last executing test programs: 12.259023571s ago: executing program 0 (id=5825): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x37, &(0x7f0000000100)=r1, 0x120) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000024c0)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}, 0x80, 0x0}, 0x40000054) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(r2, &(0x7f0000002940)={&(0x7f00000021c0)=@can, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002240)="5ae18254a07eba0da6f9a4280a67355a98f6fed53c8a5fd2689155b5a16c0b4c56fc07524d7f47b2d3bc4444994ae9a9e9753d89977b64d3bc68cbb63d1c0d32cab3020b1130f9cd10a8db650de8640173524598637ec794e6dfe9b9a6fff32d48c6cac6443935547ac16c05d98ee0e8ca9ba6c8273b", 0x76}, {&(0x7f00000022c0)="05aad21ae84878b017912f676492280c9c4b6baa9fd6c2533eafcb1f0761b2b44c4c2eec7eb565031df869e4b13a789c21a25a3b5d81dc97520af02e9dbf847d6be305", 0x43}, {&(0x7f0000002340)="693167870aef489b512fd79c2a96e91cd3ad930216857e0673095bf670aa8e89d4c496bc338631b7e03688d14327717eb606cbe2e1bbf18d8fa20860668c7943f5903cad98525b1cf1a67e6e5554d1a21c898f9116c5a52c4d6f86edaf2561c175c288ae3ea7bf6d8aac1b5387cccfe7d86ea47f8efefd36ad65e33da362cd45c936a13c0f42b128ff86fb9df057320823c6ab4c7509fcc9d607f30d1e4ada20e5474e703bc995387cb5bd1cf9ac1855a0a103b51365b69f9f15d4baeb5ea47214c2f4236b3592d0194dac3528", 0xcd}, {&(0x7f0000002440)="f51c985760a70946488a54a9ef2d487c3aa3853dfa3627e5a0b4c105d7df04437e129840c0b9ff00d71aed563f5002d0715d872b874e486b5c7ea6dd7c30", 0x3e}, {&(0x7f0000002540)="925cac38da70b56620ef83b9aed153bd6a0afa0053d56eaf4f46eaef4fc960aeb8b8c0d4dca7089a93d5f482f02aab293e5cd8eaa9dad701bbf4af3c2248165b378000c97790cec82b350acd5dbf33e2cc6bbee45f83cda01e41803b125b5ba8f8ac48d21c55288925cce4527b521578bb055539c6", 0x75}], 0x5, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x2f8}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2e"], 0x18}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) close(r3) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.702866434s ago: executing program 0 (id=5828): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0], &(0x7f00000008c0)=""/186, 0x4d, 0xba, 0x0, 0x2}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x22, r0}, 0x94) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000640), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r7 = socket$kcm(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x3, &(0x7f0000000040)=r8, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001c40)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x2700, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000005c0)=r6) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r12, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x80047441, &(0x7f0000000180)) 8.523636995s ago: executing program 0 (id=5850): sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000048000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 8.302568882s ago: executing program 0 (id=5854): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1b, 0x0, 0x3, 0x1, 0x8, 0xf4, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.83778462s ago: executing program 0 (id=5857): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e000000599c000080000000620b000004240000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000ccbd00f141cb73000000c6a928aeb2ff1de402ad"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8520000002000000186000000600000000000000020000009500000008000000"], &(0x7f0000000200)='syzkaller\x00', 0x10000, 0x19, &(0x7f0000000280)=""/25, 0x41000, 0x2, '\x00', r3, @fallback=0x17, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x8, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[0xffffffffffffffff, r5, r6, r7, 0x1], &(0x7f0000000840)=[{0x4, 0x1, 0x2, 0x7}, {0x0, 0x5, 0x8, 0x3}, {0x1, 0x5, 0x2, 0x3}, {0x1, 0x1, 0x9, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x2c, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r8 = socket$kcm(0x2, 0x5, 0x84) (async) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x4, 0x80, 0x1, 0x0, 0x7, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x8003}, 0x0, 0xfffffffffffffbff, r9, 0x0) r10 = socket$kcm(0x11, 0x2, 0x0) (async) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, 0x0, 0x0) (async) sendmsg$kcm(r11, 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xe, 0x0, 0x0) recvmsg$kcm(r8, 0x0, 0x2) (async) socket$kcm(0x23, 0x2, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x3, 0x84) (async, rerun: 64) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) (rerun: 64) 7.442978366s ago: executing program 0 (id=5862): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.982604807s ago: executing program 3 (id=5887): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) 3.954420979s ago: executing program 3 (id=5897): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18fd000000200000000000000300000088110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x18}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xb}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) socket$kcm(0x2, 0x5, 0x84) (async) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x9, 0x9, 0xfc, 0x0, 0x0, 0x800000000057d, 0x20860, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x4, 0x7}, 0x100804, 0xca, 0x200000, 0x7, 0x5, 0xffff, 0x3, 0x0, 0xe, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x11, &(0x7f0000000000)=r12, 0x8) (async) setsockopt$sock_attach_bpf(r9, 0x84, 0x11, &(0x7f0000000000)=r12, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r13) 3.821094331s ago: executing program 4 (id=5899): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x0, 0x1, 0x0, 0x3, 0x20882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x400, 0xc8, 0x1, 0x6, 0x0, 0xffffffff, 0xfffd, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff0200000000008dffffffffffffff01"], 0xfdef) 3.643529311s ago: executing program 4 (id=5902): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61124c00000000006113500000000018bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044080034"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa0}, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.607524677s ago: executing program 2 (id=5903): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) (async) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8181, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) (async) syz_clone(0x24050000, &(0x7f0000000380)="92c5eddcfb6665bd6ccad9", 0xb, &(0x7f0000000180), 0x0, &(0x7f0000000580)) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r5) recvmsg(r5, &(0x7f0000000700)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000540)=""/221, 0xdd}, {0x0}], 0x5}, 0x12002) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3cc}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) 3.357776899s ago: executing program 2 (id=5905): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xfffffffffffffff0) 3.233880899s ago: executing program 2 (id=5906): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) 3.233387749s ago: executing program 4 (id=5907): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000488c) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x9d, 0x1, 0x7, 0x0, 0x0, 0x5, 0xe0800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x41, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 3.086240344s ago: executing program 1 (id=5909): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x85}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.046127231s ago: executing program 4 (id=5910): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0xf226}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe0ff1f00}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x800, 0x0, 0xc2ba, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 2.925984551s ago: executing program 1 (id=5911): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) close(r3) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) (fail_nth: 18) 2.462007028s ago: executing program 1 (id=5912): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000064009d"], 0xfe33) (async) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x5, 0x8}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@map=r6, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x20, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @generic={0x2, 0x7, 0x4, 0x6, 0x145}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x5e}], &(0x7f00000002c0)='GPL\x00', 0xfffffff5, 0x35, &(0x7f0000000300)=""/53, 0x40f00, 0x0, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x20e, 0x8, 0xffff}, 0x10, r4, 0x0, 0x0, &(0x7f00000007c0)=[r6, r0, r5, r0], 0x0, 0x10, 0x7}, 0x94) socketpair(0x15, 0x1, 0x4, &(0x7f0000000180)) (async) r7 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8918, &(0x7f0000000000)={r7}) r8 = getpid() write$cgroup_pid(r0, &(0x7f0000000140)=r8, 0x12) 2.351635927s ago: executing program 4 (id=5913): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4040a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x2a, 0x0, 0x8400) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socketpair(0xa, 0x3, 0xff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x462}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000000c00000000000000", @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000160000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4) socket$kcm(0xa, 0x2, 0x3a) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x183) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000600)=ANY=[@ANYBLOB="00000100aaaaaaaaaa3de3e71509faa6dfe0abd15ea5e0dab56d068a9e960feffbaa1849483faa1df791c45a2dd56ce9b0b5cc72ae7909df0de433b435250cc6d295a4f7b8c447a80e9a6adfa8c99dcc57868baa6fb63bb6b6e6651aadbd6c46faaddfe5890ebc5ec9c38272b95379cb337431082badcf1fde6893ba6e01"]) write$cgroup_subtree(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00f5ffffffffffffff00000000ac1414aa000022eb", @ANYRESOCT=r1], 0xcfa4) 685.641056ms ago: executing program 1 (id=5914): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000003263a446ee6deba596caa00b3a07f4a6140abf39e2caacd015ee3e9b1fca1f50c0a6d5d6a133610ff348b9"], 0x50) 676.843647ms ago: executing program 3 (id=5915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ff00000000bfa2000000000000070200e387a9d0ffb703000008000000b704000000000000050000000300000095000002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34"], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syz_tun\x00', 0x1000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507818231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e726aef83d9ff9281ab79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c3348329b0ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c61d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x1006639, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 676.112327ms ago: executing program 4 (id=5916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000500000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000500000003000000000000110300000000000000"], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4010, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa09, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0x7, 0x8, 0xf, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x80, 0x4, 0xc, 0xb, 0x101}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @exit]}, &(0x7f0000000200)='GPL\x00', 0xf80, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x45, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1, 0xf6, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x4, 0x7, 0xa}, {0x5, 0x5, 0xc}, {0x1, 0x2, 0x9, 0xa}], 0x10, 0x7fff}, 0x94) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x7b, &(0x7f0000000000)=r13, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x2, 0x800, 0xc10, r1, 0x0, '\x00', r6, r13, 0x5, 0x3, 0x4, 0xc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 574.727924ms ago: executing program 2 (id=5917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1b, 0x0, 0x3, 0x1, 0x8, 0xf4, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 376.908917ms ago: executing program 3 (id=5918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 266.798906ms ago: executing program 2 (id=5919): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) socketpair(0x27, 0x800, 0x1, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7f, 0x8}, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x4861}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 266.409586ms ago: executing program 3 (id=5920): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000400042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000009208500000072000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 242.810669ms ago: executing program 1 (id=5921): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x424, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x40, 0x2000000000000000}, 0x0, 0x400000006, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x5}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001812000086db08bcd068fc4db1b1fd4b6c862e2e91f3ab70beb016f5571f410500001bf69c7c1fe384bf379d8e4bb6b8303710fb1fccac3a8c0f5caa3812f8ecde3fec4e1e33cbfbc61994901abc440cc5f8b6bf4689f0cc247612dc459ff793b7400349f3a23b408f1ede5f17bac5b4061a7900e3723e8967b7e522299e5b36c9524a284f5e6026e115679ef1e27acfb25366cfebf56449f663d2ccd0c5", @ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0b}, 0x94) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) r5 = socket$kcm(0x21, 0x5, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x31, 0x0, 0x0) (async) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffeff, 0x830d}, 0x4884, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffff7ffffb, 0xffffffffffffffff, 0x0) (async) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) (async) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) (async) close(r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xfffffffffffffcf0) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async) sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0xffffffffffffff7b, &(0x7f0000000080)=[{&(0x7f0000000580)="2e00000011008188040f46ecdb4cb9cc07004432000000000000e3bd6efb44006b476ef00a000d000000ba800000", 0x2e}], 0x1}, 0x24000000) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100) 110.057122ms ago: executing program 3 (id=5922): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) mkdir(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1b, 0x0, 0x3, 0x1, 0x8, 0xf4, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200402, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000000300), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 34.034155ms ago: executing program 1 (id=5923): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) close(r3) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101002001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 0s ago: executing program 2 (id=5924): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000060100000000000fffff00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000060100000000000fffff00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) (async) kernel console output (not intermixed with test programs): _sigframe_size+0x10/0x10 [ 789.900645][T14671] ? fput+0x150/0x1a0 [ 789.904658][T14671] ? exit_to_user_mode_loop+0x3b/0x110 [ 789.910137][T14671] exit_to_user_mode_loop+0x70/0x110 [ 789.915438][T14671] exit_to_user_mode_prepare+0xee/0x180 [ 789.921006][T14671] syscall_exit_to_user_mode+0x16/0x40 [ 789.926482][T14671] do_syscall_64+0x58/0xa0 [ 789.930911][T14671] ? clear_bhb_loop+0x60/0xb0 [ 789.935607][T14671] ? clear_bhb_loop+0x60/0xb0 [ 789.940298][T14671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.946203][T14671] RIP: 0033:0x7fe20e39c819 [ 789.950630][T14671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.970334][T14671] RSP: 002b:00007fe20f1cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 789.978761][T14671] RAX: fffffffffffffe00 RBX: 00007fe20e615fa0 RCX: 00007fe20e39c819 [ 789.986754][T14671] RDX: 0000000040002182 RSI: 0000200000000540 RDI: 0000000000000007 [ 789.994734][T14671] RBP: 00007fe20f1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 790.002714][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.010700][T14671] R13: 00007fe20e616038 R14: 00007fe20e615fa0 R15: 00007ffeb0d1c618 [ 790.018706][T14671] [ 790.901091][T14693] FAULT_INJECTION: forcing a failure. [ 790.901091][T14693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.921932][T14695] device macsec0 entered promiscuous mode [ 790.928597][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 790.957699][T14693] CPU: 0 PID: 14693 Comm: syz.1.3431 Not tainted syzkaller #0 [ 790.965210][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 790.975280][T14693] Call Trace: [ 790.978566][T14693] [ 790.981510][T14693] dump_stack_lvl+0x188/0x24e [ 790.986214][T14693] ? show_regs_print_info+0x12/0x12 [ 790.991433][T14693] ? load_image+0x400/0x400 [ 790.995954][T14693] ? __lock_acquire+0x7d10/0x7d10 [ 791.001000][T14693] ? __rcu_read_unlock+0x78/0xd0 [ 791.005954][T14693] should_fail_ex+0x399/0x4d0 [ 791.010648][T14693] _copy_to_user+0x2c/0x130 [ 791.015168][T14693] bpf_test_finish+0x266/0x600 [ 791.019953][T14693] ? convert___skb_to_skb+0x580/0x580 [ 791.025346][T14693] ? convert_skb_to___skb+0x420/0x420 [ 791.030733][T14693] ? __build_skb+0x257/0x3c0 [ 791.035353][T14693] bpf_prog_test_run_skb+0xc99/0x12a0 [ 791.040757][T14693] ? cpu_online+0xa0/0xa0 [ 791.045099][T14693] bpf_prog_test_run+0x31e/0x390 [ 791.050056][T14693] __sys_bpf+0x62b/0x780 [ 791.054337][T14693] ? bpf_link_show_fdinfo+0x380/0x380 [ 791.059758][T14693] ? lock_chain_count+0x20/0x20 [ 791.064643][T14693] __x64_sys_bpf+0x78/0x90 [ 791.069082][T14693] do_syscall_64+0x4c/0xa0 [ 791.073526][T14693] ? clear_bhb_loop+0x60/0xb0 [ 791.078218][T14693] ? clear_bhb_loop+0x60/0xb0 [ 791.082909][T14693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.088818][T14693] RIP: 0033:0x7fd80e39c819 [ 791.093255][T14693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.112877][T14693] RSP: 002b:00007fd80f1c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.121316][T14693] RAX: ffffffffffffffda RBX: 00007fd80e615fa0 RCX: 00007fd80e39c819 [ 791.129303][T14693] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 791.137285][T14693] RBP: 00007fd80f1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 791.145272][T14693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.153262][T14693] R13: 00007fd80e616038 R14: 00007fd80e615fa0 R15: 00007ffd1f836028 [ 791.161265][T14693] [ 791.204964][T14696] device veth1_macvtap left promiscuous mode [ 791.677650][T14703] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3433'. [ 791.753060][T14673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3423'. [ 793.314483][T14728] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 793.354614][T14728] syzkaller0: linktype set to 825 [ 794.154985][T14742] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3450'. [ 794.192845][T14742] bridge_slave_1: default FDB implementation only supports local addresses [ 795.154277][T14759] netlink: 'syz.2.3458': attribute type 3 has an invalid length. [ 795.235511][T14759] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3458'. [ 795.864659][T14769] netlink: 'syz.2.3460': attribute type 10 has an invalid length. [ 796.992530][T14776] netlink: 'syz.1.3463': attribute type 3 has an invalid length. [ 797.167700][T14776] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3463'. [ 801.076814][T14848] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3485'. [ 801.336203][T14866] netlink: 'syz.1.3490': attribute type 4 has an invalid length. [ 801.377445][T14861] netlink: 'syz.2.3489': attribute type 3 has an invalid length. [ 801.417071][T14861] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3489'. [ 802.979287][T14902] netlink: 'syz.4.3502': attribute type 10 has an invalid length. [ 803.194569][T14906] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3504'. [ 803.434131][T14902] team0 (unregistering): Port device team_slave_0 removed [ 803.623777][T14902] team0 (unregistering): Port device team_slave_1 removed [ 803.848952][T14907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3505'. [ 804.620521][T14945] netlink: 'syz.2.3520': attribute type 3 has an invalid length. [ 804.661758][T14945] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3520'. [ 805.157544][T14957] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3524'. [ 806.317687][T14987] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.471632][T14995] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 806.738992][T15006] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3540'. [ 807.138578][T15015] netlink: 'syz.2.3543': attribute type 10 has an invalid length. [ 807.285630][T15023] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3542'. [ 807.367069][T15023] netlink: zone id is out of range [ 807.410385][T15023] netlink: zone id is out of range [ 807.458882][T15023] netlink: zone id is out of range [ 807.517700][T15023] netlink: zone id is out of range [ 807.560473][T15023] netlink: zone id is out of range [ 807.613196][T15023] netlink: zone id is out of range [ 807.639636][T15023] netlink: zone id is out of range [ 807.669005][T15023] netlink: zone id is out of range [ 807.686198][T15023] netlink: zone id is out of range [ 808.082424][T15048] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3555'. [ 808.147684][T15049] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3553'. [ 808.199093][T15053] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3553'. [ 808.413284][T15044] netlink: 'syz.1.3553': attribute type 10 has an invalid length. [ 808.525291][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.531766][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.132065][T15086] netlink: 'syz.1.3568': attribute type 10 has an invalid length. [ 809.211582][T15089] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3569'. [ 809.451687][T15095] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 809.459485][T15095] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3572'. [ 809.529087][T15095] Ÿë: port 1(gretap0) entered blocking state [ 809.536889][T15095] Ÿë: port 1(gretap0) entered disabled state [ 809.547919][T15095] device gretap0 entered promiscuous mode [ 809.559215][T15099] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3573'. [ 809.611414][T15095] Ÿë: port 2(veth0_to_team) entered blocking state [ 809.618158][T15095] Ÿë: port 2(veth0_to_team) entered disabled state [ 809.676715][T15095] device veth0_to_team entered promiscuous mode [ 810.072235][T15114] sctp: [Deprecated]: syz.1.3580 (pid 15114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.072235][T15114] Use struct sctp_sack_info instead [ 810.409775][T15121] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3583'. [ 810.595538][T15125] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 810.694826][T15125] device syzkaller0 entered promiscuous mode [ 810.909982][T15136] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3589'. [ 813.368955][T15149] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3593'. [ 813.378090][T15156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3596'. [ 813.554028][T15174] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3601'. [ 813.637612][T15176] netlink: 'syz.1.3601': attribute type 10 has an invalid length. [ 813.709930][T15176] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.717230][T15176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.725639][T15176] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.732941][T15176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.774797][T15176] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 814.782475][T15201] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3611'. [ 815.357096][ T48] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 816.555723][T15247] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3629'. [ 817.562750][T15273] device veth1_macvtap left promiscuous mode [ 818.047875][T15293] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3645'. [ 818.272480][T15296] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3646'. [ 819.092984][T15316] netlink: 'syz.4.3655': attribute type 3 has an invalid length. [ 819.111289][T15316] netlink: 'syz.4.3655': attribute type 1 has an invalid length. [ 819.509361][T15339] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3662'. [ 819.936195][T15345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3667'. [ 820.281176][T15349] device pim6reg1 entered promiscuous mode [ 820.342206][T15359] netlink: 'syz.3.3669': attribute type 29 has an invalid length. [ 820.447391][ T48] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 820.448167][T15359] netlink: 'syz.3.3669': attribute type 3 has an invalid length. [ 820.468331][T15359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3669'. [ 820.866690][T15371] netlink: 'syz.2.3675': attribute type 10 has an invalid length. [ 820.989037][T15373] netlink: 'syz.0.3677': attribute type 3 has an invalid length. [ 821.065082][T15373] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.3677'. [ 821.160562][T15385] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 821.369190][T15385] netlink: 'syz.0.3677': attribute type 3 has an invalid length. [ 821.377197][T15385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3677'. [ 821.585673][T15393] netlink: 'syz.1.3684': attribute type 3 has an invalid length. [ 821.604106][T15393] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3684'. [ 821.686237][T15396] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3685'. [ 823.049260][T15436] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3698'. [ 823.089377][T15439] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3699'. [ 823.349973][T15443] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3700'. [ 824.012069][T15457] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3707'. [ 824.850497][T15479] netlink: 'syz.3.3714': attribute type 3 has an invalid length. [ 825.045566][T15487] device wlan1 entered promiscuous mode [ 825.060879][T15486] __nla_validate_parse: 1 callbacks suppressed [ 825.060897][T15486] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3715'. [ 825.234734][T15493] syz.4.3716 (15493) used obsolete PPPIOCDETACH ioctl [ 825.877462][ T48] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 826.882583][T15529] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3730'. [ 827.044664][T15531] device wlan1 entered promiscuous mode [ 828.614944][T15565] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3744'. [ 828.832519][T15572] device wlan1 entered promiscuous mode [ 829.909923][T15604] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3756'. [ 831.075997][T15631] netlink: 'syz.3.3768': attribute type 29 has an invalid length. [ 831.114694][T15631] netlink: 'syz.3.3768': attribute type 29 has an invalid length. [ 831.174442][T15629] netlink: 'syz.3.3768': attribute type 29 has an invalid length. [ 831.668448][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 831.722296][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'. [ 831.828990][T15646] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3773'. [ 831.905983][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'. [ 832.043101][T15646] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3773'. [ 832.154154][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'. [ 832.210381][T15646] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3773'. [ 833.685902][T15689] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3792'. [ 834.572705][T15706] netlink: 'syz.0.3797': attribute type 1 has an invalid length. [ 834.616172][T15706] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3797'. [ 834.670259][T15709] netlink: 'syz.1.3808': attribute type 29 has an invalid length. [ 834.781695][T15709] netlink: 'syz.1.3808': attribute type 29 has an invalid length. [ 835.081046][T15708] netlink: 'syz.1.3808': attribute type 29 has an invalid length. [ 836.676587][T15731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3806'. [ 836.700834][T15734] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3807'. [ 836.979449][T15736] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3809'. [ 837.579519][T15750] netlink: 'syz.0.3815': attribute type 10 has an invalid length. [ 837.619651][T15751] netlink: 'syz.4.3814': attribute type 29 has an invalid length. [ 837.655395][T15751] netlink: 'syz.4.3814': attribute type 29 has an invalid length. [ 837.778721][T15748] netlink: 'syz.4.3814': attribute type 29 has an invalid length. [ 838.129663][T15763] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3820'. [ 838.233302][T15768] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3821'. [ 839.470007][T15803] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3834'. [ 839.763722][T15813] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3838'. [ 841.332113][ T4308] Bluetooth: hci1: command 0x0406 tx timeout [ 841.449605][T15843] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3852'. [ 841.645192][T15844] device syzkaller0 entered promiscuous mode [ 842.375837][T15880] netlink: 'syz.3.3864': attribute type 29 has an invalid length. [ 842.411820][T15880] netlink: 'syz.3.3864': attribute type 3 has an invalid length. [ 842.475430][T15880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3864'. [ 842.568124][T15884] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3868'. [ 843.352752][T15905] sctp: [Deprecated]: syz.3.3874 (pid 15905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.352752][T15905] Use struct sctp_sack_info instead [ 846.323024][T15898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3873'. [ 846.544612][T15948] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3887'. [ 847.696005][T15967] netlink: 'syz.4.3897': attribute type 21 has an invalid length. [ 847.929071][T15976] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3901'. [ 849.130896][T15995] netlink: 'syz.1.3909': attribute type 10 has an invalid length. [ 851.291819][T16056] netlink: 'syz.1.3932': attribute type 28 has an invalid length. [ 851.317912][T16056] netlink: 'syz.1.3932': attribute type 29 has an invalid length. [ 851.353693][T16056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3932'. [ 851.561536][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 851.721846][T16075] netlink: 'syz.0.3938': attribute type 3 has an invalid length. [ 851.740015][T16075] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3938'. [ 852.002933][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.265417][T16092] netlink: 'syz.3.3945': attribute type 29 has an invalid length. [ 852.331498][T16092] netlink: 'syz.3.3945': attribute type 3 has an invalid length. [ 852.374076][T16094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3945'. [ 852.375074][T16092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3945'. [ 852.518615][T16097] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3946'. [ 853.445168][T16125] FAULT_INJECTION: forcing a failure. [ 853.445168][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.505736][T16125] CPU: 1 PID: 16125 Comm: syz.3.3957 Not tainted syzkaller #0 [ 853.513278][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 853.523376][T16125] Call Trace: [ 853.526683][T16125] [ 853.529650][T16125] dump_stack_lvl+0x188/0x24e [ 853.534386][T16125] ? show_regs_print_info+0x12/0x12 [ 853.539633][T16125] ? load_image+0x400/0x400 [ 853.544182][T16125] ? __lock_acquire+0x7d10/0x7d10 [ 853.549262][T16125] should_fail_ex+0x399/0x4d0 [ 853.553987][T16125] _copy_from_user+0x2c/0x170 [ 853.558713][T16125] copy_from_sockptr+0x69/0x80 [ 853.563529][T16125] packet_setsockopt+0xaad/0x1390 [ 853.568596][T16125] ? packet_ioctl+0x240/0x240 [ 853.573307][T16125] ? __fget_files+0x28/0x4b0 [ 853.577963][T16125] ? aa_sk_perm+0x81f/0x950 [ 853.582532][T16125] ? aa_af_perm+0x340/0x340 [ 853.587069][T16125] ? __fget_files+0x43d/0x4b0 [ 853.591798][T16125] ? aa_sock_opt_perm+0x74/0x100 [ 853.596779][T16125] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 853.602362][T16125] ? security_socket_setsockopt+0x7a/0xa0 [ 853.608116][T16125] ? packet_ioctl+0x240/0x240 [ 853.612833][T16125] __sys_setsockopt+0x2bf/0x3d0 [ 853.617739][T16125] __x64_sys_setsockopt+0xb1/0xc0 [ 853.622817][T16125] do_syscall_64+0x4c/0xa0 [ 853.627277][T16125] ? clear_bhb_loop+0x60/0xb0 [ 853.631996][T16125] ? clear_bhb_loop+0x60/0xb0 [ 853.636726][T16125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.642654][T16125] RIP: 0033:0x7fe20e39c819 [ 853.647108][T16125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.666753][T16125] RSP: 002b:00007fe20f1cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 853.675214][T16125] RAX: ffffffffffffffda RBX: 00007fe20e615fa0 RCX: 00007fe20e39c819 [ 853.683220][T16125] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 853.691229][T16125] RBP: 00007fe20f1cf090 R08: 0000000000000004 R09: 0000000000000000 [ 853.699234][T16125] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 853.707237][T16125] R13: 00007fe20e616038 R14: 00007fe20e615fa0 R15: 00007ffeb0d1c618 [ 853.715295][T16125] [ 855.807598][T16185] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3979'. [ 857.140791][T16218] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3992'. [ 858.222988][T16246] netlink: 'syz.1.4001': attribute type 3 has an invalid length. [ 858.286005][T16246] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4001'. [ 858.915949][T16261] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4007'. [ 862.258058][T16326] netlink: 'syz.4.4031': attribute type 10 has an invalid length. [ 863.752186][T16372] Ÿë: port 1(gretap0) entered blocking state [ 863.762187][T16372] Ÿë: port 1(gretap0) entered disabled state [ 863.845277][T16372] device gretap0 entered promiscuous mode [ 863.905437][T16367] Ÿë: port 2(veth0_to_team) entered blocking state [ 863.915375][T16367] Ÿë: port 2(veth0_to_team) entered disabled state [ 863.940172][T16367] device veth0_to_team entered promiscuous mode [ 865.628199][T16437] netlink: 'syz.3.4071': attribute type 3 has an invalid length. [ 865.676701][T16437] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4071'. [ 865.798930][T16443] netlink: 'syz.0.4074': attribute type 29 has an invalid length. [ 865.811699][T16443] netlink: 'syz.0.4074': attribute type 29 has an invalid length. [ 865.861114][T16443] netlink: 'syz.0.4074': attribute type 29 has an invalid length. [ 866.931265][ T4308] Bluetooth: hci2: command 0x0406 tx timeout [ 867.211694][T16484] FAULT_INJECTION: forcing a failure. [ 867.211694][T16484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.241941][T16484] CPU: 1 PID: 16484 Comm: syz.0.4089 Not tainted syzkaller #0 [ 867.249467][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 867.259537][T16484] Call Trace: [ 867.262827][T16484] [ 867.265761][T16484] dump_stack_lvl+0x188/0x24e [ 867.270461][T16484] ? show_regs_print_info+0x12/0x12 [ 867.275706][T16484] ? load_image+0x400/0x400 [ 867.280585][T16484] ? __lock_acquire+0x7d10/0x7d10 [ 867.285635][T16484] ? snprintf+0xe5/0x140 [ 867.289913][T16484] should_fail_ex+0x399/0x4d0 [ 867.294620][T16484] _copy_to_user+0x2c/0x130 [ 867.299154][T16484] simple_read_from_buffer+0xe3/0x150 [ 867.304560][T16484] proc_fail_nth_read+0x1a6/0x220 [ 867.309603][T16484] ? proc_fault_inject_write+0x310/0x310 [ 867.315263][T16484] ? fsnotify_perm+0x248/0x550 [ 867.320049][T16484] ? proc_fault_inject_write+0x310/0x310 [ 867.325699][T16484] vfs_read+0x2de/0xa00 [ 867.329887][T16484] ? kernel_read+0x1e0/0x1e0 [ 867.334519][T16484] ? __fget_files+0x28/0x4b0 [ 867.339136][T16484] ? __fget_files+0x28/0x4b0 [ 867.343741][T16484] ? __fget_files+0x43d/0x4b0 [ 867.348450][T16484] ? __fdget_pos+0x2ae/0x360 [ 867.353052][T16484] ? ksys_read+0x71/0x250 [ 867.357399][T16484] ksys_read+0x14c/0x250 [ 867.361661][T16484] ? vfs_write+0xa30/0xa30 [ 867.366186][T16484] ? lockdep_hardirqs_on+0x94/0x140 [ 867.371400][T16484] do_syscall_64+0x4c/0xa0 [ 867.375822][T16484] ? clear_bhb_loop+0x60/0xb0 [ 867.380508][T16484] ? clear_bhb_loop+0x60/0xb0 [ 867.385199][T16484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.391119][T16484] RIP: 0033:0x7ff304d5d04e [ 867.395544][T16484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 867.415169][T16484] RSP: 002b:00007ff305d28fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 867.423597][T16484] RAX: ffffffffffffffda RBX: 00007ff305d296c0 RCX: 00007ff304d5d04e [ 867.431582][T16484] RDX: 000000000000000f RSI: 00007ff305d290a0 RDI: 0000000000000006 [ 867.439568][T16484] RBP: 00007ff305d29090 R08: 0000000000000000 R09: 0000000000000000 [ 867.447543][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.455522][T16484] R13: 00007ff305016038 R14: 00007ff305015fa0 R15: 00007ffefcdb7d98 [ 867.463536][T16484] [ 868.481482][T16515] Ÿë: port 1(gretap0) entered blocking state [ 868.487774][T16515] Ÿë: port 1(gretap0) entered disabled state [ 868.584171][T16515] device gretap0 entered promiscuous mode [ 868.647468][T16512] Ÿë: port 2(veth0_to_team) entered blocking state [ 868.691447][T16512] Ÿë: port 2(veth0_to_team) entered disabled state [ 868.765150][T16512] device veth0_to_team entered promiscuous mode [ 869.494708][T16551] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4115'. [ 869.728212][T16559] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4119'. [ 869.976810][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.983541][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.686814][T16583] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4131'. [ 870.839643][T16590] netlink: 'syz.0.4130': attribute type 2 has an invalid length. [ 870.913699][T16590] device 0 entered promiscuous mode [ 870.943916][T16590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4130'. [ 871.608958][T16608] netlink: 'syz.4.4140': attribute type 3 has an invalid length. [ 871.710377][T16608] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4140'. [ 872.259965][T16626] netlink: 'syz.3.4147': attribute type 10 has an invalid length. [ 872.289498][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.297079][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.500798][T16634] IPv6: Can't replace route, no match found [ 872.610902][T16639] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4151'. [ 872.916250][T16650] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4154'. [ 873.100514][T16658] netlink: 'syz.4.4154': attribute type 4 has an invalid length. [ 873.115715][T16658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4154'. [ 873.275751][T16661] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4157'. [ 873.538226][T16675] netlink: 'syz.1.4162': attribute type 2 has an invalid length. [ 873.591562][T16675] netlink: 'syz.1.4162': attribute type 1 has an invalid length. [ 873.619900][T16675] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.4162'. [ 873.700037][T16679] netlink: 'syz.0.4164': attribute type 10 has an invalid length. [ 874.176314][T16691] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.4169'. [ 874.540896][T16706] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4175'. [ 874.603683][T16702] netlink: 'syz.0.4174': attribute type 10 has an invalid length. [ 875.041754][T16719] tap0: tun_chr_ioctl cmd 2147767517 [ 875.064074][T16717] FAULT_INJECTION: forcing a failure. [ 875.064074][T16717] name failslab, interval 1, probability 0, space 0, times 0 [ 875.091248][T16717] CPU: 0 PID: 16717 Comm: syz.1.4178 Not tainted syzkaller #0 [ 875.098765][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 875.108839][T16717] Call Trace: [ 875.112138][T16717] [ 875.115089][T16717] dump_stack_lvl+0x188/0x24e [ 875.119801][T16717] ? show_regs_print_info+0x12/0x12 [ 875.125021][T16717] ? load_image+0x400/0x400 [ 875.129540][T16717] ? __lock_acquire+0x7d10/0x7d10 [ 875.134590][T16717] should_fail_ex+0x399/0x4d0 [ 875.139292][T16717] should_failslab+0x5/0x20 [ 875.143815][T16717] slab_pre_alloc_hook+0x59/0x310 [ 875.148860][T16717] ? verify_lock_unused+0x140/0x140 [ 875.154085][T16717] ? bpf_test_init+0x9f/0x140 [ 875.158789][T16717] __kmem_cache_alloc_node+0x4f/0x260 [ 875.164182][T16717] ? bpf_test_init+0x9f/0x140 [ 875.168865][T16717] __kmalloc+0xa0/0x240 [ 875.173027][T16717] bpf_test_init+0x9f/0x140 [ 875.177536][T16717] bpf_prog_test_run_xdp+0x484/0xf10 [ 875.182835][T16717] ? dev_put+0x80/0x80 [ 875.186912][T16717] ? dev_put+0x80/0x80 [ 875.190980][T16717] bpf_prog_test_run+0x31e/0x390 [ 875.195921][T16717] __sys_bpf+0x62b/0x780 [ 875.200163][T16717] ? bpf_link_show_fdinfo+0x380/0x380 [ 875.205544][T16717] ? lock_chain_count+0x20/0x20 [ 875.210400][T16717] __x64_sys_bpf+0x78/0x90 [ 875.214813][T16717] do_syscall_64+0x4c/0xa0 [ 875.219225][T16717] ? clear_bhb_loop+0x60/0xb0 [ 875.223899][T16717] ? clear_bhb_loop+0x60/0xb0 [ 875.228573][T16717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.234465][T16717] RIP: 0033:0x7fd80e39c819 [ 875.238879][T16717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.258482][T16717] RSP: 002b:00007fd80f1c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 875.266889][T16717] RAX: ffffffffffffffda RBX: 00007fd80e615fa0 RCX: 00007fd80e39c819 [ 875.274855][T16717] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 875.282818][T16717] RBP: 00007fd80f1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 875.290784][T16717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.298751][T16717] R13: 00007fd80e616038 R14: 00007fd80e615fa0 R15: 00007ffd1f836028 [ 875.306730][T16717] [ 875.557318][T16719] netlink: 'syz.0.4179': attribute type 1 has an invalid length. [ 875.612536][T16719] tap0: tun_chr_ioctl cmd 1074812117 [ 876.169366][T16740] __nla_validate_parse: 1 callbacks suppressed [ 876.169387][T16740] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4184'. [ 876.278099][T16736] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4184'. [ 876.748509][T16754] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.4188'. [ 876.825967][T16754] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4188'. [ 877.007345][T16754] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 877.325468][T16764] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4191'. [ 877.446553][T16749] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.4188'. [ 878.865292][T16807] netlink: 'syz.0.4209': attribute type 3 has an invalid length. [ 878.935700][T16807] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4209'. [ 879.786431][T16823] netlink: 'syz.3.4215': attribute type 3 has an invalid length. [ 879.835233][T16827] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4217'. [ 879.845706][T16823] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4215'. [ 879.952477][T16830] netlink: 'syz.2.4218': attribute type 17 has an invalid length. [ 880.010894][T16830] netlink: 'syz.2.4218': attribute type 16 has an invalid length. [ 880.070940][T16830] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4218'. [ 880.798666][T16849] netlink: 'syz.4.4224': attribute type 10 has an invalid length. [ 880.912448][T16849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.953070][T16849] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 881.044788][T16860] netlink: 'syz.0.4228': attribute type 3 has an invalid length. [ 881.471681][T16866] __nla_validate_parse: 1 callbacks suppressed [ 881.471699][T16866] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4239'. [ 881.528285][T16873] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4232'. [ 881.955170][T16884] netlink: 'syz.2.4238': attribute type 29 has an invalid length. [ 881.983940][T16884] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 882.029555][T16884] device hsr0 entered promiscuous mode [ 882.126478][T16884] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 882.149919][T16884] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 882.161917][T16884] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 882.189270][T16884] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 882.221541][T16886] netlink: 'syz.1.4236': attribute type 10 has an invalid length. [ 882.281034][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 882.836673][T16919] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4249'. [ 883.177253][T16925] tap0: tun_chr_ioctl cmd 2147767517 [ 883.603671][T16931] tap0: tun_chr_ioctl cmd 1074812117 [ 883.651990][T16930] netlink: 'syz.4.4250': attribute type 1 has an invalid length. [ 883.903638][T16930] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4250'. [ 885.040355][T16969] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4266'. [ 885.412879][T16979] syz.2.4268[16979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 885.412977][T16979] syz.2.4268[16979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 885.938661][T16995] netlink: 'syz.3.4274': attribute type 29 has an invalid length. [ 886.027100][T16995] netlink: 'syz.3.4274': attribute type 29 has an invalid length. [ 886.087375][T16998] netlink: 'syz.3.4274': attribute type 29 has an invalid length. [ 886.133162][T17001] netlink: 'syz.3.4274': attribute type 29 has an invalid length. [ 886.247372][T17003] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4277'. [ 887.054874][T17013] pimreg0: tun_chr_ioctl cmd 35111 [ 889.902107][T17060] netlink: 'syz.1.4299': attribute type 29 has an invalid length. [ 889.939509][T17060] netlink: 'syz.1.4299': attribute type 3 has an invalid length. [ 889.971244][T17060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4299'. [ 891.438016][T17080] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4310'. [ 891.939003][T17107] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4312'. [ 893.624048][T17146] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4324'. [ 893.793346][T17155] netlink: 'syz.2.4329': attribute type 2 has an invalid length. [ 893.811123][T17155] netlink: 175020 bytes leftover after parsing attributes in process `syz.2.4329'. [ 893.948085][T17163] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4327'. [ 894.719600][T17174] netlink: 'syz.1.4333': attribute type 21 has an invalid length. [ 896.053702][T17208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4344'. [ 896.635727][T17226] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4352'. [ 897.345953][T17248] FAULT_INJECTION: forcing a failure. [ 897.345953][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 897.391102][T17248] CPU: 1 PID: 17248 Comm: syz.3.4360 Not tainted syzkaller #0 [ 897.398622][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 897.408700][T17248] Call Trace: [ 897.411993][T17248] [ 897.414937][T17248] dump_stack_lvl+0x188/0x24e [ 897.419640][T17248] ? show_regs_print_info+0x12/0x12 [ 897.424858][T17248] ? load_image+0x400/0x400 [ 897.429384][T17248] ? __might_sleep+0xd0/0xd0 [ 897.433983][T17248] ? __lock_acquire+0x7d10/0x7d10 [ 897.439027][T17248] should_fail_ex+0x399/0x4d0 [ 897.443723][T17248] should_failslab+0x5/0x20 [ 897.448238][T17248] slab_pre_alloc_hook+0x59/0x310 [ 897.453284][T17248] ? tomoyo_encode+0x27e/0x540 [ 897.458071][T17248] __kmem_cache_alloc_node+0x4f/0x260 [ 897.463470][T17248] ? tomoyo_encode+0x27e/0x540 [ 897.468255][T17248] __kmalloc+0xa0/0x240 [ 897.472438][T17248] tomoyo_encode+0x27e/0x540 [ 897.477060][T17248] tomoyo_realpath_from_path+0x58e/0x5d0 [ 897.482717][T17248] ? tomoyo_path_number_perm+0x205/0x650 [ 897.488370][T17248] tomoyo_path_number_perm+0x22f/0x650 [ 897.493848][T17248] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 897.500000][T17248] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 897.505471][T17248] ? rcu_is_watching+0x63/0xa0 [ 897.510262][T17248] ? __fget_files+0x28/0x4b0 [ 897.514855][T17248] ? __fget_files+0x28/0x4b0 [ 897.519454][T17248] security_file_ioctl+0x6c/0xa0 [ 897.524395][T17248] __se_sys_ioctl+0x48/0x170 [ 897.528985][T17248] do_syscall_64+0x4c/0xa0 [ 897.533402][T17248] ? clear_bhb_loop+0x60/0xb0 [ 897.538083][T17248] ? clear_bhb_loop+0x60/0xb0 [ 897.542757][T17248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.548647][T17248] RIP: 0033:0x7fe20e39c819 [ 897.553058][T17248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.572662][T17248] RSP: 002b:00007fe20f1cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.581077][T17248] RAX: ffffffffffffffda RBX: 00007fe20e615fa0 RCX: 00007fe20e39c819 [ 897.589041][T17248] RDX: 0000200000000200 RSI: 00000000000089e1 RDI: 000000000000000b [ 897.597004][T17248] RBP: 00007fe20f1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 897.604971][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.612939][T17248] R13: 00007fe20e616038 R14: 00007fe20e615fa0 R15: 00007ffeb0d1c618 [ 897.620919][T17248] [ 897.651106][ T4308] Bluetooth: hci4: command 0x0406 tx timeout [ 897.699409][T17248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 898.043005][T17264] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4366'. [ 898.155932][T17268] netlink: 'syz.4.4367': attribute type 21 has an invalid length. [ 898.999279][T17299] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4381'. [ 900.544316][T17341] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4395'. [ 902.946943][T17388] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4413'. [ 903.293595][T17396] tap0: tun_chr_ioctl cmd 1074025692 [ 903.311324][T17402] tap0: tun_chr_ioctl cmd 1074025677 [ 903.316825][T17402] tap0: linktype set to 805 [ 905.464204][T17450] FAULT_INJECTION: forcing a failure. [ 905.464204][T17450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.486970][T17450] CPU: 0 PID: 17450 Comm: syz.4.4437 Not tainted syzkaller #0 [ 905.494480][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 905.504550][T17450] Call Trace: [ 905.507837][T17450] [ 905.510775][T17450] dump_stack_lvl+0x188/0x24e [ 905.515476][T17450] ? show_regs_print_info+0x12/0x12 [ 905.520692][T17450] ? load_image+0x400/0x400 [ 905.525212][T17450] ? __lock_acquire+0x7d10/0x7d10 [ 905.530252][T17450] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 905.535906][T17450] should_fail_ex+0x399/0x4d0 [ 905.540606][T17450] _copy_from_user+0x2c/0x170 [ 905.545301][T17450] kcm_ioctl+0x2ff/0x1090 [ 905.549658][T17450] ? __kmem_cache_free+0xb6/0x1f0 [ 905.554698][T17450] ? tomoyo_path_number_perm+0x205/0x650 [ 905.560347][T17450] ? kcm_release+0x5b0/0x5b0 [ 905.564959][T17450] ? tomoyo_path_number_perm+0x5a4/0x650 [ 905.570607][T17450] ? tomoyo_path_number_perm+0x205/0x650 [ 905.576262][T17450] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 905.581747][T17450] sock_do_ioctl+0xfb/0x320 [ 905.586267][T17450] ? sock_show_fdinfo+0xb0/0xb0 [ 905.591145][T17450] sock_ioctl+0x4d2/0x710 [ 905.595490][T17450] ? sock_poll+0x410/0x410 [ 905.599930][T17450] ? bpf_lsm_file_ioctl+0x5/0x10 [ 905.604885][T17450] ? security_file_ioctl+0x7c/0xa0 [ 905.610011][T17450] ? sock_poll+0x410/0x410 [ 905.614436][T17450] __se_sys_ioctl+0xfa/0x170 [ 905.619045][T17450] do_syscall_64+0x4c/0xa0 [ 905.623489][T17450] ? clear_bhb_loop+0x60/0xb0 [ 905.628181][T17450] ? clear_bhb_loop+0x60/0xb0 [ 905.632882][T17450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.638789][T17450] RIP: 0033:0x7f6fdbb9c819 [ 905.643212][T17450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.662836][T17450] RSP: 002b:00007f6fdcaf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.671266][T17450] RAX: ffffffffffffffda RBX: 00007f6fdbe16090 RCX: 00007f6fdbb9c819 [ 905.679256][T17450] RDX: 0000200000000200 RSI: 00000000000089e1 RDI: 000000000000000b [ 905.687238][T17450] RBP: 00007f6fdcaf9090 R08: 0000000000000000 R09: 0000000000000000 [ 905.695220][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.703202][T17450] R13: 00007f6fdbe16128 R14: 00007f6fdbe16090 R15: 00007ffd216dd1f8 [ 905.711205][T17450] [ 908.452801][T17466] netlink: 'syz.2.4444': attribute type 10 has an invalid length. [ 908.667369][T17472] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 908.721533][T17472] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4446'. [ 909.621220][T17495] netlink: 'syz.3.4454': attribute type 10 has an invalid length. [ 909.723703][T17495] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.731265][T17495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.739432][T17495] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.747027][T17495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.788502][T17495] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 909.817851][T17496] netlink: 'syz.3.4454': attribute type 10 has an invalid length. [ 909.837705][T17496] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.845854][T17496] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.726628][T17557] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4476'. [ 912.220678][T17568] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4480'. [ 912.253491][T17570] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4482'. [ 912.788383][T17585] netlink: 'syz.3.4489': attribute type 2 has an invalid length. [ 912.832578][T17585] netlink: 'syz.3.4489': attribute type 1 has an invalid length. [ 912.840692][T17585] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4489'. [ 913.143188][T17594] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4491'. [ 913.726701][T17609] FAULT_INJECTION: forcing a failure. [ 913.726701][T17609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.755209][T17609] CPU: 0 PID: 17609 Comm: syz.4.4498 Not tainted syzkaller #0 [ 913.762734][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 913.772807][T17609] Call Trace: [ 913.776099][T17609] [ 913.779038][T17609] dump_stack_lvl+0x188/0x24e [ 913.783739][T17609] ? show_regs_print_info+0x12/0x12 [ 913.788960][T17609] ? load_image+0x400/0x400 [ 913.793484][T17609] ? __lock_acquire+0x7d10/0x7d10 [ 913.798541][T17609] should_fail_ex+0x399/0x4d0 [ 913.803236][T17609] _copy_to_user+0x2c/0x130 [ 913.807755][T17609] simple_read_from_buffer+0xe3/0x150 [ 913.813152][T17609] proc_fail_nth_read+0x1a6/0x220 [ 913.818191][T17609] ? proc_fault_inject_write+0x310/0x310 [ 913.823843][T17609] ? fsnotify_perm+0x248/0x550 [ 913.828624][T17609] ? proc_fault_inject_write+0x310/0x310 [ 913.834269][T17609] vfs_read+0x2de/0xa00 [ 913.838457][T17609] ? kernel_read+0x1e0/0x1e0 [ 913.843064][T17609] ? __fget_files+0x28/0x4b0 [ 913.847666][T17609] ? __fget_files+0x28/0x4b0 [ 913.852269][T17609] ? __fget_files+0x43d/0x4b0 [ 913.856973][T17609] ? __fdget_pos+0x2ae/0x360 [ 913.861597][T17609] ? ksys_read+0x71/0x250 [ 913.865955][T17609] ksys_read+0x14c/0x250 [ 913.870226][T17609] ? vfs_write+0xa30/0xa30 [ 913.874671][T17609] ? syscall_enter_from_user_mode+0x2a/0x80 [ 913.880590][T17609] do_syscall_64+0x4c/0xa0 [ 913.885026][T17609] ? clear_bhb_loop+0x60/0xb0 [ 913.889716][T17609] ? clear_bhb_loop+0x60/0xb0 [ 913.894413][T17609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.900320][T17609] RIP: 0033:0x7f6fdbb5d04e [ 913.904761][T17609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 913.924396][T17609] RSP: 002b:00007f6fdcb19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 913.932833][T17609] RAX: ffffffffffffffda RBX: 00007f6fdcb1a6c0 RCX: 00007f6fdbb5d04e [ 913.940817][T17609] RDX: 000000000000000f RSI: 00007f6fdcb1a0a0 RDI: 000000000000000e [ 913.948803][T17609] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 913.956786][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.964767][T17609] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 913.972774][T17609] [ 915.967422][T17656] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.4516'. [ 916.881135][T17670] netlink: 'syz.0.4519': attribute type 2 has an invalid length. [ 916.892527][T17670] netlink: 173672 bytes leftover after parsing attributes in process `syz.0.4519'. [ 917.122684][T17694] pimreg: tun_chr_ioctl cmd 2147767520 [ 917.337591][T17706] netlink: 'syz.3.4532': attribute type 1 has an invalid length. [ 917.427717][T17706] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.4532'. [ 917.983659][ T4308] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 919.045830][T17749] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4549'. [ 919.060349][T17749] bridge_slave_1: default FDB implementation only supports local addresses [ 919.986433][T17776] netlink: 'syz.3.4557': attribute type 29 has an invalid length. [ 920.095524][T17775] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4559'. [ 920.111877][T17776] netlink: 'syz.3.4557': attribute type 3 has an invalid length. [ 920.151301][T17776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4557'. [ 920.203654][T17782] netlink: 'syz.2.4560': attribute type 1 has an invalid length. [ 920.241205][T17782] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4560'. [ 920.679316][T17798] netlink: 'syz.0.4567': attribute type 10 has an invalid length. [ 920.701112][T17798] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4567'. [ 922.384823][T17844] netlink: 'syz.4.4585': attribute type 21 has an invalid length. [ 923.459858][T17873] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4598'. [ 923.845138][T17890] netlink: 'syz.1.4604': attribute type 3 has an invalid length. [ 923.857097][T17890] netlink: 'syz.1.4604': attribute type 1 has an invalid length. [ 924.379499][T17898] netlink: 'syz.2.4607': attribute type 3 has an invalid length. [ 924.426585][T17898] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4607'. [ 925.055686][T17920] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4615'. [ 925.514630][T17934] netlink: 'syz.2.4620': attribute type 4 has an invalid length. [ 925.572527][T17934] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4620'. [ 925.587891][T17935] netlink: 'syz.4.4618': attribute type 29 has an invalid length. [ 925.707269][T17935] netlink: 'syz.4.4618': attribute type 3 has an invalid length. [ 925.747552][T17935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4618'. [ 925.894878][T17948] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4624'. [ 926.119489][T17950] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4625'. [ 926.268733][T17957] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4628'. [ 926.718177][T17971] netlink: 'syz.0.4629': attribute type 2 has an invalid length. [ 926.742397][T17971] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4629'. [ 927.050834][T17977] netlink: 'syz.4.4636': attribute type 3 has an invalid length. [ 927.070569][T17977] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.4636'. [ 927.200396][T17981] netlink: 'syz.2.4638': attribute type 3 has an invalid length. [ 928.959565][T18038] __nla_validate_parse: 4 callbacks suppressed [ 928.959600][T18038] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4661'. [ 931.403499][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.409905][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.049444][T18117] netlink: 'syz.2.4686': attribute type 10 has an invalid length. [ 932.957264][T18133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4692'. [ 933.377275][T18149] netlink: 'syz.2.4692': attribute type 29 has an invalid length. [ 933.418145][T18149] netlink: 'syz.2.4692': attribute type 3 has an invalid length. [ 933.479188][T18149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4692'. [ 933.718489][T18161] netlink: 'syz.4.4704': attribute type 3 has an invalid length. [ 933.754345][T18161] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4704'. [ 934.664978][T18188] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4716'. [ 934.738861][T18190] netlink: 'syz.0.4717': attribute type 21 has an invalid length. [ 934.771498][T18191] netlink: 'syz.0.4717': attribute type 21 has an invalid length. [ 936.358397][T18235] netlink: 'syz.3.4732': attribute type 10 has an invalid length. [ 936.439084][T18235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.482859][T18235] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 938.351111][T18286] netlink: 'syz.4.4752': attribute type 10 has an invalid length. [ 940.760105][T18358] FAULT_INJECTION: forcing a failure. [ 940.760105][T18358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.791225][T18358] CPU: 0 PID: 18358 Comm: syz.4.4782 Not tainted syzkaller #0 [ 940.798746][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 940.808825][T18358] Call Trace: [ 940.812124][T18358] [ 940.815068][T18358] dump_stack_lvl+0x188/0x24e [ 940.819779][T18358] ? show_regs_print_info+0x12/0x12 [ 940.825008][T18358] ? load_image+0x400/0x400 [ 940.829542][T18358] ? __lock_acquire+0x7d10/0x7d10 [ 940.834604][T18358] should_fail_ex+0x399/0x4d0 [ 940.839306][T18358] _copy_from_user+0x2c/0x170 [ 940.844009][T18358] __sys_bpf+0x2ea/0x780 [ 940.848280][T18358] ? bpf_link_show_fdinfo+0x380/0x380 [ 940.853692][T18358] ? lock_chain_count+0x20/0x20 [ 940.858577][T18358] __x64_sys_bpf+0x78/0x90 [ 940.863026][T18358] do_syscall_64+0x4c/0xa0 [ 940.867470][T18358] ? clear_bhb_loop+0x60/0xb0 [ 940.872169][T18358] ? clear_bhb_loop+0x60/0xb0 [ 940.876876][T18358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.882794][T18358] RIP: 0033:0x7f6fdbb9c819 [ 940.887228][T18358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.906864][T18358] RSP: 002b:00007f6fdcb1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.915299][T18358] RAX: ffffffffffffffda RBX: 00007f6fdbe15fa0 RCX: 00007f6fdbb9c819 [ 940.923286][T18358] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f [ 940.931275][T18358] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 940.939274][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.947259][T18358] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 940.955259][T18358] [ 942.507753][T18393] netlink: 'syz.2.4794': attribute type 10 has an invalid length. [ 942.530053][T18396] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4795'. [ 943.950217][T18431] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4810'. [ 944.127887][T18435] netlink: 'syz.0.4811': attribute type 10 has an invalid length. [ 944.701240][T18447] netlink: 'syz.3.4817': attribute type 10 has an invalid length. [ 944.737318][T18447] bond0: (slave bridge0): Releasing backup interface [ 945.256905][T18465] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4823'. [ 946.614251][T18507] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4841'. [ 946.696829][T18512] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4843'. [ 948.325840][T18540] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4855'. [ 948.339608][T18544] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4856'. [ 949.117972][T18565] netlink: 'syz.1.4863': attribute type 1 has an invalid length. [ 950.787417][T18615] netlink: 'syz.4.4883': attribute type 10 has an invalid length. [ 950.816407][T18615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4883'. [ 950.837956][T18615] netlink: 'syz.4.4883': attribute type 10 has an invalid length. [ 950.847055][T18615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4883'. [ 950.886542][T18610] netlink: 'syz.4.4883': attribute type 10 has an invalid length. [ 950.898430][T18610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4883'. [ 950.987553][T18619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4886'. [ 952.623594][T18659] netlink: 'syz.0.4901': attribute type 12 has an invalid length. [ 952.668101][T18659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4901'. [ 952.735720][T18669] netlink: 'syz.4.4904': attribute type 3 has an invalid length. [ 952.755691][T18669] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4904'. [ 952.782891][T18659] netlink: 'syz.0.4901': attribute type 29 has an invalid length. [ 952.831941][T18659] netlink: 'syz.0.4901': attribute type 29 has an invalid length. [ 953.221644][T18681] delete_channel: no stack [ 953.226941][T18681] delete_channel: no stack [ 953.322424][T18686] netlink: 'syz.3.4911': attribute type 40 has an invalid length. [ 953.852395][T18699] netlink: 'syz.1.4918': attribute type 6 has an invalid length. [ 953.860367][T18699] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4918'. [ 954.266412][T18710] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4923'. [ 954.386979][T18713] netlink: 'syz.2.4924': attribute type 22 has an invalid length. [ 954.488815][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 954.899021][T18725] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4928'. [ 955.073451][T18727] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4930'. [ 956.942868][T18770] netlink: 'syz.2.4946': attribute type 10 has an invalid length. [ 956.989518][T18775] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4945'. [ 957.110732][T18777] netlink: 'syz.2.4948': attribute type 12 has an invalid length. [ 957.141503][T18777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4948'. [ 957.258370][T18782] netlink: 'syz.2.4948': attribute type 29 has an invalid length. [ 957.321317][T18782] netlink: 'syz.2.4948': attribute type 29 has an invalid length. [ 957.856187][T18807] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 957.893927][T18807] dvmrp1: linktype set to 768 [ 957.958365][T18813] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4960'. [ 959.092635][T18840] netlink: 'syz.3.4970': attribute type 1 has an invalid length. [ 959.252309][T18843] netlink: 'syz.0.4971': attribute type 3 has an invalid length. [ 959.338412][T18843] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4971'. [ 959.705559][T18857] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4975'. [ 959.929190][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 960.942626][T18892] netlink: 'syz.3.4988': attribute type 25 has an invalid length. [ 960.976284][T18892] netlink: 'syz.3.4988': attribute type 29 has an invalid length. [ 961.222876][T18901] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4992'. [ 962.161559][T18926] netlink: 'syz.3.5002': attribute type 10 has an invalid length. [ 962.237759][T18933] netlink: 'syz.4.5004': attribute type 28 has an invalid length. [ 962.270323][T18933] netlink: 'syz.4.5004': attribute type 29 has an invalid length. [ 962.308906][T18933] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5004'. [ 962.339049][T18939] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5006'. [ 962.395697][T18926] team0 (unregistering): Port device team_slave_0 removed [ 962.508212][T18926] team0 (unregistering): Port device team_slave_1 removed [ 962.594410][T18926] team0 (unregistering): Port device macvlan0 removed [ 964.187164][T18991] netlink: 'syz.4.5026': attribute type 3 has an invalid length. [ 964.195228][T18991] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5026'. [ 964.238745][T18994] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5027'. [ 964.274620][T18994] bridge_slave_1: default FDB implementation only supports local addresses [ 964.440344][T18997] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5029'. [ 964.527526][T19001] netlink: 'syz.2.5030': attribute type 3 has an invalid length. [ 964.571378][T19001] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5030'. [ 964.958923][T19022] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 964.960432][T19020] FAULT_INJECTION: forcing a failure. [ 964.960432][T19020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.983813][T19022] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5037'. [ 965.001307][T19020] CPU: 0 PID: 19020 Comm: syz.0.5036 Not tainted syzkaller #0 [ 965.008821][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 965.018896][T19020] Call Trace: [ 965.022187][T19020] [ 965.025128][T19020] dump_stack_lvl+0x188/0x24e [ 965.029832][T19020] ? show_regs_print_info+0x12/0x12 [ 965.035058][T19020] ? load_image+0x400/0x400 [ 965.039586][T19020] ? __lock_acquire+0x7d10/0x7d10 [ 965.044639][T19020] should_fail_ex+0x399/0x4d0 [ 965.049347][T19020] _copy_from_user+0x2c/0x170 [ 965.054047][T19020] __copy_msghdr+0x3b7/0x580 [ 965.058670][T19020] ___sys_sendmsg+0x210/0x360 [ 965.063383][T19020] ? __sys_sendmsg+0x290/0x290 [ 965.068195][T19020] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 965.073976][T19020] __se_sys_sendmsg+0x1bb/0x2a0 [ 965.078857][T19020] ? __x64_sys_sendmsg+0x80/0x80 [ 965.083838][T19020] ? syscall_enter_from_user_mode+0x2a/0x80 [ 965.089767][T19020] do_syscall_64+0x4c/0xa0 [ 965.094210][T19020] ? clear_bhb_loop+0x60/0xb0 [ 965.098913][T19020] ? clear_bhb_loop+0x60/0xb0 [ 965.103616][T19020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.109532][T19020] RIP: 0033:0x7ff304d9c819 [ 965.113963][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.133595][T19020] RSP: 002b:00007ff305d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.142032][T19020] RAX: ffffffffffffffda RBX: 00007ff305015fa0 RCX: 00007ff304d9c819 [ 965.150025][T19020] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 965.158018][T19020] RBP: 00007ff305d29090 R08: 0000000000000000 R09: 0000000000000000 [ 965.166004][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.173984][T19020] R13: 00007ff305016038 R14: 00007ff305015fa0 R15: 00007ffefcdb7d98 [ 965.181972][T19020] [ 965.304968][T19026] device virt_wifi0 entered promiscuous mode [ 965.796202][T19041] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5044'. [ 967.279626][T19076] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.5057'. [ 967.556623][T19083] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5060'. [ 968.885349][T19110] netlink: 'syz.3.5070': attribute type 10 has an invalid length. [ 969.029494][T19118] netlink: 'syz.2.5072': attribute type 10 has an invalid length. [ 969.111370][T19119] delete_channel: no stack [ 970.020846][T19146] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5082'. [ 970.094215][T19150] netlink: 'syz.1.5083': attribute type 21 has an invalid length. [ 970.115070][T19150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5083'. [ 970.131482][T19150] netlink: 'syz.1.5083': attribute type 4 has an invalid length. [ 970.139569][T19150] netlink: 'syz.1.5083': attribute type 5 has an invalid length. [ 970.185720][T19150] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5083'. [ 970.278241][T19162] netlink: 'syz.0.5088': attribute type 3 has an invalid length. [ 970.323822][T19156] device syzkaller0 entered promiscuous mode [ 970.341099][T19162] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5088'. [ 970.389571][T19168] FAULT_INJECTION: forcing a failure. [ 970.389571][T19168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.458539][T19168] CPU: 1 PID: 19168 Comm: syz.4.5090 Not tainted syzkaller #0 [ 970.466064][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 970.476151][T19168] Call Trace: [ 970.479440][T19168] [ 970.482388][T19168] dump_stack_lvl+0x188/0x24e [ 970.487104][T19168] ? show_regs_print_info+0x12/0x12 [ 970.492328][T19168] ? load_image+0x400/0x400 [ 970.496858][T19168] ? __lock_acquire+0x7d10/0x7d10 [ 970.501909][T19168] ? lockdep_hardirqs_on+0x94/0x140 [ 970.507127][T19168] should_fail_ex+0x399/0x4d0 [ 970.511824][T19168] _copy_from_user+0x2c/0x170 [ 970.516526][T19168] iovec_from_user+0x143/0x360 [ 970.521314][T19168] __import_iovec+0x6d/0x500 [ 970.525925][T19168] ? __might_fault+0xc2/0x120 [ 970.530620][T19168] import_iovec+0x6f/0xa0 [ 970.534959][T19168] ___sys_sendmsg+0x252/0x360 [ 970.539650][T19168] ? __sys_sendmsg+0x290/0x290 [ 970.544433][T19168] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 970.550178][T19168] __se_sys_sendmsg+0x1bb/0x2a0 [ 970.555040][T19168] ? __x64_sys_sendmsg+0x80/0x80 [ 970.560000][T19168] ? syscall_enter_from_user_mode+0x2a/0x80 [ 970.565902][T19168] do_syscall_64+0x4c/0xa0 [ 970.570324][T19168] ? clear_bhb_loop+0x60/0xb0 [ 970.575009][T19168] ? clear_bhb_loop+0x60/0xb0 [ 970.579690][T19168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.585589][T19168] RIP: 0033:0x7f6fdbb9c819 [ 970.590001][T19168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.609610][T19168] RSP: 002b:00007f6fdcb1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.618028][T19168] RAX: ffffffffffffffda RBX: 00007f6fdbe15fa0 RCX: 00007f6fdbb9c819 [ 970.626008][T19168] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 970.633985][T19168] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 970.641954][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.649926][T19168] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 970.657913][T19168] [ 972.711237][T19189] device gretap0 entered promiscuous mode [ 972.993406][T19211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5104'. [ 973.435527][T19228] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5112'. [ 973.624727][T19232] netlink: 'syz.2.5114': attribute type 10 has an invalid length. [ 974.204423][T19248] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5120'. [ 974.323788][T19247] tipc: Started in network mode [ 974.336588][T19247] tipc: Node identity 9215a268, cluster identity 4711 [ 974.348771][T19247] tipc: Node number set to 2450891368 [ 974.549759][T19260] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5125'. [ 974.951155][T19274] netlink: 'syz.2.5133': attribute type 11 has an invalid length. [ 974.959219][T19274] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5133'. [ 975.697370][T19297] netlink: 'syz.0.5140': attribute type 3 has an invalid length. [ 975.741351][T19297] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5140'. [ 976.870169][T19337] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5153'. [ 977.249035][T19348] tipc: Started in network mode [ 977.281031][T19348] tipc: Node identity 9215a268, cluster identity 4711 [ 977.321274][T19348] tipc: Node number set to 2450891368 [ 977.504678][T19354] netlink: 'syz.0.5161': attribute type 29 has an invalid length. [ 977.582064][T19354] netlink: 'syz.0.5161': attribute type 29 has an invalid length. [ 977.640672][T19355] netlink: 'syz.0.5161': attribute type 29 has an invalid length. [ 978.888070][T19389] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5170'. [ 980.312103][T19429] netlink: 26 bytes leftover after parsing attributes in process `syz.2.5187'. [ 981.789955][T19468] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5203'. [ 981.817778][T19465] netlink: 'syz.0.5202': attribute type 3 has an invalid length. [ 981.953853][T19465] netlink: 'syz.0.5202': attribute type 1 has an invalid length. [ 982.234842][T19478] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5207'. [ 985.510545][T19511] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5216'. [ 986.678011][T19542] netlink: 'syz.0.5230': attribute type 10 has an invalid length. [ 986.852220][T19545] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5231'. [ 987.195132][T19559] net_ratelimit: 28 callbacks suppressed [ 987.195148][T19559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.354490][T19565] netlink: 'syz.1.5239': attribute type 10 has an invalid length. [ 987.465067][T19569] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 987.606879][T19569] netlink: 'syz.1.5242': attribute type 1 has an invalid length. [ 987.643246][T19569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5242'. [ 987.884231][T19583] netlink: 'syz.0.5244': attribute type 2 has an invalid length. [ 987.903984][T19583] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.5244'. [ 988.258695][T19595] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5248'. [ 988.345771][T19592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.380608][T19592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.691780][T19592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.699394][T19592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.110845][T19605] netlink: 'syz.4.5253': attribute type 22 has an invalid length. [ 989.151055][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5253'. [ 989.692768][T19616] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5257'. [ 989.768185][T19616] bridge_slave_1: default FDB implementation only supports local addresses [ 989.970085][T19630] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5263'. [ 990.099918][T19636] netlink: 'syz.3.5264': attribute type 3 has an invalid length. [ 990.122217][T19636] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5264'. [ 990.282307][T19642] netlink: 'syz.2.5265': attribute type 10 has an invalid length. [ 990.325495][T19642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5265'. [ 990.343194][T19642] device caif0 entered promiscuous mode [ 990.358137][T19642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 990.562594][T19654] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5268'. [ 992.845620][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.852162][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.146486][T19718] netlink: 26 bytes leftover after parsing attributes in process `syz.2.5294'. [ 995.719795][T19744] netlink: 'syz.4.5301': attribute type 4 has an invalid length. [ 995.862690][T19744] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5301'. [ 996.001076][T19748] netlink: 'syz.0.5305': attribute type 10 has an invalid length. [ 996.317828][T19760] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5310'. [ 996.357236][T19762] netlink: 'syz.3.5311': attribute type 10 has an invalid length. [ 996.442830][T19762] device hsr0 entered promiscuous mode [ 996.448784][T19762] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 996.889264][T19778] pimreg: tun_chr_ioctl cmd 1074025692 [ 997.055348][T19795] netlink: 'syz.3.5321': attribute type 2 has an invalid length. [ 997.063537][T19795] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.5321'. [ 997.447007][T19799] FAULT_INJECTION: forcing a failure. [ 997.447007][T19799] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 997.467475][T19799] CPU: 0 PID: 19799 Comm: syz.2.5324 Not tainted syzkaller #0 [ 997.474986][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 997.485053][T19799] Call Trace: [ 997.488346][T19799] [ 997.491289][T19799] dump_stack_lvl+0x188/0x24e [ 997.496033][T19799] ? show_regs_print_info+0x12/0x12 [ 997.501258][T19799] ? load_image+0x400/0x400 [ 997.505781][T19799] ? __lock_acquire+0x7d10/0x7d10 [ 997.510822][T19799] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 997.516830][T19799] should_fail_ex+0x399/0x4d0 [ 997.521531][T19799] prepare_alloc_pages+0x1e2/0x5f0 [ 997.526665][T19799] __alloc_pages+0x130/0x4f0 [ 997.531259][T19799] ? __alloc_skb+0x46b/0x7e0 [ 997.535868][T19799] ? zone_statistics+0x170/0x170 [ 997.540825][T19799] ? kasan_check_range+0x84/0x290 [ 997.545879][T19799] ? alloc_pages+0x4d8/0x740 [ 997.550491][T19799] alloc_skb_with_frags+0x20c/0x710 [ 997.555707][T19799] ? __lock_acquire+0x7d10/0x7d10 [ 997.560753][T19799] sock_alloc_send_pskb+0x87f/0x9a0 [ 997.565992][T19799] ? sock_kzfree_s+0x50/0x50 [ 997.570698][T19799] ? dev_get_by_index+0x1e/0x2d0 [ 997.575660][T19799] ? dev_get_by_index+0x1e/0x2d0 [ 997.580625][T19799] packet_sendmsg+0x32b0/0x4e60 [ 997.585488][T19799] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 997.591215][T19799] ? perf_trace_preemptirq_template+0x268/0x320 [ 997.597460][T19799] ? irqentry_enter+0x33/0x50 [ 997.602146][T19799] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 997.608135][T19799] ? lock_chain_count+0x20/0x20 [ 997.613012][T19799] ? packet_getsockopt+0x9a0/0x9a0 [ 997.618127][T19799] ? lockdep_hardirqs_on+0x94/0x140 [ 997.623341][T19799] ? packet_getsockopt+0x9a0/0x9a0 [ 997.628460][T19799] ____sys_sendmsg+0x5be/0x970 [ 997.633245][T19799] ? __sys_sendmsg_sock+0x30/0x30 [ 997.638268][T19799] ? __import_iovec+0x315/0x500 [ 997.643116][T19799] ? import_iovec+0x6f/0xa0 [ 997.647613][T19799] ___sys_sendmsg+0x2a2/0x360 [ 997.652295][T19799] ? __sys_sendmsg+0x290/0x290 [ 997.657091][T19799] __se_sys_sendmsg+0x1bb/0x2a0 [ 997.661954][T19799] ? __x64_sys_sendmsg+0x80/0x80 [ 997.666919][T19799] ? lockdep_hardirqs_on+0x94/0x140 [ 997.672138][T19799] do_syscall_64+0x4c/0xa0 [ 997.676557][T19799] ? clear_bhb_loop+0x60/0xb0 [ 997.681235][T19799] ? clear_bhb_loop+0x60/0xb0 [ 997.685912][T19799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.691806][T19799] RIP: 0033:0x7f2f41b9c819 [ 997.696220][T19799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.715911][T19799] RSP: 002b:00007f2f42a9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 997.724355][T19799] RAX: ffffffffffffffda RBX: 00007f2f41e15fa0 RCX: 00007f2f41b9c819 [ 997.732326][T19799] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 997.740309][T19799] RBP: 00007f2f42a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 997.748284][T19799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.756257][T19799] R13: 00007f2f41e16038 R14: 00007f2f41e15fa0 R15: 00007fff8fe0dc78 [ 997.764242][T19799] [ 998.473054][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1000.449538][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1000.998787][T19846] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1001.021658][T19846] syzkaller1: linktype set to 786 [ 1001.382252][T19871] netlink: 'syz.4.5354': attribute type 1 has an invalid length. [ 1001.439675][T19878] netlink: 'syz.3.5356': attribute type 10 has an invalid length. [ 1001.462572][T19871] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5354'. [ 1001.729172][T19883] netlink: 'syz.2.5359': attribute type 33 has an invalid length. [ 1001.784181][T19888] syz.2.5359[19888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1001.785621][T19883] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1002.007975][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5362'. [ 1002.021285][T19895] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5362'. [ 1002.178582][T19895] netlink: 'syz.4.5362': attribute type 3 has an invalid length. [ 1002.190843][T19895] netlink: 57912 bytes leftover after parsing attributes in process `syz.4.5362'. [ 1002.244335][T19905] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1002.314582][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5366'. [ 1002.865211][T19924] netlink: 'syz.2.5374': attribute type 3 has an invalid length. [ 1002.914740][T19924] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5374'. [ 1002.944536][T19928] FAULT_INJECTION: forcing a failure. [ 1002.944536][T19928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.021191][T19928] CPU: 0 PID: 19928 Comm: syz.4.5376 Not tainted syzkaller #0 [ 1003.028717][T19928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1003.038799][T19928] Call Trace: [ 1003.042098][T19928] [ 1003.045042][T19928] dump_stack_lvl+0x188/0x24e [ 1003.049757][T19928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.055941][T19928] ? show_regs_print_info+0x12/0x12 [ 1003.061179][T19928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.067372][T19928] should_fail_ex+0x399/0x4d0 [ 1003.072076][T19928] prepare_alloc_pages+0x1e2/0x5f0 [ 1003.077217][T19928] __alloc_pages+0x130/0x4f0 [ 1003.081834][T19928] ? __kmem_cache_alloc_node+0x140/0x260 [ 1003.087489][T19928] ? zone_statistics+0x170/0x170 [ 1003.092450][T19928] ? alloc_skb_with_frags+0xa7/0x710 [ 1003.097760][T19928] ? alloc_pages+0x4d8/0x740 [ 1003.102373][T19928] ? lockdep_hardirqs_on+0x94/0x140 [ 1003.107605][T19928] alloc_skb_with_frags+0x20c/0x710 [ 1003.112830][T19928] sock_alloc_send_pskb+0x87f/0x9a0 [ 1003.118046][T19928] ? sock_kzfree_s+0x50/0x50 [ 1003.122636][T19928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.128812][T19928] packet_sendmsg+0x32b0/0x4e60 [ 1003.133677][T19928] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1003.139417][T19928] ? perf_trace_preemptirq_template+0x268/0x320 [ 1003.145662][T19928] ? irqentry_enter+0x33/0x50 [ 1003.150342][T19928] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1003.156326][T19928] ? lock_chain_count+0x20/0x20 [ 1003.161178][T19928] ? rcu_is_watching+0x11/0xa0 [ 1003.165945][T19928] ? packet_getsockopt+0x9a0/0x9a0 [ 1003.171052][T19928] ? lockdep_hardirqs_on+0x94/0x140 [ 1003.176253][T19928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.182410][T19928] ? packet_getsockopt+0x9a0/0x9a0 [ 1003.187535][T19928] ? packet_getsockopt+0x9a0/0x9a0 [ 1003.192656][T19928] ____sys_sendmsg+0x5be/0x970 [ 1003.197435][T19928] ? __sys_sendmsg_sock+0x30/0x30 [ 1003.202471][T19928] ? __import_iovec+0x315/0x500 [ 1003.207329][T19928] ? import_iovec+0x6f/0xa0 [ 1003.211831][T19928] ___sys_sendmsg+0x2a2/0x360 [ 1003.216520][T19928] ? __sys_sendmsg+0x290/0x290 [ 1003.221324][T19928] __se_sys_sendmsg+0x1bb/0x2a0 [ 1003.226182][T19928] ? __x64_sys_sendmsg+0x80/0x80 [ 1003.231147][T19928] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1003.237041][T19928] do_syscall_64+0x4c/0xa0 [ 1003.241461][T19928] ? clear_bhb_loop+0x60/0xb0 [ 1003.246138][T19928] ? clear_bhb_loop+0x60/0xb0 [ 1003.250836][T19928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1003.256735][T19928] RIP: 0033:0x7f6fdbb9c819 [ 1003.261150][T19928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.280764][T19928] RSP: 002b:00007f6fdcb1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.289181][T19928] RAX: ffffffffffffffda RBX: 00007f6fdbe15fa0 RCX: 00007f6fdbb9c819 [ 1003.297149][T19928] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1003.305114][T19928] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.313081][T19928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.321068][T19928] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 1003.329059][T19928] [ 1003.747762][T19945] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5382'. [ 1004.978749][T19986] netlink: 'syz.1.5399': attribute type 10 has an invalid length. [ 1005.027891][T19986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.035244][T19986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.113233][T19986] bond0: (slave bridge0): Releasing backup interface [ 1005.707035][T20011] __nla_validate_parse: 2 callbacks suppressed [ 1005.707054][T20011] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5410'. [ 1005.761611][T20011] bridge_slave_1: default FDB implementation only supports local addresses [ 1005.922522][T20018] sock: sock_timestamping_bind_phc: sock not bind to device [ 1006.002775][T20020] FAULT_INJECTION: forcing a failure. [ 1006.002775][T20020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.047213][T20020] CPU: 0 PID: 20020 Comm: syz.0.5415 Not tainted syzkaller #0 [ 1006.054742][T20020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1006.064823][T20020] Call Trace: [ 1006.068126][T20020] [ 1006.071074][T20020] dump_stack_lvl+0x188/0x24e [ 1006.075790][T20020] ? show_regs_print_info+0x12/0x12 [ 1006.081040][T20020] ? load_image+0x400/0x400 [ 1006.085598][T20020] ? __lock_acquire+0x7d10/0x7d10 [ 1006.090674][T20020] should_fail_ex+0x399/0x4d0 [ 1006.095388][T20020] _copy_from_user+0x2c/0x170 [ 1006.100106][T20020] __sys_bpf+0x2ea/0x780 [ 1006.104429][T20020] ? bpf_link_show_fdinfo+0x380/0x380 [ 1006.109875][T20020] ? lock_chain_count+0x20/0x20 [ 1006.114872][T20020] __x64_sys_bpf+0x78/0x90 [ 1006.119331][T20020] do_syscall_64+0x4c/0xa0 [ 1006.123781][T20020] ? clear_bhb_loop+0x60/0xb0 [ 1006.128489][T20020] ? clear_bhb_loop+0x60/0xb0 [ 1006.133195][T20020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.139111][T20020] RIP: 0033:0x7ff304d9c819 [ 1006.143552][T20020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.163189][T20020] RSP: 002b:00007ff305d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.171634][T20020] RAX: ffffffffffffffda RBX: 00007ff305015fa0 RCX: 00007ff304d9c819 [ 1006.179627][T20020] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 1006.187631][T20020] RBP: 00007ff305d29090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.195633][T20020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.203634][T20020] R13: 00007ff305016038 R14: 00007ff305015fa0 R15: 00007ffefcdb7d98 [ 1006.211660][T20020] [ 1006.307207][T20026] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1006.553904][T20037] sctp: [Deprecated]: syz.4.5418 (pid 20037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1006.553904][T20037] Use struct sctp_sack_info instead [ 1007.596248][T20059] netlink: 'syz.4.5429': attribute type 10 has an invalid length. [ 1007.779086][T20064] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1008.425112][T20086] netlink: 'syz.1.5439': attribute type 3 has an invalid length. [ 1008.465544][T20086] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5439'. [ 1008.511020][T20088] FAULT_INJECTION: forcing a failure. [ 1008.511020][T20088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1008.546351][T20088] CPU: 0 PID: 20088 Comm: syz.2.5442 Not tainted syzkaller #0 [ 1008.553876][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1008.563950][T20088] Call Trace: [ 1008.567243][T20088] [ 1008.570188][T20088] dump_stack_lvl+0x188/0x24e [ 1008.574894][T20088] ? show_regs_print_info+0x12/0x12 [ 1008.580124][T20088] ? load_image+0x400/0x400 [ 1008.584653][T20088] ? __lock_acquire+0x7d10/0x7d10 [ 1008.589717][T20088] should_fail_ex+0x399/0x4d0 [ 1008.594427][T20088] prepare_alloc_pages+0x1e2/0x5f0 [ 1008.599570][T20088] __alloc_pages+0x130/0x4f0 [ 1008.604194][T20088] ? __kmem_cache_alloc_node+0x140/0x260 [ 1008.609851][T20088] ? zone_statistics+0x170/0x170 [ 1008.614812][T20088] ? alloc_skb_with_frags+0xa7/0x710 [ 1008.620126][T20088] ? alloc_pages+0x4d8/0x740 [ 1008.624745][T20088] alloc_skb_with_frags+0x20c/0x710 [ 1008.629974][T20088] sock_alloc_send_pskb+0x87f/0x9a0 [ 1008.635213][T20088] ? sock_kzfree_s+0x50/0x50 [ 1008.639822][T20088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.646007][T20088] packet_sendmsg+0x32b0/0x4e60 [ 1008.650892][T20088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.657072][T20088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.663241][T20088] ? aa_sk_perm+0x1ac/0x950 [ 1008.667766][T20088] ? aa_sk_perm+0x81f/0x950 [ 1008.672278][T20088] ? packet_getsockopt+0x9a0/0x9a0 [ 1008.677399][T20088] ? patch_conexant_auto+0x1360/0x1650 [ 1008.682866][T20088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.689032][T20088] ? aa_sock_msg_perm+0x94/0x150 [ 1008.693992][T20088] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1008.699293][T20088] ? security_socket_sendmsg+0x7c/0xa0 [ 1008.704775][T20088] ? packet_getsockopt+0x9a0/0x9a0 [ 1008.709903][T20088] ____sys_sendmsg+0x5be/0x970 [ 1008.714687][T20088] ? __sys_sendmsg_sock+0x30/0x30 [ 1008.719722][T20088] ? __import_iovec+0x315/0x500 [ 1008.724583][T20088] ? import_iovec+0x6f/0xa0 [ 1008.729095][T20088] ___sys_sendmsg+0x2a2/0x360 [ 1008.733787][T20088] ? __sys_sendmsg+0x290/0x290 [ 1008.738592][T20088] __se_sys_sendmsg+0x1bb/0x2a0 [ 1008.743452][T20088] ? __x64_sys_sendmsg+0x80/0x80 [ 1008.748417][T20088] do_syscall_64+0x4c/0xa0 [ 1008.752841][T20088] ? clear_bhb_loop+0x60/0xb0 [ 1008.757529][T20088] ? clear_bhb_loop+0x60/0xb0 [ 1008.762220][T20088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.768208][T20088] RIP: 0033:0x7f2f41b9c819 [ 1008.772626][T20088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.792241][T20088] RSP: 002b:00007f2f42a9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.800659][T20088] RAX: ffffffffffffffda RBX: 00007f2f41e15fa0 RCX: 00007f2f41b9c819 [ 1008.808637][T20088] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1008.816609][T20088] RBP: 00007f2f42a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.824581][T20088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.832555][T20088] R13: 00007f2f41e16038 R14: 00007f2f41e15fa0 R15: 00007fff8fe0dc78 [ 1008.840543][T20088] [ 1009.156508][T20103] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5446'. [ 1009.641729][T20117] device syzkaller0 entered promiscuous mode [ 1010.079650][T20138] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5460'. [ 1010.283216][T20142] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5462'. [ 1011.110357][T20173] netlink: 26 bytes leftover after parsing attributes in process `syz.2.5473'. [ 1011.371760][T20179] netlink: 26 bytes leftover after parsing attributes in process `syz.2.5475'. [ 1012.917751][T20154] netlink: 'syz.3.5467': attribute type 10 has an invalid length. [ 1013.196852][T20204] FAULT_INJECTION: forcing a failure. [ 1013.196852][T20204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.288699][T20204] CPU: 1 PID: 20204 Comm: syz.1.5484 Not tainted syzkaller #0 [ 1013.296234][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1013.306318][T20204] Call Trace: [ 1013.309629][T20204] [ 1013.312587][T20204] dump_stack_lvl+0x188/0x24e [ 1013.317319][T20204] ? show_regs_print_info+0x12/0x12 [ 1013.322555][T20204] ? load_image+0x400/0x400 [ 1013.327098][T20204] ? __lock_acquire+0x7d10/0x7d10 [ 1013.332164][T20204] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1013.337926][T20204] should_fail_ex+0x399/0x4d0 [ 1013.342647][T20204] strncpy_from_user+0x32/0x350 [ 1013.347633][T20204] bpf_prog_load+0x1f3/0x1560 [ 1013.352365][T20204] ? map_freeze+0x390/0x390 [ 1013.356909][T20204] ? __might_fault+0xa6/0x120 [ 1013.361645][T20204] ? __might_fault+0xa6/0x120 [ 1013.366354][T20204] ? __might_fault+0xc2/0x120 [ 1013.371063][T20204] ? __might_fault+0xa6/0x120 [ 1013.375779][T20204] ? bpf_lsm_bpf+0x5/0x10 [ 1013.380146][T20204] ? security_bpf+0x7a/0xa0 [ 1013.384693][T20204] __sys_bpf+0x5b8/0x780 [ 1013.388983][T20204] ? bpf_link_show_fdinfo+0x380/0x380 [ 1013.394421][T20204] ? lock_chain_count+0x20/0x20 [ 1013.399328][T20204] __x64_sys_bpf+0x78/0x90 [ 1013.403779][T20204] do_syscall_64+0x4c/0xa0 [ 1013.408200][T20204] ? clear_bhb_loop+0x60/0xb0 [ 1013.412891][T20204] ? clear_bhb_loop+0x60/0xb0 [ 1013.417611][T20204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1013.423561][T20204] RIP: 0033:0x7fd80e39c819 [ 1013.427995][T20204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.447631][T20204] RSP: 002b:00007fd80f1c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1013.456048][T20204] RAX: ffffffffffffffda RBX: 00007fd80e615fa0 RCX: 00007fd80e39c819 [ 1013.464029][T20204] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 1013.472002][T20204] RBP: 00007fd80f1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.480002][T20204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.487995][T20204] R13: 00007fd80e616038 R14: 00007fd80e615fa0 R15: 00007ffd1f836028 [ 1013.496002][T20204] [ 1013.617262][T20213] netlink: 'syz.3.5488': attribute type 29 has an invalid length. [ 1013.629809][T20213] netlink: 'syz.3.5488': attribute type 29 has an invalid length. [ 1013.683087][T20214] netlink: 'syz.3.5488': attribute type 29 has an invalid length. [ 1013.754015][T20213] netlink: 'syz.3.5488': attribute type 29 has an invalid length. [ 1013.787002][T20213] netlink: 'syz.3.5488': attribute type 29 has an invalid length. [ 1013.813107][T20219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1013.974260][T20219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.029801][T20219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.089838][T20219] bond0 (unregistering): Released all slaves [ 1014.758828][T20248] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1014.812919][T20246] netlink: 121300 bytes leftover after parsing attributes in process `syz.4.5502'. [ 1015.462041][T20275] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5513'. [ 1015.653918][T20275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.743611][T20275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.767127][T20287] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5517'. [ 1015.795226][T20275] bond0 (unregistering): Released all slaves [ 1016.030373][T20293] netlink: 'syz.1.5520': attribute type 10 has an invalid length. [ 1016.381295][T20313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.410173][T20313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.434322][T20313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.446816][T20313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.809160][T20330] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5533'. [ 1017.086340][T20345] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1017.227030][T20345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.313204][T20345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.358302][T20345] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1017.397981][T20345] bond0 (unregistering): Released all slaves [ 1017.476349][T20349] netlink: 'syz.1.5539': attribute type 10 has an invalid length. [ 1017.517761][T20351] netlink: 'syz.1.5539': attribute type 21 has an invalid length. [ 1017.929582][T20366] netlink: 'syz.3.5545': attribute type 10 has an invalid length. [ 1018.051535][T20371] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5548'. [ 1019.814373][T20418] netlink: 'syz.2.5566': attribute type 10 has an invalid length. [ 1021.452347][T20467] netlink: 'syz.4.5587': attribute type 25 has an invalid length. [ 1021.538020][T20472] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5588'. [ 1021.583238][T20467] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5587'. [ 1021.600185][T20467] ksmbd: Unknown IPC event: 10, ignore. [ 1021.925171][T20484] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5593'. [ 1022.001203][T20484] bridge_slave_1: default FDB implementation only supports local addresses [ 1022.102297][T20493] FAULT_INJECTION: forcing a failure. [ 1022.102297][T20493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1022.275660][T20493] CPU: 1 PID: 20493 Comm: syz.2.5594 Not tainted syzkaller #0 [ 1022.283180][T20493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1022.293274][T20493] Call Trace: [ 1022.296570][T20493] [ 1022.299519][T20493] dump_stack_lvl+0x188/0x24e [ 1022.304230][T20493] ? show_regs_print_info+0x12/0x12 [ 1022.309480][T20493] ? load_image+0x400/0x400 [ 1022.314019][T20493] ? __lock_acquire+0x7d10/0x7d10 [ 1022.319083][T20493] should_fail_ex+0x399/0x4d0 [ 1022.323791][T20493] prepare_alloc_pages+0x1e2/0x5f0 [ 1022.328939][T20493] __alloc_pages+0x130/0x4f0 [ 1022.333557][T20493] ? zone_statistics+0x170/0x170 [ 1022.338542][T20493] ? lockdep_hardirqs_on+0x94/0x140 [ 1022.343775][T20493] ? alloc_pages+0x4d8/0x740 [ 1022.348396][T20493] alloc_skb_with_frags+0x20c/0x710 [ 1022.353724][T20493] sock_alloc_send_pskb+0x87f/0x9a0 [ 1022.358964][T20493] ? sock_kzfree_s+0x50/0x50 [ 1022.363586][T20493] ? dev_get_by_index+0x1e/0x2d0 [ 1022.368559][T20493] ? dev_get_by_index+0x1e/0x2d0 [ 1022.373535][T20493] packet_sendmsg+0x32b0/0x4e60 [ 1022.378431][T20493] ? __might_sleep+0xd0/0xd0 [ 1022.383039][T20493] ? perf_trace_preemptirq_template+0x268/0x320 [ 1022.389309][T20493] ? irqentry_enter+0x33/0x50 [ 1022.394007][T20493] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1022.400001][T20493] ? aa_sk_perm+0x81f/0x950 [ 1022.404512][T20493] ? packet_getsockopt+0x9a0/0x9a0 [ 1022.409636][T20493] ? aa_sock_msg_perm+0x94/0x150 [ 1022.414578][T20493] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1022.419866][T20493] ? security_socket_sendmsg+0x7c/0xa0 [ 1022.425336][T20493] ? packet_getsockopt+0x9a0/0x9a0 [ 1022.430454][T20493] ____sys_sendmsg+0x5be/0x970 [ 1022.435239][T20493] ? __sys_sendmsg_sock+0x30/0x30 [ 1022.440271][T20493] ? __import_iovec+0x315/0x500 [ 1022.445131][T20493] ? import_iovec+0x6f/0xa0 [ 1022.449646][T20493] ___sys_sendmsg+0x2a2/0x360 [ 1022.454341][T20493] ? __sys_sendmsg+0x290/0x290 [ 1022.459145][T20493] __se_sys_sendmsg+0x1bb/0x2a0 [ 1022.464001][T20493] ? __x64_sys_sendmsg+0x80/0x80 [ 1022.468956][T20493] ? lockdep_hardirqs_on+0x94/0x140 [ 1022.474160][T20493] do_syscall_64+0x4c/0xa0 [ 1022.478583][T20493] ? clear_bhb_loop+0x60/0xb0 [ 1022.483267][T20493] ? clear_bhb_loop+0x60/0xb0 [ 1022.487962][T20493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.493865][T20493] RIP: 0033:0x7f2f41b9c819 [ 1022.498285][T20493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.517903][T20493] RSP: 002b:00007f2f42a9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1022.526322][T20493] RAX: ffffffffffffffda RBX: 00007f2f41e15fa0 RCX: 00007f2f41b9c819 [ 1022.534307][T20493] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1022.542283][T20493] RBP: 00007f2f42a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.550266][T20493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1022.558262][T20493] R13: 00007f2f41e16038 R14: 00007f2f41e15fa0 R15: 00007fff8fe0dc78 [ 1022.566256][T20493] [ 1022.837935][T20510] netlink: 'syz.4.5602': attribute type 3 has an invalid length. [ 1022.846930][T20510] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5602'. [ 1023.040260][T20516] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5604'. [ 1023.363240][T20528] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1024.364234][T20558] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1024.857009][T20575] netlink: 'syz.1.5631': attribute type 25 has an invalid length. [ 1024.910751][T20575] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1024.933663][T20575] ksmbd: Unknown IPC event: 10, ignore. [ 1025.367470][T20588] sock: sock_timestamping_bind_phc: sock not bind to device [ 1025.418137][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'. [ 1026.526168][T20620] delete_channel: no stack [ 1026.543362][T20620] delete_channel: no stack [ 1026.882391][T20634] netlink: 'syz.3.5650': attribute type 3 has an invalid length. [ 1026.890378][T20634] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1027.697190][T20641] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1028.295269][T20659] netlink: 'syz.3.5658': attribute type 3 has an invalid length. [ 1028.306397][T20659] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1028.429904][T20665] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5660'. [ 1028.470393][T20664] delete_channel: no stack [ 1028.816805][T20682] netlink: 'syz.2.5667': attribute type 10 has an invalid length. [ 1029.438655][T20697] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1029.732759][T20692] netlink: 'syz.2.5672': attribute type 11 has an invalid length. [ 1030.092917][T20702] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1030.246946][T20700] delete_channel: no stack [ 1031.134951][T20717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5680'. [ 1032.166408][T20728] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1034.189225][T20729] device veth1_macvtap left promiscuous mode [ 1034.205281][T20745] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5691'. [ 1034.217503][T20745] bridge_slave_1: default FDB implementation only supports local addresses [ 1034.719210][T20760] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1034.802656][T20764] device syzkaller0 entered promiscuous mode [ 1034.943682][T20772] netlink: 'syz.4.5702': attribute type 10 has an invalid length. [ 1034.992985][T20773] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5700'. [ 1035.061707][T20769] netlink: 'syz.0.5703': attribute type 10 has an invalid length. [ 1036.586673][T20797] netlink: 11835 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1036.629056][T20792] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1038.195957][T20788] netlink: 'syz.2.5707': attribute type 46 has an invalid length. [ 1038.382142][T20801] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5713'. [ 1039.434946][T20824] device veth1_macvtap left promiscuous mode [ 1039.949421][T20834] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5724'. [ 1039.994747][T20834] bridge_slave_1: default FDB implementation only supports local addresses [ 1040.031071][T20836] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.5725'. [ 1040.179765][T20846] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1040.436711][T20850] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5731'. [ 1040.464017][T20850] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1041.891895][T20894] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1041.903858][T20894] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1041.914338][T20894] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1041.941426][T20894] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1041.970639][T20894] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1041.991348][T20894] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1042.340830][T20904] FAULT_INJECTION: forcing a failure. [ 1042.340830][T20904] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.386546][T20904] CPU: 0 PID: 20904 Comm: syz.4.5750 Not tainted syzkaller #0 [ 1042.394077][T20904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1042.404173][T20904] Call Trace: [ 1042.407480][T20904] [ 1042.410443][T20904] dump_stack_lvl+0x188/0x24e [ 1042.415166][T20904] ? show_regs_print_info+0x12/0x12 [ 1042.420408][T20904] ? load_image+0x400/0x400 [ 1042.424959][T20904] ? __might_sleep+0xd0/0xd0 [ 1042.429665][T20904] ? __lock_acquire+0x7d10/0x7d10 [ 1042.434740][T20904] should_fail_ex+0x399/0x4d0 [ 1042.439468][T20904] should_failslab+0x5/0x20 [ 1042.444011][T20904] slab_pre_alloc_hook+0x59/0x310 [ 1042.449082][T20904] ? __get_vm_area_node+0x122/0x330 [ 1042.454322][T20904] __kmem_cache_alloc_node+0x4f/0x260 [ 1042.459749][T20904] ? __get_vm_area_node+0x122/0x330 [ 1042.464985][T20904] kmalloc_node_trace+0x22/0xe0 [ 1042.469968][T20904] __get_vm_area_node+0x122/0x330 [ 1042.475041][T20904] __vmalloc_node_range+0x357/0x13b0 [ 1042.480363][T20904] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.485996][T20904] ? free_vm_area+0x50/0x50 [ 1042.490518][T20904] ? end_current_label_crit_section+0x170/0x170 [ 1042.496782][T20904] ? __lock_acquire+0x7d10/0x7d10 [ 1042.501839][T20904] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.507428][T20904] __vmalloc+0x76/0x80 [ 1042.511551][T20904] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.517126][T20904] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.522510][T20904] ? bpf_lsm_capable+0x5/0x10 [ 1042.527200][T20904] ? security_capable+0x85/0xb0 [ 1042.532070][T20904] bpf_prog_alloc+0x1c/0x1b0 [ 1042.536717][T20904] bpf_prog_load+0x7c9/0x1560 [ 1042.541433][T20904] ? map_freeze+0x390/0x390 [ 1042.546005][T20904] __sys_bpf+0x5b8/0x780 [ 1042.550276][T20904] ? bpf_link_show_fdinfo+0x380/0x380 [ 1042.555713][T20904] ? lock_chain_count+0x20/0x20 [ 1042.560589][T20904] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1042.566611][T20904] __x64_sys_bpf+0x78/0x90 [ 1042.571136][T20904] do_syscall_64+0x4c/0xa0 [ 1042.575583][T20904] ? clear_bhb_loop+0x60/0xb0 [ 1042.580282][T20904] ? clear_bhb_loop+0x60/0xb0 [ 1042.584983][T20904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.590898][T20904] RIP: 0033:0x7f6fdbb9c819 [ 1042.595334][T20904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.614959][T20904] RSP: 002b:00007f6fdcb1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.623401][T20904] RAX: ffffffffffffffda RBX: 00007f6fdbe15fa0 RCX: 00007f6fdbb9c819 [ 1042.631393][T20904] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 1042.639385][T20904] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.647381][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.655388][T20904] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 1042.663396][T20904] [ 1042.773570][T20904] syz.4.5750: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1042.797586][T20904] CPU: 0 PID: 20904 Comm: syz.4.5750 Not tainted syzkaller #0 [ 1042.805094][T20904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1042.815186][T20904] Call Trace: [ 1042.818490][T20904] [ 1042.821448][T20904] dump_stack_lvl+0x188/0x24e [ 1042.826169][T20904] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1042.832625][T20904] ? show_regs_print_info+0x12/0x12 [ 1042.837862][T20904] ? load_image+0x400/0x400 [ 1042.842405][T20904] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1042.848866][T20904] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1042.855408][T20904] warn_alloc+0x242/0x330 [ 1042.859785][T20904] ? __get_vm_area_node+0x122/0x330 [ 1042.865029][T20904] ? zone_watermark_ok_safe+0x270/0x270 [ 1042.870617][T20904] ? rcu_is_watching+0x11/0xa0 [ 1042.875440][T20904] ? __get_vm_area_node+0x318/0x330 [ 1042.880707][T20904] __vmalloc_node_range+0x37c/0x13b0 [ 1042.886086][T20904] ? free_vm_area+0x50/0x50 [ 1042.890630][T20904] ? end_current_label_crit_section+0x170/0x170 [ 1042.896906][T20904] ? __lock_acquire+0x7d10/0x7d10 [ 1042.901987][T20904] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.907577][T20904] __vmalloc+0x76/0x80 [ 1042.911688][T20904] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.917276][T20904] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1042.922693][T20904] ? bpf_lsm_capable+0x5/0x10 [ 1042.927408][T20904] ? security_capable+0x85/0xb0 [ 1042.932303][T20904] bpf_prog_alloc+0x1c/0x1b0 [ 1042.936935][T20904] bpf_prog_load+0x7c9/0x1560 [ 1042.941675][T20904] ? map_freeze+0x390/0x390 [ 1042.946247][T20904] __sys_bpf+0x5b8/0x780 [ 1042.950506][T20904] ? bpf_link_show_fdinfo+0x380/0x380 [ 1042.955927][T20904] ? lock_chain_count+0x20/0x20 [ 1042.960792][T20904] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1042.966809][T20904] __x64_sys_bpf+0x78/0x90 [ 1042.971240][T20904] do_syscall_64+0x4c/0xa0 [ 1042.975707][T20904] ? clear_bhb_loop+0x60/0xb0 [ 1042.980399][T20904] ? clear_bhb_loop+0x60/0xb0 [ 1042.985090][T20904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.990993][T20904] RIP: 0033:0x7f6fdbb9c819 [ 1042.995420][T20904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.015050][T20904] RSP: 002b:00007f6fdcb1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1043.023494][T20904] RAX: ffffffffffffffda RBX: 00007f6fdbe15fa0 RCX: 00007f6fdbb9c819 [ 1043.031476][T20904] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 1043.039456][T20904] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.047441][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.055437][T20904] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 1043.063447][T20904] [ 1043.235727][T20904] Mem-Info: [ 1043.240487][T20904] active_anon:23230 inactive_anon:0 isolated_anon:0 [ 1043.240487][T20904] active_file:21551 inactive_file:40224 isolated_file:0 [ 1043.240487][T20904] unevictable:768 dirty:110 writeback:0 [ 1043.240487][T20904] slab_reclaimable:21147 slab_unreclaimable:95409 [ 1043.240487][T20904] mapped:38932 shmem:16864 pagetables:644 [ 1043.240487][T20904] sec_pagetables:0 bounce:0 [ 1043.240487][T20904] kernel_misc_reclaimable:0 [ 1043.240487][T20904] free:1302385 free_pcp:8653 free_cma:0 [ 1043.374396][T20904] Node 0 active_anon:96120kB inactive_anon:0kB active_file:86204kB inactive_file:160700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152828kB dirty:440kB writeback:0kB shmem:68920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9988kB pagetables:2676kB sec_pagetables:0kB all_unreclaimable? no [ 1043.519711][T20904] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1043.621488][T20904] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1043.775138][T20904] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1043.797689][T20904] Node 0 DMA32 free:1286772kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:103188kB inactive_anon:0kB active_file:86204kB inactive_file:160700kB unevictable:1536kB writepending:480kB present:3129332kB managed:2592968kB mlocked:0kB bounce:0kB free_pcp:12952kB local_pcp:7496kB free_cma:0kB [ 1043.891061][T20904] lowmem_reserve[]: 0 0 1 1 1 [ 1043.895861][T20904] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1044.001861][T20904] lowmem_reserve[]: 0 0 0 0 0 [ 1044.020984][T20904] Node 1 Normal free:3897376kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20064kB local_pcp:10944kB free_cma:0kB [ 1044.108669][T20904] lowmem_reserve[]: 0 0 0 0 0 [ 1044.140303][T20904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1044.189441][T20904] Node 0 DMA32: 195*4kB (UM) 1003*8kB (U) 703*16kB (UME) 421*32kB (UE) 451*64kB (UE) 1036*128kB (UME) 265*256kB (UME) 82*512kB (UM) 37*1024kB (UME) 5*2048kB (ME) 227*4096kB (UM) = 1282740kB [ 1044.283026][T20904] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1044.311548][T20904] Node 1 Normal: 256*4kB (UE) 62*8kB (UE) 43*16kB (UME) 36*32kB (UME) 24*64kB (UME) 6*128kB (UME) 8*256kB (UM) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897376kB [ 1044.451845][T20904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1044.492489][T20904] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1044.521148][T20904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1044.558272][T20904] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1044.588210][T20904] 83617 total pagecache pages [ 1044.594284][T20904] 0 pages in swap cache [ 1044.614575][T20904] Free swap = 124996kB [ 1044.629043][T20904] Total swap = 124996kB [ 1044.639173][T20904] 2097051 pages RAM [ 1044.654686][T20904] 0 pages HighMem/MovableOnly [ 1044.659616][T20904] 415208 pages reserved [ 1044.688228][T20904] 0 pages cma reserved [ 1045.045120][T20965] __nla_validate_parse: 29 callbacks suppressed [ 1045.045156][T20965] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5782'. [ 1045.327060][T20976] netlink: 'syz.3.5776': attribute type 10 has an invalid length. [ 1045.388669][T20982] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1046.230141][T21010] netlink: 'syz.3.5789': attribute type 10 has an invalid length. [ 1046.252759][T21011] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5788'. [ 1046.585264][T21006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5786'. [ 1046.914151][T21020] tun0: tun_chr_ioctl cmd 2147767507 [ 1046.995035][T21020] netlink: 'syz.1.5792': attribute type 21 has an invalid length. [ 1047.031018][T21020] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5792'. [ 1047.729771][T21044] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1049.290688][T21084] netlink: 'syz.3.5818': attribute type 1 has an invalid length. [ 1049.309153][T21084] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.5818'. [ 1049.527629][T21084] device syzkaller0 entered promiscuous mode [ 1049.538421][T21092] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5820'. [ 1049.561087][T21092] bridge_slave_1: default FDB implementation only supports local addresses [ 1049.581659][T21095] netlink: 'syz.1.5819': attribute type 13 has an invalid length. [ 1049.646840][T21095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1049.686729][T21095] syz_tun: refused to change device tx_queue_len [ 1049.711607][T21095] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1049.799416][T21090] netlink: 'syz.1.5819': attribute type 13 has an invalid length. [ 1049.850626][T21090] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1049.933620][T21090] syz_tun: refused to change device tx_queue_len [ 1049.963965][T21090] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1050.066037][T21096] netlink: 'syz.1.5819': attribute type 10 has an invalid length. [ 1050.106879][T21098] netlink: 'syz.4.5823': attribute type 10 has an invalid length. [ 1050.609508][T21115] FAULT_INJECTION: forcing a failure. [ 1050.609508][T21115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.651083][T21115] CPU: 1 PID: 21115 Comm: syz.4.5827 Not tainted syzkaller #0 [ 1050.658621][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1050.668708][T21115] Call Trace: [ 1050.672020][T21115] [ 1050.674981][T21115] dump_stack_lvl+0x188/0x24e [ 1050.679700][T21115] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1050.685903][T21115] ? show_regs_print_info+0x12/0x12 [ 1050.691148][T21115] ? load_image+0x400/0x400 [ 1050.695718][T21115] should_fail_ex+0x399/0x4d0 [ 1050.700443][T21115] _copy_from_user+0x2c/0x170 [ 1050.705164][T21115] ___sys_sendmsg+0x1c3/0x360 [ 1050.709895][T21115] ? __sys_sendmsg+0x290/0x290 [ 1050.714785][T21115] __se_sys_sendmsg+0x1bb/0x2a0 [ 1050.719681][T21115] ? __x64_sys_sendmsg+0x80/0x80 [ 1050.724701][T21115] do_syscall_64+0x4c/0xa0 [ 1050.729151][T21115] ? clear_bhb_loop+0x60/0xb0 [ 1050.733870][T21115] ? clear_bhb_loop+0x60/0xb0 [ 1050.738591][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1050.744519][T21115] RIP: 0033:0x7f6fdbb9c819 [ 1050.748957][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.768594][T21115] RSP: 002b:00007f6fdcb1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.777028][T21115] RAX: ffffffffffffffda RBX: 00007f6fdbe15fa0 RCX: 00007f6fdbb9c819 [ 1050.785015][T21115] RDX: 0000000000004044 RSI: 0000200000000000 RDI: 0000000000000009 [ 1050.793001][T21115] RBP: 00007f6fdcb1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.800992][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.808983][T21115] R13: 00007f6fdbe16038 R14: 00007f6fdbe15fa0 R15: 00007ffd216dd1f8 [ 1050.817017][T21115] [ 1053.265729][T21117] netlink: 'syz.0.5828': attribute type 10 has an invalid length. [ 1053.276239][T21125] pimreg: tun_chr_ioctl cmd 2147767520 [ 1053.776545][T21175] FAULT_INJECTION: forcing a failure. [ 1053.776545][T21175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.831328][T21175] CPU: 1 PID: 21175 Comm: syz.1.5849 Not tainted syzkaller #0 [ 1053.838866][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1053.848956][T21175] Call Trace: [ 1053.852262][T21175] [ 1053.855202][T21175] dump_stack_lvl+0x188/0x24e [ 1053.859922][T21175] ? show_regs_print_info+0x12/0x12 [ 1053.865201][T21175] ? load_image+0x400/0x400 [ 1053.869736][T21175] ? __lock_acquire+0x7d10/0x7d10 [ 1053.874799][T21175] should_fail_ex+0x399/0x4d0 [ 1053.879503][T21175] prepare_alloc_pages+0x1e2/0x5f0 [ 1053.884655][T21175] __alloc_pages+0x130/0x4f0 [ 1053.889275][T21175] ? zone_statistics+0x170/0x170 [ 1053.894238][T21175] ? alloc_pages+0xac/0x740 [ 1053.898750][T21175] ? alloc_pages+0x4d8/0x740 [ 1053.903354][T21175] alloc_skb_with_frags+0x20c/0x710 [ 1053.908572][T21175] sock_alloc_send_pskb+0x87f/0x9a0 [ 1053.913792][T21175] ? sock_kzfree_s+0x50/0x50 [ 1053.918421][T21175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1053.924595][T21175] packet_sendmsg+0x32b0/0x4e60 [ 1053.929469][T21175] ? irqentry_enter+0x33/0x50 [ 1053.934159][T21175] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1053.940147][T21175] ? lock_chain_count+0x20/0x20 [ 1053.945008][T21175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1053.951168][T21175] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.956374][T21175] ? packet_getsockopt+0x9a0/0x9a0 [ 1053.961496][T21175] ? security_socket_sendmsg+0x56/0xa0 [ 1053.966976][T21175] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1053.972272][T21175] ? security_socket_sendmsg+0x7c/0xa0 [ 1053.977750][T21175] ? packet_getsockopt+0x9a0/0x9a0 [ 1053.982868][T21175] ____sys_sendmsg+0x5be/0x970 [ 1053.987644][T21175] ? __sys_sendmsg_sock+0x30/0x30 [ 1053.992673][T21175] ? __import_iovec+0x315/0x500 [ 1053.997538][T21175] ? import_iovec+0x6f/0xa0 [ 1054.002053][T21175] ___sys_sendmsg+0x2a2/0x360 [ 1054.006744][T21175] ? __sys_sendmsg+0x290/0x290 [ 1054.011529][T21175] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1054.017278][T21175] __se_sys_sendmsg+0x1bb/0x2a0 [ 1054.022143][T21175] ? __x64_sys_sendmsg+0x80/0x80 [ 1054.027105][T21175] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1054.033012][T21175] do_syscall_64+0x4c/0xa0 [ 1054.037444][T21175] ? clear_bhb_loop+0x60/0xb0 [ 1054.042130][T21175] ? clear_bhb_loop+0x60/0xb0 [ 1054.046817][T21175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.052718][T21175] RIP: 0033:0x7fd80e39c819 [ 1054.057145][T21175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.076765][T21175] RSP: 002b:00007fd80f1c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.085197][T21175] RAX: ffffffffffffffda RBX: 00007fd80e615fa0 RCX: 00007fd80e39c819 [ 1054.093177][T21175] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1054.101242][T21175] RBP: 00007fd80f1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.109221][T21175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.117196][T21175] R13: 00007fd80e616038 R14: 00007fd80e615fa0 R15: 00007ffd1f836028 [ 1054.125190][T21175] [ 1054.217897][T21190] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5853'. [ 1054.226618][ T6858] tipc: Subscription rejected, illegal request [ 1054.228771][T21188] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5855'. [ 1054.296135][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.302537][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.849521][T21216] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5863'. [ 1054.955254][T21218] netlink: 'syz.3.5864': attribute type 2 has an invalid length. [ 1055.629529][ T6857] tipc: Subscription rejected, illegal request [ 1055.711549][T21233] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5869'. [ 1055.774916][T21233] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5869'. [ 1055.844464][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1055.855024][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1055.864072][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1055.882212][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1055.889988][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1055.897637][ T4319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1056.145301][T21239] chnl_net:caif_netlink_parms(): no params data found [ 1056.235926][T21239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.243293][T21239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.251647][T21239] device bridge_slave_0 entered promiscuous mode [ 1056.261333][T21239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.268613][T21239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.276919][T21239] device bridge_slave_1 entered promiscuous mode [ 1056.309172][T21239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.321122][T21239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.355974][T21239] team0: Port device team_slave_0 added [ 1056.365960][T21239] team0: Port device team_slave_1 added [ 1056.389888][T21239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.397349][T21239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.488234][T21239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.539507][T21239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.580961][T21239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.756593][T21239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.785087][T21275] netlink: 'syz.3.5880': attribute type 3 has an invalid length. [ 1056.856661][T21275] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5880'. [ 1056.986619][T21239] device hsr_slave_0 entered promiscuous mode [ 1056.998825][T21286] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1057.012766][T21239] device hsr_slave_1 entered promiscuous mode [ 1057.019755][T21239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.029641][T21239] Cannot create hsr debugfs directory [ 1057.405720][T21239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.616031][T21239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.688224][T21302] netlink: 'syz.1.5892': attribute type 10 has an invalid length. [ 1057.725782][T21302] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1057.864898][T21239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.960993][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1058.066552][T21239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.341527][T21320] device syzkaller0 entered promiscuous mode [ 1058.369820][T21239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1058.419274][T21239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1058.444001][T21239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1058.475626][T21239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1058.530650][T21338] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.5903'. [ 1059.209294][T21363] FAULT_INJECTION: forcing a failure. [ 1059.209294][T21363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1059.244637][T21363] CPU: 1 PID: 21363 Comm: syz.1.5911 Not tainted syzkaller #0 [ 1059.252153][T21363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1059.262320][T21363] Call Trace: [ 1059.265613][T21363] [ 1059.268552][T21363] dump_stack_lvl+0x188/0x24e [ 1059.273258][T21363] ? show_regs_print_info+0x12/0x12 [ 1059.278475][T21363] ? load_image+0x400/0x400 [ 1059.282996][T21363] ? __lock_acquire+0x7d10/0x7d10 [ 1059.288073][T21363] ? irqentry_enter+0x33/0x50 [ 1059.292767][T21363] should_fail_ex+0x399/0x4d0 [ 1059.297460][T21363] prepare_alloc_pages+0x1e2/0x5f0 [ 1059.302601][T21363] __alloc_pages+0x130/0x4f0 [ 1059.307211][T21363] ? zone_statistics+0x170/0x170 [ 1059.312175][T21363] ? alloc_pages+0x2f1/0x740 [ 1059.316781][T21363] ? alloc_pages+0x4d8/0x740 [ 1059.321394][T21363] alloc_skb_with_frags+0x20c/0x710 [ 1059.326617][T21363] sock_alloc_send_pskb+0x87f/0x9a0 [ 1059.331851][T21363] ? sock_kzfree_s+0x50/0x50 [ 1059.336481][T21363] ? dev_get_by_index+0x1e/0x2d0 [ 1059.341440][T21363] ? dev_get_by_index+0x1e/0x2d0 [ 1059.346403][T21363] packet_sendmsg+0x32b0/0x4e60 [ 1059.351292][T21363] ? irqentry_enter+0x33/0x50 [ 1059.355992][T21363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1059.361990][T21363] ? lock_chain_count+0x20/0x20 [ 1059.366866][T21363] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1059.373044][T21363] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.378264][T21363] ? packet_getsockopt+0x9a0/0x9a0 [ 1059.383398][T21363] ? security_socket_sendmsg+0x56/0xa0 [ 1059.388878][T21363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1059.394176][T21363] ? security_socket_sendmsg+0x7c/0xa0 [ 1059.399661][T21363] ? packet_getsockopt+0x9a0/0x9a0 [ 1059.404788][T21363] ____sys_sendmsg+0x5be/0x970 [ 1059.409575][T21363] ? __sys_sendmsg_sock+0x30/0x30 [ 1059.414609][T21363] ? __import_iovec+0x315/0x500 [ 1059.419481][T21363] ? import_iovec+0x6f/0xa0 [ 1059.423999][T21363] ___sys_sendmsg+0x2a2/0x360 [ 1059.428697][T21363] ? __sys_sendmsg+0x290/0x290 [ 1059.433491][T21363] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1059.439255][T21363] __se_sys_sendmsg+0x1bb/0x2a0 [ 1059.444127][T21363] ? __x64_sys_sendmsg+0x80/0x80 [ 1059.449095][T21363] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1059.455012][T21363] do_syscall_64+0x4c/0xa0 [ 1059.459446][T21363] ? clear_bhb_loop+0x60/0xb0 [ 1059.464142][T21363] ? clear_bhb_loop+0x60/0xb0 [ 1059.468901][T21363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.474902][T21363] RIP: 0033:0x7fd80e39c819 [ 1059.479325][T21363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.498946][T21363] RSP: 002b:00007fd80f1c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.507375][T21363] RAX: ffffffffffffffda RBX: 00007fd80e615fa0 RCX: 00007fd80e39c819 [ 1059.515359][T21363] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1059.523345][T21363] RBP: 00007fd80f1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.531325][T21363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.539307][T21363] R13: 00007fd80e616038 R14: 00007fd80e615fa0 R15: 00007ffd1f836028 [ 1059.547298][T21363] [ 1060.042936][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1061.402116][T21239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.438794][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.454155][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.495718][T21239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.497839][T21377] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.5914'. [ 1061.511012][T21381] netlink: 'syz.4.5916': attribute type 10 has an invalid length. [ 1061.531315][T21379] netlink: 26 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1061.581338][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.606170][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.615119][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.622300][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.631459][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.642105][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.654592][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.661829][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.698430][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.721716][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.749362][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.774741][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.800221][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.832116][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.865960][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.895155][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.921333][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.938130][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.963706][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1061.976106][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.002621][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1062.124894][ C0] [ 1062.124904][ C0] ================================ [ 1062.124908][ C0] WARNING: inconsistent lock state [ 1062.124924][ C0] syzkaller #0 Not tainted [ 1062.124933][ C0] -------------------------------- [ 1062.124937][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1062.124944][ C0] syz.3.5922/21401 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 1062.124962][ C0] ffff888028848a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 1062.125013][ C0] {INITIAL USE} state was registered at: [ 1062.125019][ C0] lock_acquire+0x1bb/0x4a0 [ 1062.125039][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 1062.125055][ C0] trie_update_elem+0xc7/0xe80 [ 1062.125070][ C0] bpf_map_update_value+0x59e/0x670 [ 1062.125085][ C0] generic_map_update_batch+0x54b/0x810 [ 1062.125099][ C0] bpf_map_do_batch+0x466/0x600 [ 1062.125116][ C0] __sys_bpf+0x6f7/0x780 [ 1062.125131][ C0] __x64_sys_bpf+0x78/0x90 [ 1062.125148][ C0] do_syscall_64+0x4c/0xa0 [ 1062.125166][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.125182][ C0] irq event stamp: 3700 [ 1062.125188][ C0] hardirqs last enabled at (3699): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1062.125210][ C0] hardirqs last disabled at (3700): [] irqentry_enter+0xf/0x50 [ 1062.125228][ C0] softirqs last enabled at (3570): [] bpf_prog_load+0x1127/0x1560 [ 1062.125251][ C0] softirqs last disabled at (3568): [] bpf_ksym_add+0x29/0x340 [ 1062.125277][ C0] [ 1062.125277][ C0] other info that might help us debug this: [ 1062.125281][ C0] Possible unsafe locking scenario: [ 1062.125281][ C0] [ 1062.125285][ C0] CPU0 [ 1062.125288][ C0] ---- [ 1062.125291][ C0] lock(&trie->lock); [ 1062.125301][ C0] [ 1062.125304][ C0] lock(&trie->lock); [ 1062.125313][ C0] [ 1062.125313][ C0] *** DEADLOCK *** [ 1062.125313][ C0] [ 1062.125317][ C0] 1 lock held by syz.3.5922/21401: [ 1062.125326][ C0] #0: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0 [ 1062.125371][ C0] [ 1062.125371][ C0] stack backtrace: [ 1062.125375][ C0] CPU: 0 PID: 21401 Comm: syz.3.5922 Not tainted syzkaller #0 [ 1062.125392][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1062.125400][ C0] Call Trace: [ 1062.125405][ C0] <#DB> [ 1062.125411][ C0] dump_stack_lvl+0x188/0x24e [ 1062.125430][ C0] ? show_regs_print_info+0x12/0x12 [ 1062.125450][ C0] ? print_usage_bug+0x42a/0x690 [ 1062.125470][ C0] ? verify_lock_unused+0x18/0x140 [ 1062.125490][ C0] lock_acquire+0x2df/0x4a0 [ 1062.125511][ C0] ? trie_delete_elem+0x90/0x690 [ 1062.125529][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1062.125549][ C0] ? put_callchain_entry+0xb0/0xb0 [ 1062.125569][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 1062.125584][ C0] ? trie_delete_elem+0x90/0x690 [ 1062.125602][ C0] ? _raw_spin_lock+0x40/0x40 [ 1062.125617][ C0] ? lock_acquire+0x2df/0x4a0 [ 1062.125637][ C0] trie_delete_elem+0x90/0x690 [ 1062.125662][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1062.125681][ C0] bpf_overflow_handler+0x6e8/0x7c0 [ 1062.125699][ C0] ? find_next_clump8+0x1a0/0x1a0 [ 1062.125717][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 1062.125734][ C0] ? perf_swevent_overflow+0x230/0x230 [ 1062.125750][ C0] ? lock_release+0xcf/0x920 [ 1062.125771][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1062.125795][ C0] __perf_event_overflow+0x448/0x610 [ 1062.125819][ C0] perf_swevent_overflow+0x19b/0x230 [ 1062.125839][ C0] perf_swevent_event+0x458/0x570 [ 1062.125860][ C0] ? perf_tp_event+0xc30/0xc30 [ 1062.125886][ C0] perf_bp_event+0x312/0x3f0 [ 1062.125908][ C0] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 1062.125927][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 1062.125949][ C0] ? perf_trace_lock+0xf8/0x390 [ 1062.125977][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1062.125995][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1062.126017][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1062.126041][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 1062.126058][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1062.126077][ C0] notify_die+0x141/0x1a0 [ 1062.126094][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1062.126117][ C0] notify_debug+0x20/0x30 [ 1062.126136][ C0] exc_debug+0xd9/0x130 [ 1062.126150][ C0] asm_exc_debug+0x1a/0x40 [ 1062.126167][ C0] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 1062.126191][ C0] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 1062.126206][ C0] RSP: 0000:ffffc90003b4f640 EFLAGS: 00040806 [ 1062.126221][ C0] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88802e690000 [ 1062.126234][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 1062.126246][ C0] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 1062.126264][ C0] R10: ffffffff8fa0e010 R11: ffffffff8fa0e003 R12: 00000000ffffffff [ 1062.126276][ C0] R13: 0000200000000300 R14: 0000000000000004 R15: 00007fffffffeff0 [ 1062.126295][ C0] [ 1062.126300][ C0] [ 1062.126305][ C0] perf_callchain_user+0x55d/0x13c0 [ 1062.126334][ C0] get_perf_callchain+0x39e/0x490 [ 1062.126356][ C0] ? put_callchain_entry+0xb0/0xb0 [ 1062.126378][ C0] ? __perf_event_header__init_id+0x425/0x530 [ 1062.126401][ C0] perf_prepare_sample+0x399/0x2020 [ 1062.126424][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1062.126443][ C0] ? perf_callchain+0x190/0x190 [ 1062.126467][ C0] perf_event_output_forward+0x197/0x2f0 [ 1062.126488][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 1062.126508][ C0] ? perf_get_page_size+0x430/0x430 [ 1062.126531][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1062.126546][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1062.126564][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1062.126583][ C0] __perf_event_overflow+0x448/0x610 [ 1062.126606][ C0] perf_swevent_hrtimer+0x472/0x630 [ 1062.126628][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1062.126657][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1062.126673][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1062.126693][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 1062.126713][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1062.126735][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1062.126752][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1062.126775][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 1062.126803][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1062.126825][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 1062.126843][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1062.126862][ C0] RIP: 0033:0x7fe20e37b5bd [ 1062.126876][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 1062.126890][ C0] RSP: 002b:00007fe20f1ce8a8 EFLAGS: 00000283 [ 1062.126904][ C0] RAX: 0000000000000300 RBX: 00007fe20f1cede0 RCX: 2f666c65732f636f [ 1062.126915][ C0] RDX: 0000200000000300 RSI: 00007fe20e45cdc0 RDI: 0000200000000300 [ 1062.126928][ C0] RBP: 0000200000000300 R08: 00007fe20f1cf010 R09: 00000000ffffffff [ 1062.126939][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1062.126948][ C0] R13: 0000000000000073 R14: 00007fe20e431f5b R15: 00007fe20f1ceea0 [ 1062.126966][ C0] [ 1062.847202][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1062.858356][T21408] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5924'. [ 1062.934201][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.941842][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.952565][T21239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.973814][T21239] device veth0_vlan entered promiscuous mode [ 1062.982875][T21239] device veth1_vlan entered promiscuous mode [ 1062.998248][T21239] device veth0_macvtap entered promiscuous mode [ 1063.007310][T21239] device veth1_macvtap entered promiscuous mode [ 1063.022373][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1063.037947][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1063.047345][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1063.055585][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1063.064203][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1063.073490][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1063.082079][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1063.090562][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1063.099254][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1063.107901][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1063.115968][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1063.124132][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1063.134180][T21239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.144689][T21239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.154637][T21239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.166295][T21239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.176238][T21239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.186769][T21239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.198103][T21239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.205969][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1063.214673][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1063.224695][T21239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.235317][T21239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.246461][T21239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.257160][T21239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.267820][T21239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.278358][T21239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.289391][T21239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.297469][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1063.306203][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1063.316447][T21239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.325350][T21239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.334098][T21239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.342830][T21239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.367144][T21239] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 1063.385563][ T6859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.386412][T21239] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 1063.393875][ T6859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.410428][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1063.425353][ T6859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.433786][ T6859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.441636][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1064.921254][ T4308] Bluetooth: hci1: command 0x0419 tx timeout