffff8880b8e3cf50 R15: 1ffff110171c79ea [ 536.624643][ C0] FS: 00007f8cf2dd56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 536.633694][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.640306][ C0] CR2: 0000000100000001 CR3: 0000000076bb2000 CR4: 00000000003506f0 [ 536.648310][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.656319][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 536.664316][ C0] Call Trace: [ 536.667630][ C0] [ 536.670534][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 536.675542][ C0] ? read_lock_is_recursive+0x20/0x20 [ 536.680958][ C0] ? deref_stack_reg+0x1bd/0x240 [ 536.685932][ C0] __rcu_read_unlock+0x7c/0xd0 [ 536.690752][ C0] is_bpf_text_address+0x27e/0x2a0 [ 536.695897][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 536.701124][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.707220][ C0] kernel_text_address+0xa0/0xd0 [ 536.712198][ C0] __kernel_text_address+0xd/0x30 [ 536.717258][ C0] unwind_get_return_address+0x5d/0xc0 [ 536.722749][ C0] ? stack_trace_save+0x100/0x100 [ 536.727809][ C0] arch_stack_walk+0x11d/0x190 [ 536.732611][ C0] stack_trace_save+0xaa/0x100 [ 536.737406][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 536.742567][ C0] kasan_set_track+0x4e/0x70 [ 536.747187][ C0] ? kasan_set_track+0x4e/0x70 [ 536.751980][ C0] ? kasan_save_free_info+0x2e/0x50 [ 536.757216][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 536.762536][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 536.768221][ C0] ? __kmem_cache_free+0xba/0x1e0 [ 536.773305][ C0] ? skb_release_data+0x5dc/0x7b0 [ 536.778371][ C0] ? kfree_skb_reason+0x10e/0x170 [ 536.783422][ C0] ? inet_frag_destroy+0x179/0x290 [ 536.788570][ C0] ? call_timer_fn+0x189/0x540 [ 536.793366][ C0] ? __run_timers+0x542/0x800 [ 536.798090][ C0] ? run_timer_softirq+0x67/0xf0 [ 536.803055][ C0] ? handle_softirqs+0x280/0x820 [ 536.808019][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 536.812804][ C0] ? irq_exit_rcu+0x9/0x20 [ 536.817240][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 536.823082][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.829270][ C0] ? preempt_schedule_irq+0xba/0x150 [ 536.834614][ C0] ? irqentry_exit+0x67/0x70 [ 536.839234][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.845421][ C0] ? down_write_trylock+0x3c0/0x3c0 [ 536.850650][ C0] ? __se_sys_perf_event_open+0x1899/0x1c50 [ 536.856574][ C0] ? do_syscall_64+0x55/0xa0 [ 536.861210][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.867378][ C0] ? __kmem_cache_free+0xba/0x1e0 [ 536.872456][ C0] kasan_save_free_info+0x2e/0x50 [ 536.877551][ C0] ____kasan_slab_free+0x126/0x1e0 [ 536.882703][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 536.888196][ C0] ? _raw_spin_unlock+0x40/0x40 [ 536.893085][ C0] ? skb_release_data+0x5dc/0x7b0 [ 536.898142][ C0] __kmem_cache_free+0xba/0x1e0 [ 536.903035][ C0] skb_release_data+0x5dc/0x7b0 [ 536.907926][ C0] kfree_skb_reason+0x10e/0x170 [ 536.912805][ C0] inet_frag_destroy+0x179/0x290 [ 536.917782][ C0] call_timer_fn+0x189/0x540 [ 536.922406][ C0] ? ip4_frag_free+0x50/0x50 [ 536.927041][ C0] ? call_timer_fn+0xd2/0x540 [ 536.931742][ C0] ? __run_timers+0x800/0x800 [ 536.936452][ C0] ? ip4_frag_free+0x50/0x50 [ 536.941081][ C0] __run_timers+0x542/0x800 [ 536.945629][ C0] ? detach_timer+0x2b0/0x2b0 [ 536.950355][ C0] ? lock_chain_count+0x20/0x20 [ 536.955242][ C0] run_timer_softirq+0x67/0xf0 [ 536.960036][ C0] handle_softirqs+0x280/0x820 [ 536.964829][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 536.969622][ C0] ? do_softirq+0x1a0/0x1a0 [ 536.974153][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 536.979433][ C0] __irq_exit_rcu+0xd3/0x190 [ 536.984055][ C0] ? irq_exit_rcu+0x20/0x20 [ 536.988597][ C0] irq_exit_rcu+0x9/0x20 [ 536.992867][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 536.998531][ C0] [ 537.001491][ C0] [ 537.004445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.010457][ C0] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 537.016386][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 51 d6 cd f6 e8 7c e3 fe f6 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 537.036025][ C0] RSP: 0018:ffffc9000b84fbc0 EFLAGS: 00000282 [ 537.042128][ C0] RAX: 72169763eaceef00 RBX: 0000000000000000 RCX: 72169763eaceef00 [ 537.050126][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 537.058181][ C0] RBP: ffffc9000b84fc70 R08: ffffffff911c65a7 R09: 1ffffffff2238cb4 [ 537.066185][ C0] R10: dffffc0000000000 R11: fffffbfff2238cb5 R12: 0000000000000000 [ 537.074182][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001709f78 [ 537.082201][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 537.087957][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.094148][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 537.099994][ C0] irqentry_exit+0x67/0x70 [ 537.104441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.110455][ C0] RIP: 0010:up_read+0x0/0x20 [ 537.115069][ C0] Code: 07 80 c1 03 38 c1 0f 8c a0 fd ff ff 48 c7 c7 6c 4e 8b 8e e8 92 c7 77 00 e9 8f fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 0f 1e fa 53 48 89 fb 48 83 c7 70 48 8b 74 24 08 e8 2a 1b 01 00 [ 537.134705][ C0] RSP: 0018:ffffc9000b84fd38 EFLAGS: 00000282 [ 537.140808][ C0] RAX: 1ffff1100b636c62 RBX: ffff88805b1b5a00 RCX: dffffc0000000000 [ 537.148842][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802d4a0570 [ 537.156857][ C0] RBP: ffffc9000b84ff10 R08: ffffc9000b84fcc7 R09: 1ffff92001709f98 [ 537.164860][ C0] R10: dffffc0000000000 R11: fffff52001709f99 R12: 0000000000000000 [ 537.172885][ C0] R13: 1ffff92001709fb8 R14: ffff888059e70848 R15: ffff88805b1b5a00 [ 537.180909][ C0] __se_sys_perf_event_open+0x1899/0x1c50 [ 537.186679][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 537.192357][ C0] ? lock_chain_count+0x20/0x20 [ 537.197252][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 537.202481][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 537.208151][ C0] do_syscall_64+0x55/0xa0 [ 537.212597][ C0] ? clear_bhb_loop+0x40/0x90 [ 537.217310][ C0] ? clear_bhb_loop+0x40/0x90 [ 537.222031][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.227959][ C0] RIP: 0033:0x7f8cf4b9cdd9 [ 537.232401][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.252142][ C0] RSP: 002b:00007f8cf2dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 537.260598][ C0] RAX: ffffffffffffffda RBX: 00007f8cf4e16090 RCX: 00007f8cf4b9cdd9 [ 537.268609][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 537.276621][ C0] RBP: 00007f8cf4c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 537.284622][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 537.292800][ C0] R13: 00007f8cf4e16128 R14: 00007f8cf4e16090 R15: 00007ffde41c8b28 [ 537.300846][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)