last executing test programs: 57.499648065s ago: executing program 1 (id=7903): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8045) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 57.247409682s ago: executing program 1 (id=7905): r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00080138000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socket$kcm(0x10, 0x2, 0x4) 56.986660459s ago: executing program 1 (id=7906): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b850500010000001801000020756c2500000000002020207b1af80000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000184100000000000000000000000000001800000000000080000000000500000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000182a0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r3, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a9", 0x1}], 0x1}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 55.8157642s ago: executing program 1 (id=7912): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xb}, 0x4021, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) mkdir(0x0, 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x110021, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="870d0000000000006a5b3f3808002f49000005002700fb841019eb14b2a9a1e09f678a784af7e1572ce213757ad86f26d572f9bf58ba77b610d7447354a31e6bcda2525056ec2c734a3b4ce07de98cc73b12cbd214bf34480048128992f8e465b72a6e8004b1345e9a0a158165292e01dbbfb65d3f4c44b0", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) gettid() (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4088, 0xff8}], 0x1}, 0x0) 55.567838716s ago: executing program 1 (id=7913): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040)=0x2c, 0x1) 54.572633342s ago: executing program 1 (id=7919): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x29, 0x2, 0x0) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000001a40), 0x1007, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x4, r2}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r1, 0x58, &(0x7f0000000b40)}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000c00)={0x4, 0x80, 0x81, 0x1, 0x19, 0x6, 0x0, 0x3, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe0e, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x80, 0x5, 0x965, 0x4, 0xfffffffffffffffd, 0xfffffa30, 0xe6f5, 0x0, 0x8000, 0x0, 0x2}, r3, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001a007f049e", 0x9}, {&(0x7f0000000140)="03000000fb73fc8040250080f2dc06a9258f2e", 0x13}], 0x2}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) sendmsg$kcm(r6, &(0x7f0000000a80)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x1, @hyper}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)="3c9eb10252958b5ec99276d00555425d0d096e20191f64e824f32f9b6fa984e80b0a7be962dd1ad085c341996d79cfb95d147248a34f8d76d8810b0e20f9bd8019c84800980ca463", 0x48}, {&(0x7f0000000500)="f8b660083c8cb7dc020411703f4352652a63e36ecf60e7d7ffac07711f43b6890f", 0x21}], 0x2, &(0x7f0000000600)=[{0xa8, 0x10c, 0xd, "6681b0ee546deafc188361b7425ceaf50af5adf4aa85f13a7e75ae74d4b5a46fd13af4e2d6405b176b1f8bcef21d6c2521d2d703a0d46aea2cf19445cc6e0186918ddefd36284706c8bf7e70125637eafb7bf20b7fe6f41fc7371232e9788cbd7d8eda527ae311b3e89c3967a4f0f0820a9d05f7019387fcdc83cf9ef6868fbcce1605723d55c78e565ccdf8f0204e156d29ba"}, {0xf0, 0x115, 0x5, "daf0b3b76834f293476aa2a0645e9a1a82bb2e22e8900d2ece994a6b57f41065ffa3823f3e6d3de21316bc7d2d893c4d021af005d77479a88dc31a39b6d8aa8432ccd75f8545def480618661d9e9ac8b7d8d1168dcfd0f89a1388fe767894e7189a35ad8c3a7a5f8175d9804b4b403c8f0013104aa656cfb19bccddc9cdf07866080ca1b65f6022fb96a11e18a75c452a57a7d0efa63cca60afbb2c8a019c8dbf8e54f52e47f8601417aa26b2a40583ee83e40e9ef228fd7a8d7c1b38824181c086ff20827ac7f3e456e544cdb1fce2f04d87b69c03ccf0bfd"}, {0x48, 0x115, 0x10, "dfbb360b1e00c9c20d975428136847812701bab4f6ceec4e06b7e4506777c172e64ed0766998e6c600fd6c635aa7622126ad22d3a5"}, {0x48, 0x10f, 0x8, "bc2d777a79de23ccb7f5581ea53175cbb85d00aa15756d5248ec28b7a2e974394176257bfb234f7903494e7b8a880f356c8fb4fe0e9fc5"}, {0x88, 0x10a, 0x0, "e778f8eb7e52606d2acbe8de02721435d71aee9c67ea0fdc36c012e9e9bfb21e72ae6d93256031b4a001003cc18806a81cd30434cbda5024dcdbefb688e84d6ee13bcc53126cd20b56a2d8be19a7f7a0cb63933bcace7965f6d3bec0982c9557d91fa75a0a8f040f731a2212b5639d8d19e7fe"}, {0x108, 0x108, 0x4, "bb51aa1b543a2b88d763600989155f4aac34dea0cae728a064cc37c49429e106109f70c82eca7a3366e04385f0b25f4373f6a766051608899b825f53bd7bfa3dad224633d995be0c0db73df76756858c5e03cb442a54fd487d195246b12735aba3b2207fec5606e36e5e72970296e05c078834121538fdb43cbf7c4c22296b3d3f786a5f22fb69b13f2ace20e69b03294afa8a8016479136eaa9557d8fcb8b6042b08273b92d0558e417991883c22cd9ee9626971a3b30ae5e17095f2434cd14200d4c86115366bb2db43ad068597cc7f0c54a7d6bdc04e3fad45c5ac82b7b19f16b9f46c37bf0d4ce832d68bfc3c0f29dd6fbc4d4386328"}, {0xa0, 0x117, 0xfff, "49a169c5d56d9ec7d2351ae707b5b576c25e36dd50777c29e581faaf9d90b364a10c62ca0b8f0c90027c6721f0ffc1ff9fd6a13ce6ef055ba2f921514b9ba327a54b845cd576a12e82c25475a66d5f153fd69e2f50a91b3185daff199693e3877a3672fd124027ea9ada3a9df325da2239a14cd4cfbc64297c53fd571d7a6e82e28ca2969b02c07ab88683139f619e"}, {0x18, 0x117, 0x3, "6d020561072802fa"}], 0x470}, 0x20000800) 39.213840686s ago: executing program 32 (id=7919): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x29, 0x2, 0x0) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000001a40), 0x1007, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x4, r2}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r1, 0x58, &(0x7f0000000b40)}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000c00)={0x4, 0x80, 0x81, 0x1, 0x19, 0x6, 0x0, 0x3, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe0e, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x80, 0x5, 0x965, 0x4, 0xfffffffffffffffd, 0xfffffa30, 0xe6f5, 0x0, 0x8000, 0x0, 0x2}, r3, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001a007f049e", 0x9}, {&(0x7f0000000140)="03000000fb73fc8040250080f2dc06a9258f2e", 0x13}], 0x2}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) sendmsg$kcm(r6, &(0x7f0000000a80)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x1, @hyper}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)="3c9eb10252958b5ec99276d00555425d0d096e20191f64e824f32f9b6fa984e80b0a7be962dd1ad085c341996d79cfb95d147248a34f8d76d8810b0e20f9bd8019c84800980ca463", 0x48}, {&(0x7f0000000500)="f8b660083c8cb7dc020411703f4352652a63e36ecf60e7d7ffac07711f43b6890f", 0x21}], 0x2, &(0x7f0000000600)=[{0xa8, 0x10c, 0xd, "6681b0ee546deafc188361b7425ceaf50af5adf4aa85f13a7e75ae74d4b5a46fd13af4e2d6405b176b1f8bcef21d6c2521d2d703a0d46aea2cf19445cc6e0186918ddefd36284706c8bf7e70125637eafb7bf20b7fe6f41fc7371232e9788cbd7d8eda527ae311b3e89c3967a4f0f0820a9d05f7019387fcdc83cf9ef6868fbcce1605723d55c78e565ccdf8f0204e156d29ba"}, {0xf0, 0x115, 0x5, "daf0b3b76834f293476aa2a0645e9a1a82bb2e22e8900d2ece994a6b57f41065ffa3823f3e6d3de21316bc7d2d893c4d021af005d77479a88dc31a39b6d8aa8432ccd75f8545def480618661d9e9ac8b7d8d1168dcfd0f89a1388fe767894e7189a35ad8c3a7a5f8175d9804b4b403c8f0013104aa656cfb19bccddc9cdf07866080ca1b65f6022fb96a11e18a75c452a57a7d0efa63cca60afbb2c8a019c8dbf8e54f52e47f8601417aa26b2a40583ee83e40e9ef228fd7a8d7c1b38824181c086ff20827ac7f3e456e544cdb1fce2f04d87b69c03ccf0bfd"}, {0x48, 0x115, 0x10, "dfbb360b1e00c9c20d975428136847812701bab4f6ceec4e06b7e4506777c172e64ed0766998e6c600fd6c635aa7622126ad22d3a5"}, {0x48, 0x10f, 0x8, "bc2d777a79de23ccb7f5581ea53175cbb85d00aa15756d5248ec28b7a2e974394176257bfb234f7903494e7b8a880f356c8fb4fe0e9fc5"}, {0x88, 0x10a, 0x0, "e778f8eb7e52606d2acbe8de02721435d71aee9c67ea0fdc36c012e9e9bfb21e72ae6d93256031b4a001003cc18806a81cd30434cbda5024dcdbefb688e84d6ee13bcc53126cd20b56a2d8be19a7f7a0cb63933bcace7965f6d3bec0982c9557d91fa75a0a8f040f731a2212b5639d8d19e7fe"}, {0x108, 0x108, 0x4, "bb51aa1b543a2b88d763600989155f4aac34dea0cae728a064cc37c49429e106109f70c82eca7a3366e04385f0b25f4373f6a766051608899b825f53bd7bfa3dad224633d995be0c0db73df76756858c5e03cb442a54fd487d195246b12735aba3b2207fec5606e36e5e72970296e05c078834121538fdb43cbf7c4c22296b3d3f786a5f22fb69b13f2ace20e69b03294afa8a8016479136eaa9557d8fcb8b6042b08273b92d0558e417991883c22cd9ee9626971a3b30ae5e17095f2434cd14200d4c86115366bb2db43ad068597cc7f0c54a7d6bdc04e3fad45c5ac82b7b19f16b9f46c37bf0d4ce832d68bfc3c0f29dd6fbc4d4386328"}, {0xa0, 0x117, 0xfff, "49a169c5d56d9ec7d2351ae707b5b576c25e36dd50777c29e581faaf9d90b364a10c62ca0b8f0c90027c6721f0ffc1ff9fd6a13ce6ef055ba2f921514b9ba327a54b845cd576a12e82c25475a66d5f153fd69e2f50a91b3185daff199693e3877a3672fd124027ea9ada3a9df325da2239a14cd4cfbc64297c53fd571d7a6e82e28ca2969b02c07ab88683139f619e"}, {0x18, 0x117, 0x3, "6d020561072802fa"}], 0x470}, 0x20000800) 4.285528607s ago: executing program 5 (id=8144): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x7, 0x73, 0x4, 0x2, 0x0, 0xe, 0x40c44, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3fffe, 0x8}, 0x10060, 0x11f, 0x20000003, 0x6, 0x40007, 0x80000001, 0xf0, 0x0, 0x6b, 0x0, 0x8000000000000004}) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@cgroup, 0x11, 0x0, 0xa324, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000b80)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000009500000004000000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r9}, 0x1) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="2c0000003000000040000000f9d4f57da6e0165c1f6c32931e0b0cfb8e0962325b97d2d30da709a1167b014692df73b37cf34f87fbb9fc09ac2d5c6c9cfcf80c5d445742dc07e5ae561f0cdadc8825bee65916f7febf66c6a48670d9e37b1110ecb756b2083a6085dbbb88e8d2d0f52734bce0f81a351e5368", @ANYRES8=r3], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], &(0x7f00000001c0)='GPL\x00'}, 0x94) 3.359957621s ago: executing program 4 (id=8153): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) 3.264524273s ago: executing program 5 (id=8155): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4000009, 0x1, @perf_config_ext={0x0, 0x5}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x5, 0xf3, 0x0, 0x7, 0x0, 0x400000000002}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x1}], 0x10}, 0x4000004) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0xb1, 0x0, 0x0, 0x7, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x80000001, 0x28}, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000}, 0x50) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) 3.152487947s ago: executing program 3 (id=8156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3518}, [@btf_id={0x18, 0x3bccc6b7f7d711eb, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6400}, 0x94) 3.137776247s ago: executing program 4 (id=8157): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a"], 0xfe33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e002800100000000280000012", 0x2d}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@generic={&(0x7f0000001340)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xb, 0x11, &(0x7f00000014c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000007b70200000000001a8500000086000000dd392000fcffffff8510000c00f2c66400f8ffffff1812000067bff806c0bbeeaf57b348d4c6ad179602ad1cf83f44ae395a8b7eca1b227284c053520ab5707e62a15b73b7860323d928756921375b48390c", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183800000100000000000000000000009500000000000000183200000500000000000000000000003da6260104000000"], &(0x7f0000000240)='GPL\x00', 0x100, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x79, '\x00', 0x0, @fallback=0x6, r5, 0x8, &(0x7f00000012c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x5, 0x3, 0x0, 0x3}, 0x10, 0x0, r8, 0x0, &(0x7f00000013c0)=[r9, r0], 0x0, 0x10, 0x6}, 0x94) 3.108911538s ago: executing program 5 (id=8158): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040)=0x2c, 0x1) 2.976180981s ago: executing program 0 (id=8161): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x10, 0xf, 0x4040, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003"], 0x0, 0x53}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x2b, 0x2, 0x9, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa02, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x1000, 0x6, 0x6, 0x8, 0x3, 0x1, 0x101, 0x0, 0x80, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000440)=0x6) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 2.889516263s ago: executing program 3 (id=8162): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)='].{\x00'}, 0x30) 2.6587567s ago: executing program 3 (id=8164): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.607921781s ago: executing program 0 (id=8165): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.528780503s ago: executing program 2 (id=8166): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.050742665s ago: executing program 5 (id=8167): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 1.963906247s ago: executing program 4 (id=8168): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) 1.899260309s ago: executing program 0 (id=8169): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4000009, 0x1, @perf_config_ext={0x0, 0x5}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x5, 0xf3, 0x0, 0x7, 0x0, 0x400000000002}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x1}], 0x10}, 0x4000004) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0xb1, 0x0, 0x0, 0x7, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x80000001, 0x28}, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000}, 0x50) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) 1.757162243s ago: executing program 2 (id=8170): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa3b0ffffff000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0afefe0000000c850000002f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.743981464s ago: executing program 0 (id=8171): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b850500010000001801000020756c2500000000002020207b1af80000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000184100000000000000000000000000001800000000000080000000000500000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000182a0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r3, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 1.727269584s ago: executing program 4 (id=8172): r0 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x3, 0xdf, 0x10, 0xa5, 0x0, 0x4, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfffffffffffff84a}, 0x12009, 0x4c3, 0x3, 0x2, 0x5, 0x800, 0xffc0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x6, 0x12) socket$kcm(0xa, 0x2, 0x73) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe61) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) 1.615291867s ago: executing program 2 (id=8173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="68ca3e30bc718931fbffb60200000400000285000000050000009559e414d2d4051131b0d9b69518e7502bea0e7b6422a8ce7c7e35d29dc39b29a284117542d63b5ed12388f27f6eccf5806f6df04b577a1568f7a0c164f96d6e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.589481117s ago: executing program 3 (id=8174): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)='].{\x00'}, 0x30) 1.437842452s ago: executing program 2 (id=8175): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.307824775s ago: executing program 3 (id=8176): socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b850500010000001801000020756c2500000000002020207b1af80000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000184100000000000000000000000000001800000000000080000000000500000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000182a0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r2, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a9", 0x1}], 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 1.11964498s ago: executing program 5 (id=8177): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040)=0x2c, 0x1) 1.074862891s ago: executing program 2 (id=8178): socket$kcm(0x11, 0x6, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb", 0x2f}, {&(0x7f0000001b40)="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", 0x450}], 0x2}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b", 0x4e}], 0x1}, 0xb80b) 572.035044ms ago: executing program 0 (id=8179): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000002681"], 0x0, 0x3e}, 0x20) 459.169797ms ago: executing program 2 (id=8180): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 457.810217ms ago: executing program 4 (id=8181): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4000009, 0x1, @perf_config_ext={0x0, 0x5}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x5, 0xf3, 0x0, 0x7, 0x0, 0x400000000002}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x1}], 0x10}, 0x4000004) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0xb1, 0x0, 0x0, 0x7, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x80000001, 0x28}, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000}, 0x50) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) 219.843413ms ago: executing program 3 (id=8182): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) 186.866335ms ago: executing program 0 (id=8183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r7, &(0x7f0000000200)}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0, 0x12}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x5e, 0x12) sendmsg$kcm(r8, &(0x7f00000031c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @loopback}, 0x4, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f0000000280)="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", 0x101}, {&(0x7f0000001e80)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb51af28a3d0066869dd853fe91bbe45da1c4af881b7769897519e91ff22011706873c87ef430630c58206ee0c87c8d06b4e97399afddadce2885dc6f1b8ff95d7c94b24ff322b23fb38c9ac168916ce28b1af33fe839f1ffbe1e95b6627b86155c9d892a8", 0x124}], 0x5, &(0x7f0000000580)=ANY=[], 0x18}, 0x8080) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 53.019228ms ago: executing program 4 (id=8184): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 5 (id=8185): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000021001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) kernel console output (not intermixed with test programs): yz.1.6491': attribute type 29 has an invalid length. [ 1286.820261][T23739] netlink: 'syz.1.6491': attribute type 29 has an invalid length. [ 1286.880362][T23741] netlink: 'syz.4.6490': attribute type 39 has an invalid length. [ 1286.907095][T23739] netlink: 'syz.1.6491': attribute type 29 has an invalid length. [ 1287.603668][T23756] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1288.717396][T23784] netlink: 'syz.1.6503': attribute type 2 has an invalid length. [ 1288.729783][T23784] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1289.486665][T23788] netlink: 'syz.3.6508': attribute type 10 has an invalid length. [ 1289.498275][T23788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6508'. [ 1289.621225][T23797] netlink: 'syz.1.6511': attribute type 39 has an invalid length. [ 1291.075955][T23840] netlink: 'syz.2.6528': attribute type 39 has an invalid length. [ 1291.241000][T23846] netlink: 'syz.4.6529': attribute type 10 has an invalid length. [ 1291.273791][T23846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1291.307519][T23846] device team0 entered promiscuous mode [ 1291.330781][T23846] device team_slave_0 entered promiscuous mode [ 1291.346253][T23846] device team_slave_1 entered promiscuous mode [ 1291.363813][T23846] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1292.136766][T23854] netlink: 'syz.1.6533': attribute type 10 has an invalid length. [ 1292.150682][T23854] netlink: 'syz.1.6533': attribute type 19 has an invalid length. [ 1292.161878][T23854] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1292.966934][T23872] netlink: 'syz.3.6538': attribute type 2 has an invalid length. [ 1292.987437][T23872] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6538'. [ 1293.334332][T23882] netlink: 'syz.2.6543': attribute type 2 has an invalid length. [ 1293.364738][T23882] netlink: 'syz.2.6543': attribute type 8 has an invalid length. [ 1293.382896][T23882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1293.513067][T23890] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6545'. [ 1293.643307][T23887] netlink: 'syz.0.6546': attribute type 39 has an invalid length. [ 1295.357571][T23935] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.6562'. [ 1295.416202][T23937] netlink: 'syz.4.6564': attribute type 39 has an invalid length. [ 1295.434060][T23927] netlink: 'syz.2.6560': attribute type 2 has an invalid length. [ 1295.453062][T23927] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1296.903389][T12770] Bluetooth: hci2: command 0x0406 tx timeout [ 1299.906294][T23987] netlink: 'syz.3.6581': attribute type 39 has an invalid length. [ 1299.972247][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.978674][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.991171][T23982] netlink: 'syz.4.6579': attribute type 2 has an invalid length. [ 1300.023444][T23982] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6579'. [ 1300.940952][T24005] netlink: 'syz.3.6587': attribute type 12 has an invalid length. [ 1300.967752][T24005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6587'. [ 1301.003864][T24009] netlink: 'syz.3.6587': attribute type 21 has an invalid length. [ 1301.623162][T24019] netlink: 'syz.4.6593': attribute type 2 has an invalid length. [ 1301.645946][T24019] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6593'. [ 1302.390431][T24034] netlink: 'syz.4.6597': attribute type 39 has an invalid length. [ 1303.006355][T24044] netlink: 'syz.0.6599': attribute type 2 has an invalid length. [ 1303.037966][T24044] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1303.252581][T24048] device syzkaller0 entered promiscuous mode [ 1303.540632][T16909] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1305.674388][T24059] netlink: 'syz.3.6605': attribute type 12 has an invalid length. [ 1305.676013][T24055] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1305.682405][T24059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6605'. [ 1305.682457][T24061] netlink: 'syz.3.6605': attribute type 21 has an invalid length. [ 1305.721983][T24055] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1305.731598][T24055] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1306.194423][T24088] netlink: 'syz.2.6617': attribute type 39 has an invalid length. [ 1307.448925][T24110] netlink: 'syz.2.6626': attribute type 12 has an invalid length. [ 1307.532695][T24110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6626'. [ 1307.593443][T24112] netlink: 'syz.2.6626': attribute type 21 has an invalid length. [ 1308.059763][T24127] netlink: 'syz.3.6633': attribute type 39 has an invalid length. [ 1309.438644][T24138] netlink: 'syz.1.6637': attribute type 2 has an invalid length. [ 1309.534337][T24136] netlink: 'syz.2.6635': attribute type 2 has an invalid length. [ 1309.543812][T24138] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6637'. [ 1309.562760][T24136] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1310.568995][T24148] netlink: 'syz.3.6638': attribute type 2 has an invalid length. [ 1310.587500][T24148] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6638'. [ 1310.691432][T24162] netlink: 'syz.4.6645': attribute type 12 has an invalid length. [ 1310.713464][T24162] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1310.729786][T24162] netlink: 'syz.4.6645': attribute type 21 has an invalid length. [ 1311.466301][T24178] netlink: 'syz.2.6651': attribute type 2 has an invalid length. [ 1311.478372][T24178] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1312.510888][T24193] netlink: 'syz.4.6657': attribute type 2 has an invalid length. [ 1312.526408][T24193] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6657'. [ 1312.983134][T24214] netlink: 'syz.1.6663': attribute type 12 has an invalid length. [ 1313.012092][T24214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6663'. [ 1313.054986][T24198] netlink: 'syz.0.6659': attribute type 13 has an invalid length. [ 1313.070557][T24198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1314.326944][T24198] erspan0: refused to change device tx_queue_len [ 1314.336314][T24198] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1314.357330][T24218] netlink: 'syz.1.6663': attribute type 21 has an invalid length. [ 1314.734236][T24231] netlink: 'syz.4.6669': attribute type 2 has an invalid length. [ 1314.760394][T24231] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6669'. [ 1314.914448][T24238] netlink: 'syz.0.6673': attribute type 2 has an invalid length. [ 1314.942144][T24238] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6673'. [ 1315.123481][T24251] netlink: 'syz.2.6676': attribute type 39 has an invalid length. [ 1316.082423][T24267] netlink: 'syz.0.6683': attribute type 12 has an invalid length. [ 1316.091603][T24267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1316.106776][T24267] netlink: 'syz.0.6683': attribute type 21 has an invalid length. [ 1316.894720][T24269] netlink: 'syz.0.6684': attribute type 3 has an invalid length. [ 1316.908789][T24269] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6684'. [ 1317.381884][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 1318.015091][T24301] netlink: 'syz.3.6691': attribute type 2 has an invalid length. [ 1318.032295][T24301] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6691'. [ 1318.539739][T24302] netlink: 'syz.2.6694': attribute type 12 has an invalid length. [ 1318.548015][T24302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6694'. [ 1318.560486][T24305] netlink: 'syz.2.6694': attribute type 21 has an invalid length. [ 1318.849265][T24314] netlink: 'syz.3.6696': attribute type 39 has an invalid length. [ 1321.957993][T24347] netlink: 'syz.3.6710': attribute type 12 has an invalid length. [ 1321.966367][T24347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6710'. [ 1321.976848][T24347] netlink: 'syz.3.6710': attribute type 21 has an invalid length. [ 1322.007612][T24345] netlink: 'syz.0.6707': attribute type 2 has an invalid length. [ 1322.025722][T24345] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6707'. [ 1322.318653][T24356] netlink: 'syz.4.6712': attribute type 2 has an invalid length. [ 1322.334190][T24356] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1324.386280][T24402] netlink: 'syz.1.6732': attribute type 12 has an invalid length. [ 1324.400846][T24402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1324.453173][T24404] netlink: 'syz.1.6732': attribute type 21 has an invalid length. [ 1324.741119][T24414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.750745][T24414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.771267][T24412] netlink: 'syz.2.6734': attribute type 2 has an invalid length. [ 1324.786740][T24412] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1324.899467][T24414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.907219][T24414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.915658][T24414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.924017][T24414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.946584][T24414] device bridge0 entered promiscuous mode [ 1325.365276][T24422] netlink: 'syz.3.6738': attribute type 2 has an invalid length. [ 1325.405216][T24422] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1326.508510][T24441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1327.216751][T24451] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6748'. [ 1327.337158][T24458] netlink: 'syz.1.6750': attribute type 12 has an invalid length. [ 1327.380550][T24458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6750'. [ 1327.417122][T24463] netlink: 'syz.1.6750': attribute type 21 has an invalid length. [ 1327.594385][T24464] netlink: 'syz.3.6752': attribute type 2 has an invalid length. [ 1327.620847][T24464] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6752'. [ 1328.380008][T24481] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6759'. [ 1328.391637][T24481] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.6759'. [ 1328.407487][T24481] tc_dump_action: action bad kind [ 1329.299867][T24514] netlink: 'syz.1.6768': attribute type 12 has an invalid length. [ 1329.351954][T24514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6768'. [ 1329.409999][T24515] netlink: 'syz.1.6768': attribute type 21 has an invalid length. [ 1329.557047][T24510] netlink: 'syz.4.6770': attribute type 2 has an invalid length. [ 1329.586147][T24510] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6770'. [ 1330.198386][T24534] netlink: 'syz.4.6785': attribute type 10 has an invalid length. [ 1330.326508][T24534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.351024][T24534] device bridge_slave_1 left promiscuous mode [ 1330.377351][T24534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.390479][T24534] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1330.840972][T24558] netlink: 'syz.2.6783': attribute type 10 has an invalid length. [ 1330.875058][T24558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6783'. [ 1331.059908][T24555] netlink: 'syz.3.6781': attribute type 2 has an invalid length. [ 1331.075241][T24555] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1331.144252][T24570] netlink: 'syz.4.6787': attribute type 12 has an invalid length. [ 1331.153363][T24570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6787'. [ 1332.668765][T24607] __nla_validate_parse: 1 callbacks suppressed [ 1332.668784][T24607] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6803'. [ 1332.710608][T24601] validate_nla: 2 callbacks suppressed [ 1332.710643][T24601] netlink: 'syz.4.6801': attribute type 2 has an invalid length. [ 1332.731520][T24601] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1333.507302][T24622] netlink: 'syz.1.6807': attribute type 2 has an invalid length. [ 1333.517965][T24622] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1334.585928][T16915] wlan1: Trigger new scan to find an IBSS to join [ 1334.959575][T24614] netlink: 'syz.4.6805': attribute type 12 has an invalid length. [ 1334.967598][T24614] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6805'. [ 1334.980315][T24615] netlink: 'syz.4.6805': attribute type 21 has an invalid length. [ 1334.989255][T24617] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1335.022433][T24617] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1335.051707][T24617] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1335.226159][T24636] netlink: 'syz.1.6812': attribute type 10 has an invalid length. [ 1335.244761][T24636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6812'. [ 1335.274385][T24636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1335.562192][T24643] netlink: 'syz.3.6814': attribute type 2 has an invalid length. [ 1335.582514][T24643] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6814'. [ 1335.918598][T24653] netlink: 'syz.4.6816': attribute type 2 has an invalid length. [ 1335.948235][T24653] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6816'. [ 1337.861964][T12770] Bluetooth: hci5: command 0x0406 tx timeout [ 1338.469143][T24668] netlink: 'syz.2.6821': attribute type 12 has an invalid length. [ 1338.505161][T24668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6821'. [ 1338.545247][T24670] netlink: 'syz.2.6821': attribute type 21 has an invalid length. [ 1338.580501][T24665] netlink: 'syz.4.6822': attribute type 2 has an invalid length. [ 1338.613255][T24665] netlink: 'syz.4.6822': attribute type 8 has an invalid length. [ 1338.621294][T24665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6822'. [ 1338.754116][T24662] netlink: 'syz.3.6820': attribute type 2 has an invalid length. [ 1338.787535][T24662] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1339.164072][T24686] netlink: 'syz.0.6828': attribute type 2 has an invalid length. [ 1339.190107][T24686] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6828'. [ 1339.771037][T24711] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1339.793684][T24708] netlink: 'syz.1.6834': attribute type 2 has an invalid length. [ 1339.827965][T24708] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6834'. [ 1340.418812][T24739] netlink: 'syz.3.6844': attribute type 12 has an invalid length. [ 1340.468349][T24739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6844'. [ 1340.529081][T24742] netlink: 'syz.3.6844': attribute type 21 has an invalid length. [ 1340.583835][T17494] wlan1: Trigger new scan to find an IBSS to join [ 1341.025479][T24750] netlink: 'syz.2.6850': attribute type 2 has an invalid length. [ 1341.033862][T24750] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1341.578905][T24775] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6859'. [ 1341.648147][T18799] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1342.450644][T24790] device bridge_slave_1 left promiscuous mode [ 1342.501200][T24790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.571294][T24792] netlink: 111 bytes leftover after parsing attributes in process `syz.1.6867'. [ 1343.171347][T24817] FAULT_INJECTION: forcing a failure. [ 1343.171347][T24817] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.192980][T24817] CPU: 1 PID: 24817 Comm: syz.3.6875 Not tainted syzkaller #0 [ 1343.200497][T24817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1343.210580][T24817] Call Trace: [ 1343.213877][T24817] [ 1343.216873][T24817] dump_stack_lvl+0x188/0x24e [ 1343.221607][T24817] ? show_regs_print_info+0x12/0x12 [ 1343.226853][T24817] ? lockdep_hardirqs_on+0x94/0x140 [ 1343.232102][T24817] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1343.238326][T24817] should_fail_ex+0x390/0x4c0 [ 1343.243061][T24817] should_failslab+0x5/0x20 [ 1343.247631][T24817] slab_pre_alloc_hook+0x59/0x300 [ 1343.252702][T24817] ? sk_prot_alloc+0xe7/0x210 [ 1343.257434][T24817] __kmem_cache_alloc_node+0x4f/0x270 [ 1343.262854][T24817] ? sk_prot_alloc+0xe7/0x210 [ 1343.267563][T24817] __kmalloc+0xa3/0x240 [ 1343.271762][T24817] sk_prot_alloc+0xe7/0x210 [ 1343.276300][T24817] ? sk_alloc+0x20/0x330 [ 1343.280580][T24817] sk_alloc+0x36/0x330 [ 1343.284680][T24817] ? bpf_ctx_init+0x154/0x190 [ 1343.289401][T24817] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1343.294813][T24817] ? __fget_files+0x28/0x460 [ 1343.299452][T24817] ? __fget_files+0x3fc/0x460 [ 1343.304180][T24817] ? cpu_online+0xa0/0xa0 [ 1343.308555][T24817] bpf_prog_test_run+0x31c/0x390 [ 1343.313542][T24817] __sys_bpf+0x62b/0x780 [ 1343.317819][T24817] ? bpf_link_show_fdinfo+0x380/0x380 [ 1343.323241][T24817] ? lock_chain_count+0x20/0x20 [ 1343.328162][T24817] __x64_sys_bpf+0x78/0x90 [ 1343.332620][T24817] do_syscall_64+0x4c/0xa0 [ 1343.337077][T24817] ? clear_bhb_loop+0x60/0xb0 [ 1343.341796][T24817] ? clear_bhb_loop+0x60/0xb0 [ 1343.346524][T24817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1343.352452][T24817] RIP: 0033:0x7f7bf299e019 [ 1343.356902][T24817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.376622][T24817] RSP: 002b:00007f7bf0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1343.385070][T24817] RAX: ffffffffffffffda RBX: 00007f7bf2c25fa0 RCX: 00007f7bf299e019 [ 1343.393077][T24817] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1343.401100][T24817] RBP: 00007f7bf0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.409105][T24817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.417140][T24817] R13: 00007f7bf2c26038 R14: 00007f7bf2c25fa0 R15: 00007fff7ba5d6b8 [ 1343.425453][T24817] [ 1343.833540][T24835] validate_nla: 6 callbacks suppressed [ 1343.833556][T24835] netlink: 'syz.4.6878': attribute type 27 has an invalid length. [ 1344.025014][T24835] bond0: (slave bond_slave_0): Releasing backup interface [ 1344.175994][T24841] netlink: 'syz.0.6884': attribute type 2 has an invalid length. [ 1344.191308][T24841] netlink: 'syz.0.6884': attribute type 8 has an invalid length. [ 1344.204123][T24841] __nla_validate_parse: 7 callbacks suppressed [ 1344.204154][T24841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1344.372408][T24848] FAULT_INJECTION: forcing a failure. [ 1344.372408][T24848] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.437943][T24848] CPU: 1 PID: 24848 Comm: syz.1.6887 Not tainted syzkaller #0 [ 1344.445499][T24848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.455593][T24848] Call Trace: [ 1344.458902][T24848] [ 1344.461867][T24848] dump_stack_lvl+0x188/0x24e [ 1344.466622][T24848] ? verify_lock_unused+0x140/0x140 [ 1344.471889][T24848] ? show_regs_print_info+0x12/0x12 [ 1344.477192][T24848] ? load_image+0x410/0x410 [ 1344.481739][T24848] ? crng_make_state+0x60e/0xb00 [ 1344.486810][T24848] ? crng_make_state+0x1d1/0xb00 [ 1344.491790][T24848] ? urandom_read_iter+0x140/0x140 [ 1344.496936][T24848] ? ___sys_sendmsg+0x2a2/0x360 [ 1344.501856][T24848] should_fail_ex+0x390/0x4c0 [ 1344.506601][T24848] should_failslab+0x5/0x20 [ 1344.511132][T24848] slab_pre_alloc_hook+0x59/0x300 [ 1344.516167][T24848] ? sctp_add_bind_addr+0x89/0x350 [ 1344.521368][T24848] __kmem_cache_alloc_node+0x4f/0x270 [ 1344.526763][T24848] ? sctp_add_bind_addr+0x89/0x350 [ 1344.531927][T24848] kmalloc_trace+0x26/0xe0 [ 1344.536397][T24848] sctp_add_bind_addr+0x89/0x350 [ 1344.541367][T24848] sctp_copy_local_addr_list+0x317/0x4d0 [ 1344.547074][T24848] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1344.552914][T24848] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1344.559019][T24848] ? sctp_v4_is_any+0x31/0x50 [ 1344.563718][T24848] ? sctp_copy_one_addr+0x93/0x660 [ 1344.568856][T24848] sctp_bind_addr_copy+0xaf/0x3c0 [ 1344.573906][T24848] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1344.580273][T24848] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1344.585603][T24848] ? __sctp_connect+0xd80/0xd80 [ 1344.590493][T24848] ? __local_bh_enable_ip+0x136/0x1c0 [ 1344.595922][T24848] ? _local_bh_enable+0xa0/0xa0 [ 1344.600789][T24848] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1344.606658][T24848] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1344.612498][T24848] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1344.618072][T24848] ? security_sctp_bind_connect+0x85/0xb0 [ 1344.624363][T24848] sctp_sendmsg+0x1686/0x2940 [ 1344.629090][T24848] ? sctp_getsockopt+0x8a0/0x8a0 [ 1344.634051][T24848] ? __might_fault+0xa6/0x120 [ 1344.638749][T24848] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1344.645182][T24848] ? aa_sock_msg_perm+0x94/0x150 [ 1344.650153][T24848] ? inet_sendmsg+0x7a/0x2a0 [ 1344.654776][T24848] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1344.660079][T24848] ? inet_send_prepare+0x250/0x250 [ 1344.665215][T24848] ____sys_sendmsg+0x5ed/0x9a0 [ 1344.670019][T24848] ? __sys_sendmsg_sock+0x30/0x30 [ 1344.675064][T24848] ? __import_iovec+0x306/0x510 [ 1344.679956][T24848] ? import_iovec+0x6f/0xa0 [ 1344.684482][T24848] ___sys_sendmsg+0x2a2/0x360 [ 1344.689191][T24848] ? __sys_sendmsg+0x2a0/0x2a0 [ 1344.694017][T24848] ? __lock_acquire+0x7c40/0x7c40 [ 1344.699095][T24848] __se_sys_sendmsg+0x1c3/0x2b0 [ 1344.703979][T24848] ? __x64_sys_sendmsg+0x80/0x80 [ 1344.708965][T24848] ? lockdep_hardirqs_on+0x94/0x140 [ 1344.714185][T24848] do_syscall_64+0x4c/0xa0 [ 1344.718621][T24848] ? clear_bhb_loop+0x60/0xb0 [ 1344.723319][T24848] ? clear_bhb_loop+0x60/0xb0 [ 1344.728018][T24848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.733940][T24848] RIP: 0033:0x7f3698d9e019 [ 1344.738372][T24848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.757997][T24848] RSP: 002b:00007f3699be5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.766441][T24848] RAX: ffffffffffffffda RBX: 00007f3699025fa0 RCX: 00007f3698d9e019 [ 1344.774447][T24848] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1344.782458][T24848] RBP: 00007f3699be5090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.790462][T24848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.798454][T24848] R13: 00007f3699026038 R14: 00007f3699025fa0 R15: 00007ffe8042ecd8 [ 1344.806466][T24848] [ 1344.844499][T24850] netlink: 'syz.0.6888': attribute type 2 has an invalid length. [ 1344.872577][T24850] netlink: 'syz.0.6888': attribute type 1 has an invalid length. [ 1345.476442][T24856] netlink: 'syz.2.6889': attribute type 12 has an invalid length. [ 1345.484554][T24856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6889'. [ 1345.537886][T24857] netlink: 'syz.2.6889': attribute type 21 has an invalid length. [ 1345.600345][T24861] netlink: 'syz.4.6891': attribute type 2 has an invalid length. [ 1345.643285][T24861] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6891'. [ 1346.002281][T24877] netlink: 'syz.1.6897': attribute type 2 has an invalid length. [ 1346.020582][T24877] netlink: 'syz.1.6897': attribute type 8 has an invalid length. [ 1346.048744][T24877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6897'. [ 1346.418902][T24897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1346.906631][T24909] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6907'. [ 1347.396980][T24918] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6910'. [ 1348.051478][T24931] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6913'. [ 1348.428551][T24952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1348.477867][T24944] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1350.328004][T24994] validate_nla: 9 callbacks suppressed [ 1350.328080][T24994] netlink: 'syz.4.6935': attribute type 2 has an invalid length. [ 1350.356130][T24994] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1351.470073][T25003] netlink: 'syz.1.6938': attribute type 2 has an invalid length. [ 1351.544046][T25003] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6938'. [ 1351.604574][T25014] netlink: 'syz.2.6939': attribute type 12 has an invalid length. [ 1351.635413][T25014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6939'. [ 1351.703428][T25014] netlink: 'syz.2.6939': attribute type 21 has an invalid length. [ 1355.048732][T25047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6952'. [ 1355.190619][T25041] netlink: 'syz.1.6951': attribute type 2 has an invalid length. [ 1355.226978][T25041] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6951'. [ 1355.448400][T25055] device lo entered promiscuous mode [ 1356.146631][T25077] FAULT_INJECTION: forcing a failure. [ 1356.146631][T25077] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.181987][T25077] CPU: 0 PID: 25077 Comm: syz.2.6962 Not tainted syzkaller #0 [ 1356.189508][T25077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.199622][T25077] Call Trace: [ 1356.202947][T25077] [ 1356.205912][T25077] dump_stack_lvl+0x188/0x24e [ 1356.210640][T25077] ? show_regs_print_info+0x12/0x12 [ 1356.215906][T25077] ? load_image+0x410/0x410 [ 1356.220459][T25077] ? __might_sleep+0xd0/0xd0 [ 1356.225088][T25077] ? __lock_acquire+0x7c40/0x7c40 [ 1356.230152][T25077] should_fail_ex+0x390/0x4c0 [ 1356.234866][T25077] should_failslab+0x5/0x20 [ 1356.239391][T25077] slab_pre_alloc_hook+0x59/0x300 [ 1356.244442][T25077] ? __lock_acquire+0x138a/0x7c40 [ 1356.247168][T25078] netlink: 'syz.1.6961': attribute type 2 has an invalid length. [ 1356.249485][T25077] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1356.262952][T25077] __kmem_cache_alloc_node+0x4f/0x270 [ 1356.268368][T25077] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1356.274117][T25077] __kmalloc+0xa3/0x240 [ 1356.276800][T25078] netlink: 'syz.1.6961': attribute type 8 has an invalid length. [ 1356.278294][T25077] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1356.278327][T25077] ? tomoyo_domain+0xd2/0x120 [ 1356.296285][T25077] ? tomoyo_path_number_perm+0x205/0x650 [ 1356.301944][T25077] tomoyo_path_number_perm+0x22f/0x650 [ 1356.307469][T25077] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1356.312958][T25077] ? ksys_write+0x1ce/0x260 [ 1356.317508][T25077] ? common_file_perm+0x171/0x1c0 [ 1356.322614][T25077] ? __fget_files+0x28/0x460 [ 1356.327038][T25078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1356.327247][T25077] security_file_ioctl+0x6c/0xa0 [ 1356.341216][T25077] __se_sys_ioctl+0x48/0x170 [ 1356.345845][T25077] do_syscall_64+0x4c/0xa0 [ 1356.350287][T25077] ? clear_bhb_loop+0x60/0xb0 [ 1356.355003][T25077] ? clear_bhb_loop+0x60/0xb0 [ 1356.359733][T25077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.365657][T25077] RIP: 0033:0x7f626c59e019 [ 1356.370088][T25077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.389711][T25077] RSP: 002b:00007f626d55a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.398158][T25077] RAX: ffffffffffffffda RBX: 00007f626c825fa0 RCX: 00007f626c59e019 [ 1356.406150][T25077] RDX: 0000200000000000 RSI: 00000000000089ef RDI: 0000000000000003 [ 1356.414142][T25077] RBP: 00007f626d55a090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.422142][T25077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.430145][T25077] R13: 00007f626c826038 R14: 00007f626c825fa0 R15: 00007ffdbf4632a8 [ 1356.438160][T25077] [ 1356.597278][T25077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1356.768464][T25080] netlink: 'syz.4.6963': attribute type 29 has an invalid length. [ 1356.850944][T25080] netlink: 'syz.4.6963': attribute type 29 has an invalid length. [ 1357.099552][T25094] netlink: 'syz.2.6966': attribute type 21 has an invalid length. [ 1357.227301][T25085] netlink: 'syz.0.6964': attribute type 2 has an invalid length. [ 1357.299358][T25097] netlink: 71 bytes leftover after parsing attributes in process `syz.4.6968'. [ 1357.310324][T25085] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6964'. [ 1357.520588][T25104] netlink: 'syz.4.6971': attribute type 2 has an invalid length. [ 1357.682683][T25108] netlink: 'syz.4.6971': attribute type 10 has an invalid length. [ 1360.387978][T25125] device lo entered promiscuous mode [ 1360.403605][T25128] netlink: 'syz.0.6975': attribute type 2 has an invalid length. [ 1360.411374][T25128] netlink: 'syz.0.6975': attribute type 8 has an invalid length. [ 1360.422262][T25128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6975'. [ 1360.628446][T12770] Bluetooth: hci0: ISO packet for unknown connection handle 8 [ 1361.073887][T25148] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1361.395373][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.401868][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.689654][T25163] validate_nla: 1 callbacks suppressed [ 1361.689670][T25163] netlink: 'syz.1.6984': attribute type 21 has an invalid length. [ 1361.894378][T25170] netlink: 'syz.3.6987': attribute type 2 has an invalid length. [ 1361.910876][T25170] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1361.991378][T25174] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 1361.999868][T25174] netlink: 'syz.2.6991': attribute type 8 has an invalid length. [ 1362.017666][T25174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1362.180964][T25178] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1362.807916][T25189] netlink: 'syz.4.6998': attribute type 2 has an invalid length. [ 1362.834851][T25189] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6998'. [ 1363.094927][T25200] netlink: 'syz.3.7003': attribute type 39 has an invalid length. [ 1363.472000][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 1364.069999][T25214] netlink: 'syz.1.7008': attribute type 21 has an invalid length. [ 1364.460236][T25232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1364.468873][T25227] netlink: 'syz.2.7014': attribute type 2 has an invalid length. [ 1364.480704][T25232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1364.491385][T25232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1364.494840][T25227] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7014'. [ 1364.517905][T25232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1364.549902][T25232] FAULT_INJECTION: forcing a failure. [ 1364.549902][T25232] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.568679][T25232] CPU: 0 PID: 25232 Comm: syz.4.7017 Not tainted syzkaller #0 [ 1364.576173][T25232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1364.586252][T25232] Call Trace: [ 1364.589552][T25232] [ 1364.592517][T25232] dump_stack_lvl+0x188/0x24e [ 1364.597254][T25232] ? show_regs_print_info+0x12/0x12 [ 1364.602511][T25232] ? load_image+0x410/0x410 [ 1364.607070][T25232] should_fail_ex+0x390/0x4c0 [ 1364.611787][T25232] should_failslab+0x5/0x20 [ 1364.616315][T25232] slab_pre_alloc_hook+0x59/0x300 [ 1364.621380][T25232] kmem_cache_alloc+0x56/0x2f0 [ 1364.626186][T25232] ? skb_clone+0x1e7/0x370 [ 1364.630671][T25232] skb_clone+0x1e7/0x370 [ 1364.634960][T25232] __netlink_deliver_tap+0x3e4/0x7e0 [ 1364.640315][T25232] ? netlink_deliver_tap+0x2e/0x1b0 [ 1364.645555][T25232] netlink_deliver_tap+0x19c/0x1b0 [ 1364.650713][T25232] netlink_dump+0x80f/0xcd0 [ 1364.655263][T25232] ? netlink_lookup+0x200/0x200 [ 1364.660161][T25232] ? netlink_recvmsg+0x5e3/0xe00 [ 1364.665148][T25232] ? kmem_cache_free+0xf7/0x2a0 [ 1364.670114][T25232] netlink_recvmsg+0x68f/0xe00 [ 1364.674928][T25232] ? netlink_sendmsg+0xbd0/0xbd0 [ 1364.679917][T25232] ? aa_af_perm+0x340/0x340 [ 1364.684467][T25232] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1364.689800][T25232] ? security_socket_recvmsg+0x85/0xb0 [ 1364.695289][T25232] ? netlink_sendmsg+0xbd0/0xbd0 [ 1364.700265][T25232] ____sys_recvmsg+0x2c8/0x5b0 [ 1364.705112][T25232] ? __sys_recvmsg_sock+0x40/0x40 [ 1364.710195][T25232] ? import_iovec+0x6f/0xa0 [ 1364.714734][T25232] ___sys_recvmsg+0x210/0x590 [ 1364.719465][T25232] ? __sys_recvmsg+0x2a0/0x2a0 [ 1364.724296][T25232] ? common_file_perm+0x171/0x1c0 [ 1364.729367][T25232] ? __fget_files+0x3fc/0x460 [ 1364.734083][T25232] __x64_sys_recvmsg+0x20d/0x2e0 [ 1364.739040][T25232] ? ___sys_recvmsg+0x590/0x590 [ 1364.743957][T25232] ? lockdep_hardirqs_on+0x94/0x140 [ 1364.749174][T25232] do_syscall_64+0x4c/0xa0 [ 1364.753615][T25232] ? clear_bhb_loop+0x60/0xb0 [ 1364.758319][T25232] ? clear_bhb_loop+0x60/0xb0 [ 1364.763015][T25232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1364.768928][T25232] RIP: 0033:0x7fc4d559e019 [ 1364.773347][T25232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.792973][T25232] RSP: 002b:00007fc4d6558028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1364.801405][T25232] RAX: ffffffffffffffda RBX: 00007fc4d5825fa0 RCX: 00007fc4d559e019 [ 1364.809384][T25232] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 1364.817358][T25232] RBP: 00007fc4d6558090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.825340][T25232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.833316][T25232] R13: 00007fc4d5826038 R14: 00007fc4d5825fa0 R15: 00007fff5669bdb8 [ 1364.841305][T25232] [ 1366.098018][T25242] netlink: 'syz.1.7020': attribute type 39 has an invalid length. [ 1366.486052][T25260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1366.494064][T25260] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.598855][T25265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.606141][T25265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.613613][T25265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.620757][T25265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.692029][T25265] device bridge0 entered promiscuous mode [ 1366.765925][T25269] netlink: 'syz.4.7030': attribute type 21 has an invalid length. [ 1366.799230][T25274] netlink: 'syz.2.7033': attribute type 39 has an invalid length. [ 1366.953352][T25276] netlink: 'syz.1.7032': attribute type 2 has an invalid length. [ 1366.961510][T25276] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7032'. [ 1367.017165][T25280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1367.026695][T25280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1367.041328][T25280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1367.054093][T25280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1367.124006][T16915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1367.757208][T25302] netlink: 'syz.4.7044': attribute type 39 has an invalid length. [ 1367.783682][T25298] can: request_module (can-proto-0) failed. [ 1368.375085][T25330] netlink: 'syz.0.7052': attribute type 2 has an invalid length. [ 1368.392050][T25330] netlink: 'syz.0.7052': attribute type 8 has an invalid length. [ 1368.431932][T25330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1368.563780][T25339] netlink: 'syz.2.7054': attribute type 21 has an invalid length. [ 1368.648204][T25344] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1368.720710][T25335] netlink: 'syz.4.7055': attribute type 2 has an invalid length. [ 1368.774019][T25335] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7055'. [ 1368.880036][T25352] netlink: 'syz.3.7061': attribute type 39 has an invalid length. [ 1369.303620][T25361] netlink: 'syz.1.7064': attribute type 2 has an invalid length. [ 1369.329259][T25361] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7064'. [ 1369.530085][T25369] sctp: [Deprecated]: syz.2.7069 (pid 25369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1369.530085][T25369] Use struct sctp_sack_info instead [ 1370.239979][T25392] FAULT_INJECTION: forcing a failure. [ 1370.239979][T25392] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.327271][T25392] CPU: 1 PID: 25392 Comm: syz.3.7076 Not tainted syzkaller #0 [ 1370.334819][T25392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1370.344950][T25392] Call Trace: [ 1370.348265][T25392] [ 1370.351242][T25392] dump_stack_lvl+0x188/0x24e [ 1370.356018][T25392] ? show_regs_print_info+0x12/0x12 [ 1370.361287][T25392] ? load_image+0x410/0x410 [ 1370.365871][T25392] ? __might_sleep+0xd0/0xd0 [ 1370.370508][T25392] ? __lock_acquire+0x7c40/0x7c40 [ 1370.375612][T25392] should_fail_ex+0x390/0x4c0 [ 1370.380383][T25392] should_failslab+0x5/0x20 [ 1370.384933][T25392] slab_pre_alloc_hook+0x59/0x300 [ 1370.390018][T25392] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1370.396503][T25392] __kmem_cache_alloc_node+0x4f/0x270 [ 1370.401955][T25392] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1370.408428][T25392] __kmalloc+0xa3/0x240 [ 1370.412664][T25392] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1370.418991][T25392] ? xdp_convert_buff_to_md+0x200/0x200 [ 1370.424581][T25392] ? __fget_files+0x28/0x460 [ 1370.429200][T25392] ? __fget_files+0x3fc/0x460 [ 1370.433949][T25392] ? xdp_convert_buff_to_md+0x200/0x200 [ 1370.439539][T25392] bpf_prog_test_run+0x31c/0x390 [ 1370.444524][T25392] __sys_bpf+0x62b/0x780 [ 1370.448800][T25392] ? bpf_link_show_fdinfo+0x380/0x380 [ 1370.454258][T25392] ? lock_chain_count+0x20/0x20 [ 1370.459175][T25392] __x64_sys_bpf+0x78/0x90 [ 1370.463633][T25392] do_syscall_64+0x4c/0xa0 [ 1370.468074][T25392] ? clear_bhb_loop+0x60/0xb0 [ 1370.472782][T25392] ? clear_bhb_loop+0x60/0xb0 [ 1370.477502][T25392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.483439][T25392] RIP: 0033:0x7f7bf299e019 [ 1370.487923][T25392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.507562][T25392] RSP: 002b:00007f7bf0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1370.516008][T25392] RAX: ffffffffffffffda RBX: 00007f7bf2c25fa0 RCX: 00007f7bf299e019 [ 1370.524012][T25392] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1370.532034][T25392] RBP: 00007f7bf0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.540033][T25392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.548021][T25392] R13: 00007f7bf2c26038 R14: 00007f7bf2c25fa0 R15: 00007fff7ba5d6b8 [ 1370.556051][T25392] [ 1371.121157][T25407] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7081'. [ 1371.740295][T17495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1374.074784][T25412] device sit0 entered promiscuous mode [ 1374.696811][T25437] validate_nla: 3 callbacks suppressed [ 1374.696827][T25437] netlink: 'syz.2.7092': attribute type 39 has an invalid length. [ 1376.422304][T25455] netlink: 'syz.4.7100': attribute type 10 has an invalid length. [ 1376.450731][T25455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7100'. [ 1376.460652][T25455] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1376.497723][T25458] netlink: 'syz.3.7097': attribute type 2 has an invalid length. [ 1376.527548][T25458] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1377.603701][T25485] netlink: 'syz.2.7109': attribute type 39 has an invalid length. [ 1378.795513][T25489] netlink: 'syz.0.7111': attribute type 21 has an invalid length. [ 1381.468851][T25497] netlink: 'syz.0.7122': attribute type 10 has an invalid length. [ 1384.029286][T25497] team0: Device vxcan1 is of different type [ 1384.589726][T25521] netlink: 'syz.2.7119': attribute type 2 has an invalid length. [ 1384.629900][T25521] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7119'. [ 1384.779956][T25522] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7118'. [ 1385.186096][T25541] netlink: 'syz.4.7125': attribute type 39 has an invalid length. [ 1385.922148][T25552] netlink: 'syz.0.7128': attribute type 2 has an invalid length. [ 1385.930352][T25552] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1386.519354][T25561] FAULT_INJECTION: forcing a failure. [ 1386.519354][T25561] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.578484][T25561] CPU: 1 PID: 25561 Comm: syz.4.7133 Not tainted syzkaller #0 [ 1386.586031][T25561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.596111][T25561] Call Trace: [ 1386.599421][T25561] [ 1386.602381][T25561] dump_stack_lvl+0x188/0x24e [ 1386.607109][T25561] ? show_regs_print_info+0x12/0x12 [ 1386.612370][T25561] ? load_image+0x410/0x410 [ 1386.616919][T25561] ? __might_sleep+0xd0/0xd0 [ 1386.621542][T25561] ? __lock_acquire+0x7c40/0x7c40 [ 1386.626686][T25561] should_fail_ex+0x390/0x4c0 [ 1386.631519][T25561] should_failslab+0x5/0x20 [ 1386.636055][T25561] slab_pre_alloc_hook+0x59/0x300 [ 1386.641114][T25561] ? apparmor_sk_alloc_security+0x74/0x100 [ 1386.646944][T25561] __kmem_cache_alloc_node+0x4f/0x270 [ 1386.652336][T25561] ? apparmor_sk_alloc_security+0x74/0x100 [ 1386.658180][T25561] kmalloc_trace+0x26/0xe0 [ 1386.662631][T25561] apparmor_sk_alloc_security+0x74/0x100 [ 1386.668282][T25561] security_sk_alloc+0x6a/0xa0 [ 1386.673070][T25561] sk_prot_alloc+0x101/0x210 [ 1386.677690][T25561] ? sk_alloc+0x20/0x330 [ 1386.681958][T25561] sk_alloc+0x36/0x330 [ 1386.686061][T25561] ? bpf_ctx_init+0x154/0x190 [ 1386.690752][T25561] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1386.696138][T25561] ? __fget_files+0x28/0x460 [ 1386.700754][T25561] ? __fget_files+0x3fc/0x460 [ 1386.705465][T25561] ? cpu_online+0xa0/0xa0 [ 1386.709806][T25561] bpf_prog_test_run+0x31c/0x390 [ 1386.714761][T25561] __sys_bpf+0x62b/0x780 [ 1386.719022][T25561] ? bpf_link_show_fdinfo+0x380/0x380 [ 1386.724425][T25561] ? lock_chain_count+0x20/0x20 [ 1386.729299][T25561] __x64_sys_bpf+0x78/0x90 [ 1386.733727][T25561] do_syscall_64+0x4c/0xa0 [ 1386.738168][T25561] ? clear_bhb_loop+0x60/0xb0 [ 1386.742878][T25561] ? clear_bhb_loop+0x60/0xb0 [ 1386.747579][T25561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.753489][T25561] RIP: 0033:0x7fc4d559e019 [ 1386.757922][T25561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.777555][T25561] RSP: 002b:00007fc4d6558028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.785994][T25561] RAX: ffffffffffffffda RBX: 00007fc4d5825fa0 RCX: 00007fc4d559e019 [ 1386.793988][T25561] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1386.801986][T25561] RBP: 00007fc4d6558090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.809986][T25561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.817969][T25561] R13: 00007fc4d5826038 R14: 00007fc4d5825fa0 R15: 00007fff5669bdb8 [ 1386.825966][T25561] [ 1386.889048][T25563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1386.927599][T25563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1386.970398][T25568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1387.027491][T25563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1387.086747][T25567] netlink: 'syz.0.7135': attribute type 2 has an invalid length. [ 1387.094996][T25567] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7135'. [ 1387.379347][T25575] netlink: 'syz.4.7137': attribute type 2 has an invalid length. [ 1387.410227][T25575] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1387.659963][T25586] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7138'. [ 1387.900450][T25598] netlink: 'syz.0.7143': attribute type 39 has an invalid length. [ 1388.338701][T25604] netlink: 'syz.1.7144': attribute type 10 has an invalid length. [ 1388.546766][T25607] netlink: 'syz.3.7145': attribute type 2 has an invalid length. [ 1388.585483][T25607] netlink: 'syz.3.7145': attribute type 8 has an invalid length. [ 1389.062488][T12770] Bluetooth: hci3: command 0x0406 tx timeout [ 1389.505371][T25619] netlink: 'syz.4.7149': attribute type 2 has an invalid length. [ 1389.681666][T25621] netlink: 'syz.3.7147': attribute type 2 has an invalid length. [ 1389.724403][T25621] __nla_validate_parse: 2 callbacks suppressed [ 1389.724444][T25621] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7147'. [ 1390.067099][T25636] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7153'. [ 1390.085470][T25643] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1390.113971][T25643] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1390.137419][T25640] netlink: 'syz.1.7156': attribute type 2 has an invalid length. [ 1390.172223][T25640] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7156'. [ 1390.188506][T25644] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1391.265245][T25659] netlink: 'syz.2.7161': attribute type 39 has an invalid length. [ 1391.486199][T25668] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7164'. [ 1392.182721][T25658] validate_nla: 2 callbacks suppressed [ 1392.182739][T25658] netlink: 'syz.4.7162': attribute type 39 has an invalid length. [ 1392.209457][T25672] IPv6: NLM_F_CREATE should be specified when creating new route [ 1392.217520][T25672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1392.224807][T25672] IPv6: NLM_F_CREATE should be set when creating new route [ 1392.232169][T25672] IPv6: NLM_F_CREATE should be set when creating new route [ 1392.239405][T25672] IPv6: NLM_F_CREATE should be set when creating new route [ 1392.763815][T25687] netlink: 'syz.4.7169': attribute type 2 has an invalid length. [ 1392.771683][T25687] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7169'. [ 1392.790144][T25691] netlink: 'syz.2.7172': attribute type 2 has an invalid length. [ 1392.805785][T25691] netlink: 'syz.2.7172': attribute type 8 has an invalid length. [ 1392.815412][T25691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7172'. [ 1393.843723][T25713] netlink: 'syz.4.7178': attribute type 2 has an invalid length. [ 1393.882255][T25713] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1396.514974][T25766] netlink: 'syz.0.7200': attribute type 2 has an invalid length. [ 1396.608921][T25766] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7200'. [ 1396.898941][T25770] netlink: 'syz.2.7202': attribute type 1 has an invalid length. [ 1396.914972][T25770] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.7202'. [ 1397.574260][T25790] netlink: 'syz.2.7209': attribute type 10 has an invalid length. [ 1398.266375][T25790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1398.916719][T25814] device syzkaller0 entered promiscuous mode [ 1399.680404][T25827] netlink: 'syz.0.7224': attribute type 2 has an invalid length. [ 1399.723150][T25827] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7224'. [ 1401.192993][T25874] netlink: 'syz.4.7238': attribute type 39 has an invalid length. [ 1402.297120][T25886] netlink: 'syz.1.7245': attribute type 2 has an invalid length. [ 1402.313204][T25886] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7245'. [ 1402.394446][T25896] netlink: 'syz.0.7249': attribute type 2 has an invalid length. [ 1402.411594][T25896] netlink: 'syz.0.7249': attribute type 8 has an invalid length. [ 1402.429047][T25896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1403.454671][T25913] netlink: 'syz.1.7253': attribute type 2 has an invalid length. [ 1403.481924][T25921] netlink: 'syz.2.7258': attribute type 39 has an invalid length. [ 1403.482272][T25913] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7253'. [ 1403.746833][T25919] netlink: 'syz.4.7257': attribute type 2 has an invalid length. [ 1403.778415][T25919] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7257'. [ 1403.995191][T16915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1405.145861][T25959] FAULT_INJECTION: forcing a failure. [ 1405.145861][T25959] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.268627][T25966] netlink: 'syz.2.7277': attribute type 39 has an invalid length. [ 1405.309203][T25959] CPU: 1 PID: 25959 Comm: syz.1.7276 Not tainted syzkaller #0 [ 1405.316744][T25959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1405.326847][T25959] Call Trace: [ 1405.330151][T25959] [ 1405.333129][T25959] dump_stack_lvl+0x188/0x24e [ 1405.337892][T25959] ? show_regs_print_info+0x12/0x12 [ 1405.343137][T25959] ? load_image+0x410/0x410 [ 1405.347700][T25959] ? __might_sleep+0xd0/0xd0 [ 1405.352337][T25959] ? __lock_acquire+0x7c40/0x7c40 [ 1405.357418][T25959] should_fail_ex+0x390/0x4c0 [ 1405.362148][T25959] should_failslab+0x5/0x20 [ 1405.366684][T25959] slab_pre_alloc_hook+0x59/0x300 [ 1405.371762][T25959] ? tomoyo_encode+0x28a/0x550 [ 1405.376568][T25959] __kmem_cache_alloc_node+0x4f/0x270 [ 1405.382023][T25959] ? tomoyo_encode+0x28a/0x550 [ 1405.386834][T25959] __kmalloc+0xa3/0x240 [ 1405.391035][T25959] tomoyo_encode+0x28a/0x550 [ 1405.395673][T25959] tomoyo_realpath_from_path+0x578/0x5c0 [ 1405.401362][T25959] ? tomoyo_domain+0xd2/0x120 [ 1405.406079][T25959] ? tomoyo_path_number_perm+0x205/0x650 [ 1405.411751][T25959] tomoyo_path_number_perm+0x22f/0x650 [ 1405.417270][T25959] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1405.422775][T25959] ? ksys_write+0x1ce/0x260 [ 1405.427330][T25959] ? common_file_perm+0x171/0x1c0 [ 1405.432444][T25959] ? __fget_files+0x28/0x460 [ 1405.437114][T25959] security_file_ioctl+0x6c/0xa0 [ 1405.442110][T25959] __se_sys_ioctl+0x48/0x170 [ 1405.446773][T25959] do_syscall_64+0x4c/0xa0 [ 1405.451222][T25959] ? clear_bhb_loop+0x60/0xb0 [ 1405.455941][T25959] ? clear_bhb_loop+0x60/0xb0 [ 1405.460674][T25959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1405.466613][T25959] RIP: 0033:0x7f3698d9e019 [ 1405.471065][T25959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.490709][T25959] RSP: 002b:00007f3699be5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.499157][T25959] RAX: ffffffffffffffda RBX: 00007f3699025fa0 RCX: 00007f3698d9e019 [ 1405.507164][T25959] RDX: 0000200000000000 RSI: 00000000000089ef RDI: 0000000000000003 [ 1405.515157][T25959] RBP: 00007f3699be5090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.523160][T25959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.531169][T25959] R13: 00007f3699026038 R14: 00007f3699025fa0 R15: 00007ffe8042ecd8 [ 1405.539188][T25959] [ 1405.560180][T25959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1405.574355][T25960] netlink: 'syz.3.7275': attribute type 2 has an invalid length. [ 1405.602248][T25960] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7275'. [ 1406.088526][T25978] netlink: 'syz.1.7281': attribute type 2 has an invalid length. [ 1406.104235][T25978] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7281'. [ 1406.451185][T25989] netlink: 'syz.0.7284': attribute type 2 has an invalid length. [ 1406.471884][T25989] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7284'. [ 1407.839867][T25993] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7286'. [ 1407.901512][T25994] netlink: 'syz.2.7285': attribute type 10 has an invalid length. [ 1407.910944][T25994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7285'. [ 1407.925170][T25994] device dummy0 entered promiscuous mode [ 1408.496364][T25994] bond0: (slave dummy0): Releasing backup interface [ 1408.535933][T25994] bridge0: port 3(dummy0) entered blocking state [ 1408.582438][T25994] bridge0: port 3(dummy0) entered disabled state [ 1408.634396][T25996] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7285'. [ 1408.656844][T25996] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7285'. [ 1408.740926][T25996] bond0: (slave bond_slave_0): Releasing backup interface [ 1408.805353][T25996] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1409.018226][T26009] netlink: 'syz.2.7290': attribute type 3 has an invalid length. [ 1409.029477][T26009] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7290'. [ 1409.374243][T26023] netlink: 'syz.3.7295': attribute type 39 has an invalid length. [ 1410.194715][T26050] netlink: 'syz.1.7307': attribute type 2 has an invalid length. [ 1410.242847][T26050] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7307'. [ 1410.321394][T26065] netlink: 'syz.0.7311': attribute type 12 has an invalid length. [ 1410.335292][T26065] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7311'. [ 1410.349371][T26065] netlink: 'syz.0.7311': attribute type 21 has an invalid length. [ 1410.560048][T26067] netlink: 'syz.3.7312': attribute type 2 has an invalid length. [ 1410.602017][T26067] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7312'. [ 1411.264059][T26089] netlink: 'syz.4.7320': attribute type 2 has an invalid length. [ 1411.302240][T26089] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1411.438900][T26100] netlink: 'syz.2.7324': attribute type 39 has an invalid length. [ 1411.718205][T26107] netlink: 'syz.1.7329': attribute type 2 has an invalid length. [ 1411.726752][T26107] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7329'. [ 1412.036026][T26123] netlink: 'syz.3.7336': attribute type 12 has an invalid length. [ 1413.372962][T26166] __nla_validate_parse: 2 callbacks suppressed [ 1413.373055][T26166] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7354'. [ 1413.592357][T26172] device syzkaller0 entered promiscuous mode [ 1414.515175][T26196] validate_nla: 4 callbacks suppressed [ 1414.515209][T26196] netlink: 'syz.0.7364': attribute type 2 has an invalid length. [ 1414.546496][T26196] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1415.468421][T26187] netlink: 'syz.1.7361': attribute type 12 has an invalid length. [ 1415.470387][T26181] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1415.476471][T26187] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7361'. [ 1415.486868][T26181] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1415.505097][T26181] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1415.517006][T26188] netlink: 'syz.1.7361': attribute type 21 has an invalid length. [ 1416.156609][T26218] netlink: 'syz.4.7373': attribute type 2 has an invalid length. [ 1416.191040][T26218] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7373'. [ 1416.486113][T26229] netlink: 'syz.2.7376': attribute type 39 has an invalid length. [ 1416.615534][T26228] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 1416.624699][T26228] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7377'. [ 1416.660749][T26235] netlink: 'syz.0.7378': attribute type 12 has an invalid length. [ 1416.678070][T26235] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7378'. [ 1416.717512][T26236] netlink: 'syz.0.7378': attribute type 21 has an invalid length. [ 1417.026425][T26246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.036904][T26246] device bridge0 left promiscuous mode [ 1417.162249][T26246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.170048][T26246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.217015][T26246] device bridge0 entered promiscuous mode [ 1417.255368][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1417.893449][T26266] netlink: 'syz.2.7391': attribute type 2 has an invalid length. [ 1417.927744][T26266] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7391'. [ 1418.408667][T26283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1418.431855][T26283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1418.462130][T26287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1418.477538][T26275] netlink: 'syz.4.7393': attribute type 2 has an invalid length. [ 1418.512973][T26283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1418.528754][T26275] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1419.051655][T26302] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1419.389734][T26308] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7406'. [ 1420.860158][T26346] validate_nla: 4 callbacks suppressed [ 1420.860177][T26346] netlink: 'syz.0.7421': attribute type 39 has an invalid length. [ 1421.139189][T26354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1421.147009][T26354] IPv6: NLM_F_CREATE should be set when creating new route [ 1421.155879][T26354] IPv6: NLM_F_CREATE should be set when creating new route [ 1421.163863][T26354] IPv6: NLM_F_CREATE should be set when creating new route [ 1421.325216][T26363] netlink: 'syz.1.7424': attribute type 12 has an invalid length. [ 1421.367995][T26363] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7424'. [ 1421.458190][T26366] netlink: 'syz.1.7424': attribute type 21 has an invalid length. [ 1421.509851][T26368] netlink: 'syz.2.7427': attribute type 2 has an invalid length. [ 1421.525830][T26368] netlink: 'syz.2.7427': attribute type 8 has an invalid length. [ 1421.551877][T26368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7427'. [ 1421.651309][T26375] netlink: 'syz.3.7425': attribute type 2 has an invalid length. [ 1421.723553][T26375] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7425'. [ 1422.826109][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.832609][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.179421][T26408] netlink: 'syz.4.7440': attribute type 39 has an invalid length. [ 1423.287476][T26402] netlink: 'syz.0.7439': attribute type 2 has an invalid length. [ 1423.677611][T26407] netlink: 'syz.3.7441': attribute type 2 has an invalid length. [ 1423.722106][T26407] __nla_validate_parse: 2 callbacks suppressed [ 1423.722148][T26407] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7441'. [ 1424.052861][T26422] netlink: 'syz.2.7447': attribute type 12 has an invalid length. [ 1424.107498][T26422] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7447'. [ 1424.459440][T26430] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7448'. [ 1425.324485][T26449] FAULT_INJECTION: forcing a failure. [ 1425.324485][T26449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.391506][T26449] CPU: 0 PID: 26449 Comm: syz.0.7456 Not tainted syzkaller #0 [ 1425.399050][T26449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.409219][T26449] Call Trace: [ 1425.412575][T26449] [ 1425.415563][T26449] dump_stack_lvl+0x188/0x24e [ 1425.420343][T26449] ? show_regs_print_info+0x12/0x12 [ 1425.425611][T26449] ? load_image+0x410/0x410 [ 1425.430272][T26449] ? __lock_acquire+0x7c40/0x7c40 [ 1425.435389][T26449] should_fail_ex+0x390/0x4c0 [ 1425.440144][T26449] _copy_from_user+0x2c/0x170 [ 1425.444902][T26449] bpf_prog_test_run_flow_dissector+0x27d/0x640 [ 1425.451257][T26449] ? xdp_convert_buff_to_md+0x200/0x200 [ 1425.456881][T26449] ? __fget_files+0x28/0x460 [ 1425.461541][T26449] ? __fget_files+0x3fc/0x460 [ 1425.466327][T26449] ? xdp_convert_buff_to_md+0x200/0x200 [ 1425.471945][T26449] bpf_prog_test_run+0x31c/0x390 [ 1425.477011][T26449] __sys_bpf+0x62b/0x780 [ 1425.481349][T26449] ? bpf_link_show_fdinfo+0x380/0x380 [ 1425.486871][T26449] ? lock_chain_count+0x20/0x20 [ 1425.491819][T26449] __x64_sys_bpf+0x78/0x90 [ 1425.496319][T26449] do_syscall_64+0x4c/0xa0 [ 1425.500812][T26449] ? clear_bhb_loop+0x60/0xb0 [ 1425.505553][T26449] ? clear_bhb_loop+0x60/0xb0 [ 1425.510296][T26449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1425.516241][T26449] RIP: 0033:0x7f7cad79e019 [ 1425.520717][T26449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.540376][T26449] RSP: 002b:00007f7cae593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1425.548947][T26449] RAX: ffffffffffffffda RBX: 00007f7cada25fa0 RCX: 00007f7cad79e019 [ 1425.557016][T26449] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1425.565038][T26449] RBP: 00007f7cae593090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.573060][T26449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.581088][T26449] R13: 00007f7cada26038 R14: 00007f7cada25fa0 R15: 00007ffe90206c48 [ 1425.589161][T26449] [ 1425.673809][T26439] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7451'. [ 1426.286956][T26459] validate_nla: 3 callbacks suppressed [ 1426.286989][T26459] netlink: 'syz.2.7458': attribute type 2 has an invalid length. [ 1426.323691][T26459] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7458'. [ 1426.431103][T26462] FAULT_INJECTION: forcing a failure. [ 1426.431103][T26462] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.470824][T26462] CPU: 0 PID: 26462 Comm: syz.0.7462 Not tainted syzkaller #0 [ 1426.478379][T26462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1426.488485][T26462] Call Trace: [ 1426.491799][T26462] [ 1426.494762][T26462] dump_stack_lvl+0x188/0x24e [ 1426.499491][T26462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1426.505697][T26462] ? show_regs_print_info+0x12/0x12 [ 1426.510932][T26462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1426.517135][T26462] should_fail_ex+0x390/0x4c0 [ 1426.521849][T26462] should_failslab+0x5/0x20 [ 1426.526385][T26462] slab_pre_alloc_hook+0x59/0x300 [ 1426.531446][T26462] ? apparmor_sk_alloc_security+0x74/0x100 [ 1426.537288][T26462] __kmem_cache_alloc_node+0x4f/0x270 [ 1426.542698][T26462] ? apparmor_sk_alloc_security+0x74/0x100 [ 1426.548550][T26462] kmalloc_trace+0x26/0xe0 [ 1426.553020][T26462] apparmor_sk_alloc_security+0x74/0x100 [ 1426.558709][T26462] security_sk_alloc+0x6a/0xa0 [ 1426.563514][T26462] sk_prot_alloc+0x101/0x210 [ 1426.568143][T26462] ? sk_alloc+0x20/0x330 [ 1426.572430][T26462] sk_alloc+0x36/0x330 [ 1426.576544][T26462] ? bpf_ctx_init+0x154/0x190 [ 1426.581264][T26462] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1426.586682][T26462] ? __fget_files+0x28/0x460 [ 1426.591314][T26462] ? __fget_files+0x3fc/0x460 [ 1426.596045][T26462] ? cpu_online+0xa0/0xa0 [ 1426.600414][T26462] bpf_prog_test_run+0x31c/0x390 [ 1426.605411][T26462] __sys_bpf+0x62b/0x780 [ 1426.609697][T26462] ? bpf_link_show_fdinfo+0x380/0x380 [ 1426.615124][T26462] ? lock_chain_count+0x20/0x20 [ 1426.620016][T26462] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1426.626042][T26462] __x64_sys_bpf+0x78/0x90 [ 1426.630507][T26462] do_syscall_64+0x4c/0xa0 [ 1426.634967][T26462] ? clear_bhb_loop+0x60/0xb0 [ 1426.639677][T26462] ? clear_bhb_loop+0x60/0xb0 [ 1426.644378][T26462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1426.650290][T26462] RIP: 0033:0x7f7cad79e019 [ 1426.654731][T26462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.674372][T26462] RSP: 002b:00007f7cae593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1426.682902][T26462] RAX: ffffffffffffffda RBX: 00007f7cada25fa0 RCX: 00007f7cad79e019 [ 1426.690902][T26462] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1426.698899][T26462] RBP: 00007f7cae593090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.706899][T26462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.714897][T26462] R13: 00007f7cada26038 R14: 00007f7cada25fa0 R15: 00007ffe90206c48 [ 1426.722915][T26462] [ 1426.770647][T26469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1426.778421][T26469] IPv6: NLM_F_CREATE should be set when creating new route [ 1426.956589][T26470] netlink: 'syz.3.7460': attribute type 39 has an invalid length. [ 1428.216280][T26511] device syzkaller0 left promiscuous mode [ 1428.326142][T26506] netlink: 'syz.2.7474': attribute type 2 has an invalid length. [ 1428.384166][T26506] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7474'. [ 1428.911257][T26528] netlink: 'syz.4.7483': attribute type 39 has an invalid length. [ 1430.435092][T26552] netlink: 'syz.0.7492': attribute type 2 has an invalid length. [ 1430.463607][T26552] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7492'. [ 1432.708224][T26583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7502'. [ 1432.725737][T26583] netlink: 'syz.0.7502': attribute type 12 has an invalid length. [ 1432.737107][T26583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7502'. [ 1432.789638][T26583] netlink: 'syz.0.7502': attribute type 3 has an invalid length. [ 1432.817970][T26583] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7502'. [ 1432.962461][T26588] netlink: 'syz.1.7501': attribute type 39 has an invalid length. [ 1435.029173][T16911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1435.333883][T26650] netlink: 'syz.1.7522': attribute type 39 has an invalid length. [ 1438.009311][T26680] netlink: 'syz.0.7532': attribute type 2 has an invalid length. [ 1438.034420][T26680] netlink: 'syz.0.7532': attribute type 8 has an invalid length. [ 1438.055265][T26680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7532'. [ 1438.075152][T26678] netlink: 'syz.4.7531': attribute type 2 has an invalid length. [ 1438.092043][T26678] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7531'. [ 1438.933275][T26699] netlink: 'syz.2.7541': attribute type 5 has an invalid length. [ 1438.941243][T26699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7541'. [ 1439.721549][T26724] netlink: 'syz.3.7545': attribute type 39 has an invalid length. [ 1440.443393][T26736] FAULT_INJECTION: forcing a failure. [ 1440.443393][T26736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.514931][T26736] CPU: 0 PID: 26736 Comm: syz.2.7554 Not tainted syzkaller #0 [ 1440.522465][T26736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1440.532557][T26736] Call Trace: [ 1440.535877][T26736] [ 1440.538850][T26736] dump_stack_lvl+0x188/0x24e [ 1440.543576][T26736] ? show_regs_print_info+0x12/0x12 [ 1440.548830][T26736] ? load_image+0x410/0x410 [ 1440.553369][T26736] ? __lock_acquire+0x7c40/0x7c40 [ 1440.558448][T26736] should_fail_ex+0x390/0x4c0 [ 1440.563253][T26736] _copy_from_user+0x2c/0x170 [ 1440.567990][T26736] ___sys_sendmsg+0x1c3/0x360 [ 1440.572728][T26736] ? __sys_sendmsg+0x2a0/0x2a0 [ 1440.577578][T26736] ? ktime_get+0x7b/0x270 [ 1440.581974][T26736] __se_sys_sendmsg+0x1c3/0x2b0 [ 1440.586901][T26736] ? ct_nmi_exit+0x145/0x1c0 [ 1440.591527][T26736] ? __x64_sys_sendmsg+0x80/0x80 [ 1440.596530][T26736] ? lockdep_hardirqs_on+0x94/0x140 [ 1440.601779][T26736] do_syscall_64+0x4c/0xa0 [ 1440.606250][T26736] ? clear_bhb_loop+0x60/0xb0 [ 1440.610979][T26736] ? clear_bhb_loop+0x60/0xb0 [ 1440.615715][T26736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.621749][T26736] RIP: 0033:0x7f626c59e019 [ 1440.626202][T26736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.645848][T26736] RSP: 002b:00007f626d55a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.654330][T26736] RAX: ffffffffffffffda RBX: 00007f626c825fa0 RCX: 00007f626c59e019 [ 1440.662336][T26736] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 000000000000000d [ 1440.670339][T26736] RBP: 00007f626d55a090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.678368][T26736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.686368][T26736] R13: 00007f626c826038 R14: 00007f626c825fa0 R15: 00007ffdbf4632a8 [ 1440.694385][T26736] [ 1442.810287][T26788] netlink: 'syz.0.7569': attribute type 10 has an invalid length. [ 1442.862288][T26788] device bridge_slave_1 left promiscuous mode [ 1442.890404][T26788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.944030][T26789] netlink: 'syz.1.7568': attribute type 39 has an invalid length. [ 1444.128313][T26822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1444.149953][T26822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1444.174536][T26822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1444.197732][T26822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1445.197622][T26849] netlink: 'syz.2.7592': attribute type 39 has an invalid length. [ 1445.916719][T26859] netlink: 'syz.3.7599': attribute type 10 has an invalid length. [ 1447.342424][T26894] netlink: 'syz.0.7611': attribute type 39 has an invalid length. [ 1448.212327][T26918] FAULT_INJECTION: forcing a failure. [ 1448.212327][T26918] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.257973][T26918] CPU: 0 PID: 26918 Comm: syz.1.7621 Not tainted syzkaller #0 [ 1448.265500][T26918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1448.275588][T26918] Call Trace: [ 1448.278899][T26918] [ 1448.281872][T26918] dump_stack_lvl+0x188/0x24e [ 1448.286623][T26918] ? sctp_sendmsg+0x1686/0x2940 [ 1448.291533][T26918] ? ___sys_sendmsg+0x2a2/0x360 [ 1448.296472][T26918] ? show_regs_print_info+0x12/0x12 [ 1448.301722][T26918] ? load_image+0x410/0x410 [ 1448.306380][T26918] should_fail_ex+0x390/0x4c0 [ 1448.311110][T26918] should_failslab+0x5/0x20 [ 1448.315658][T26918] slab_pre_alloc_hook+0x59/0x300 [ 1448.320741][T26918] ? sctp_add_bind_addr+0x89/0x350 [ 1448.325899][T26918] __kmem_cache_alloc_node+0x4f/0x270 [ 1448.331324][T26918] ? sctp_add_bind_addr+0x89/0x350 [ 1448.336496][T26918] kmalloc_trace+0x26/0xe0 [ 1448.340980][T26918] sctp_add_bind_addr+0x89/0x350 [ 1448.345992][T26918] sctp_copy_local_addr_list+0x317/0x4d0 [ 1448.351821][T26918] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1448.357603][T26918] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1448.363796][T26918] ? sctp_v4_is_any+0x31/0x50 [ 1448.368553][T26918] ? sctp_copy_one_addr+0x93/0x660 [ 1448.373733][T26918] sctp_bind_addr_copy+0xaf/0x3c0 [ 1448.378808][T26918] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1448.385202][T26918] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1448.390568][T26918] ? __sctp_connect+0xd80/0xd80 [ 1448.395479][T26918] ? __local_bh_enable_ip+0x136/0x1c0 [ 1448.400902][T26918] ? _local_bh_enable+0xa0/0xa0 [ 1448.405798][T26918] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1448.411648][T26918] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1448.417537][T26918] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1448.423169][T26918] ? security_sctp_bind_connect+0x85/0xb0 [ 1448.428979][T26918] sctp_sendmsg+0x1686/0x2940 [ 1448.433737][T26918] ? sctp_getsockopt+0x8a0/0x8a0 [ 1448.438720][T26918] ? __might_fault+0xa6/0x120 [ 1448.443446][T26918] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1448.449909][T26918] ? aa_sock_msg_perm+0x94/0x150 [ 1448.454965][T26918] ? inet_sendmsg+0x7a/0x2a0 [ 1448.459618][T26918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1448.464952][T26918] ? inet_send_prepare+0x250/0x250 [ 1448.470132][T26918] ____sys_sendmsg+0x5ed/0x9a0 [ 1448.474968][T26918] ? __sys_sendmsg_sock+0x30/0x30 [ 1448.480045][T26918] ? __import_iovec+0x306/0x510 [ 1448.484970][T26918] ? import_iovec+0x6f/0xa0 [ 1448.489569][T26918] ___sys_sendmsg+0x2a2/0x360 [ 1448.494328][T26918] ? __sys_sendmsg+0x2a0/0x2a0 [ 1448.499183][T26918] ? __lock_acquire+0x7c40/0x7c40 [ 1448.504307][T26918] __se_sys_sendmsg+0x1c3/0x2b0 [ 1448.509223][T26918] ? __x64_sys_sendmsg+0x80/0x80 [ 1448.514258][T26918] ? lockdep_hardirqs_on+0x94/0x140 [ 1448.519505][T26918] do_syscall_64+0x4c/0xa0 [ 1448.523970][T26918] ? clear_bhb_loop+0x60/0xb0 [ 1448.528688][T26918] ? clear_bhb_loop+0x60/0xb0 [ 1448.533409][T26918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.539460][T26918] RIP: 0033:0x7f3698d9e019 [ 1448.543917][T26918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.563571][T26918] RSP: 002b:00007f3699be5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.572045][T26918] RAX: ffffffffffffffda RBX: 00007f3699025fa0 RCX: 00007f3698d9e019 [ 1448.580085][T26918] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1448.588104][T26918] RBP: 00007f3699be5090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.596112][T26918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.604151][T26918] R13: 00007f3699026038 R14: 00007f3699025fa0 R15: 00007ffe8042ecd8 [ 1448.612203][T26918] [ 1449.007243][T26937] netlink: 'syz.2.7628': attribute type 21 has an invalid length. [ 1449.032227][T26937] IPv6: NLM_F_CREATE should be specified when creating new route [ 1449.057645][T26937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1449.064948][T26937] IPv6: NLM_F_CREATE should be set when creating new route [ 1449.072262][T26937] IPv6: NLM_F_CREATE should be set when creating new route [ 1449.079504][T26937] IPv6: NLM_F_CREATE should be set when creating new route [ 1449.182853][T26945] netlink: 'syz.3.7630': attribute type 2 has an invalid length. [ 1449.190661][T26945] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1449.513558][T26947] netlink: 'syz.0.7631': attribute type 2 has an invalid length. [ 1449.521874][T26947] netlink: 'syz.0.7631': attribute type 8 has an invalid length. [ 1449.530133][T26947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1449.720860][T26954] netlink: 'syz.2.7633': attribute type 39 has an invalid length. [ 1449.950524][T26959] netlink: 'syz.1.7635': attribute type 21 has an invalid length. [ 1451.125946][T26992] netlink: 'syz.1.7652': attribute type 2 has an invalid length. [ 1451.156383][T26992] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7652'. [ 1451.846899][T27021] netlink: 'syz.0.7661': attribute type 21 has an invalid length. [ 1453.359332][T27065] netlink: 'syz.1.7674': attribute type 2 has an invalid length. [ 1453.376934][T27065] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7674'. [ 1453.502405][T27069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1453.634830][T27079] netlink: 'syz.0.7680': attribute type 12 has an invalid length. [ 1453.659668][T27079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7680'. [ 1454.223667][T27095] netlink: 'syz.1.7688': attribute type 4 has an invalid length. [ 1454.260495][T27095] netlink: 'syz.1.7688': attribute type 1 has an invalid length. [ 1454.287281][T27095] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1454.465306][T27096] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1454.494197][T27096] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1454.510131][T27096] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1455.359289][T27119] netlink: 'syz.3.7698': attribute type 2 has an invalid length. [ 1455.385169][T27119] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1456.431572][T27153] netlink: 'syz.4.7708': attribute type 22 has an invalid length. [ 1456.472015][T27153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7708'. [ 1456.969303][T27162] netlink: 'syz.2.7710': attribute type 2 has an invalid length. [ 1457.002322][T27162] netlink: 'syz.2.7710': attribute type 8 has an invalid length. [ 1457.037237][T27162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7710'. [ 1457.800704][T27191] netlink: 'syz.4.7719': attribute type 2 has an invalid length. [ 1457.831189][T27191] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7719'. [ 1459.023551][T27231] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.7732'. [ 1459.096886][T27235] FAULT_INJECTION: forcing a failure. [ 1459.096886][T27235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.125320][T27235] CPU: 1 PID: 27235 Comm: syz.0.7734 Not tainted syzkaller #0 [ 1459.132837][T27235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1459.142934][T27235] Call Trace: [ 1459.146242][T27235] [ 1459.149192][T27235] dump_stack_lvl+0x188/0x24e [ 1459.153912][T27235] ? show_regs_print_info+0x12/0x12 [ 1459.159155][T27235] ? load_image+0x410/0x410 [ 1459.163700][T27235] ? __lock_acquire+0x7c40/0x7c40 [ 1459.168775][T27235] ? snprintf+0xe5/0x140 [ 1459.173061][T27235] should_fail_ex+0x390/0x4c0 [ 1459.177802][T27235] _copy_to_user+0x2c/0x130 [ 1459.182350][T27235] simple_read_from_buffer+0xe3/0x150 [ 1459.187769][T27235] proc_fail_nth_read+0x1a6/0x220 [ 1459.192838][T27235] ? proc_fault_inject_write+0x310/0x310 [ 1459.198525][T27235] ? fsnotify_perm+0x248/0x550 [ 1459.203323][T27235] ? proc_fault_inject_write+0x310/0x310 [ 1459.208989][T27235] vfs_read+0x2db/0x960 [ 1459.213207][T27235] ? kernel_read+0x1e0/0x1e0 [ 1459.217841][T27235] ? __fget_files+0x28/0x460 [ 1459.222470][T27235] ? __fget_files+0x3fc/0x460 [ 1459.227207][T27235] ? __fdget_pos+0x2ae/0x360 [ 1459.231839][T27235] ? ksys_read+0x70/0x260 [ 1459.236217][T27235] ksys_read+0x14d/0x260 [ 1459.240503][T27235] ? vfs_write+0x9a0/0x9a0 [ 1459.244963][T27235] ? lockdep_hardirqs_on+0x94/0x140 [ 1459.250204][T27235] do_syscall_64+0x4c/0xa0 [ 1459.254662][T27235] ? clear_bhb_loop+0x60/0xb0 [ 1459.259368][T27235] ? clear_bhb_loop+0x60/0xb0 [ 1459.264098][T27235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.270053][T27235] RIP: 0033:0x7f7cad75e84e [ 1459.274517][T27235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1459.294149][T27235] RSP: 002b:00007f7cae592fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1459.302604][T27235] RAX: ffffffffffffffda RBX: 00007f7cae5936c0 RCX: 00007f7cad75e84e [ 1459.310608][T27235] RDX: 000000000000000f RSI: 00007f7cae5930a0 RDI: 0000000000000004 [ 1459.318594][T27235] RBP: 00007f7cae593090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.326586][T27235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.334582][T27235] R13: 00007f7cada26038 R14: 00007f7cada25fa0 R15: 00007ffe90206c48 [ 1459.342600][T27235] [ 1459.365245][T27236] netlink: 'syz.2.7732': attribute type 39 has an invalid length. [ 1459.799938][T27246] netlink: 'syz.2.7736': attribute type 1 has an invalid length. [ 1459.810646][T27246] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7736'. [ 1459.935695][T27247] netlink: 'syz.3.7737': attribute type 2 has an invalid length. [ 1459.968340][T27247] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7737'. [ 1461.314323][T27280] netlink: 'syz.3.7747': attribute type 3 has an invalid length. [ 1461.393760][T27280] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7747'. [ 1461.703292][T27297] netlink: 'syz.4.7751': attribute type 39 has an invalid length. [ 1461.764844][T27293] netlink: 'syz.2.7750': attribute type 2 has an invalid length. [ 1461.784229][T27293] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7750'. [ 1462.199116][T27303] netlink: 'syz.3.7753': attribute type 2 has an invalid length. [ 1462.221005][T27303] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1463.970839][T27344] netlink: 'syz.1.7767': attribute type 2 has an invalid length. [ 1464.119681][T27355] netlink: 'syz.3.7770': attribute type 39 has an invalid length. [ 1464.705988][T27359] netlink: 'syz.4.7772': attribute type 2 has an invalid length. [ 1464.757426][T27359] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7772'. [ 1464.859345][T27367] netlink: 'syz.0.7773': attribute type 2 has an invalid length. [ 1464.940014][T27367] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7773'. [ 1467.369933][T27412] netlink: 'syz.0.7786': attribute type 1 has an invalid length. [ 1467.470419][T27412] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7786'. [ 1467.871446][T27419] netlink: 'syz.4.7788': attribute type 39 has an invalid length. [ 1467.965434][T27418] netlink: 'syz.2.7787': attribute type 2 has an invalid length. [ 1467.998702][T27418] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7787'. [ 1468.134904][T27422] netlink: 'syz.0.7789': attribute type 2 has an invalid length. [ 1468.157948][T27422] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7789'. [ 1468.715661][T27447] device syzkaller0 entered promiscuous mode [ 1468.927795][T27452] netlink: 'syz.4.7801': attribute type 1 has an invalid length. [ 1468.940526][T27452] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7801'. [ 1471.075089][T27490] netlink: 'syz.1.7810': attribute type 39 has an invalid length. [ 1471.204308][T27492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.143762][T27498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.151055][T27498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.210223][T27498] device bridge0 entered promiscuous mode [ 1474.241888][T16911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1474.477813][T27513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1474.688621][T27513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1474.776797][T27519] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1474.799637][T27525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1475.865428][T27553] netlink: 'syz.0.7829': attribute type 39 has an invalid length. [ 1475.970433][T27552] netlink: 'syz.2.7830': attribute type 2 has an invalid length. [ 1476.041878][T27552] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1476.078425][T27556] netlink: 'syz.3.7831': attribute type 10 has an invalid length. [ 1476.108079][T27556] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7831'. [ 1476.960568][T27568] netlink: 'syz.4.7833': attribute type 2 has an invalid length. [ 1476.993236][T27568] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7833'. [ 1477.074068][T27578] netlink: 'syz.0.7839': attribute type 2 has an invalid length. [ 1477.097653][T27578] netlink: 'syz.0.7839': attribute type 8 has an invalid length. [ 1477.108978][T27578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7839'. [ 1478.250717][T27603] netlink: 'syz.2.7846': attribute type 39 has an invalid length. [ 1478.580980][T27607] netlink: 'syz.0.7847': attribute type 2 has an invalid length. [ 1478.604435][T27607] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7847'. [ 1479.053396][T27615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7852'. [ 1479.080514][T27615] : renamed from caif0 [ 1479.096995][T27615] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1479.563363][T27628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.572700][T27628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.653526][T27628] device bridge0 left promiscuous mode [ 1479.705370][T27635] netlink: 'syz.0.7866': attribute type 2 has an invalid length. [ 1479.731017][T27635] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7866'. [ 1479.778854][T27638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.786049][T27638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.793546][T27638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.800678][T27638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.905491][T27638] device bridge0 entered promiscuous mode [ 1480.822092][T16909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1480.953649][T27662] netlink: 'syz.3.7863': attribute type 39 has an invalid length. [ 1482.399573][T27685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.523735][T27685] device bridge0 left promiscuous mode [ 1482.813733][T27698] netlink: 'syz.4.7875': attribute type 2 has an invalid length. [ 1482.841678][T27698] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7875'. [ 1483.027534][T27685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.035776][T27685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.154561][T27685] device bridge0 entered promiscuous mode [ 1483.203650][T25516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1483.296565][T27709] netlink: 'syz.0.7879': attribute type 10 has an invalid length. [ 1483.362054][T27709] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7879'. [ 1483.910055][T27716] netlink: 'syz.1.7882': attribute type 39 has an invalid length. [ 1484.265474][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.271906][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.479087][T27745] tipc: Started in network mode [ 1485.490123][T27745] tipc: Node identity 9215a268, cluster identity 4711 [ 1485.500063][T27742] netlink: 'syz.2.7891': attribute type 2 has an invalid length. [ 1485.557952][T27745] tipc: Node number set to 2450891368 [ 1485.577509][T27742] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7891'. [ 1485.970860][T27754] netlink: 'syz.4.7894': attribute type 10 has an invalid length. [ 1486.004133][T27754] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7894'. [ 1486.394080][T27760] netlink: 'syz.4.7897': attribute type 2 has an invalid length. [ 1486.446212][T27765] netlink: 'syz.1.7898': attribute type 39 has an invalid length. [ 1486.463380][T27760] netlink: 'syz.4.7897': attribute type 1 has an invalid length. [ 1486.471152][T27760] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7897'. [ 1488.255861][T27787] netlink: 'syz.1.7906': attribute type 2 has an invalid length. [ 1488.281949][T27787] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1489.364901][T27810] netlink: 'syz.1.7913': attribute type 39 has an invalid length. [ 1491.660440][T27842] FAULT_INJECTION: forcing a failure. [ 1491.660440][T27842] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.702377][T27842] CPU: 0 PID: 27842 Comm: syz.3.7924 Not tainted syzkaller #0 [ 1491.709901][T27842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.719984][T27842] Call Trace: [ 1491.723292][T27842] [ 1491.726247][T27842] dump_stack_lvl+0x188/0x24e [ 1491.730962][T27842] ? show_regs_print_info+0x12/0x12 [ 1491.736225][T27842] ? load_image+0x410/0x410 [ 1491.740760][T27842] ? __might_sleep+0xd0/0xd0 [ 1491.745398][T27842] ? __lock_acquire+0x7c40/0x7c40 [ 1491.750479][T27842] should_fail_ex+0x390/0x4c0 [ 1491.755212][T27842] should_failslab+0x5/0x20 [ 1491.759751][T27842] slab_pre_alloc_hook+0x59/0x300 [ 1491.764801][T27842] ? tomoyo_encode+0x28a/0x550 [ 1491.769582][T27842] __kmem_cache_alloc_node+0x4f/0x270 [ 1491.774977][T27842] ? tomoyo_encode+0x28a/0x550 [ 1491.779755][T27842] __kmalloc+0xa3/0x240 [ 1491.783947][T27842] tomoyo_encode+0x28a/0x550 [ 1491.788564][T27842] tomoyo_realpath_from_path+0x578/0x5c0 [ 1491.794222][T27842] ? tomoyo_domain+0xd2/0x120 [ 1491.798915][T27842] ? tomoyo_path_number_perm+0x205/0x650 [ 1491.804563][T27842] tomoyo_path_number_perm+0x22f/0x650 [ 1491.810034][T27842] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1491.815505][T27842] ? ksys_write+0x1ce/0x260 [ 1491.820028][T27842] ? common_file_perm+0x171/0x1c0 [ 1491.825109][T27842] ? __fget_files+0x28/0x460 [ 1491.829741][T27842] security_file_ioctl+0x6c/0xa0 [ 1491.834718][T27842] __se_sys_ioctl+0x48/0x170 [ 1491.839353][T27842] do_syscall_64+0x4c/0xa0 [ 1491.843789][T27842] ? clear_bhb_loop+0x60/0xb0 [ 1491.848497][T27842] ? clear_bhb_loop+0x60/0xb0 [ 1491.853226][T27842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.859147][T27842] RIP: 0033:0x7f7bf299e019 [ 1491.863573][T27842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.883207][T27842] RSP: 002b:00007f7bf0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.891762][T27842] RAX: ffffffffffffffda RBX: 00007f7bf2c25fa0 RCX: 00007f7bf299e019 [ 1491.899745][T27842] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000004 [ 1491.907748][T27842] RBP: 00007f7bf0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.915740][T27842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.923731][T27842] R13: 00007f7bf2c26038 R14: 00007f7bf2c25fa0 R15: 00007fff7ba5d6b8 [ 1491.931738][T27842] [ 1492.002010][T27842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1492.071598][T27843] netlink: 'syz.2.7923': attribute type 2 has an invalid length. [ 1492.108536][T27843] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1492.783143][T27856] netlink: 'syz.3.7929': attribute type 39 has an invalid length. [ 1495.346369][T27884] netlink: 'syz.2.7939': attribute type 2 has an invalid length. [ 1495.453358][T27884] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7939'. [ 1496.737770][T27897] netlink: 'syz.0.7942': attribute type 2 has an invalid length. [ 1498.405056][T27909] netlink: 'syz.4.7946': attribute type 39 has an invalid length. [ 1498.953735][T27918] netlink: 'syz.0.7948': attribute type 2 has an invalid length. [ 1499.132090][T27918] netlink: 'syz.0.7948': attribute type 8 has an invalid length. [ 1499.140122][T27918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7948'. [ 1500.482578][T27927] netlink: 'syz.3.7951': attribute type 2 has an invalid length. [ 1500.490392][T27927] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1503.133137][T27954] netlink: 'syz.2.7961': attribute type 39 has an invalid length. [ 1504.616845][T27969] netlink: 'syz.2.7967': attribute type 2 has an invalid length. [ 1504.663279][T27969] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7967'. [ 1505.318486][T27979] FAULT_INJECTION: forcing a failure. [ 1505.318486][T27979] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.331846][T27979] CPU: 1 PID: 27979 Comm: syz.4.7970 Not tainted syzkaller #0 [ 1505.339342][T27979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.349424][T27979] Call Trace: [ 1505.352738][T27979] [ 1505.355695][T27979] dump_stack_lvl+0x188/0x24e [ 1505.360426][T27979] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1505.366627][T27979] ? show_regs_print_info+0x12/0x12 [ 1505.371874][T27979] ? load_image+0x410/0x410 [ 1505.376424][T27979] should_fail_ex+0x390/0x4c0 [ 1505.381159][T27979] should_failslab+0x5/0x20 [ 1505.385692][T27979] slab_pre_alloc_hook+0x59/0x300 [ 1505.390752][T27979] kmem_cache_alloc+0x56/0x2f0 [ 1505.395546][T27979] ? inet_bind_bucket_create+0x2b/0x230 [ 1505.401260][T27979] inet_bind_bucket_create+0x2b/0x230 [ 1505.406694][T27979] inet_csk_get_port+0xd63/0x1880 [ 1505.411813][T27979] inet_sendmsg+0x198/0x2a0 [ 1505.416352][T27979] ? inet_send_prepare+0x250/0x250 [ 1505.421499][T27979] ____sys_sendmsg+0x5ed/0x9a0 [ 1505.426313][T27979] ? __might_fault+0xa6/0x120 [ 1505.431038][T27979] ? __sys_sendmsg_sock+0x30/0x30 [ 1505.436099][T27979] ? __import_iovec+0x306/0x510 [ 1505.441002][T27979] ? import_iovec+0x6f/0xa0 [ 1505.445559][T27979] ___sys_sendmsg+0x2a2/0x360 [ 1505.450285][T27979] ? __sys_sendmsg+0x2a0/0x2a0 [ 1505.455129][T27979] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1505.461027][T27979] __se_sys_sendmsg+0x1c3/0x2b0 [ 1505.465933][T27979] ? __x64_sys_sendmsg+0x80/0x80 [ 1505.470932][T27979] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1505.476866][T27979] do_syscall_64+0x4c/0xa0 [ 1505.481318][T27979] ? clear_bhb_loop+0x60/0xb0 [ 1505.486034][T27979] ? clear_bhb_loop+0x60/0xb0 [ 1505.490756][T27979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1505.496676][T27979] RIP: 0033:0x7fc4d559e019 [ 1505.501123][T27979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.520795][T27979] RSP: 002b:00007fc4d6558028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.529312][T27979] RAX: ffffffffffffffda RBX: 00007fc4d5825fa0 RCX: 00007fc4d559e019 [ 1505.537318][T27979] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 000000000000000d [ 1505.545317][T27979] RBP: 00007fc4d6558090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.553310][T27979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.561303][T27979] R13: 00007fc4d5826038 R14: 00007fc4d5825fa0 R15: 00007fff5669bdb8 [ 1505.569403][T27979] [ 1506.063333][T27991] netlink: 'syz.2.7975': attribute type 10 has an invalid length. [ 1506.091946][T27991] team0: Device hsr0 is up. Set it down before adding it as a team port [ 1506.201915][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1506.212781][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1506.220936][T21602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1506.232054][T21602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1506.239781][T21602] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1506.262169][T21602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1506.563177][T28004] netlink: 'syz.2.7977': attribute type 39 has an invalid length. [ 1506.693766][T27994] chnl_net:caif_netlink_parms(): no params data found [ 1506.995078][T27994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.047468][T27994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.096513][T28006] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.7978'. [ 1507.111219][T27994] device bridge_slave_0 entered promiscuous mode [ 1507.169119][T27994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.196682][T27994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.223870][T27994] device bridge_slave_1 entered promiscuous mode [ 1507.350686][T27994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.415420][T27994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.730861][T27994] team0: Port device team_slave_0 added [ 1507.759329][T27994] team0: Port device team_slave_1 added [ 1507.793090][T28023] netlink: 'syz.2.7982': attribute type 2 has an invalid length. [ 1507.800881][T28023] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1507.885615][T27994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.904130][T27994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.016769][T27994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.074663][T27994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.081678][T27994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.164760][T27994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.342128][T12770] Bluetooth: hci4: command 0x0409 tx timeout [ 1510.422087][T12770] Bluetooth: hci4: command 0x041b tx timeout [ 1510.504684][T27994] device hsr_slave_0 entered promiscuous mode [ 1510.527873][T27994] device hsr_slave_1 entered promiscuous mode [ 1510.552512][T27994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.560128][T27994] Cannot create hsr debugfs directory [ 1510.607213][T28029] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1510.627005][T28029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1510.669893][T28029] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1511.127767][T27994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1511.174145][T27994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1511.226120][T27994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1511.301817][T28056] netlink: 'syz.2.7991': attribute type 39 has an invalid length. [ 1511.363274][T27994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1511.589257][T27994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.673872][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1511.704538][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1511.740754][T27994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.784928][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1511.803602][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1511.841960][T16902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.849172][T16902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.877569][T28063] netlink: 'syz.3.7995': attribute type 2 has an invalid length. [ 1511.895521][T28063] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7995'. [ 1511.912399][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1511.944512][T25516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1511.964024][T25516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1511.998990][T25516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.006275][T25516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.053397][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1512.094254][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1512.132933][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1512.160287][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1512.185725][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1512.217699][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1512.237062][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1512.300694][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1512.342462][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1512.391579][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1512.432673][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1512.456650][T27994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1512.502015][T12770] Bluetooth: hci4: command 0x040f tx timeout [ 1513.496757][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1513.508973][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1513.541418][T27994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.910475][T28102] netlink: 'syz.2.8007': attribute type 39 has an invalid length. [ 1514.456921][T28103] netlink: 'syz.3.8008': attribute type 2 has an invalid length. [ 1514.522805][T28103] netlink: 'syz.3.8008': attribute type 8 has an invalid length. [ 1514.591765][T12770] Bluetooth: hci4: command 0x0419 tx timeout [ 1514.602588][T28103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8008'. [ 1515.308472][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1515.332789][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1515.356450][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1515.366638][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1515.400927][T27994] device veth0_vlan entered promiscuous mode [ 1515.422789][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1515.431533][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1515.456317][T27994] device veth1_vlan entered promiscuous mode [ 1515.546850][T16911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1515.573960][T16911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1515.608795][T16911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1515.683808][T16911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1515.712385][T27994] device veth0_macvtap entered promiscuous mode [ 1515.793533][T27994] device veth1_macvtap entered promiscuous mode [ 1515.864519][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.895538][T28121] netlink: 'syz.2.8011': attribute type 2 has an invalid length. [ 1515.903957][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.921858][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.936344][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.955453][T28121] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8011'. [ 1515.967624][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.985881][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.012942][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1516.051677][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.084923][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1516.139787][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.188272][T27994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1516.216664][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1516.230988][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1516.309112][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1516.335289][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1516.355125][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1516.386224][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.406617][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1516.433657][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.461756][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1516.491728][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.511736][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1516.530488][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.593292][T27994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1516.619522][T27994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.647433][T27994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1516.680022][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1516.713525][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1516.785002][T27994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.809748][T27994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.847306][T27994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.859047][T27994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.912729][T28148] netlink: 'syz.2.8022': attribute type 39 has an invalid length. [ 1517.151326][T17494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.181054][T17494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.205520][T25516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1517.275040][T16902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.293012][T16902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.319163][T17494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1518.744197][T28176] netlink: 'syz.4.8024': attribute type 2 has an invalid length. [ 1518.755453][T28176] netlink: 'syz.4.8024': attribute type 8 has an invalid length. [ 1518.767082][T28176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1519.096970][T28180] device lo left promiscuous mode [ 1519.318451][T28189] netlink: 'syz.0.8031': attribute type 2 has an invalid length. [ 1519.332676][T28189] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8031'. [ 1519.748465][T28199] netlink: 'syz.4.8038': attribute type 10 has an invalid length. [ 1519.918590][T28207] netlink: 'syz.3.8042': attribute type 39 has an invalid length. [ 1521.571564][T28229] netlink: 'syz.3.8049': attribute type 2 has an invalid length. [ 1521.595882][T28229] netlink: 'syz.3.8049': attribute type 8 has an invalid length. [ 1521.615560][T28229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8049'. [ 1521.944326][T28239] FAULT_INJECTION: forcing a failure. [ 1521.944326][T28239] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.016221][T28239] CPU: 1 PID: 28239 Comm: syz.5.8052 Not tainted syzkaller #0 [ 1522.023758][T28239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1522.033830][T28239] Call Trace: [ 1522.037121][T28239] [ 1522.040073][T28239] dump_stack_lvl+0x188/0x24e [ 1522.044785][T28239] ? sctp_sendmsg+0x1686/0x2940 [ 1522.049659][T28239] ? ___sys_sendmsg+0x2a2/0x360 [ 1522.054539][T28239] ? show_regs_print_info+0x12/0x12 [ 1522.059758][T28239] ? load_image+0x410/0x410 [ 1522.064297][T28239] should_fail_ex+0x390/0x4c0 [ 1522.069005][T28239] should_failslab+0x5/0x20 [ 1522.073526][T28239] slab_pre_alloc_hook+0x59/0x300 [ 1522.078581][T28239] ? sctp_add_bind_addr+0x89/0x350 [ 1522.083726][T28239] __kmem_cache_alloc_node+0x4f/0x270 [ 1522.089138][T28239] ? sctp_add_bind_addr+0x89/0x350 [ 1522.094285][T28239] kmalloc_trace+0x26/0xe0 [ 1522.098727][T28239] sctp_add_bind_addr+0x89/0x350 [ 1522.103750][T28239] sctp_copy_local_addr_list+0x317/0x4d0 [ 1522.109424][T28239] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1522.115178][T28239] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1522.121269][T28239] ? sctp_v4_is_any+0x31/0x50 [ 1522.125975][T28239] ? sctp_copy_one_addr+0x93/0x660 [ 1522.131164][T28239] sctp_bind_addr_copy+0xaf/0x3c0 [ 1522.136214][T28239] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1522.142583][T28239] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1522.147927][T28239] ? __sctp_connect+0xd80/0xd80 [ 1522.152819][T28239] ? __local_bh_enable_ip+0x136/0x1c0 [ 1522.158218][T28239] ? _local_bh_enable+0xa0/0xa0 [ 1522.163090][T28239] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1522.168928][T28239] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1522.174761][T28239] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1522.180328][T28239] ? security_sctp_bind_connect+0x85/0xb0 [ 1522.186089][T28239] sctp_sendmsg+0x1686/0x2940 [ 1522.190821][T28239] ? sctp_getsockopt+0x8a0/0x8a0 [ 1522.195781][T28239] ? __might_fault+0xa6/0x120 [ 1522.200480][T28239] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1522.206925][T28239] ? aa_sock_msg_perm+0x94/0x150 [ 1522.211906][T28239] ? inet_sendmsg+0x7a/0x2a0 [ 1522.216538][T28239] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1522.221839][T28239] ? inet_send_prepare+0x250/0x250 [ 1522.226972][T28239] ____sys_sendmsg+0x5ed/0x9a0 [ 1522.231798][T28239] ? __sys_sendmsg_sock+0x30/0x30 [ 1522.236856][T28239] ? __import_iovec+0x306/0x510 [ 1522.241757][T28239] ? import_iovec+0x6f/0xa0 [ 1522.246317][T28239] ___sys_sendmsg+0x2a2/0x360 [ 1522.251042][T28239] ? __sys_sendmsg+0x2a0/0x2a0 [ 1522.255862][T28239] ? __lock_acquire+0x7c40/0x7c40 [ 1522.260945][T28239] __se_sys_sendmsg+0x1c3/0x2b0 [ 1522.265826][T28239] ? ct_nmi_exit+0x145/0x1c0 [ 1522.270447][T28239] ? __x64_sys_sendmsg+0x80/0x80 [ 1522.275446][T28239] ? lockdep_hardirqs_on+0x94/0x140 [ 1522.280689][T28239] do_syscall_64+0x4c/0xa0 [ 1522.285136][T28239] ? clear_bhb_loop+0x60/0xb0 [ 1522.289858][T28239] ? clear_bhb_loop+0x60/0xb0 [ 1522.294554][T28239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.300464][T28239] RIP: 0033:0x7ff3d739e019 [ 1522.304902][T28239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.324538][T28239] RSP: 002b:00007ff3d8235028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.332984][T28239] RAX: ffffffffffffffda RBX: 00007ff3d7625fa0 RCX: 00007ff3d739e019 [ 1522.340979][T28239] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1522.348992][T28239] RBP: 00007ff3d8235090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.356986][T28239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.364985][T28239] R13: 00007ff3d7626038 R14: 00007ff3d7625fa0 R15: 00007ffd16ee4188 [ 1522.373007][T28239] [ 1522.936038][T28250] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8056'. [ 1523.562044][T28269] netlink: 'syz.0.8057': attribute type 39 has an invalid length. [ 1525.198417][T28299] netlink: 15231 bytes leftover after parsing attributes in process `syz.5.8073'. [ 1526.020971][T28308] netlink: 'syz.3.8076': attribute type 2 has an invalid length. [ 1526.126165][T28308] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8076'. [ 1526.193080][T28316] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.8079'. [ 1526.721420][T28325] netlink: 'syz.5.8081': attribute type 39 has an invalid length. [ 1526.830056][T28330] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8084'. [ 1528.346617][T28354] netlink: 'syz.5.8092': attribute type 2 has an invalid length. [ 1528.403899][T28354] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8092'. [ 1529.048873][T28370] netlink: 'syz.3.8098': attribute type 39 has an invalid length. [ 1530.225005][T28392] FAULT_INJECTION: forcing a failure. [ 1530.225005][T28392] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.262039][T28392] CPU: 0 PID: 28392 Comm: syz.5.8107 Not tainted syzkaller #0 [ 1530.269667][T28392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1530.279756][T28392] Call Trace: [ 1530.283073][T28392] [ 1530.286040][T28392] dump_stack_lvl+0x188/0x24e [ 1530.290767][T28392] ? show_regs_print_info+0x12/0x12 [ 1530.296001][T28392] ? load_image+0x410/0x410 [ 1530.300538][T28392] ? __might_sleep+0xd0/0xd0 [ 1530.305170][T28392] ? __lock_acquire+0x7c40/0x7c40 [ 1530.310259][T28392] should_fail_ex+0x390/0x4c0 [ 1530.314989][T28392] should_failslab+0x5/0x20 [ 1530.319525][T28392] slab_pre_alloc_hook+0x59/0x300 [ 1530.324596][T28392] ? __get_vm_area_node+0x122/0x330 [ 1530.329838][T28392] __kmem_cache_alloc_node+0x4f/0x270 [ 1530.335227][T28392] ? __get_vm_area_node+0x122/0x330 [ 1530.340448][T28392] kmalloc_node_trace+0x22/0xe0 [ 1530.345326][T28392] __get_vm_area_node+0x122/0x330 [ 1530.350369][T28392] ? __local_bh_enable_ip+0x136/0x1c0 [ 1530.355770][T28392] __vmalloc_node_range+0x357/0x1380 [ 1530.361073][T28392] ? netlink_sendmsg+0x5ec/0xbd0 [ 1530.366063][T28392] ? netlink_insert+0x28d/0x13b0 [ 1530.371028][T28392] ? free_vm_area+0x50/0x50 [ 1530.375562][T28392] ? netlink_sendmsg+0x5ec/0xbd0 [ 1530.380523][T28392] vmalloc+0x75/0x80 [ 1530.384429][T28392] ? netlink_sendmsg+0x5ec/0xbd0 [ 1530.389386][T28392] netlink_sendmsg+0x5ec/0xbd0 [ 1530.394182][T28392] ? netlink_getsockopt+0x550/0x550 [ 1530.399403][T28392] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1530.404977][T28392] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1530.410276][T28392] ? security_socket_sendmsg+0x7c/0xa0 [ 1530.415761][T28392] sock_write_iter+0x2d5/0x3e0 [ 1530.420540][T28392] ? sock_read_iter+0x3a0/0x3a0 [ 1530.425426][T28392] ? common_file_perm+0x171/0x1c0 [ 1530.430507][T28392] vfs_write+0x482/0x9a0 [ 1530.434782][T28392] ? file_end_write+0x250/0x250 [ 1530.439660][T28392] ? __fget_files+0x3fc/0x460 [ 1530.444365][T28392] ? __fdget_pos+0x1d4/0x360 [ 1530.448980][T28392] ? ksys_write+0x70/0x260 [ 1530.453427][T28392] ksys_write+0x14d/0x260 [ 1530.457786][T28392] ? __ia32_sys_read+0x80/0x80 [ 1530.462592][T28392] ? lockdep_hardirqs_on+0x94/0x140 [ 1530.467817][T28392] do_syscall_64+0x4c/0xa0 [ 1530.472278][T28392] ? clear_bhb_loop+0x60/0xb0 [ 1530.476997][T28392] ? clear_bhb_loop+0x60/0xb0 [ 1530.481701][T28392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1530.487614][T28392] RIP: 0033:0x7ff3d739e019 [ 1530.492076][T28392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.511712][T28392] RSP: 002b:00007ff3d8214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1530.520153][T28392] RAX: ffffffffffffffda RBX: 00007ff3d7626090 RCX: 00007ff3d739e019 [ 1530.528139][T28392] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 1530.536123][T28392] RBP: 00007ff3d8214090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.544107][T28392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.552103][T28392] R13: 00007ff3d7626128 R14: 00007ff3d7626090 R15: 00007ffd16ee4188 [ 1530.560105][T28392] [ 1530.623621][T28392] syz.5.8107: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1530.658141][T28392] CPU: 1 PID: 28392 Comm: syz.5.8107 Not tainted syzkaller #0 [ 1530.665675][T28392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1530.675779][T28392] Call Trace: [ 1530.679079][T28392] [ 1530.682053][T28392] dump_stack_lvl+0x188/0x24e [ 1530.686790][T28392] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1530.693343][T28392] ? show_regs_print_info+0x12/0x12 [ 1530.698579][T28392] ? load_image+0x410/0x410 [ 1530.703124][T28392] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1530.709580][T28392] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1530.716201][T28392] warn_alloc+0x242/0x330 [ 1530.720568][T28392] ? __get_vm_area_node+0x122/0x330 [ 1530.725812][T28392] ? zone_watermark_ok_safe+0x270/0x270 [ 1530.731385][T28392] ? rcu_is_watching+0x11/0xa0 [ 1530.736189][T28392] ? __get_vm_area_node+0x318/0x330 [ 1530.741414][T28392] ? __local_bh_enable_ip+0x136/0x1c0 [ 1530.746831][T28392] __vmalloc_node_range+0x37c/0x1380 [ 1530.752185][T28392] ? netlink_insert+0x28d/0x13b0 [ 1530.757178][T28392] ? free_vm_area+0x50/0x50 [ 1530.761720][T28392] ? netlink_sendmsg+0x5ec/0xbd0 [ 1530.766702][T28392] vmalloc+0x75/0x80 [ 1530.770643][T28392] ? netlink_sendmsg+0x5ec/0xbd0 [ 1530.775629][T28392] netlink_sendmsg+0x5ec/0xbd0 [ 1530.780670][T28392] ? netlink_getsockopt+0x550/0x550 [ 1530.785932][T28392] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1530.791518][T28392] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1530.796882][T28392] ? security_socket_sendmsg+0x7c/0xa0 [ 1530.802389][T28392] sock_write_iter+0x2d5/0x3e0 [ 1530.807228][T28392] ? sock_read_iter+0x3a0/0x3a0 [ 1530.812143][T28392] ? common_file_perm+0x171/0x1c0 [ 1530.817226][T28392] vfs_write+0x482/0x9a0 [ 1530.821535][T28392] ? file_end_write+0x250/0x250 [ 1530.826446][T28392] ? __fget_files+0x3fc/0x460 [ 1530.831178][T28392] ? __fdget_pos+0x1d4/0x360 [ 1530.835809][T28392] ? ksys_write+0x70/0x260 [ 1530.840275][T28392] ksys_write+0x14d/0x260 [ 1530.844648][T28392] ? __ia32_sys_read+0x80/0x80 [ 1530.849469][T28392] ? lockdep_hardirqs_on+0x94/0x140 [ 1530.854710][T28392] do_syscall_64+0x4c/0xa0 [ 1530.859168][T28392] ? clear_bhb_loop+0x60/0xb0 [ 1530.863887][T28392] ? clear_bhb_loop+0x60/0xb0 [ 1530.868622][T28392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1530.874555][T28392] RIP: 0033:0x7ff3d739e019 [ 1530.879003][T28392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.898654][T28392] RSP: 002b:00007ff3d8214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1530.907107][T28392] RAX: ffffffffffffffda RBX: 00007ff3d7626090 RCX: 00007ff3d739e019 [ 1530.915130][T28392] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 1530.923134][T28392] RBP: 00007ff3d8214090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.931151][T28392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.939146][T28392] R13: 00007ff3d7626128 R14: 00007ff3d7626090 R15: 00007ffd16ee4188 [ 1530.947164][T28392] [ 1531.327237][T28392] Mem-Info: [ 1531.338278][T28392] active_anon:46304 inactive_anon:0 isolated_anon:0 [ 1531.338278][T28392] active_file:19343 inactive_file:40519 isolated_file:0 [ 1531.338278][T28392] unevictable:768 dirty:190 writeback:0 [ 1531.338278][T28392] slab_reclaimable:21709 slab_unreclaimable:97168 [ 1531.338278][T28392] mapped:44008 shmem:38140 pagetables:773 [ 1531.338278][T28392] sec_pagetables:0 bounce:0 [ 1531.338278][T28392] kernel_misc_reclaimable:0 [ 1531.338278][T28392] free:1269481 free_pcp:7578 free_cma:0 [ 1531.431764][T28392] Node 0 active_anon:189916kB inactive_anon:0kB active_file:77372kB inactive_file:161876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176032kB dirty:760kB writeback:0kB shmem:155524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10492kB pagetables:3192kB sec_pagetables:0kB all_unreclaimable? no [ 1531.678269][T28392] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1531.801814][T28392] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1531.830940][T28408] netlink: 'syz.3.8110': attribute type 2 has an invalid length. [ 1531.899904][T28392] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1531.917264][T28408] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8110'. [ 1531.923181][T28392] Node 0 DMA32 free:1140616kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:213116kB inactive_anon:0kB active_file:77372kB inactive_file:161884kB unevictable:1536kB writepending:764kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:7052kB local_pcp:5004kB free_cma:0kB [ 1532.044562][T28392] lowmem_reserve[]: 0 0 1 1 1 [ 1532.062947][T28392] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1532.157237][T28392] lowmem_reserve[]: 0 0 0 0 0 [ 1532.181767][T28392] Node 1 Normal free:3895484kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21684kB local_pcp:11104kB free_cma:0kB [ 1532.315362][T28392] lowmem_reserve[]: 0 0 0 0 0 [ 1532.320181][T28392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1532.380904][T28392] Node 0 DMA32: 2859*4kB (UME) 2865*8kB (UME) 1041*16kB (UME) 3*32kB (E) 207*64kB (UME) 685*128kB (UME) 343*256kB (UM) 164*512kB (UME) 60*1024kB (UME) 19*2048kB (U) 170*4096kB (UM) = 1120484kB [ 1532.431801][T28392] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1532.478399][T28392] Node 1 Normal: 225*4kB (UE) 47*8kB (UE) 28*16kB (UME) 26*32kB (UME) 21*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895484kB [ 1532.528408][T28392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.552957][T28392] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1532.585149][T28392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.607188][T28392] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1532.637306][T28392] 111657 total pagecache pages [ 1532.646835][T28392] 0 pages in swap cache [ 1532.651092][T28392] Free swap = 124864kB [ 1532.668537][T28392] Total swap = 124996kB [ 1532.684100][T28392] 2097051 pages RAM [ 1532.688040][T28392] 0 pages HighMem/MovableOnly [ 1532.708371][T28392] 415222 pages reserved [ 1532.724801][T28392] 0 pages cma reserved [ 1532.937017][T28433] netlink: 'syz.3.8115': attribute type 39 has an invalid length. [ 1533.216443][T28435] netlink: 'syz.0.8119': attribute type 2 has an invalid length. [ 1533.420121][T28435] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8119'. [ 1535.582225][T28480] device syzkaller0 entered promiscuous mode [ 1536.813411][T28499] netlink: 'syz.2.8136': attribute type 2 has an invalid length. [ 1536.863272][T28499] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8136'. [ 1536.972425][T28504] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1540.401611][T28489] netlink: 'syz.3.8135': attribute type 39 has an invalid length. [ 1540.411044][T28495] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1540.422194][T28506] netlink: 'syz.4.8141': attribute type 10 has an invalid length. [ 1540.430140][T28506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1540.450894][T28495] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1540.471947][T28495] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1540.474989][T28506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1541.053344][T28527] netlink: 'syz.0.8159': attribute type 2 has an invalid length. [ 1541.062107][T28527] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1541.085632][T28532] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8150'. [ 1541.788502][T28552] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1541.953865][T28560] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1541.967442][T28563] netlink: 'syz.5.8158': attribute type 39 has an invalid length. [ 1543.350327][T28588] netlink: 'syz.0.8171': attribute type 2 has an invalid length. [ 1543.366972][T28588] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1543.896934][T28604] netlink: 'syz.5.8177': attribute type 39 has an invalid length. [ 1544.841487][ C1] [ 1544.841497][ C1] ================================ [ 1544.841502][ C1] WARNING: inconsistent lock state [ 1544.841521][ C1] syzkaller #0 Not tainted [ 1544.841530][ C1] -------------------------------- [ 1544.841535][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1544.841543][ C1] syz.0.8183/28614 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1544.841562][ C1] ffff88807d796238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 1544.841707][ C1] {INITIAL USE} state was registered at: [ 1544.841714][ C1] lock_acquire+0x1bb/0x4a0 [ 1544.841739][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1544.841759][ C1] trie_update_elem+0xbe/0xd40 [ 1544.841781][ C1] bpf_map_update_value+0x59d/0x670 [ 1544.841803][ C1] generic_map_update_batch+0x52e/0x7f0 [ 1544.841825][ C1] bpf_map_do_batch+0x475/0x5f0 [ 1544.841847][ C1] __sys_bpf+0x6f7/0x780 [ 1544.841870][ C1] __x64_sys_bpf+0x78/0x90 [ 1544.841892][ C1] do_syscall_64+0x4c/0xa0 [ 1544.841916][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.841945][ C1] irq event stamp: 1480 [ 1544.841952][ C1] hardirqs last enabled at (1479): [] ___slab_alloc+0x1046/0x1240 [ 1544.841985][ C1] hardirqs last disabled at (1480): [] exc_debug+0x6e/0x130 [ 1544.842016][ C1] softirqs last enabled at (1472): [] rawv6_sendmsg+0x11d1/0x1710 [ 1544.842129][ C1] softirqs last disabled at (1470): [] lock_sock_nested+0x66/0x100 [ 1544.842160][ C1] [ 1544.842160][ C1] other info that might help us debug this: [ 1544.842167][ C1] Possible unsafe locking scenario: [ 1544.842167][ C1] [ 1544.842172][ C1] CPU0 [ 1544.842176][ C1] ---- [ 1544.842180][ C1] lock(&trie->lock); [ 1544.842192][ C1] [ 1544.842196][ C1] lock(&trie->lock); [ 1544.842208][ C1] [ 1544.842208][ C1] *** DEADLOCK *** [ 1544.842208][ C1] [ 1544.842213][ C1] 1 lock held by syz.0.8183/28614: [ 1544.842224][ C1] #0: ffff88805a164270 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x11d1/0x1710 [ 1544.842280][ C1] [ 1544.842280][ C1] stack backtrace: [ 1544.842286][ C1] CPU: 1 PID: 28614 Comm: syz.0.8183 Not tainted syzkaller #0 [ 1544.842305][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1544.842317][ C1] Call Trace: [ 1544.842323][ C1] <#DB> [ 1544.842365][ C1] dump_stack_lvl+0x188/0x24e [ 1544.842399][ C1] ? show_regs_print_info+0x12/0x12 [ 1544.842439][ C1] ? print_usage_bug+0x42a/0x690 [ 1544.842470][ C1] ? verify_lock_unused+0x15/0x140 [ 1544.842503][ C1] lock_acquire+0x2df/0x4a0 [ 1544.842538][ C1] ? trie_delete_elem+0x8e/0x620 [ 1544.842570][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1544.842687][ C1] ? look_up_lock_class+0x75/0x140 [ 1544.842712][ C1] ? verify_lock_unused+0x15/0x140 [ 1544.842756][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1544.842793][ C1] ? trie_delete_elem+0x8e/0x620 [ 1544.842821][ C1] ? _raw_spin_lock+0x40/0x40 [ 1544.842847][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 1544.842879][ C1] trie_delete_elem+0x8e/0x620 [ 1544.842906][ C1] ? perf_tp_event+0xa8e/0xc10 [ 1544.842947][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1544.842978][ C1] bpf_overflow_handler+0x50b/0x790 [ 1544.843008][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 1544.843032][ C1] ? perf_swevent_overflow+0x230/0x230 [ 1544.843068][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1544.843105][ C1] __perf_event_overflow+0x457/0x630 [ 1544.843146][ C1] perf_swevent_event+0x315/0x570 [ 1544.843182][ C1] ? perf_tp_event+0xc10/0xc10 [ 1544.843246][ C1] perf_bp_event+0x311/0x3f0 [ 1544.843280][ C1] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1544.843308][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 1544.843383][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1544.843412][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1544.843452][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 1544.843532][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 1544.843555][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1544.843586][ C1] notify_die+0x141/0x1a0 [ 1544.843614][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1544.843661][ C1] notify_debug+0x20/0x30 [ 1544.843711][ C1] exc_debug+0xd9/0x130 [ 1544.843752][ C1] asm_exc_debug+0x1a/0x40 [ 1544.843777][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1544.843809][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1544.843828][ C1] RSP: 0018:ffffc900056a7248 EFLAGS: 00050202 [ 1544.843846][ C1] RAX: ffffffff8415c301 RBX: 000000000000059e RCX: 000000000000041e [ 1544.843861][ C1] RDX: 000000000000059e RSI: 0000200000000302 RDI: ffff888059ee3252 [ 1544.843876][ C1] RBP: 0000000000000000 R08: ffff888059ee366f R09: 1ffff1100b3dc6cd [ 1544.843891][ C1] R10: dffffc0000000000 R11: ffffed100b3dc6ce R12: 00007fffffffea62 [ 1544.843906][ C1] R13: 0000200000000182 R14: ffff888059ee30d2 R15: 0000200000000182 [ 1544.843933][ C1] ? _copy_from_user+0x21/0x170 [ 1544.843973][ C1] [ 1544.843979][ C1] [ 1544.843985][ C1] _copy_from_user+0xf4/0x170 [ 1544.844011][ C1] csum_and_copy_from_iter+0x492/0x1380 [ 1544.844064][ C1] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1544.844119][ C1] ip_generic_getfrag+0x150/0x2e0 [ 1544.844146][ C1] ? csum_partial+0x23d/0x2c0 [ 1544.844180][ C1] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 1544.844208][ C1] ? raw6_getfrag+0x1e8/0x300 [ 1544.844251][ C1] __ip6_append_data+0x2ee1/0x3e30 [ 1544.844349][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1544.844384][ C1] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 1544.844430][ C1] ? ip6_setup_cork+0xff0/0xff0 [ 1544.844463][ C1] ? ip6_setup_cork+0xa4a/0xff0 [ 1544.844503][ C1] ip6_append_data+0x1c8/0x3d0 [ 1544.844543][ C1] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 1544.844580][ C1] rawv6_sendmsg+0x1221/0x1710 [ 1544.844637][ C1] ? compat_rawv6_ioctl+0x60/0x60 [ 1544.844703][ C1] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1544.844732][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1544.844771][ C1] ? inet_sendmsg+0x7a/0x2a0 [ 1544.844789][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1544.844811][ C1] ? inet_send_prepare+0x250/0x250 [ 1544.844834][ C1] ____sys_sendmsg+0x5ed/0x9a0 [ 1544.844879][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1544.844906][ C1] ? __import_iovec+0x306/0x510 [ 1544.844949][ C1] ? import_iovec+0x6f/0xa0 [ 1544.844989][ C1] ___sys_sendmsg+0x2a2/0x360 [ 1544.845029][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1544.845091][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1544.845158][ C1] __se_sys_sendmsg+0x1c3/0x2b0 [ 1544.845193][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1544.845249][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1544.845276][ C1] do_syscall_64+0x4c/0xa0 [ 1544.845302][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1544.845328][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1544.845359][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.845384][ C1] RIP: 0033:0x7f7cad79e019 [ 1544.845402][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.845419][ C1] RSP: 002b:00007f7cae593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1544.845440][ C1] RAX: ffffffffffffffda RBX: 00007f7cada25fa0 RCX: 00007f7cad79e019 [ 1544.845455][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1544.845468][ C1] RBP: 00007f7cad83500c R08: 0000000000000000 R09: 0000000000000000 [ 1544.845481][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.845493][ C1] R13: 00007f7cada26038 R14: 00007f7cada25fa0 R15: 00007ffe90206c48 [ 1544.845532][ C1] [ 1545.704739][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.711105][ T1280] ieee802154 phy1 wpan1: encryption failed: -22