last executing test programs: 4m36.441420558s ago: executing program 1 (id=2): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty=0x10000000}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 4m20.816593461s ago: executing program 32 (id=2): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty=0x10000000}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 6.427984463s ago: executing program 0 (id=1073): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f", 0x16}], 0x1}, 0x0) (rerun: 32) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) r3 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="b1f1b3075d659966", 0x8}], 0x1}, 0x4000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 6.039020806s ago: executing program 0 (id=1077): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_clone(0x3801000, &(0x7f0000000340)="232050c28a845897be26810ac56f4529facb1d956049c126601c2d6cc5a685c867512bf1dc9075cbd896391a7434c104539621da87178138620665720f5753155ead7cbf23d14ffebfba43b12becc7c2253e1b36b0aeb72f052b786ac9338d819366e65d34626c3d20a92c8fa2b8d16b345d5d6eda13c0988d5a31a2cf9d6f3acc6300b1685bcfc57fa7421c4a8d34dfb680a80acc6296ac0219804016f8a6bb155a74e7bc900df1c4f5fd82a1b27a510787907ecee1be0b3c8d182592e59efbf35c1a13b6ed4e0f5557446ba8c70b22ed25c32d8106662dc9ef30ff17a3a987bb3bacb5659a2c0874600a8a", 0xec, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000a40)="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") r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000020000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r1], 0x0, 0x4a}, 0x28) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r3, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r6}, &(0x7f0000000200), &(0x7f00000009c0)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r4, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) 5.232542132s ago: executing program 2 (id=1080): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, 0x0}, 0x4c810) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffb}, 0x4208, 0x0, 0xc2ba, 0x0, 0xfffffffffffffffe, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xd0a0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7d9b3f28b023f0a1c652202d05aad975653ffaa0a2e94377c19273a402d6dd27f4ad2edaa7b2a5237cb2fa20e4e3127525d90bd4e08a9b5d473a07832eb839e10e900be606275cf5a85c492c878cb4949bc2f7aa6bc2ee8a71bda3e5f3fc73f9521a4848dc873c39a79f94023df1796ed7222945945e6b80973da8091398180e95a6e1668b4b8f9976cce715bcb3ffe897b8411ea878256ad0d22517e14b762548c9d51ccc625f4a51", @ANYRES8], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff0200000007070000"], &(0x7f0000000100)='GPL\x00'}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.9745014s ago: executing program 3 (id=1081): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x14, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xd2ec, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0xb, [@enum64={0x4, 0x7, 0x0, 0x13, 0x0, 0x8, [{0x10, 0x1, 0x645}, {0x10, 0x0, 0xfffffff8}, {0xd, 0x8, 0x9}, {0x5, 0x2, 0x1d}, {0xb, 0xffffffff, 0x10001}, {0xc, 0x9, 0x9}, {0x6, 0x10001, 0x10000}]}, @enum64={0x6, 0x5, 0x0, 0x13, 0x1, 0x0, [{0x5, 0x7}, {0xe, 0xd, 0xd}, {0x9, 0x9, 0x1000}, {0x10, 0xffff7fff, 0xfffffffa}, {0x9, 0xda5, 0x7}]}, @fwd={0x6}, @fwd={0x9}]}, {0x0, [0x0, 0x61, 0x0, 0x61, 0x30, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000240)=""/122, 0xe3, 0x7a, 0x1, 0xe21}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x5, 0x4, 0xb, 0xfffffffffffffff4, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000100)=""/11, 0x0, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1f6e5, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[r4, r5, r6, r7, r8], &(0x7f00000005c0)=[{0x1, 0x2, 0x4, 0x9}, {0x4, 0x5, 0xe, 0x9}, {0x4, 0x1, 0x7, 0xc}, {0x5, 0x5, 0x9, 0x7}]}, 0x94) 4.764038847s ago: executing program 0 (id=1082): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = syz_clone(0x0, &(0x7f0000000100)="4d9f127c86c5849aca0ac062fd271453a61add4cae62e76e84bdbf618210fcc2c6f6e03f8965f8438e2c022328222ad84a18644e306dc308a38fa6411dde673969c9f40814b62259709c385edc3e999bd76d417e92e0e2c774307c1554c8bd13054a3762fb679f8fe100b1f7332e0919a79645ed14fe6a0a87b71394ef6654d941bf02ee4bf54628ede13d246e1207106a082fbdefce863675b82566315c272b0aad67fc572f4a0cc5471e418538d939bfa72492a3ff27cbca429fd394fd505a7b9b1d93b8", 0xc5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="18abec2780657790c6833412d5a1411444ec58b7c627715af5e74b75c8ecfb56c6c8dbc5bc552c507c524c50c1e2656a45698fe110e23bb6fd85c62183626d82d4534ac20abb5893ee2cd484b020254e68fbd20edd20891995660887a5d4ab64dc") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x911}, 0x0, 0xfffffffffffffffd, 0x7, 0x2, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, r0, 0x0, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xb, &(0x7f0000000100), 0x4) 4.534104195s ago: executing program 4 (id=1083): r0 = syz_clone(0x40188100, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x8ed9, 0x4, 0x7, 0x0, 0x6, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x65, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x4, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) sendmsg(r1, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000002c40)="afad9b4713a4f68e846f9e6c6bb4a98417cd7ac9217aa5032526c01a60355be06a92d1b1bafcf8037b693695cfc6c7dcf101e87b1ec03783dd8947758da642ce9286b64b687c232daa5cb5155e2c44f2616a85db981493cd3f455d36b474d60141deacebf895e06cd25a9f19b6b29b2a3ba8e3ecbe1703a38bc7138207da3de4e0d3bd307eb48d5fb33b4eb7820b9e9a77786c6563121c920c84eaee781605786d27dde4f4d3a0dc8dd18169b98a0264b9d56b269d618c1e1f5f353dae2e0c92a5b7eed92da4d4adc1c4491ed605fec88929089e294dec2df800ca5d057189000794fbdb5a7569cbfe749fb429a58b376d950ac20f8ba9ffb90fbd86612f91c2abe92ca65d9cc8c32d06aeae18b9b9cadb3131e0d6f207f48d5a1453e477b84074fa61d43cf565ea46744ec2ad72333397921f5c70eff083649174e68973a5b5b30fb6968cea58e45d8ea82d15b515d5d2f1f2588beeec3152308b4899fe7c40bb6fdfb166ab03c88140086892dbd064069a5b6cc9085faf235b439554db8245816dba0b4e0c35745983934671cc63a1ef40688c0658bfc2eee42e4b25e5a992b8b2d22ca28b1c2fbb0792a030b4bb251f79eb13ea5f84a20cbb3c41eae0e1b78db2f1bad4285223f26dc6f52763f659a9e99885d4a564d541111b665230744aa94319c4ab117b398588765d24684834a5feca788ecc1dda8a17d8182cd141bb44b0ba6698f8b3657b122f62e04d82cb8fbe91b86ea7786f73d5c266efefb6b1c739bd78500cccd5b742f1ce1b02431ee539dce6eaa6b33f204640e429fb6cf11996355a548e35fafef983276c8ac5a4eeaa011f9d24e9682efc5d834b5098c4836d3906fc827c70a0f19cf7fc4283930d3638012b0baf28ee425a689dedbb3af6d74c1568c20bda1959f0135c1bb7734769e8d8cc869013fda0f820ecb49bf527a68bd1082a85691ea4f98d776ad80bfd3e8e6a4035595c75193e471407b5fd04cb64e3a8cacc56fcabd5f2f3860b1d60719eb0d2d7ccddea05efced06448d72d6719173a6205181090c99d71f1cbebc216a87cd6c7a387be6f77ef7329e0b65c83e3be4b2fa8aaac0b8191a32f36fb91afd758c82517d3c4b150de90eddf27827d98bf5c43543934bdf3996cedb73fdbd0d8e6c53c3ac4d5819ff73fa4034ab2e115375b5471b2b3c0fa6989b532da87235845e6fd8def09bb80e457fe4d718e1a515fbb65e7166eddab753d051b73f5b44e0ff804760acbb544806fb583f88d6f0a75f690f5f59c3d0408dad02053cd1634bc055846706c8d407a8601d16b83fd0074c3246aeda1a6cd0ed601896de71afe17bff55cd899aaec938bf3aa937adceff41644fdda9d7d81d022e46bbc975f382eeb0779efb140412acd76cb8c8a1a7cedbc084c25607e4c609b3306371796f3206ff925f3fc3fdbee831b83839e95424a08f3f75f8f5010a7a32f4f002f4797cd1dcfd2b566e94c6b7284e6c4ad826aab811b4809408ba67742874689111b036d65c118964b4f2345cae0376183f49484f74076c04c4cdfc36087d9a8497c59a303782ffbc98cd9273bca70778a418af03e99630902391e6032d9cadd2f20d2c00633d55beb31439a64f3b7e3adb32c9e1cc4d92e4cbd835f83b2d369316a55f51baacf163bdc212d0347c23ae90370894a3b53446aefb5ad044ca6c015851d9d99ac8d99eafe2a195f6ec60cdb2021fb993c65fdc936a2e9d60f87b8cab3dd1affc56cec1cf7e61fbedd1f6294e475a1f1f7e29248a2549d4685e912f673f349734c1b4ac6599f381437292edda367fb4bf5634398f6cc53595b2681c12c008380614f6d78ce9824af592d53cb942b3f98ea26ce603cdb40f17da147354c333c834df8330f2f5977db8a5e74f02b323dd06ad9282614ed953695ccfa772b706a4c9ac83430c33b53ed413e352c2c3ba4d2ab23db074a1d7c5672c5012662995315556c27ba5217ae4e12014c5ac8df2f035a6d0918decaaf871c3392b38699f2da5789afb0ecb5c30486fd854a46a1b1498d5d83d63646aae23621495d41485687d72a5c00ead40cac51bd35da67e4d80381c3fb779574671f7be1bcc029301aff0f4631b20db6119f59081528d428d4abf4bb09292000c1f0df31ed78c8a17bfa37674e20881cdb9f18f06d10f6e8b66edd3abdf09368753a9ea51049dcba26f1a8cdfdee8589584704efa15db12016c87d3ceceafa9fba091b15c5b303c2164711d9d80fa167a9b6bd092c61b239ef44cf7359b15b8ff5abe1c2760ae34ca237f55ed568020270b0ba196a8fba76785d43fa5885416bdf823c416d7dc3f95874a4618ac454b68f013d367384900e1a6e5d5eacb261c95935959b13685e3544f11bf1b8583c249490bf7db687470a90325018d5fc8fb0154bde2f4602a4eaa42a7888260fb05e817553adac8ae73186f0eae12c951e4b06e6762eed55ad27ea0cd9dcae2cbb30d85bd65e8e6fedc84ddfd83e93ef366d3ac472c2397f7eca447e7b0bf6e64a4e0308b2191af0e852ebb64d7cd23ed636212746d806f22d948163fb7725bc1bacc7e300aa81316ad7536257a59633906e5f67cebdb9543bcb1fdc346a58e4d01a5d98297da9a929a4b30e2aa4227a633fae2fa0d0ff9f54fbac3c601a39b35094a42cd4109f1971df97979a39f6cb34555ccbd73cdb96903ef7daadb073261d651b38af900c02a80291439b73c1c7a094a80ca3856cbfb7cd916867916edc0cd8a5e394098b3e9a9b06afca4418cc45d15b2a5cbaf5e2f7b2572bfb85499938e29d5689145b723d49bd504e5490712d2cb5f33a54d40e243a47db5c129b7eaccc9a18e8c289b634dd2a457ae2f48df76bb8f48e69111508dfa2a56888ee7fa4fa72c0c1f80d80212f13d2dbfee22d2cf4313929fc765c383fd9c3e1a97cbd13e2e272e57bb36dd706980226f7efbb3082cc42c4bd6baa6185d663a98858a4eaa20eb96fe4e58e7d0f7714973e9379e4910a3cc916f5724aa49feb7679c5ab973fdfc61f0de1f6870b6a8a771e0acc1cc6cf42d1e5597cd398d0406497277b558d9d60bb78998cb7a60675169a9b6dc6d76f364e744410c4bf4aa31c7383632f494b6616cfe61ff8a71261dbc142ca6c018487a50a146f8a3dd3fb0ea0ac1acfb6811543c74aaf5870109a25530a8a041765da98f7911e6c96bd62b1d919e428bc2ef22aaed8651c3fa9a53a09c5fc4806022fb4fb2be7ec79ce4636333b30b18bfb787244f0591f9912f3bd3e847e2fba4550f007fab16bc55a8c5b020e928bae6984e7d5865e8ebe30c4a40e3f9a0919c958a1d3d06194c11371ded523aaeb09dea2a0532c5973af64afa13c778e122466817ba9646358c28ef21f8e25dec8e899bd55e406dec4365bec6748b79be1b867259f26000f8b086e65029dda2679e3a9d0ed5216c35326fb27e5fbcab8eab5f46c1d75ccd558d6833bdf6f7e6c87236f98b3f71e6db578cd75483eeee7a3dd79eb37156f3b1ba5e4737b1475935e102e58974524854f22d46d34046ce1702b8259511e5edaed504bbd4b987a27f01f50156ba4f93921fed959d673a1b979d0c9d177976d9032aea71036a8e5d2d5ede997394039c583f229998b4eff81020cb558326726e80b77c40e7806d7bd61cc10cf644b7a38fa2816a8e1eb743bbf40a1a4d8bbe4aa98d59a8dd7408dec67a332b11b2b8a053fbf078e53d3621b16a4fd6c0bb26835391654cd3790bb1c8884e52879882a85936c946af001bb52d3f922c3b9cb403f1e9efa3c96e306ca7ec32b4da15293d715230b945cf1580ba945266e8d58fd78492a89a4b03d9fb55af86e6450020349e5cfea1a7973e963fd926039afa96a6911546444ee0ee9862683a499f9180cf646852f5b9186e1915a2e53ff3ef0c1f71e1f6239055c80c16e0d8c3dd1ebab1581f4c56157e70640ff5f569e8aafb5bef96ca2f5cd59d6d003c437dfa15eb66637441083d1797351d459748ea24dafc40256ee37393769cf378422f91f7c177f591b11ea628391dcd5c7a7a8c6f66ae7ceb88bc882fad09cf7ed33cc53b12001ea417ad4979d3cd5f269d3e6ac4612767f0e063ec18f0414a6111c70b0fb0b88ce4c09110bbc0fead6ced5d52f743a954bedf9ef6dff9346003d7d09983f2acefd4f639e4bd57d0fe4481bcd2071b428992994ea69809c441487e8c7c2bab27027add92be027ccb2d9c17ae90eb4665b0b73c10aa99f52b14b974fb51db6882f9f6d40cb8da6aaca3f8da843bff92797ffb5eb31f96cac5b7403fe405254b4151e19474835d0146a766379aab29dc103ec042fa4d1d6538e646ef80996a81d6b37c7e1eb34bb417aad7cb06ef5109ad10c1bb78c98460dd26202b20cd4c6d3fee7d7c4233ba519d9fbbadd74187e5605cfa4d95d83dcaa81fc25dc124dbf308be5a711613b23b34a6dc0bfab63c14253af9152b17d7c6f11c2dc010c26e60c9669a8a7918dc01106205c6a4ed7d7e317ff935a8218e37a70b7e79d3a20aaac34be6196dadbe13a5387a2e256c47ceac2a398dc3bded8c2e5b217f937f8ab77f3e8a0b7e8bdcc9bb2e912f3f4792aefeb867b7a11bc9c445536beeaf372393af9c89fdeb20b64f125aa6d5a08815df5a7ce99a9d7af9371288e6ada499552d13dbb0a494723517755a19b728b994fccfd3fa8bdf786d5856f63e4c8c9adb6e7a6d3d61fa818ba395020c4a8a8b301112fbf9b0bcff91d4267fd5115a9860107e0573b7749127ad86700b502f0fc95bef11e4a10c980bc6787e688f7ae60c394d7f994063144891da9e152c466c1037e29f7889ddebb12f3b70fa5a060091a277997c014242af0ce436b376aa359d6ab0eed58dfe0c9f690498a435689cbef563c32117dbc06a9bf4f375e9063308a917bed4a2a18d4ab7e3240ba6f3508e57dd4041e6c73d81badb44e85fda57d0b22f601eedf7878c2e042c40582a4ef85b3be37908c86cecb861a240c931a68accf85e7c18f4bb29fabf2632876f348ab2cf3f63238f4ac2da25570aa37fbbb4a7b6a6750f5b3c8bf968bdd896234454bc0f3ab19d49e1f53875e31ddced67e1311f21a95e1c8486a6c85e8707ac55e3b30b19c00679876a3e881f5a694d5a3ae990695426d70b5bfd54d6bfef55444b1abdc0a659346999527deeb5f32aa4c21c780dc2839d70797178218da5c5b0fde6eb5f0d873d19afc8ca133bf139571a3ec34954f4cad6b37c230461d443f6a2dd593e6b17b1b86e2cf8c0368b86e0821f526e10c6f0099b12abc741470dd2361167722ffab653c88f6ecf3ff65d2f64a382d6657cfeaf0472d70904f91248c89a18c9ea87f6c3989c8019f2e545a7bd39cb3519213a569483c3e01c146b4c415e18ee77d9b6a2decf23295457f3b70336ecf8bd26d17cd6f12546c6ae130a7323d630b1e38b27f64727f9ed07ddc5f3536476f252a903a63a9bd1d1cd14110b80cda92f848ec2d399017f24378fc2353e2ff4b46d7162ce7cc76eccff02a2874ec5511df8a90c22c1576e8dd8a8fa411aeea84c85d191b1f058bc3b329df6033c79b57fbd1519241e83847c1820f5c210d2e50fba86ceedc648af249699a967884436f0d995f27439ec3e6480d41d5281ef3def77bfbd7ee69b614fa1618319cf9efbbe73db38ab75b0c0e397b32e1a18a0dffc0de66782f3f059193606eec1ec4d0ed7b7bfadabe8b98a8fbf3ebfa37988fe47d894863cad25345f5b81f49d210cfc4ce4e1a4e2997749c9125773f5690ced811967016ab1f33ec047a8721ee08", 0x1000}, {&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="e292a8a745c2d723a8a5e06b2c5bae87dbf160ec64753ce8e4cf10e400680b7707d92ed27d5b195fc1f663afade25418b88727a646ce7ebe445ae3d959563ea550b1f1372e566e160135bce26f56b5bd128db56c115885eca1dbeb6ab7", 0x5d}, {&(0x7f0000004cc0)="cb4f7243750082209f605b1c2874edb493ab6bd97e54ddcd0e3330b8c042219815791cd0", 0x24}, {&(0x7f0000004d00)="03347f8cdd42a993128e5efa6b1562ce0298168a2ef47738f9139cac0df08b527845be8b8b6656d43fd214a7d60c7da511cb1058683b2be1f957e2be0ad48ab62f2c749b19d6dc549fa8091c08ae1653013bf80b0704fb2cb1e8b764813e0e1a651fda5f1806059ee2db1e36301b6a9c519f74655f053a442e7e5b4f99f565d8cf99942955209dfaf61a3a695f2295097f15463e2d60a523aa8b38968db1affd4a6aef47d871aca897f9d9e92ca369b5983f5383ce63623119ed084397bdfd59b7a589223d0a0c9a2b3edfa0", 0xcc}, {&(0x7f0000004e00)="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", 0x1000}, {&(0x7f0000005e00)="2b3d32ea082ecc8d1a791ac2b56e91749c1ad66472ddb81831b1f42042984002eba5512bcc669881cb10ca4efcfb418a7d0cd69709c6caf07c8976b46550efe0888e2cc38486004012a70b3565864e0c5da93a03787dd91f095fb1c4016016d5388dbf79c52f2ded914bf14c693910968ae6c072b7b56cab35288d62e97b84fb9d7601c670ffe6a4f7e99a1af77d679821ea81c94fb822dd98c51dc1107dbab9e8610839ac66c5f98529f706", 0xac}], 0x7}, 0x8c0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a8064", 0xc}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000000)=@caif, 0x80, &(0x7f0000002b40)=[{0x0}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000500)=""/4100, 0x1004}], 0x3, &(0x7f00000001c0)=""/121, 0x79}, 0x101) 4.330060541s ago: executing program 2 (id=1084): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xf, 0x0, &(0x7f0000000000)="ffffffff7f833e97627153c801d720", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) socket$kcm(0x2, 0x200000000000006, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x40) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095000000fb6a6a08"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.43634124s ago: executing program 0 (id=1085): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6d0, 0xcc9}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) socketpair(0xa, 0x0, 0x7, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x829, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4c814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x12) 3.43611045s ago: executing program 3 (id=1086): socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000140)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x5, 0x861, 0x4, 0x100, r0, 0x6, '\x00', r1, r3, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="81f3ff00282000000400000092da859ef0a6790824f5f9"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xf, 0x0, &(0x7f00000001c0)="e00500000007dbe9abc8d24470e712", 0x0, 0xcd34, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.251831765s ago: executing program 2 (id=1087): r0 = syz_clone(0x40188100, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000140), 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000001b00)={&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000019c0)}, 0x5) setsockopt$sock_attach_bpf(r1, 0x84, 0x65, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1400, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.229821106s ago: executing program 4 (id=1088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 2.764034231s ago: executing program 4 (id=1089): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000036000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x6, 0xc, &(0x7f0000000500), 0x4) 2.318013486s ago: executing program 4 (id=1090): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) socketpair(0x27, 0x2, 0xf01, &(0x7f0000000000)) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffff916}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x2, 0x1, 0x3, 0x9, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0xbb, &(0x7f0000000480)=""/187, 0x40f00, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xfa05, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x0, 0x3, 0x7, 0x5}, {0x1, 0x2, 0x6, 0xa}, {0x3, 0x3, 0x2, 0xb}, {0x2, 0x5, 0x10}], 0x10, 0x7}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r1}, 0x18) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x800, 0x9, 0xa, 0x48000, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x7}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f00000000c0), &(0x7f0000000400), 0x2000000}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000079100e000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="350400004100054cc6a119e30980a843015a35400c00020002452b0c7f21d100002037153e370c04018006041a004500ac377653c6de2a7c1af4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be0000000000005b3ceabc3ad0dcf506e49fc53f2d6ef7b311065ea22bc6d528c88fd15df422c8a63e1835674464541c201f843eccf75e7cecddf3a7464ca5b6a9e0b8f2cb286aa8cf672e7bf2e0270f830e01f0a48af76682b068ccaef35850dc2168aa5f5d25c9042255c7ee9048013dd0c07bdbd29d5617f26824ebdce61e63402cec93032363325edd84bb957353b8f9add6f0bc8f0923277229e8b85fd6916d61e6ea2c2e68c581331a74", 0x145}, {&(0x7f0000000a40)="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", 0x2f0}], 0x2}, 0x10049014) 2.194416859s ago: executing program 3 (id=1091): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20501, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c250000000000000000000500ffe1ffffffbea100000000000007010000f8ffffffb702000008000000b703000000763ac39100000006000000850000007d0000009500000000000000ba538cc67018cd2d8b866a607ab847f214a63ec2f27fe6fcb3d193106561d7ed05be5f2ecbd104ddd5ac6eaaf393fdba1db62206ecd6a6dda9401b917d1e7b1c503911e71f3bc4bff34c3dc585a210c8ed5e30de5d2de017ac54178d8009868d866c868409fbce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x48}, 0x40000002) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.58370529s ago: executing program 2 (id=1092): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, 0x0}, 0x4c810) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffb}, 0x4208, 0x0, 0xc2ba, 0x0, 0xfffffffffffffffe, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xd0a0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7d9b3f28b023f0a1c652202d05aad975653ffaa0a2e94377c19273a402d6dd27f4ad2edaa7b2a5237cb2fa20e4e3127525d90bd4e08a9b5d473a07832eb839e10e900be606275cf5a85c492c878cb4949bc2f7aa6bc2ee8a71bda3e5f3fc73f9521a4848dc873c39a79f94023df1796ed7222945945e6b80973da8091398180e95a6e1668b4b8f9976cce715bcb3ffe897b8411ea878256ad0d22517e14b762548c9d51ccc625f4a51", @ANYRES8], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff0200000007070000"], &(0x7f0000000100)='GPL\x00'}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.288975099s ago: executing program 3 (id=1093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=0x1, @ANYBLOB="020000000000dc00000c"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r2, &(0x7f0000000780)='syz1\x00', 0x1ff) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.000056888s ago: executing program 4 (id=1094): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = syz_clone(0x0, &(0x7f0000000100)="4d9f127c86c5849aca0ac062fd271453a61add4cae62e76e84bdbf618210fcc2c6f6e03f8965f8438e2c022328222ad84a18644e306dc308a38fa6411dde673969c9f40814b62259709c385edc3e999bd76d417e92e0e2c774307c1554c8bd13054a3762fb679f8fe100b1f7332e0919a79645ed14fe6a0a87b71394ef6654d941bf02ee4bf54628ede13d246e1207106a082fbdefce863675b82566315c272b0aad67fc572f4a0cc5471e418538d939bfa72492a3ff27cbca429fd394fd505a7b9b1d93b8", 0xc5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="18abec2780657790c6833412d5a1411444ec58b7c627715af5e74b75c8ecfb56c6c8dbc5bc552c507c524c50c1e2656a45698fe110e23bb6fd85c62183626d82d4534ac20abb5893ee2cd484b020254e68fbd20edd20891995660887a5d4ab64dc") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x911}, 0x0, 0xfffffffffffffffd, 0x7, 0x2, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, r0, 0x0, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xb, &(0x7f0000000100), 0x4) 809.697064ms ago: executing program 3 (id=1095): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xf, 0x0, &(0x7f0000000000)="ffffffff7f833e97627153c801d720", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) socket$kcm(0x2, 0x200000000000006, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x40) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095000000fb6a6a08"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 639.62704ms ago: executing program 0 (id=1096): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x18000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121101, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'veth1_to_bridge\x00', @random="5f03ebb47060"}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0xfa, 0xb, 0x6, 0x8, 0x0, 0x4, 0x61038, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe, 0x1, @perf_config_ext={0x40, 0x5}, 0x0, 0x100000000, 0xfffffffc, 0x5, 0x767, 0x4, 0xfe01, 0x0, 0x7, 0x0, 0x8000}) socket$kcm(0x11, 0xa, 0x300) 490.263834ms ago: executing program 2 (id=1097): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 319.96395ms ago: executing program 4 (id=1098): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x600, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x21}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='1-2:5'], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000200)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x2, 0x0, 0x0) 267.746442ms ago: executing program 3 (id=1099): socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000140)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x5, 0x861, 0x4, 0x100, r0, 0x6, '\x00', r1, r3, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="81f3ff00282000000400000092da859ef0a6790824f5f9"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xf, 0x0, &(0x7f00000001c0)="e00500000007dbe9abc8d24470e712", 0x0, 0xcd34, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 60.673468ms ago: executing program 2 (id=1100): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0xfd, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x2a10, 0x3, 0x3, 0x0, 0x400da4f, 0x2000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0x3, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf", 0x0, 0x8000, 0x9}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="27178597ec06b60104651a18080000b0ff001c00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000017b9af8ff00000000d6090000ff0700007baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a160, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, r4}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000700000004000000020000000000000060b1608f9f04107ad4c1cc5146435faf4c0628821d91f81cb538a74a45f75c998340376eb0526e17e3f5d8034fc74cc393ffe551d413861af15d057a4a64eab4705884c70359eab9119b0232094a6bf05466e34752103ca5fba1133a8c700d3e358222c708ee0ed774b1a427ffc5332a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r8 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r8, 0x12) 0s ago: executing program 0 (id=1101): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe904102"], 0x20}, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000a00000000b7030000b700000000109500469ad0cf70510000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000007", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x2) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$kcm(0x2, 0x5, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x60}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000100000006100000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000004075b8d337e28c137c00"/28], 0xffffffffffffff45) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) kernel console output (not intermixed with test programs): ce59 [ 138.452514][ T6366] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 138.461274][ T6366] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 138.469466][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.477863][ T6366] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 138.486027][ T6366] [ 138.531123][ T6364] netlink: 'syz.3.107': attribute type 21 has an invalid length. [ 138.553876][ T6364] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 138.580427][ T6364] team0: Device veth1_vlan failed to register rx_handler [ 138.995278][ T6376] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.111'. [ 139.037320][ T6370] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.109'. [ 139.052106][ T6376] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 139.899829][ T6385] netlink: 'syz.4.112': attribute type 10 has an invalid length. [ 139.927614][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.112'. [ 139.960301][ T6385] batman_adv: batadv0: Adding interface: veth0_vlan [ 139.981803][ T6385] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.027968][ T6385] batman_adv: batadv0: Interface activated: veth0_vlan [ 140.323771][ T6397] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 140.467291][ T6409] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.474115][ T6409] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.677139][ T6397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.996292][ T6414] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 141.021265][ T6422] netlink: 'syz.3.119': attribute type 2 has an invalid length. [ 141.037215][ T6422] netlink: 14 bytes leftover after parsing attributes in process `syz.3.119'. [ 141.068563][ T6414] team0: Device veth1_macvtap failed to register rx_handler [ 141.100093][ T6422] netlink: 'syz.3.119': attribute type 21 has an invalid length. [ 141.110963][ T6422] netlink: 'syz.3.119': attribute type 6 has an invalid length. [ 141.296059][ T6432] netlink: 'syz.2.122': attribute type 10 has an invalid length. [ 141.335308][ T6432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'. [ 141.369871][ T6432] team0: entered promiscuous mode [ 141.387910][ T6432] team_slave_0: entered promiscuous mode [ 141.402421][ T6432] team_slave_1: entered promiscuous mode [ 141.420416][ T6432] bridge0: port 3(team0) entered blocking state [ 141.451656][ T6432] bridge0: port 3(team0) entered disabled state [ 141.463021][ T6432] team0: entered allmulticast mode [ 141.477619][ T6432] team_slave_0: entered allmulticast mode [ 141.520154][ T6432] team_slave_1: entered allmulticast mode [ 141.574428][ T6432] bridge0: port 3(team0) entered blocking state [ 141.581195][ T6432] bridge0: port 3(team0) entered forwarding state [ 141.869929][ T6444] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.126'. [ 141.915362][ T6444] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 142.214357][ T6445] netlink: 'syz.4.125': attribute type 10 has an invalid length. [ 142.288644][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.125'. [ 142.493212][ T6452] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 142.895697][ T6470] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 144.122958][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 144.130781][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 144.317966][ T6502] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.137'. [ 144.338146][ T6502] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 144.925089][ T6507] FAULT_INJECTION: forcing a failure. [ 144.925089][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.989838][ T6507] CPU: 0 PID: 6507 Comm: syz.4.139 Not tainted syzkaller #0 [ 144.997238][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.007418][ T6507] Call Trace: [ 145.010730][ T6507] [ 145.013690][ T6507] dump_stack_lvl+0x18c/0x250 [ 145.018422][ T6507] ? show_regs_print_info+0x20/0x20 [ 145.023674][ T6507] ? load_image+0x420/0x420 [ 145.028577][ T6507] ? __might_fault+0xaa/0x120 [ 145.033381][ T6507] ? __lock_acquire+0x7d40/0x7d40 [ 145.038463][ T6507] should_fail_ex+0x39d/0x4d0 [ 145.043285][ T6507] _copy_from_user+0x2f/0xe0 [ 145.048278][ T6507] ___sys_recvmsg+0x176/0x590 [ 145.053074][ T6507] ? __sys_recvmsg+0x2a0/0x2a0 [ 145.058061][ T6507] ? trace_call_bpf+0xc3/0x6c0 [ 145.063033][ T6507] ? trace_call_bpf+0x5e9/0x6c0 [ 145.068280][ T6507] ? __fget_files+0x43d/0x4b0 [ 145.073377][ T6507] __x64_sys_recvmsg+0x20c/0x2e0 [ 145.078377][ T6507] ? perf_trace_preemptirq_template+0x269/0x330 [ 145.084672][ T6507] ? ___sys_recvmsg+0x590/0x590 [ 145.089597][ T6507] ? lockdep_hardirqs_on+0x98/0x150 [ 145.094915][ T6507] do_syscall_64+0x55/0xa0 [ 145.099353][ T6507] ? clear_bhb_loop+0x40/0x90 [ 145.104054][ T6507] ? clear_bhb_loop+0x40/0x90 [ 145.108759][ T6507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.114678][ T6507] RIP: 0033:0x7f7cd4d9ce59 [ 145.119202][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.138916][ T6507] RSP: 002b:00007f7cd5cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 145.147530][ T6507] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 145.156060][ T6507] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000003 [ 145.164224][ T6507] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 145.172559][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.180629][ T6507] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 145.188930][ T6507] [ 146.028801][ T6510] validate_nla: 1 callbacks suppressed [ 146.028820][ T6510] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 146.665524][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.138'. [ 146.769601][ T6510] batman_adv: batadv0: Adding interface: veth0_vlan [ 146.785535][ T6517] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.792108][ T6517] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.821768][ T6510] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.892081][ T6510] batman_adv: batadv0: Interface activated: veth0_vlan [ 146.918517][ T6516] IPv6: Can't replace route, no match found [ 147.789921][ T5785] Bluetooth: hci1: unexpected event 0x09 length: 151 > 3 [ 147.790154][ T6540] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 147.896667][ T6545] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.150'. [ 147.932107][ T6545] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 148.328689][ T6552] netlink: 'syz.0.151': attribute type 11 has an invalid length. [ 148.365540][ T6552] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.151'. [ 148.711386][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 148.721766][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 149.612181][ T6565] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 149.742409][ T6565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.155'. [ 150.218234][ T6581] sock: sock_set_timeout: `syz.0.159' (pid 6581) tries to set negative timeout [ 150.584179][ T6586] syzkaller0: entered promiscuous mode [ 150.620986][ T6586] syzkaller0: entered allmulticast mode [ 153.293084][ T6629] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 153.361773][ T6628] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.162'. [ 153.372598][ T6628] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 154.932096][ T6638] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 154.945686][ T6638] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 155.476400][ T6656] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 155.545016][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 156.072729][ T6681] netlink: 'syz.4.174': attribute type 10 has an invalid length. [ 156.157853][ T6683] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.175'. [ 156.202141][ T6683] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 156.215709][ T6681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.853363][ T6697] IPv6: Can't replace route, no match found [ 156.954929][ T6697] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.961774][ T6697] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.810705][ T6710] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 157.842491][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.183'. [ 158.451884][ T6730] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.189'. [ 158.532834][ T6730] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 159.005388][ T6743] FAULT_INJECTION: forcing a failure. [ 159.005388][ T6743] name failslab, interval 1, probability 0, space 0, times 1 [ 159.124258][ T6743] CPU: 1 PID: 6743 Comm: syz.0.193 Not tainted syzkaller #0 [ 159.131678][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.141824][ T6743] Call Trace: [ 159.145182][ T6743] [ 159.148176][ T6743] dump_stack_lvl+0x18c/0x250 [ 159.152921][ T6743] ? show_regs_print_info+0x20/0x20 [ 159.158190][ T6743] ? load_image+0x420/0x420 [ 159.162749][ T6743] ? __might_sleep+0xe0/0xe0 [ 159.167391][ T6743] ? __lock_acquire+0x7d40/0x7d40 [ 159.172475][ T6743] should_fail_ex+0x39d/0x4d0 [ 159.177316][ T6743] should_failslab+0x9/0x20 [ 159.181872][ T6743] slab_pre_alloc_hook+0x59/0x310 [ 159.187136][ T6743] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 159.192995][ T6743] __kmem_cache_alloc_node+0x53/0x250 [ 159.198596][ T6743] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 159.204032][ T6743] kmalloc_trace+0x2a/0xe0 [ 159.208683][ T6743] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 159.214043][ T6743] tcp_sendmsg_locked+0x4621/0x4bd0 [ 159.219300][ T6743] ? verify_lock_unused+0x140/0x140 [ 159.224595][ T6743] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 159.231126][ T6743] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 159.237838][ T6743] ? mark_lock+0x94/0x320 [ 159.242281][ T6743] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 159.248729][ T6743] ? lock_chain_count+0x20/0x20 [ 159.253668][ T6743] ? tcp_set_state+0x680/0x680 [ 159.258744][ T6743] tcp_sendmsg+0x2f/0x50 [ 159.263143][ T6743] ? inet_send_prepare+0x260/0x260 [ 159.268433][ T6743] ____sys_sendmsg+0x5ba/0x960 [ 159.273447][ T6743] ? __lock_acquire+0x7d40/0x7d40 [ 159.278539][ T6743] ? __asan_memset+0x22/0x40 [ 159.283201][ T6743] ? __sys_sendmsg_sock+0x30/0x30 [ 159.288263][ T6743] ? __import_iovec+0x3fa/0x850 [ 159.293213][ T6743] ? import_iovec+0x73/0xa0 [ 159.298844][ T6743] ___sys_sendmsg+0x2a6/0x360 [ 159.303721][ T6743] ? __sys_sendmsg+0x2a0/0x2a0 [ 159.308636][ T6743] ? trace_call_bpf+0xc3/0x6c0 [ 159.313559][ T6743] __se_sys_sendmsg+0x1c2/0x2b0 [ 159.318849][ T6743] ? __x64_sys_sendmsg+0x80/0x80 [ 159.323904][ T6743] ? lockdep_hardirqs_on+0x98/0x150 [ 159.329199][ T6743] do_syscall_64+0x55/0xa0 [ 159.333683][ T6743] ? clear_bhb_loop+0x40/0x90 [ 159.338437][ T6743] ? clear_bhb_loop+0x40/0x90 [ 159.343198][ T6743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.349229][ T6743] RIP: 0033:0x7f604399ce59 [ 159.353689][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.373356][ T6743] RSP: 002b:00007f6041bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.381864][ T6743] RAX: ffffffffffffffda RBX: 00007f6043c16090 RCX: 00007f604399ce59 [ 159.389900][ T6743] RDX: 0000000030004081 RSI: 0000200000000080 RDI: 0000000000000010 [ 159.397909][ T6743] RBP: 00007f6041bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.405918][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.414102][ T6743] R13: 00007f6043c16128 R14: 00007f6043c16090 R15: 00007ffe41c438e8 [ 159.422203][ T6743] [ 160.154300][ T6750] FAULT_INJECTION: forcing a failure. [ 160.154300][ T6750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.267452][ T6750] CPU: 0 PID: 6750 Comm: syz.3.195 Not tainted syzkaller #0 [ 160.274869][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.284992][ T6750] Call Trace: [ 160.288337][ T6750] [ 160.291326][ T6750] dump_stack_lvl+0x18c/0x250 [ 160.296107][ T6750] ? show_regs_print_info+0x20/0x20 [ 160.301388][ T6750] ? load_image+0x420/0x420 [ 160.305984][ T6750] ? __lock_acquire+0x7d40/0x7d40 [ 160.311144][ T6750] should_fail_ex+0x39d/0x4d0 [ 160.315922][ T6750] _copy_from_user+0x2f/0xe0 [ 160.320589][ T6750] __copy_msghdr+0x3bb/0x580 [ 160.325247][ T6750] ___sys_sendmsg+0x214/0x360 [ 160.329980][ T6750] ? __sys_sendmsg+0x2a0/0x2a0 [ 160.334888][ T6750] ? trace_call_bpf+0xc3/0x6c0 [ 160.339771][ T6750] __se_sys_sendmsg+0x1c2/0x2b0 [ 160.344663][ T6750] ? __x64_sys_sendmsg+0x80/0x80 [ 160.349679][ T6750] ? lockdep_hardirqs_on+0x98/0x150 [ 160.355131][ T6750] do_syscall_64+0x55/0xa0 [ 160.359575][ T6750] ? clear_bhb_loop+0x40/0x90 [ 160.364286][ T6750] ? clear_bhb_loop+0x40/0x90 [ 160.369090][ T6750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.375084][ T6750] RIP: 0033:0x7fc0add9ce59 [ 160.379543][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.400941][ T6750] RSP: 002b:00007fc0aeb75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.409574][ T6750] RAX: ffffffffffffffda RBX: 00007fc0ae016090 RCX: 00007fc0add9ce59 [ 160.417581][ T6750] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 160.426194][ T6750] RBP: 00007fc0aeb75090 R08: 0000000000000000 R09: 0000000000000000 [ 160.434194][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.442480][ T6750] R13: 00007fc0ae016128 R14: 00007fc0ae016090 R15: 00007ffd83182378 [ 160.450547][ T6750] [ 161.485645][ T6754] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 161.576184][ T6738] syz.4.191 (6738) used greatest stack depth: 19880 bytes left [ 161.594167][ T6754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.196'. [ 162.123457][ T6763] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 162.217566][ T6763] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.253724][ T6766] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.202'. [ 162.302390][ T6766] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 163.875916][ T6788] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 166.240429][ T6805] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.216'. [ 166.268643][ T6807] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 166.280095][ T6805] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 166.311681][ T6811] FAULT_INJECTION: forcing a failure. [ 166.311681][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 166.324677][ T6811] CPU: 0 PID: 6811 Comm: syz.4.218 Not tainted syzkaller #0 [ 166.332286][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.342500][ T6811] Call Trace: [ 166.346045][ T6811] [ 166.349021][ T6811] dump_stack_lvl+0x18c/0x250 [ 166.353945][ T6811] ? trace_call_bpf+0xc3/0x6c0 [ 166.358781][ T6811] ? show_regs_print_info+0x20/0x20 [ 166.364059][ T6811] ? load_image+0x420/0x420 [ 166.368627][ T6811] ? trace_call_bpf+0xc3/0x6c0 [ 166.373493][ T6811] should_fail_ex+0x39d/0x4d0 [ 166.378358][ T6811] should_failslab+0x9/0x20 [ 166.383091][ T6811] slab_pre_alloc_hook+0x59/0x310 [ 166.388387][ T6811] ? trace_call_bpf+0x5e9/0x6c0 [ 166.393306][ T6811] kmem_cache_alloc+0x5a/0x2d0 [ 166.398139][ T6811] ? dst_alloc+0x105/0x170 [ 166.402614][ T6811] dst_alloc+0x105/0x170 [ 166.407001][ T6811] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 166.411939][ T6814] netlink: 'syz.3.219': attribute type 2 has an invalid length. [ 166.413586][ T6811] ? ip_route_output_key_hash+0x13d/0x330 [ 166.427107][ T6811] ip_route_output_key_hash+0x1f3/0x330 [ 166.432725][ T6811] ? ip_route_input_rcu+0x30f0/0x30f0 [ 166.438257][ T6811] ? __asan_memset+0x22/0x40 [ 166.439523][ T6815] netlink: 'syz.3.219': attribute type 2 has an invalid length. [ 166.442893][ T6811] ip_route_output_flow+0x2a/0x150 [ 166.442933][ T6811] ip_tunnel_xmit+0x9b1/0x2410 [ 166.442961][ T6811] ? ip_tunnel_xmit+0xf0/0x2410 [ 166.442999][ T6811] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 166.451249][ T6813] netlink: 14 bytes leftover after parsing attributes in process `syz.3.219'. [ 166.457252][ T6811] ? validate_xmit_xfrm+0xbc/0x12c0 [ 166.457300][ T6811] ? gre_build_header+0x25b/0x990 [ 166.457349][ T6811] ipgre_xmit+0x7a6/0xb20 [ 166.457394][ T6811] dev_hard_start_xmit+0x246/0x740 [ 166.457494][ T6811] __dev_queue_xmit+0x19a3/0x3660 [ 166.509714][ T6811] ? __dev_queue_xmit+0x265/0x3660 [ 166.514867][ T6811] ? slab_post_alloc_hook+0x8a/0x4b0 [ 166.520273][ T6811] ? netdev_core_pick_tx+0x340/0x340 [ 166.525689][ T6811] ? rcu_is_watching+0x15/0xb0 [ 166.530507][ T6811] ? skb_release_data+0x1d1/0x7b0 [ 166.535693][ T6811] __bpf_tx_skb+0x189/0x250 [ 166.540273][ T6811] bpf_clone_redirect+0x30f/0x4a0 [ 166.545792][ T6811] ? bpf_test_run+0x174/0x870 [ 166.550541][ T6811] bpf_prog_208b094576c80b22+0x5e/0x63 [ 166.556064][ T6811] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 166.562194][ T6811] ? lock_chain_count+0x20/0x20 [ 166.567551][ T6811] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 166.574573][ T6811] ? lockdep_softirqs_on+0x580/0x580 [ 166.580095][ T6811] ? ktime_get+0x7f/0x280 [ 166.584462][ T6811] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 166.590752][ T6811] ? ktime_get_real_ts64+0x440/0x440 [ 166.596067][ T6811] ? __x64_sys_bpf+0x7c/0x90 [ 166.600680][ T6811] ? __local_bh_disable_ip+0x108/0x1a0 [ 166.606201][ T6811] ? __cant_sleep+0x220/0x220 [ 166.610891][ T6811] ? read_tsc+0x9/0x20 [ 166.615501][ T6811] ? ktime_get+0x24b/0x280 [ 166.619977][ T6811] ? bpf_test_run+0x174/0x870 [ 166.624730][ T6811] ? kvm_sched_clock_read+0x11/0x20 [ 166.629949][ T6811] bpf_test_run+0x4fa/0x870 [ 166.634501][ T6811] ? bpf_test_run+0x174/0x870 [ 166.639226][ T6811] ? convert___skb_to_skb+0x590/0x590 [ 166.644718][ T6811] ? eth_get_headlen+0x210/0x210 [ 166.649706][ T6811] ? slab_build_skb+0x25f/0x3f0 [ 166.654597][ T6811] ? convert___skb_to_skb+0x3d/0x590 [ 166.659920][ T6811] bpf_prog_test_run_skb+0xad2/0x12b0 [ 166.665347][ T6811] ? cpu_online+0x60/0x60 [ 166.669726][ T6811] bpf_prog_test_run+0x321/0x390 [ 166.674696][ T6811] __sys_bpf+0x49d/0x890 [ 166.678962][ T6811] ? bpf_link_show_fdinfo+0x390/0x390 [ 166.684489][ T6811] ? lock_chain_count+0x20/0x20 [ 166.689396][ T6811] __x64_sys_bpf+0x7c/0x90 [ 166.694093][ T6811] do_syscall_64+0x55/0xa0 [ 166.698520][ T6811] ? clear_bhb_loop+0x40/0x90 [ 166.703225][ T6811] ? clear_bhb_loop+0x40/0x90 [ 166.708878][ T6811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.716220][ T6811] RIP: 0033:0x7f7cd4d9ce59 [ 166.720694][ T6811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.741377][ T6811] RSP: 002b:00007f7cd5cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.750003][ T6811] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 166.758718][ T6811] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 166.766720][ T6811] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 166.774707][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.782712][ T6811] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 166.791266][ T6811] [ 166.994857][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.003381][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.040001][ T6817] bridge0: entered allmulticast mode [ 167.096875][ T6820] bridge_slave_1: left allmulticast mode [ 167.108666][ T6820] bridge_slave_1: left promiscuous mode [ 167.130769][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.154921][ T6820] bridge_slave_0: left allmulticast mode [ 167.160129][ T6825] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.223'. [ 167.174958][ T6820] bridge_slave_0: left promiscuous mode [ 167.185327][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.240932][ T6827] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.224'. [ 167.313309][ T6819] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 167.829509][ T6840] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 168.525042][ T6848] delete_channel: no stack [ 168.552560][ T6848] delete_channel: no stack [ 168.710667][ T6851] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.231'. [ 168.737243][ T6851] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 168.885079][ T6854] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.891779][ T6854] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 169.393745][ T5781] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 169.401334][ T5781] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 169.731077][ T6864] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 170.056492][ T6866] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 170.086855][ T6866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.237'. [ 170.601026][ T6873] FAULT_INJECTION: forcing a failure. [ 170.601026][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 170.652662][ T6873] CPU: 1 PID: 6873 Comm: syz.4.240 Not tainted syzkaller #0 [ 170.660021][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.670137][ T6873] Call Trace: [ 170.673457][ T6873] [ 170.676429][ T6873] dump_stack_lvl+0x18c/0x250 [ 170.681160][ T6873] ? show_regs_print_info+0x20/0x20 [ 170.686398][ T6873] ? load_image+0x420/0x420 [ 170.690934][ T6873] should_fail_ex+0x39d/0x4d0 [ 170.695637][ T6873] should_failslab+0x9/0x20 [ 170.700194][ T6873] slab_pre_alloc_hook+0x59/0x310 [ 170.705255][ T6873] kmem_cache_alloc+0x5a/0x2d0 [ 170.710358][ T6873] ? dst_alloc+0x105/0x170 [ 170.715272][ T6873] dst_alloc+0x105/0x170 [ 170.719645][ T6873] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 170.725937][ T6873] ? ip_route_output_key_hash+0x13d/0x330 [ 170.731676][ T6873] ip_route_output_key_hash+0x1f3/0x330 [ 170.737243][ T6873] ? ip_route_input_rcu+0x30f0/0x30f0 [ 170.742720][ T6873] ? __mutex_trylock_common+0x159/0x260 [ 170.748506][ T6873] ? trace_raw_output_contention_end+0xd0/0xd0 [ 170.754791][ T6873] ? rcu_is_watching+0x15/0xb0 [ 170.759589][ T6873] ip_route_output_flow+0x2a/0x150 [ 170.764723][ T6873] arp_req_delete+0x1cb/0x340 [ 170.769417][ T6873] ? arp_ioctl+0x530/0x530 [ 170.773854][ T6873] ? __might_fault+0xaa/0x120 [ 170.778547][ T6873] ? __might_fault+0xc6/0x120 [ 170.783233][ T6873] ? __might_fault+0xaa/0x120 [ 170.787928][ T6873] arp_ioctl+0x40d/0x530 [ 170.792195][ T6873] ? neigh_release+0x80/0x80 [ 170.796816][ T6873] ? do_vfs_ioctl+0x1573/0x1cc0 [ 170.801702][ T6873] inet_ioctl+0x3c5/0x560 [ 170.806219][ T6873] ? tomoyo_path_number_perm+0x217/0x620 [ 170.811886][ T6873] ? inet_shutdown+0x370/0x370 [ 170.816677][ T6873] ? slab_free_freelist_hook+0x130/0x1a0 [ 170.822339][ T6873] ? tomoyo_path_number_perm+0x500/0x620 [ 170.828076][ T6873] ? __kmem_cache_free+0xba/0x1e0 [ 170.833131][ T6873] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 170.838619][ T6873] sock_do_ioctl+0xfc/0x310 [ 170.843156][ T6873] ? sock_show_fdinfo+0xb0/0xb0 [ 170.848129][ T6873] sock_ioctl+0x5ba/0x7e0 [ 170.852478][ T6873] ? sock_poll+0x3e0/0x3e0 [ 170.856923][ T6873] ? bpf_lsm_file_ioctl+0x9/0x10 [ 170.861878][ T6873] ? security_file_ioctl+0x80/0xa0 [ 170.867018][ T6873] ? sock_poll+0x3e0/0x3e0 [ 170.871476][ T6873] __se_sys_ioctl+0xfd/0x170 [ 170.876134][ T6873] do_syscall_64+0x55/0xa0 [ 170.880610][ T6873] ? clear_bhb_loop+0x40/0x90 [ 170.885856][ T6873] ? clear_bhb_loop+0x40/0x90 [ 170.890832][ T6873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.896750][ T6873] RIP: 0033:0x7f7cd4d9ce59 [ 170.901177][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.920889][ T6873] RSP: 002b:00007f7cd5cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.929339][ T6873] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 170.937336][ T6873] RDX: 0000200000000040 RSI: 0000000000008953 RDI: 0000000000000003 [ 170.945323][ T6873] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 170.953407][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.961778][ T6873] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 170.970028][ T6873] [ 171.018904][ T6868] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 171.033837][ T6868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.238'. [ 171.306756][ T6881] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.243'. [ 171.372176][ T6881] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 171.461024][ T6887] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.245'. [ 171.776818][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.785362][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.796871][ T6896] bridge0: entered allmulticast mode [ 171.853359][ T6899] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 171.879117][ T6896] bridge_slave_1: left allmulticast mode [ 171.887494][ T6896] bridge_slave_1: left promiscuous mode [ 171.899806][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.910822][ T6896] bridge_slave_0: left allmulticast mode [ 171.916754][ T6896] bridge_slave_0: left promiscuous mode [ 171.923994][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.435778][ T6905] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 172.575135][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.249'. [ 173.237670][ T6918] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.255'. [ 173.269310][ T6918] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 173.695145][ T6922] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 173.752597][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.254'. [ 173.791285][ T6927] netlink: 'syz.3.257': attribute type 10 has an invalid length. [ 174.518132][ T6934] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 174.552283][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 174.579096][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.587009][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.606886][ T6937] bridge0: entered allmulticast mode [ 174.748256][ T6937] bridge_slave_1: left allmulticast mode [ 174.767477][ T6937] bridge_slave_1: left promiscuous mode [ 174.796669][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.839509][ T6946] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.265'. [ 174.849643][ T6946] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 175.759923][ T6937] bridge_slave_0: left allmulticast mode [ 175.781856][ T6937] bridge_slave_0: left promiscuous mode [ 175.796239][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.892732][ T5785] Bluetooth: hci2: unexpected event 0x09 length: 151 > 3 [ 176.149683][ T6962] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.275'. [ 176.212639][ T6962] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 176.278307][ T6966] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 176.813403][ T6973] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 176.821266][ T6973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.268'. [ 177.528565][ T6979] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 177.562347][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.272'. [ 178.060249][ T6989] FAULT_INJECTION: forcing a failure. [ 178.060249][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.112164][ T6989] CPU: 0 PID: 6989 Comm: syz.4.277 Not tainted syzkaller #0 [ 178.119528][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.129791][ T6989] Call Trace: [ 178.133090][ T6989] [ 178.136051][ T6989] dump_stack_lvl+0x18c/0x250 [ 178.140785][ T6989] ? show_regs_print_info+0x20/0x20 [ 178.146030][ T6989] ? load_image+0x420/0x420 [ 178.150555][ T6989] ? __lock_acquire+0x7d40/0x7d40 [ 178.155597][ T6989] ? snprintf+0xe9/0x140 [ 178.159856][ T6989] should_fail_ex+0x39d/0x4d0 [ 178.164562][ T6989] _copy_to_user+0x2f/0xa0 [ 178.168994][ T6989] simple_read_from_buffer+0xe7/0x150 [ 178.174394][ T6989] proc_fail_nth_read+0x1e8/0x260 [ 178.179455][ T6989] ? proc_fault_inject_write+0x360/0x360 [ 178.185292][ T6989] ? fsnotify_perm+0x271/0x5e0 [ 178.190077][ T6989] ? proc_fault_inject_write+0x360/0x360 [ 178.195732][ T6989] vfs_read+0x28b/0x970 [ 178.199910][ T6989] ? kernel_read+0x1e0/0x1e0 [ 178.204608][ T6989] ? __fget_files+0x28/0x4b0 [ 178.209848][ T6989] ? __fget_files+0x28/0x4b0 [ 178.214564][ T6989] ? __fget_files+0x43d/0x4b0 [ 178.219482][ T6989] ? __fdget_pos+0x2a3/0x330 [ 178.224219][ T6989] ? ksys_read+0x75/0x260 [ 178.228609][ T6989] ksys_read+0x150/0x260 [ 178.233359][ T6989] ? vfs_write+0x990/0x990 [ 178.237939][ T6989] ? lockdep_hardirqs_on+0x98/0x150 [ 178.243908][ T6989] do_syscall_64+0x55/0xa0 [ 178.248603][ T6989] ? clear_bhb_loop+0x40/0x90 [ 178.253409][ T6989] ? clear_bhb_loop+0x40/0x90 [ 178.258201][ T6989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.264151][ T6989] RIP: 0033:0x7f7cd4d5d68e [ 178.268585][ T6989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.288296][ T6989] RSP: 002b:00007f7cd5cddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.296731][ T6989] RAX: ffffffffffffffda RBX: 00007f7cd5cde6c0 RCX: 00007f7cd4d5d68e [ 178.304805][ T6989] RDX: 000000000000000f RSI: 00007f7cd5cde0a0 RDI: 0000000000000004 [ 178.312886][ T6989] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 178.320871][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.328856][ T6989] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 178.336860][ T6989] [ 178.847697][ T7001] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.280'. [ 178.882329][ T7001] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 180.064531][ T7032] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 180.142532][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 183.070331][ T7034] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.292'. [ 183.163416][ T7034] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 183.324796][ T7037] netlink: 'syz.4.293': attribute type 10 has an invalid length. [ 183.354955][ T7037] netlink: 55 bytes leftover after parsing attributes in process `syz.4.293'. [ 184.278686][ T7059] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 184.492360][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'. [ 184.654721][ T7064] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.304'. [ 184.754845][ T7064] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 185.678425][ T7086] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 185.705247][ T7086] geneve0: entered promiscuous mode [ 185.816787][ T7086] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 186.027309][ T7090] netlink: 10 bytes leftover after parsing attributes in process `syz.4.309'. [ 186.091913][ T7086] syz.0.307 (7086) used greatest stack depth: 19464 bytes left [ 186.122888][ T7088] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 186.288198][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.367542][ T7088] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 186.864658][ T7109] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.314'. [ 187.388189][ T7117] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.317'. [ 187.400474][ T7117] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 189.068579][ T7111] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 189.076502][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 189.086330][ T7119] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 190.071398][ T7139] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.326'. [ 190.132668][ T7139] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 190.394841][ T7148] netlink: 'syz.3.329': attribute type 12 has an invalid length. [ 190.464741][ T7148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.329'. [ 190.501479][ T7149] netlink: 'syz.4.328': attribute type 10 has an invalid length. [ 190.688433][ T7152] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 190.696320][ T7152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 191.183890][ T7162] netlink: 144 bytes leftover after parsing attributes in process `syz.4.332'. [ 191.502096][ T7166] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 191.617811][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.665637][ T7166] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 191.880561][ T7171] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.338'. [ 191.916931][ T7171] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 192.190213][ T7180] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 192.204576][ T7184] FAULT_INJECTION: forcing a failure. [ 192.204576][ T7184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.249038][ T7184] CPU: 0 PID: 7184 Comm: syz.0.342 Not tainted syzkaller #0 [ 192.256424][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.266522][ T7184] Call Trace: [ 192.269832][ T7184] [ 192.272808][ T7184] dump_stack_lvl+0x18c/0x250 [ 192.277541][ T7184] ? show_regs_print_info+0x20/0x20 [ 192.282805][ T7184] ? load_image+0x420/0x420 [ 192.287378][ T7184] ? __lock_acquire+0x7d40/0x7d40 [ 192.292444][ T7184] should_fail_ex+0x39d/0x4d0 [ 192.297164][ T7184] prepare_alloc_pages+0x1e2/0x5f0 [ 192.302315][ T7184] __alloc_pages+0x134/0x460 [ 192.306964][ T7184] ? zone_statistics+0x170/0x170 [ 192.311941][ T7184] __pmd_alloc+0x9a/0x8b0 [ 192.316290][ T7184] ? mt_find+0x169/0x650 [ 192.320551][ T7184] ? __lock_acquire+0x7d40/0x7d40 [ 192.325590][ T7184] ? __pud_alloc+0x1f0/0x1f0 [ 192.330292][ T7184] ? hugepage_vma_check+0x488/0x5a0 [ 192.335518][ T7184] handle_mm_fault+0xb5d/0x4c00 [ 192.340384][ T7184] ? handle_mm_fault+0xe7/0x4c00 [ 192.345341][ T7184] ? numa_migrate_prep+0x350/0x350 [ 192.350477][ T7184] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 192.355775][ T7184] do_user_addr_fault+0x730/0x12c0 [ 192.360917][ T7184] exc_page_fault+0x64/0x100 [ 192.365523][ T7184] asm_exc_page_fault+0x26/0x30 [ 192.370392][ T7184] RIP: 0010:__get_user_4+0x11/0x20 [ 192.375515][ T7184] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 192.395484][ T7184] RSP: 0018:ffffc900041d7ab8 EFLAGS: 00050202 [ 192.401567][ T7184] RAX: 000000110e22fff2 RBX: ffffffff8d266840 RCX: b1de9223456ad700 [ 192.409572][ T7184] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 192.417731][ T7184] RBP: ffffc900041d7ed8 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 192.425711][ T7184] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 000000110e22fff2 [ 192.433863][ T7184] R13: 0000000040086602 R14: fffff5200083af5c R15: ffff8880228791a0 [ 192.441946][ T7184] do_vfs_ioctl+0xb9c/0x1cc0 [ 192.446563][ T7184] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 192.452315][ T7184] ? tomoyo_path_number_perm+0x217/0x620 [ 192.458062][ T7184] ? __lock_acquire+0x7d40/0x7d40 [ 192.463105][ T7184] ? slab_free_freelist_hook+0x130/0x1a0 [ 192.468752][ T7184] ? tomoyo_path_number_perm+0x500/0x620 [ 192.474408][ T7184] ? __kmem_cache_free+0xba/0x1e0 [ 192.479542][ T7184] ? tomoyo_path_number_perm+0x5b4/0x620 [ 192.485280][ T7184] ? tomoyo_path_number_perm+0x217/0x620 [ 192.490935][ T7184] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 192.496443][ T7184] ? __fget_files+0x28/0x4b0 [ 192.501042][ T7184] ? __fget_files+0x28/0x4b0 [ 192.505770][ T7184] ? bpf_lsm_file_ioctl+0x9/0x10 [ 192.510726][ T7184] ? security_file_ioctl+0x80/0xa0 [ 192.515860][ T7184] __se_sys_ioctl+0x83/0x170 [ 192.520468][ T7184] do_syscall_64+0x55/0xa0 [ 192.524896][ T7184] ? clear_bhb_loop+0x40/0x90 [ 192.529591][ T7184] ? clear_bhb_loop+0x40/0x90 [ 192.534288][ T7184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.540194][ T7184] RIP: 0033:0x7f604399ce59 [ 192.544631][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.564377][ T7184] RSP: 002b:00007f6044776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.572829][ T7184] RAX: ffffffffffffffda RBX: 00007f6043c15fa0 RCX: 00007f604399ce59 [ 192.580810][ T7184] RDX: 000000110e22fff2 RSI: 0000000040086602 RDI: 0000000000000003 [ 192.588876][ T7184] RBP: 00007f6044776090 R08: 0000000000000000 R09: 0000000000000000 [ 192.596857][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.605645][ T7184] R13: 00007f6043c16038 R14: 00007f6043c15fa0 R15: 00007ffe41c438e8 [ 192.613655][ T7184] [ 192.859992][ T7182] netlink: 'syz.2.341': attribute type 10 has an invalid length. [ 192.882694][ T7182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 193.039913][ T7193] netlink: 'syz.4.346': attribute type 29 has an invalid length. [ 193.050949][ T7193] netlink: 'syz.4.346': attribute type 29 has an invalid length. [ 193.732765][ T7209] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.351'. [ 193.830210][ T7209] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 194.228107][ T7215] FAULT_INJECTION: forcing a failure. [ 194.228107][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 194.278670][ T7215] CPU: 0 PID: 7215 Comm: syz.0.352 Not tainted syzkaller #0 [ 194.286135][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.296311][ T7215] Call Trace: [ 194.299621][ T7215] [ 194.302582][ T7215] dump_stack_lvl+0x18c/0x250 [ 194.307310][ T7215] ? show_regs_print_info+0x20/0x20 [ 194.312550][ T7215] ? load_image+0x420/0x420 [ 194.317107][ T7215] ? __lock_acquire+0x1273/0x7d40 [ 194.322199][ T7215] should_fail_ex+0x39d/0x4d0 [ 194.326947][ T7215] should_failslab+0x9/0x20 [ 194.331497][ T7215] slab_pre_alloc_hook+0x59/0x310 [ 194.336654][ T7215] kmem_cache_alloc+0x5a/0x2d0 [ 194.341544][ T7215] ? dst_alloc+0x105/0x170 [ 194.346030][ T7215] dst_alloc+0x105/0x170 [ 194.350322][ T7215] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 194.356437][ T7215] ? ip_route_output_key_hash+0x13d/0x330 [ 194.362203][ T7215] ip_route_output_key_hash+0x1f3/0x330 [ 194.367811][ T7215] ? ip_route_input_rcu+0x30f0/0x30f0 [ 194.373234][ T7215] ? __lock_acquire+0x7d40/0x7d40 [ 194.378495][ T7215] ip_route_output_flow+0x2a/0x150 [ 194.383663][ T7215] ? security_sk_classify_flow+0x7b/0x90 [ 194.389357][ T7215] udp_sendmsg+0x1603/0x23b0 [ 194.394012][ T7215] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 194.398897][ T7215] ? udp_cmsg_send+0x350/0x350 [ 194.403697][ T7215] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 194.409706][ T7215] ? lock_chain_count+0x20/0x20 [ 194.414577][ T7215] ? inet_sendmsg+0x14b/0x2f0 [ 194.419283][ T7215] ? __local_bh_enable_ip+0x13a/0x1c0 [ 194.424669][ T7215] ? _local_bh_enable+0xa0/0xa0 [ 194.429536][ T7215] ? do_raw_spin_unlock+0x121/0x230 [ 194.434774][ T7215] ? inet_sendmsg+0x14b/0x2f0 [ 194.439471][ T7215] ? inet_sendmsg+0x14b/0x2f0 [ 194.444193][ T7215] ? inet_send_prepare+0x260/0x260 [ 194.449336][ T7215] ____sys_sendmsg+0x5ba/0x960 [ 194.454637][ T7215] ? __lock_acquire+0x7d40/0x7d40 [ 194.459687][ T7215] ? __sys_sendmsg_sock+0x30/0x30 [ 194.464731][ T7215] ? __import_iovec+0x3fa/0x850 [ 194.469602][ T7215] ? import_iovec+0x73/0xa0 [ 194.474120][ T7215] ___sys_sendmsg+0x2a6/0x360 [ 194.478819][ T7215] ? get_pid_task+0x20/0x1e0 [ 194.483434][ T7215] ? __sys_sendmsg+0x2a0/0x2a0 [ 194.488230][ T7215] ? __lock_acquire+0x7d40/0x7d40 [ 194.493405][ T7215] __se_sys_sendmsg+0x1c2/0x2b0 [ 194.498279][ T7215] ? __x64_sys_sendmsg+0x80/0x80 [ 194.503255][ T7215] ? lockdep_hardirqs_on+0x98/0x150 [ 194.508473][ T7215] do_syscall_64+0x55/0xa0 [ 194.512931][ T7215] ? clear_bhb_loop+0x40/0x90 [ 194.517628][ T7215] ? clear_bhb_loop+0x40/0x90 [ 194.522318][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.528233][ T7215] RIP: 0033:0x7f604399ce59 [ 194.532692][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.552312][ T7215] RSP: 002b:00007f6044776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.560840][ T7215] RAX: ffffffffffffffda RBX: 00007f6043c15fa0 RCX: 00007f604399ce59 [ 194.568834][ T7215] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 194.576901][ T7215] RBP: 00007f6044776090 R08: 0000000000000000 R09: 0000000000000000 [ 194.584882][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.592870][ T7215] R13: 00007f6043c16038 R14: 00007f6043c15fa0 R15: 00007ffe41c438e8 [ 194.600884][ T7215] [ 194.654428][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.660896][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.829994][ T7217] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 194.846500][ T7212] netlink: 'syz.3.350': attribute type 64 has an invalid length. [ 195.105395][ T7222] netlink: 'syz.2.356': attribute type 10 has an invalid length. [ 195.122546][ T7222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.356'. [ 196.954162][ T7240] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 197.015361][ T7240] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 197.080192][ T7244] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.363'. [ 197.130236][ T7240] batman_adv: batadv0: Removing interface: veth0_vlan [ 197.135272][ T7244] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 197.983959][ T7240] veth0_vlan: left promiscuous mode [ 198.013779][ T7240] veth0_vlan: entered promiscuous mode [ 198.047894][ T7240] team0: Device veth0_vlan failed to register rx_handler [ 198.365072][ T7254] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 198.432899][ T7256] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 198.460154][ T7260] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 199.236878][ T7267] netlink: 'syz.4.372': attribute type 5 has an invalid length. [ 199.312037][ T7267] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 199.433325][ T7267] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.372'. [ 199.444440][ T7274] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 199.521772][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.370'. [ 199.532476][ T7274] veth0_vlan: left promiscuous mode [ 199.539409][ T7274] veth0_vlan: entered promiscuous mode [ 199.549458][ T7274] batman_adv: batadv0: Adding interface: veth0_vlan [ 199.574502][ T7274] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.652053][ T7274] batman_adv: batadv0: Interface activated: veth0_vlan [ 200.101790][ T7286] syz.3.378 uses obsolete (PF_INET,SOCK_PACKET) [ 200.227599][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 200.236672][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 201.094035][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 201.102755][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 201.113073][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 201.120728][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.130975][ T5785] Workqueue: hci4 hci_rx_work [ 201.135796][ T5785] Call Trace: [ 201.139150][ T5785] [ 201.142199][ T5785] dump_stack_lvl+0x18c/0x250 [ 201.147012][ T5785] ? show_regs_print_info+0x20/0x20 [ 201.152460][ T5785] ? load_image+0x420/0x420 [ 201.157198][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 201.162502][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 201.167312][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 201.172635][ T5785] kobject_add_internal+0x61c/0xcc0 [ 201.177970][ T5785] kobject_add+0x164/0x240 [ 201.182484][ T5785] ? __rwlock_init+0x150/0x150 [ 201.187450][ T5785] ? kobject_init+0x1e0/0x1e0 [ 201.192227][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 201.197454][ T5785] ? get_device_parent+0x366/0x390 [ 201.202692][ T5785] device_add+0x408/0xc20 [ 201.207213][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 201.212268][ T5785] le_conn_complete_evt+0xf5d/0x1540 [ 201.217706][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 201.224058][ T5785] ? bt_info+0x180/0x180 [ 201.228761][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 201.234530][ T5785] ? skb_pull_data+0xfb/0x200 [ 201.239341][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 201.245026][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 201.251400][ T5785] hci_event_packet+0x7ba/0x1270 [ 201.256506][ T5785] ? bis_list+0x290/0x290 [ 201.260961][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 201.266364][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 201.271938][ T5785] hci_rx_work+0x43a/0xd60 [ 201.276516][ T5785] ? process_scheduled_works+0x96f/0x15d0 [ 201.282382][ T5785] process_scheduled_works+0xa5d/0x15d0 [ 201.288153][ T5785] ? worker_attach_to_pool+0x380/0x380 [ 201.293742][ T5785] ? assign_work+0x3d2/0x5d0 [ 201.298628][ T5785] worker_thread+0xa55/0xfc0 [ 201.303445][ T5785] kthread+0x2fa/0x390 [ 201.307591][ T5785] ? pr_cont_work+0x560/0x560 [ 201.312367][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 201.317042][ T5785] ret_from_fork+0x48/0x80 [ 201.321536][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 201.326224][ T5785] ret_from_fork_asm+0x11/0x20 [ 201.331236][ T5785] [ 201.336795][ T5785] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.350984][ T5785] Bluetooth: hci4: failed to register connection device [ 202.164122][ T7308] validate_nla: 1 callbacks suppressed [ 202.164141][ T7308] netlink: 'syz.2.385': attribute type 10 has an invalid length. [ 202.187566][ T7308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'. [ 202.448650][ T7314] netlink: 'syz.4.386': attribute type 10 has an invalid length. [ 202.599588][ T7317] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.388'. [ 202.634269][ T7317] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 203.315071][ T5781] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 203.324172][ T5781] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 203.433145][ T5785] Bluetooth: hci4: command tx timeout [ 204.403075][ T7343] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 204.943293][ T7349] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.402'. [ 204.974178][ T7344] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 205.017911][ T7349] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 205.032970][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.397'. [ 205.209042][ T7353] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 205.237286][ T7353] netlink: 119 bytes leftover after parsing attributes in process `syz.2.403'. [ 205.803696][ T5793] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 205.811230][ T5793] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 206.408086][ T7371] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 206.703573][ T7378] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 206.809545][ T7378] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.413'. [ 206.822100][ T7378] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 206.973749][ T7380] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 207.032555][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 207.032592][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 207.039839][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 207.060764][ T7386] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.416'. [ 207.072986][ T7380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.414'. [ 207.115554][ T7386] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 207.944250][ T7399] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.421'. [ 208.042627][ T5781] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 208.050462][ T5781] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 208.126834][ T7404] netlink: 'syz.4.423': attribute type 10 has an invalid length. [ 209.216732][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 209.224848][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 209.331669][ T7419] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.428'. [ 209.356231][ T7419] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 209.438425][ T7414] netlink: 'syz.3.427': attribute type 10 has an invalid length. [ 209.477346][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.427'. [ 210.139035][ T7431] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 210.307051][ T5785] Bluetooth: Frame is too long (len 149, expected len 4) [ 210.743334][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 210.751121][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 211.145083][ T7441] netlink: 'syz.4.437': attribute type 10 has an invalid length. [ 211.181652][ T7441] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.437'. [ 211.249476][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 211.257675][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 211.912150][ T7452] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.441'. [ 211.921486][ T7452] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 212.358591][ T7451] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 212.407611][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.440'. [ 212.985519][ T7465] netlink: 'syz.2.445': attribute type 10 has an invalid length. [ 213.012260][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.445'. [ 213.021212][ T7465] batadv0: entered promiscuous mode [ 213.053216][ T7465] batadv0: entered allmulticast mode [ 213.139103][ T7465] bond0: (slave batadv0): Releasing backup interface [ 213.159832][ T7465] bridge0: port 4(batadv0) entered blocking state [ 213.166802][ T7465] bridge0: port 4(batadv0) entered disabled state [ 213.177462][ T7463] netlink: 'syz.4.444': attribute type 10 has an invalid length. [ 213.569857][ T7474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.446'. [ 213.588139][ T1095] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 213.598095][ T1095] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 214.022834][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 214.030646][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 214.054247][ T7467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.115915][ T7474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.446'. [ 214.214554][ T7467] syz.0.446 (7467) used greatest stack depth: 19056 bytes left [ 214.352079][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 214.359771][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 215.209311][ T7494] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 215.217585][ T7494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'. [ 215.433737][ T7500] netlink: 'syz.3.456': attribute type 10 has an invalid length. [ 216.007775][ T7505] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.458'. [ 216.052140][ T7505] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 216.124632][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 216.132734][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 216.777959][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 216.786032][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 217.506666][ T7533] netlink: 'syz.2.466': attribute type 10 has an invalid length. [ 217.668186][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.466'. [ 218.183015][ T7542] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 218.209203][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 218.218292][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 218.547573][ T7551] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.473'. [ 218.615945][ T7551] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 219.238227][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 219.246483][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 219.575688][ T7563] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 219.615127][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.479'. [ 220.706492][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 220.716429][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 220.828880][ T7578] netlink: 'syz.4.483': attribute type 10 has an invalid length. [ 220.928373][ T7584] sctp: [Deprecated]: syz.3.486 (pid 7584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.928373][ T7584] Use struct sctp_sack_info instead [ 221.046496][ T7586] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.487'. [ 221.087094][ T7586] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 221.134203][ T7592] netlink: 'syz.0.488': attribute type 2 has an invalid length. [ 221.633508][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 221.641318][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 221.800583][ T7599] netlink: 'syz.2.491': attribute type 10 has an invalid length. [ 221.824640][ T7599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.491'. [ 222.671166][ T5781] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 222.679148][ T5781] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 222.856675][ T7620] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.499'. [ 222.900741][ T7622] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 222.921262][ T7620] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 223.906689][ T7635] netlink: 'syz.4.502': attribute type 21 has an invalid length. [ 223.942638][ T7635] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 223.962890][ T7636] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 223.971292][ T7636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.503'. [ 224.040606][ T7628] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 224.080104][ T7628] netlink: 119 bytes leftover after parsing attributes in process `syz.2.500'. [ 224.128809][ T7637] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 224.152058][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.500'. [ 224.175061][ T7637] ipvlan1: entered promiscuous mode [ 224.208218][ T7637] ipvlan1: entered allmulticast mode [ 224.227440][ T7637] veth0_vlan: entered allmulticast mode [ 224.264966][ T7637] bridge0: port 5(ipvlan1) entered blocking state [ 224.303452][ T7637] bridge0: port 5(ipvlan1) entered disabled state [ 224.405910][ T7637] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 224.445158][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 224.452878][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 224.820735][ T7648] FAULT_INJECTION: forcing a failure. [ 224.820735][ T7648] name failslab, interval 1, probability 0, space 0, times 0 [ 224.864539][ T7648] CPU: 0 PID: 7648 Comm: syz.3.506 Not tainted syzkaller #0 [ 224.872037][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.882164][ T7648] Call Trace: [ 224.885483][ T7648] [ 224.888451][ T7648] dump_stack_lvl+0x18c/0x250 [ 224.893190][ T7648] ? show_regs_print_info+0x20/0x20 [ 224.898435][ T7648] ? load_image+0x420/0x420 [ 224.903062][ T7648] should_fail_ex+0x39d/0x4d0 [ 224.907907][ T7648] should_failslab+0x9/0x20 [ 224.912463][ T7648] slab_pre_alloc_hook+0x59/0x310 [ 224.917626][ T7648] ? nf_ct_ext_add+0x1ab/0x440 [ 224.922456][ T7648] ? nf_ct_ext_add+0x1ab/0x440 [ 224.927275][ T7648] __kmem_cache_alloc_node+0x53/0x250 [ 224.932708][ T7648] ? nf_ct_ext_add+0x1ab/0x440 [ 224.937515][ T7648] __kmalloc_node_track_caller+0xa2/0x230 [ 224.943297][ T7648] krealloc+0x86/0x120 [ 224.947416][ T7648] nf_ct_ext_add+0x1ab/0x440 [ 224.952076][ T7648] init_conntrack+0x69c/0xf10 [ 224.956807][ T7648] ? early_drop+0x7f0/0x7f0 [ 224.961360][ T7648] ? nf_conntrack_find_get+0x650/0x650 [ 224.966858][ T7648] ? __siphash_unaligned+0x22e/0x3a0 [ 224.972208][ T7648] nf_conntrack_in+0xc06/0x15c0 [ 224.977205][ T7648] ? nf_ct_pernet+0x270/0x270 [ 224.981946][ T7648] ? ip6t_do_table+0x1d9/0x1510 [ 224.986848][ T7648] ? ip6t_alloc_initial_table+0x640/0x640 [ 224.992626][ T7648] ? perf_trace_lock_acquire+0x104/0x410 [ 224.998319][ T7648] ? ipv6_defrag+0x2d6/0x3a0 [ 225.002961][ T7648] ? ipv6_conntrack_in+0x20/0x20 [ 225.007937][ T7648] nf_hook_slow+0xbd/0x200 [ 225.012418][ T7648] __ip6_local_out+0x784/0x8a0 [ 225.017242][ T7648] ? __ip6_local_out+0x60c/0x8a0 [ 225.022310][ T7648] ? ip6_dst_hoplimit+0x350/0x350 [ 225.027472][ T7648] ? __ip6_local_out+0x8a0/0x8a0 [ 225.032544][ T7648] ? read_lock_is_recursive+0x20/0x20 [ 225.038161][ T7648] ip6_local_out+0x2a/0x130 [ 225.042707][ T7648] ? ip6_send_skb+0x10f/0x380 [ 225.047523][ T7648] ip6_send_skb+0x1d5/0x380 [ 225.052095][ T7648] rawv6_push_pending_frames+0x6ee/0x8d0 [ 225.057790][ T7648] ? raw6_getfrag+0x3a0/0x3a0 [ 225.062516][ T7648] ? rawv6_send_hdrinc+0x1640/0x1640 [ 225.067872][ T7648] rawv6_sendmsg+0x131b/0x1770 [ 225.072735][ T7648] ? compat_rawv6_ioctl+0x70/0x70 [ 225.077836][ T7648] ? aa_sk_perm+0x83c/0x970 [ 225.082414][ T7648] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 225.088906][ T7648] ? inet_sendmsg+0x7c/0x2f0 [ 225.093532][ T7648] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 225.098855][ T7648] ? security_socket_sendmsg+0x80/0xa0 [ 225.104344][ T7648] ? inet_send_prepare+0x260/0x260 [ 225.109512][ T7648] ____sys_sendmsg+0x5ba/0x960 [ 225.114321][ T7648] ? __lock_acquire+0x7d40/0x7d40 [ 225.119403][ T7648] ? __asan_memset+0x22/0x40 [ 225.124053][ T7648] ? __sys_sendmsg_sock+0x30/0x30 [ 225.129110][ T7648] ? __import_iovec+0x5f2/0x850 [ 225.134043][ T7648] ? import_iovec+0x73/0xa0 [ 225.138687][ T7648] ___sys_sendmsg+0x2a6/0x360 [ 225.143428][ T7648] ? __sys_sendmsg+0x2a0/0x2a0 [ 225.148304][ T7648] ? __lock_acquire+0x7d40/0x7d40 [ 225.153458][ T7648] __se_sys_sendmsg+0x1c2/0x2b0 [ 225.158359][ T7648] ? __x64_sys_sendmsg+0x80/0x80 [ 225.163404][ T7648] ? lockdep_hardirqs_on+0x98/0x150 [ 225.168678][ T7648] do_syscall_64+0x55/0xa0 [ 225.173247][ T7648] ? clear_bhb_loop+0x40/0x90 [ 225.177965][ T7648] ? clear_bhb_loop+0x40/0x90 [ 225.182695][ T7648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.188801][ T7648] RIP: 0033:0x7fc0add9ce59 [ 225.193256][ T7648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.213190][ T7648] RSP: 002b:00007fc0aeb96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.221737][ T7648] RAX: ffffffffffffffda RBX: 00007fc0ae015fa0 RCX: 00007fc0add9ce59 [ 225.229838][ T7648] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 225.237843][ T7648] RBP: 00007fc0aeb96090 R08: 0000000000000000 R09: 0000000000000000 [ 225.246063][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.254167][ T7648] R13: 00007fc0ae016038 R14: 00007fc0ae015fa0 R15: 00007ffd83182378 [ 225.262227][ T7648] [ 225.543191][ T5781] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 225.550838][ T5781] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 225.739832][ T7663] netlink: 'syz.2.511': attribute type 10 has an invalid length. [ 226.114368][ T7668] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.512'. [ 226.140747][ T7668] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 227.497322][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 227.819335][ T7681] netlink: 'syz.2.514': attribute type 10 has an invalid length. [ 227.851033][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.514'. [ 228.228193][ T7687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.442946][ T7688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.518'. [ 228.471849][ T7688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.518'. [ 228.625699][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 228.634822][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 228.693998][ T7697] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 228.822175][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 228.830374][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 229.523576][ T7704] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.524'. [ 229.554603][ T7704] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 230.323270][ T7713] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.527'. [ 230.385097][ T7713] bridge_slave_1: default FDB implementation only supports local addresses [ 230.959994][ T7716] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 230.992674][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.528'. [ 231.256043][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 231.263654][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 231.364581][ T7735] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 231.553722][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 231.561331][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 232.448614][ T7748] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.539'. [ 232.461662][ T7748] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 232.838569][ T7755] netlink: 192444 bytes leftover after parsing attributes in process `syz.3.542'. [ 233.369456][ T7757] Driver unsupported XDP return value 0 on prog (id 688) dev N/A, expect packet loss! [ 233.478155][ T7756] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 233.494596][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.543'. [ 233.512555][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 233.520270][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 233.947454][ T7772] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 234.075277][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 234.085058][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 234.405929][ T7781] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.552'. [ 234.442071][ T7781] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 236.259186][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 236.267179][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 236.922149][ T7802] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 236.932034][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'. [ 237.126181][ T7811] netlink: 'syz.3.561': attribute type 10 has an invalid length. [ 237.246248][ T7813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.261353][ T7816] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.563'. [ 237.305508][ T7816] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 238.003070][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 238.011031][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 238.396197][ T5784] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 238.404823][ T5784] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 238.610620][ T7836] netlink: 'syz.3.569': attribute type 10 has an invalid length. [ 238.621029][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.569'. [ 238.769858][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.572'. [ 239.020041][ T7850] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 239.248781][ T7854] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.576'. [ 239.284436][ T7854] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 239.799706][ T5784] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 239.807507][ T5784] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 240.382581][ T5784] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 240.390255][ T5784] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 240.404078][ T7866] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 240.425413][ T7866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.581'. [ 240.579184][ T7875] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 240.879573][ T7877] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.584'. [ 240.895365][ T7877] netlink: 'syz.0.584': attribute type 2 has an invalid length. [ 241.138763][ T7879] syzkaller0: entered promiscuous mode [ 241.161215][ T7880] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 241.170779][ T7882] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 241.190050][ T7882] FAULT_INJECTION: forcing a failure. [ 241.190050][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 241.203693][ T7882] CPU: 1 PID: 7882 Comm: syz.0.586 Not tainted syzkaller #0 [ 241.211121][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.221249][ T7882] Call Trace: [ 241.224566][ T7882] [ 241.227533][ T7882] dump_stack_lvl+0x18c/0x250 [ 241.232284][ T7882] ? show_regs_print_info+0x20/0x20 [ 241.237537][ T7882] ? load_image+0x420/0x420 [ 241.242089][ T7882] ? verify_lock_unused+0x140/0x140 [ 241.247320][ T7882] ? perf_trace_lock_acquire+0x104/0x410 [ 241.253383][ T7882] should_fail_ex+0x39d/0x4d0 [ 241.258100][ T7882] should_failslab+0x9/0x20 [ 241.262639][ T7882] slab_pre_alloc_hook+0x59/0x310 [ 241.267696][ T7882] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 241.274418][ T7882] ? nsim_fib_event_nb+0x187/0x1080 [ 241.280069][ T7882] __kmem_cache_alloc_node+0x53/0x250 [ 241.285670][ T7882] ? nsim_fib_event_nb+0x187/0x1080 [ 241.291352][ T7882] kmalloc_trace+0x2a/0xe0 [ 241.295813][ T7882] nsim_fib_event_nb+0x187/0x1080 [ 241.301162][ T7882] ? read_lock_is_recursive+0x20/0x20 [ 241.307215][ T7882] notifier_call_chain+0x197/0x380 [ 241.312809][ T7882] ? atomic_notifier_call_chain+0x26/0x180 [ 241.318824][ T7882] atomic_notifier_call_chain+0xda/0x180 [ 241.324479][ T7882] call_fib_notifiers+0x31/0x60 [ 241.329361][ T7882] call_fib_entry_notifiers+0x159/0x200 [ 241.334961][ T7882] ? fib_find_node+0x2f0/0x2f0 [ 241.339790][ T7882] ? lockdep_rtnl_is_held+0x26/0x30 [ 241.345043][ T7882] fib_table_insert+0xcc7/0x1b20 [ 241.350027][ T7882] ? fib_trie_table+0x138/0x1c0 [ 241.354902][ T7882] ? fib_new_table+0x27f/0x2d0 [ 241.359696][ T7882] inet_rtm_newroute+0x14b/0x240 [ 241.364655][ T7882] ? __mutex_lock+0x4f9/0xcc0 [ 241.369351][ T7882] ? rcu_read_unlock+0xa0/0xa0 [ 241.374147][ T7882] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 241.379281][ T7882] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 241.384411][ T7882] ? rcu_read_unlock+0xa0/0xa0 [ 241.389277][ T7882] rtnetlink_rcv_msg+0x869/0xfa0 [ 241.394240][ T7882] ? lockdep_hardirqs_on+0x98/0x150 [ 241.399487][ T7882] ? rtnetlink_bind+0x80/0x80 [ 241.404214][ T7882] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 241.410505][ T7882] ? lock_chain_count+0x20/0x20 [ 241.415382][ T7882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 241.420771][ T7882] ? lockdep_hardirqs_on+0x98/0x150 [ 241.426008][ T7882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 241.431459][ T7882] ? _local_bh_enable+0xa0/0xa0 [ 241.436352][ T7882] ? __dev_queue_xmit+0x265/0x3660 [ 241.441512][ T7882] ? __dev_queue_xmit+0x265/0x3660 [ 241.446683][ T7882] ? __dev_queue_xmit+0x1b2c/0x3660 [ 241.451936][ T7882] ? __dev_queue_xmit+0x265/0x3660 [ 241.457084][ T7882] ? ref_tracker_free+0x690/0x840 [ 241.462161][ T7882] netlink_rcv_skb+0x241/0x4d0 [ 241.467002][ T7882] ? rtnetlink_bind+0x80/0x80 [ 241.471714][ T7882] ? netlink_ack+0x1180/0x1180 [ 241.476721][ T7882] ? __lock_acquire+0x7d40/0x7d40 [ 241.481890][ T7882] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.487161][ T7882] netlink_unicast+0x751/0x8d0 [ 241.491987][ T7882] netlink_sendmsg+0x8d0/0xbf0 [ 241.496795][ T7882] ? netlink_getsockopt+0x590/0x590 [ 241.502049][ T7882] ? aa_sock_msg_perm+0x94/0x150 [ 241.507064][ T7882] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.512455][ T7882] ? security_socket_sendmsg+0x80/0xa0 [ 241.517930][ T7882] ? netlink_getsockopt+0x590/0x590 [ 241.523161][ T7882] ____sys_sendmsg+0x5ba/0x960 [ 241.527958][ T7882] ? __asan_memset+0x22/0x40 [ 241.532676][ T7882] ? __sys_sendmsg_sock+0x30/0x30 [ 241.537737][ T7882] ? __import_iovec+0x5f2/0x850 [ 241.542622][ T7882] ? import_iovec+0x73/0xa0 [ 241.547185][ T7882] ___sys_sendmsg+0x2a6/0x360 [ 241.551902][ T7882] ? get_pid_task+0x20/0x1e0 [ 241.556538][ T7882] ? __sys_sendmsg+0x2a0/0x2a0 [ 241.561338][ T7882] ? __lock_acquire+0x7d40/0x7d40 [ 241.566408][ T7882] __se_sys_sendmsg+0x1c2/0x2b0 [ 241.571283][ T7882] ? __x64_sys_sendmsg+0x80/0x80 [ 241.576256][ T7882] ? lockdep_hardirqs_on+0x98/0x150 [ 241.581481][ T7882] do_syscall_64+0x55/0xa0 [ 241.585921][ T7882] ? clear_bhb_loop+0x40/0x90 [ 241.590620][ T7882] ? clear_bhb_loop+0x40/0x90 [ 241.595401][ T7882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.601308][ T7882] RIP: 0033:0x7f604399ce59 [ 241.605742][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.625538][ T7882] RSP: 002b:00007f6044776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.634022][ T7882] RAX: ffffffffffffffda RBX: 00007f6043c15fa0 RCX: 00007f604399ce59 [ 241.642098][ T7882] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 241.650079][ T7882] RBP: 00007f6044776090 R08: 0000000000000000 R09: 0000000000000000 [ 241.658077][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.666150][ T7882] R13: 00007f6043c16038 R14: 00007f6043c15fa0 R15: 00007ffe41c438e8 [ 241.674166][ T7882] [ 241.767759][ T7884] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.587'. [ 241.822557][ T7884] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 242.155884][ T5784] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 242.163663][ T5784] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 244.309409][ T7900] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 244.326546][ T7903] netlink: 'syz.4.592': attribute type 10 has an invalid length. [ 244.354134][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.592'. [ 244.755406][ T7905] netlink: 'syz.0.594': attribute type 8 has an invalid length. [ 244.764632][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 244.774072][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 245.130624][ T7915] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 245.573538][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 245.581016][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 245.709716][ T7923] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.601'. [ 245.762787][ T7923] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 246.057965][ T7932] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 246.290790][ T7939] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 247.223500][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 247.231062][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 247.737270][ T7956] FAULT_INJECTION: forcing a failure. [ 247.737270][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 247.775317][ T7956] CPU: 1 PID: 7956 Comm: syz.3.611 Not tainted syzkaller #0 [ 247.782724][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.793422][ T7956] Call Trace: [ 247.796737][ T7956] [ 247.799706][ T7956] dump_stack_lvl+0x18c/0x250 [ 247.804547][ T7956] ? show_regs_print_info+0x20/0x20 [ 247.809836][ T7956] ? load_image+0x420/0x420 [ 247.814410][ T7956] ? verify_lock_unused+0x140/0x140 [ 247.819652][ T7956] ? perf_trace_lock_acquire+0x104/0x410 [ 247.825339][ T7956] should_fail_ex+0x39d/0x4d0 [ 247.830070][ T7956] should_failslab+0x9/0x20 [ 247.834615][ T7956] slab_pre_alloc_hook+0x59/0x310 [ 247.839692][ T7956] kmem_cache_alloc+0x5a/0x2d0 [ 247.844506][ T7956] ? skb_clone+0x1eb/0x370 [ 247.848972][ T7956] skb_clone+0x1eb/0x370 [ 247.853263][ T7956] __netlink_deliver_tap+0x41c/0x830 [ 247.858603][ T7956] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.863833][ T7956] netlink_deliver_tap+0x19c/0x1b0 [ 247.868969][ T7956] netlink_unicast+0x72c/0x8d0 [ 247.873764][ T7956] netlink_sendmsg+0x8d0/0xbf0 [ 247.878551][ T7956] ? perf_trace_lock+0x304/0x3b0 [ 247.883507][ T7956] ? netlink_getsockopt+0x590/0x590 [ 247.888727][ T7956] ? aa_sock_msg_perm+0x94/0x150 [ 247.893688][ T7956] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 247.898988][ T7956] ? security_socket_sendmsg+0x80/0xa0 [ 247.904462][ T7956] ? netlink_getsockopt+0x590/0x590 [ 247.909773][ T7956] ____sys_sendmsg+0x5ba/0x960 [ 247.914565][ T7956] ? __asan_memset+0x22/0x40 [ 247.919442][ T7956] ? __sys_sendmsg_sock+0x30/0x30 [ 247.924487][ T7956] ? __import_iovec+0x5f2/0x850 [ 247.929361][ T7956] ? import_iovec+0x73/0xa0 [ 247.933886][ T7956] ___sys_sendmsg+0x2a6/0x360 [ 247.938584][ T7956] ? __sys_sendmsg+0x2a0/0x2a0 [ 247.943391][ T7956] ? __lock_acquire+0x7d40/0x7d40 [ 247.948467][ T7956] __se_sys_sendmsg+0x1c2/0x2b0 [ 247.953345][ T7956] ? __x64_sys_sendmsg+0x80/0x80 [ 247.958319][ T7956] ? lockdep_hardirqs_on+0x98/0x150 [ 247.963544][ T7956] do_syscall_64+0x55/0xa0 [ 247.967972][ T7956] ? clear_bhb_loop+0x40/0x90 [ 247.972665][ T7956] ? clear_bhb_loop+0x40/0x90 [ 247.977359][ T7956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.983278][ T7956] RIP: 0033:0x7fc0add9ce59 [ 247.987708][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.007418][ T7956] RSP: 002b:00007fc0aeb96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.015849][ T7956] RAX: ffffffffffffffda RBX: 00007fc0ae015fa0 RCX: 00007fc0add9ce59 [ 248.024191][ T7956] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 248.032206][ T7956] RBP: 00007fc0aeb96090 R08: 0000000000000000 R09: 0000000000000000 [ 248.040206][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.048203][ T7956] R13: 00007fc0ae016038 R14: 00007fc0ae015fa0 R15: 00007ffd83182378 [ 248.056215][ T7956] [ 248.141235][ T5784] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 248.153999][ T5784] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 248.615307][ T7968] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 249.693839][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 249.701374][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 250.031239][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 250.039274][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 250.783777][ T8010] netlink: 'syz.0.628': attribute type 10 has an invalid length. [ 251.913589][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 251.921108][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 252.276274][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 252.289714][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 253.162196][ T8054] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 253.785415][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 253.793048][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 254.068838][ T8067] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.648'. [ 254.075041][ T8071] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 254.528043][ T8074] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.651'. [ 254.545925][ T8077] netlink: 'syz.4.653': attribute type 23 has an invalid length. [ 254.556228][ T8074] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 254.557814][ T8077] netlink: 176 bytes leftover after parsing attributes in process `syz.4.653'. [ 254.587012][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 254.597188][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 256.046842][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 256.054453][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 256.101511][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.111368][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.141831][ T8103] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 256.155736][ T8103] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 256.587090][ T8110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.663'. [ 256.609301][ T8110] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 256.959768][ T5784] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 256.967584][ T5784] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 257.424543][ T8121] netlink: 'syz.3.668': attribute type 4 has an invalid length. [ 257.466689][ T8121] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.668'. [ 257.616977][ T8122] netlink: 168 bytes leftover after parsing attributes in process `syz.3.668'. [ 258.586387][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 258.595368][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 258.673968][ T8137] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 259.071251][ T8145] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.677'. [ 259.092245][ T8145] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 260.119923][ T8158] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 260.158064][ T8158] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.680'. [ 260.223326][ T8158] openvswitch: netlink: Flow key attr not present in new flow. [ 260.343579][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 260.351205][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 260.833585][ T8174] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 261.489654][ T8187] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.691'. [ 261.502893][ T8187] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 262.163961][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 262.171464][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 262.667809][ T8207] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 263.107751][ T8216] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.702'. [ 263.135317][ T8216] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 263.908539][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 263.917380][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 265.526134][ T8241] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 266.607524][ T8253] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.715'. [ 266.632092][ T8253] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 266.827714][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 266.835675][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 268.103026][ T8275] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 268.116573][ T8277] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.724'. [ 268.135899][ T8277] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.724'. [ 268.178103][ T8282] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.724'. [ 268.245984][ T8281] netlink: 'syz.2.726': attribute type 3 has an invalid length. [ 268.278981][ T8281] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.726'. [ 269.055244][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 269.062963][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 269.140110][ T8299] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.730'. [ 269.150004][ T8299] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 269.190173][ T8301] netlink: 'syz.4.731': attribute type 29 has an invalid length. [ 269.204583][ T8301] netlink: 'syz.4.731': attribute type 29 has an invalid length. [ 270.411530][ T8311] netlink: 'syz.4.735': attribute type 10 has an invalid length. [ 270.513375][ T8313] netlink: 'syz.0.736': attribute type 7 has an invalid length. [ 270.530293][ T8313] netlink: 'syz.0.736': attribute type 6 has an invalid length. [ 270.886438][ T8320] FAULT_INJECTION: forcing a failure. [ 270.886438][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 270.900091][ T8320] CPU: 1 PID: 8320 Comm: syz.4.739 Not tainted syzkaller #0 [ 270.907475][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.917696][ T8320] Call Trace: [ 270.921041][ T8320] [ 270.924036][ T8320] dump_stack_lvl+0x18c/0x250 [ 270.928813][ T8320] ? show_regs_print_info+0x20/0x20 [ 270.934107][ T8320] ? load_image+0x420/0x420 [ 270.938716][ T8320] ? __might_sleep+0xe0/0xe0 [ 270.943388][ T8320] ? __lock_acquire+0x7d40/0x7d40 [ 270.948489][ T8320] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 270.954241][ T8320] should_fail_ex+0x39d/0x4d0 [ 270.959023][ T8320] should_failslab+0x9/0x20 [ 270.963775][ T8320] slab_pre_alloc_hook+0x59/0x310 [ 270.969427][ T8320] kmem_cache_alloc_node+0x60/0x320 [ 270.974702][ T8320] ? __alloc_skb+0x103/0x2c0 [ 270.979383][ T8320] __alloc_skb+0x103/0x2c0 [ 270.983888][ T8320] __ip6_append_data+0x2b56/0x3cf0 [ 270.989143][ T8320] ? rawv6_send_hdrinc+0x1640/0x1640 [ 270.994508][ T8320] ? ip6_setup_cork+0xfe0/0xfe0 [ 270.999423][ T8320] ip6_append_data+0x1b0/0x350 [ 271.004416][ T8320] ? rawv6_send_hdrinc+0x1640/0x1640 [ 271.009751][ T8320] rawv6_sendmsg+0x1264/0x1770 [ 271.014622][ T8320] ? compat_rawv6_ioctl+0x70/0x70 [ 271.019751][ T8320] ? aa_sk_perm+0x83c/0x970 [ 271.024376][ T8320] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 271.030974][ T8320] ? inet_sendmsg+0x7c/0x2f0 [ 271.035611][ T8320] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.040950][ T8320] ? security_socket_sendmsg+0x80/0xa0 [ 271.046442][ T8320] ? inet_send_prepare+0x260/0x260 [ 271.051598][ T8320] ____sys_sendmsg+0x5ba/0x960 [ 271.056411][ T8320] ? __lock_acquire+0x7d40/0x7d40 [ 271.061483][ T8320] ? __asan_memset+0x22/0x40 [ 271.066122][ T8320] ? __sys_sendmsg_sock+0x30/0x30 [ 271.071207][ T8320] ? __import_iovec+0x5f2/0x850 [ 271.076118][ T8320] ? import_iovec+0x73/0xa0 [ 271.080668][ T8320] ___sys_sendmsg+0x2a6/0x360 [ 271.085379][ T8320] ? get_pid_task+0x20/0x1e0 [ 271.090022][ T8320] ? __sys_sendmsg+0x2a0/0x2a0 [ 271.094882][ T8320] ? __lock_acquire+0x7d40/0x7d40 [ 271.100011][ T8320] __se_sys_sendmsg+0x1c2/0x2b0 [ 271.104907][ T8320] ? __x64_sys_sendmsg+0x80/0x80 [ 271.110181][ T8320] ? lockdep_hardirqs_on+0x98/0x150 [ 271.115432][ T8320] do_syscall_64+0x55/0xa0 [ 271.119878][ T8320] ? clear_bhb_loop+0x40/0x90 [ 271.124687][ T8320] ? clear_bhb_loop+0x40/0x90 [ 271.129489][ T8320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.135431][ T8320] RIP: 0033:0x7f7cd4d9ce59 [ 271.139981][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.159624][ T8320] RSP: 002b:00007f7cd5cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.168083][ T8320] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 271.176087][ T8320] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 271.184098][ T8320] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 271.192203][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.200299][ T8320] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 271.208349][ T8320] [ 271.530142][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 271.537758][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 271.628662][ T8331] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.742'. [ 271.639681][ T8331] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 273.862280][ T8351] netlink: 'syz.4.747': attribute type 10 has an invalid length. [ 274.740923][ T8354] delete_channel: no stack [ 274.896711][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 274.905773][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 275.375980][ T8369] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.755'. [ 275.458608][ T8369] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 276.437561][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 276.445532][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 277.085143][ T8389] netlink: 'syz.4.760': attribute type 10 has an invalid length. [ 277.273187][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 277.280788][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 277.493351][ T8401] netlink: 144 bytes leftover after parsing attributes in process `syz.4.766'. [ 278.249450][ T8408] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.768'. [ 278.297216][ T8408] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 279.364777][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 279.372885][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 280.074628][ T8430] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 280.906842][ T8441] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.781'. [ 280.916588][ T8441] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 281.976373][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 281.990612][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 282.297458][ T8463] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 282.649610][ T8468] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 282.693487][ T8468] batman_adv: batadv0: Adding interface: netdevsim0 [ 282.710598][ T8468] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.794560][ T8468] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 282.891508][ T8471] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 283.360812][ T8474] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.792'. [ 283.442862][ T8474] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 283.457416][ T8471] macvlan0: entered promiscuous mode [ 283.475087][ T8471] macvlan0: entered allmulticast mode [ 283.480567][ T8471] veth1_vlan: entered allmulticast mode [ 283.495711][ T8471] team0: Port device macvlan0 added [ 283.827206][ T8482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 283.878158][ T8482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 284.769575][ T8486] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 285.298787][ T8491] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.798'. [ 285.310729][ T8491] netlink: 21096 bytes leftover after parsing attributes in process `syz.4.798'. [ 285.333444][ T8491] tipc: Started in network mode [ 285.340493][ T8491] tipc: Node identity 1a, cluster identity 4711 [ 285.352693][ T8491] tipc: Node number set to 26 [ 285.362795][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 285.370331][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 285.556152][ T8499] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 286.019444][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.803'. [ 286.062168][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.803'. [ 286.127195][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.803'. [ 286.172657][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.803'. [ 286.542696][ T8511] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 287.648571][ T8527] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 287.698760][ T8527] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 287.738877][ T8528] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 287.763824][ T8527] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 288.010209][ T8530] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 288.268754][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 288.277209][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 289.176635][ T8539] __nla_validate_parse: 1 callbacks suppressed [ 289.176659][ T8539] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.815'. [ 289.235119][ T8539] openvswitch: netlink: IP tunnel dst address not specified [ 289.575693][ T8547] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.818'. [ 289.612226][ T8547] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 291.100274][ T8571] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 291.359385][ T8578] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 291.366299][ T8578] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 291.422904][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 291.430780][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 292.376478][ T8586] FAULT_INJECTION: forcing a failure. [ 292.376478][ T8586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.413035][ T8586] CPU: 1 PID: 8586 Comm: syz.4.829 Not tainted syzkaller #0 [ 292.420415][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.430612][ T8586] Call Trace: [ 292.433922][ T8586] [ 292.436874][ T8586] dump_stack_lvl+0x18c/0x250 [ 292.441617][ T8586] ? show_regs_print_info+0x20/0x20 [ 292.446850][ T8586] ? load_image+0x420/0x420 [ 292.451404][ T8586] ? __might_fault+0xaa/0x120 [ 292.456140][ T8586] should_fail_ex+0x39d/0x4d0 [ 292.460855][ T8586] copyin+0x1a/0x90 [ 292.464685][ T8586] _copy_from_iter+0x404/0x12e0 [ 292.469559][ T8586] ? copyin+0x70/0x90 [ 292.473570][ T8586] ? copyout_mc+0x70/0x70 [ 292.477932][ T8586] ? copyout_mc+0x70/0x70 [ 292.482280][ T8586] ? __virt_addr_valid+0x18c/0x540 [ 292.487411][ T8586] ? page_copy_sane+0x16a/0x270 [ 292.492278][ T8586] copy_page_from_iter+0x7b/0x100 [ 292.497321][ T8586] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 292.503152][ T8586] packet_sendmsg+0x33ff/0x4c30 [ 292.508100][ T8586] ? __might_sleep+0xe0/0xe0 [ 292.512733][ T8586] ? mark_lock+0x94/0x320 [ 292.517104][ T8586] ? __lock_acquire+0x1273/0x7d40 [ 292.522167][ T8586] ? verify_lock_unused+0x140/0x140 [ 292.527404][ T8586] ? aa_sk_perm+0x83c/0x970 [ 292.531941][ T8586] ? packet_getsockopt+0xad0/0xad0 [ 292.537109][ T8586] ? tomoyo_gc_thread+0x7d6/0x1410 [ 292.542320][ T8586] ? aa_sock_msg_perm+0x94/0x150 [ 292.547275][ T8586] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 292.552584][ T8586] ? security_socket_sendmsg+0x80/0xa0 [ 292.558075][ T8586] ? packet_getsockopt+0xad0/0xad0 [ 292.563389][ T8586] ____sys_sendmsg+0x5ba/0x960 [ 292.568172][ T8586] ? __lock_acquire+0x7d40/0x7d40 [ 292.573221][ T8586] ? __asan_memset+0x22/0x40 [ 292.577832][ T8586] ? __sys_sendmsg_sock+0x30/0x30 [ 292.582919][ T8586] ? __import_iovec+0x3fa/0x850 [ 292.587790][ T8586] ? import_iovec+0x73/0xa0 [ 292.592303][ T8586] ___sys_sendmsg+0x2a6/0x360 [ 292.596991][ T8586] ? get_pid_task+0x20/0x1e0 [ 292.601597][ T8586] ? __sys_sendmsg+0x2a0/0x2a0 [ 292.606405][ T8586] ? __lock_acquire+0x7d40/0x7d40 [ 292.611467][ T8586] __se_sys_sendmsg+0x1c2/0x2b0 [ 292.616335][ T8586] ? __x64_sys_sendmsg+0x80/0x80 [ 292.621299][ T8586] ? lockdep_hardirqs_on+0x98/0x150 [ 292.626528][ T8586] do_syscall_64+0x55/0xa0 [ 292.630976][ T8586] ? clear_bhb_loop+0x40/0x90 [ 292.635671][ T8586] ? clear_bhb_loop+0x40/0x90 [ 292.640365][ T8586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.646274][ T8586] RIP: 0033:0x7f7cd4d9ce59 [ 292.650728][ T8586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.670375][ T8586] RSP: 002b:00007f7cd5cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.678982][ T8586] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 292.686968][ T8586] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 292.694949][ T8586] RBP: 00007f7cd5cde090 R08: 0000000000000000 R09: 0000000000000000 [ 292.703028][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.711011][ T8586] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 292.719011][ T8586] [ 292.867202][ T8589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.831'. [ 292.884107][ T8589] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 293.625311][ T8595] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 293.657829][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.832'. [ 293.927874][ T8605] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 293.934489][ T8605] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.453138][ T8608] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 294.737892][ T8614] netlink: 'syz.3.838': attribute type 7 has an invalid length. [ 294.782579][ T8614] netlink: 'syz.3.838': attribute type 6 has an invalid length. [ 295.943267][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 295.950833][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 296.557566][ T8633] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.845'. [ 296.572034][ T8633] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 296.755090][ T8636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.761620][ T8636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 297.117011][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 297.124901][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 297.296346][ T8638] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 297.333523][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'. [ 297.843274][ T8649] netlink: 'syz.4.850': attribute type 10 has an invalid length. [ 298.706607][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 298.714839][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 299.766396][ T8665] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.858'. [ 299.797584][ T8665] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 300.592088][ T8673] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 301.071315][ T8685] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 301.306797][ T8681] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 301.335069][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.861'. [ 301.873470][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 301.881720][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 302.797370][ T8703] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.870'. [ 302.813938][ T8703] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 303.133160][ T8706] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 304.298904][ T8723] netlink: 'syz.4.876': attribute type 10 has an invalid length. [ 305.374953][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 305.382787][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 305.487745][ T8737] netlink: 'syz.2.882': attribute type 7 has an invalid length. [ 305.496758][ T8737] netlink: 'syz.2.882': attribute type 6 has an invalid length. [ 305.703725][ T8739] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.883'. [ 305.726528][ T8739] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 306.859075][ T8751] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 307.355027][ T8759] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 308.858144][ T5784] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 308.866297][ T5784] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 309.059003][ T8781] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.894'. [ 309.122459][ T8781] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 309.448895][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 309.457911][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 309.692110][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 309.701379][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 309.948740][ T8798] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 311.456988][ T8810] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 311.546262][ T8810] batman_adv: batadv0: Adding interface: netdevsim0 [ 311.599002][ T8810] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.637043][ T8810] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 311.700766][ T8810] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 311.803328][ T8818] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.911'. [ 311.827927][ T8810] team0: Port device macvlan0 added [ 311.855702][ T8818] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 312.368109][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 312.376163][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 313.028940][ T8829] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.916'. [ 313.064305][ T8829] netlink: 21096 bytes leftover after parsing attributes in process `syz.0.916'. [ 313.102100][ T8829] tipc: Started in network mode [ 313.139079][ T8829] tipc: Node identity 1a, cluster identity 4711 [ 313.192812][ T8829] tipc: Node number set to 26 [ 313.669749][ T5785] Bluetooth: Frame is too long (len 149, expected len 4) [ 313.805658][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 313.813954][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 314.964157][ T8859] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.924'. [ 315.004348][ T8859] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 315.914451][ T8875] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 316.049411][ T8875] batman_adv: batadv0: Adding interface: netdevsim0 [ 316.082648][ T8875] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.162270][ T8875] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 316.345830][ T8879] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 316.736022][ T8879] team0: Port device macvlan0 added [ 316.752995][ T8880] netlink: 'syz.2.926': attribute type 64 has an invalid length. [ 316.999457][ T8883] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 317.032104][ T8883] netlink: 55 bytes leftover after parsing attributes in process `syz.0.939'. [ 317.532462][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.552122][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552969][ T8889] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.931'. [ 317.642797][ T8889] netlink: 22828 bytes leftover after parsing attributes in process `syz.3.931'. [ 317.741130][ T5784] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 317.749134][ T5784] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 318.335329][ T8899] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 318.352444][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.585975][ T5784] Bluetooth: Frame is too long (len 149, expected len 4) [ 318.876351][ T8907] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.937'. [ 318.952024][ T8907] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 319.648211][ T8901] netlink: 'syz.4.936': attribute type 10 has an invalid length. [ 320.015055][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.215111][ T8901] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 320.249625][ T8923] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 320.278468][ T8923] netlink: 55 bytes leftover after parsing attributes in process `syz.2.943'. [ 320.765562][ T8933] netlink: 'syz.0.942': attribute type 64 has an invalid length. [ 321.079165][ T5784] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 321.086803][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 324.562215][ T8950] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 324.648511][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 324.656125][ T5785] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 325.351419][ T8957] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 325.385403][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.413296][ T8957] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 325.450514][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.499513][ T5785] Bluetooth: Frame is too long (len 149, expected len 4) [ 325.806336][ T8967] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 326.163404][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 326.170887][ T5785] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 326.955476][ T5785] Bluetooth: Frame is too long (len 149, expected len 4) [ 327.082075][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 327.089739][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 327.237687][ T8982] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 327.270226][ T8982] netlink: 55 bytes leftover after parsing attributes in process `syz.3.958'. [ 327.728583][ T8985] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 328.360203][ T8989] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 331.505692][ T9010] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 331.562023][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.587391][ T9010] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 331.634270][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.682158][ T9010] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 331.731803][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.978269][ T9020] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 332.130479][ T9023] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 332.184579][ T5785] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 332.193448][ T5785] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 332.410702][ T9026] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 332.826222][ T9028] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.976'. [ 332.881993][ T9028] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 334.090981][ T9042] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 334.109059][ T5784] Bluetooth: Frame is too long (len 149, expected len 4) [ 334.253651][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.294818][ T9042] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 337.242634][ T9061] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 337.250870][ T9070] netlink: 'syz.2.988': attribute type 21 has an invalid length. [ 337.277900][ T9072] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 337.348648][ T9072] bridge0: port 3(team0) entered disabled state [ 337.387297][ T9072] team0: left allmulticast mode [ 337.396780][ T9072] team_slave_0: left allmulticast mode [ 337.423960][ T9072] team_slave_1: left allmulticast mode [ 337.443241][ T9072] macvlan0: left allmulticast mode [ 337.458872][ T9072] veth1_vlan: left allmulticast mode [ 337.465165][ T9072] team0: left promiscuous mode [ 337.470086][ T9072] team_slave_0: left promiscuous mode [ 337.478099][ T9072] team_slave_1: left promiscuous mode [ 337.484349][ T9072] macvlan0: left promiscuous mode [ 337.490217][ T9072] bridge0: port 3(team0) entered disabled state [ 337.508488][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.546429][ T9072] bond0: (slave team0): Enslaving as an active interface with an up link [ 337.754041][ T5784] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 337.761631][ T5784] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 337.911428][ T9080] netlink: 'syz.3.991': attribute type 21 has an invalid length. [ 338.027291][ T9080] FAULT_INJECTION: forcing a failure. [ 338.027291][ T9080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.130720][ T9080] CPU: 0 PID: 9080 Comm: syz.3.991 Not tainted syzkaller #0 [ 338.138142][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.148292][ T9080] Call Trace: [ 338.151652][ T9080] [ 338.154668][ T9080] dump_stack_lvl+0x18c/0x250 [ 338.159471][ T9080] ? show_regs_print_info+0x20/0x20 [ 338.164771][ T9080] ? load_image+0x420/0x420 [ 338.169485][ T9080] ? __might_fault+0xaa/0x120 [ 338.174268][ T9080] ? __lock_acquire+0x7d40/0x7d40 [ 338.179366][ T9080] should_fail_ex+0x39d/0x4d0 [ 338.184119][ T9080] _copy_from_user+0x2f/0xe0 [ 338.188768][ T9080] ___sys_sendmsg+0x1c7/0x360 [ 338.193505][ T9080] ? __sys_sendmsg+0x2a0/0x2a0 [ 338.198369][ T9080] ? __lock_acquire+0x7d40/0x7d40 [ 338.203510][ T9080] __se_sys_sendmsg+0x1c2/0x2b0 [ 338.208411][ T9080] ? __x64_sys_sendmsg+0x80/0x80 [ 338.213440][ T9080] ? lockdep_hardirqs_on+0x98/0x150 [ 338.218705][ T9080] do_syscall_64+0x55/0xa0 [ 338.223197][ T9080] ? clear_bhb_loop+0x40/0x90 [ 338.227919][ T9080] ? clear_bhb_loop+0x40/0x90 [ 338.232650][ T9080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.238589][ T9080] RIP: 0033:0x7fc0add9ce59 [ 338.243047][ T9080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.262711][ T9080] RSP: 002b:00007fc0aeb96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.271268][ T9080] RAX: ffffffffffffffda RBX: 00007fc0ae015fa0 RCX: 00007fc0add9ce59 [ 338.279284][ T9080] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 338.287295][ T9080] RBP: 00007fc0aeb96090 R08: 0000000000000000 R09: 0000000000000000 [ 338.295349][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.303451][ T9080] R13: 00007fc0ae016038 R14: 00007fc0ae015fa0 R15: 00007ffd83182378 [ 338.311515][ T9080] [ 338.912260][ T9085] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 339.314856][ T9088] netlink: 'syz.2.993': attribute type 21 has an invalid length. [ 339.347889][ T9088] netlink: 'syz.2.993': attribute type 10 has an invalid length. [ 340.118467][ T9091] syzkaller0: entered promiscuous mode [ 340.127528][ T9091] syzkaller0: entered allmulticast mode [ 342.527154][ T9104] netlink: 'syz.2.999': attribute type 10 has an invalid length. [ 342.751764][ T9113] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 342.762082][ T9113] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 342.770000][ T9113] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1003'. [ 342.790186][ T9113] openvswitch: netlink: Message has 4 unknown bytes. [ 342.908370][ T9121] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 342.923481][ T9122] netlink: 'syz.4.1004': attribute type 10 has an invalid length. [ 342.951418][ T5785] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 343.781601][ T9135] syzkaller0: entered promiscuous mode [ 343.833259][ T9135] syzkaller0: entered allmulticast mode [ 343.898523][ T9135] netlink: 'syz.4.1009': attribute type 10 has an invalid length. [ 344.093648][ T9135] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 344.352837][ T9140] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 344.360813][ T9140] bridge_slave_1: left allmulticast mode [ 344.376292][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.470393][ T9147] netlink: 181432 bytes leftover after parsing attributes in process `syz.3.1012'. [ 344.952136][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 345.011309][ T9153] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1014'. [ 345.052061][ T9153] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 346.026872][ T9164] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 346.035420][ T9164] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1016'. [ 346.046303][ T9164] openvswitch: netlink: Flow key attr not present in new flow. [ 347.579041][ T9160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1015'. [ 347.631536][ T9160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.649646][ T9160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.667796][ T9160] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 347.679500][ T9160] bond0 (unregistering): (slave team0): Releasing backup interface [ 347.695467][ T9160] bond0 (unregistering): Released all slaves [ 347.848276][ T9166] netlink: 'syz.4.1017': attribute type 10 has an invalid length. [ 347.996592][ T9171] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 348.162160][ T9175] netlink: 'syz.4.1021': attribute type 10 has an invalid length. [ 348.199459][ T9175] batman_adv: batadv0: Adding interface: netdevsim0 [ 348.225015][ T9175] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.289636][ T9175] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 348.464403][ T9182] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 348.497871][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 349.090197][ T9194] netlink: 'syz.4.1027': attribute type 10 has an invalid length. [ 349.098153][ T9180] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1023'. [ 349.117328][ T9194] netlink: 'syz.4.1027': attribute type 10 has an invalid length. [ 349.137649][ T9194] netlink: 209216 bytes leftover after parsing attributes in process `syz.4.1027'. [ 349.157813][ T9194] openvswitch: netlink: Message has 4 unknown bytes. [ 349.169409][ T9180] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 349.321049][ T9197] netlink: 'syz.0.1029': attribute type 10 has an invalid length. [ 349.529875][ T5785] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 349.541128][ T9207] netlink: 'syz.2.1039': attribute type 4 has an invalid length. [ 349.688313][ T9210] netlink: 'syz.3.1031': attribute type 10 has an invalid length. [ 350.208112][ T9221] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1035'. [ 350.549401][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 352.529996][ T9268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1051'. [ 352.549772][ T9270] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.1049'. [ 352.614528][ T9274] FAULT_INJECTION: forcing a failure. [ 352.614528][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 352.627779][ T9274] CPU: 0 PID: 9274 Comm: syz.3.1052 Not tainted syzkaller #0 [ 352.635386][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.645576][ T9274] Call Trace: [ 352.648895][ T9274] [ 352.652060][ T9274] dump_stack_lvl+0x18c/0x250 [ 352.656996][ T9274] ? show_regs_print_info+0x20/0x20 [ 352.662262][ T9274] ? load_image+0x420/0x420 [ 352.666898][ T9274] ? skb_network_protocol+0x529/0x780 [ 352.672316][ T9274] ? mark_lock+0x94/0x320 [ 352.676690][ T9274] ? skb_crc32c_csum_help+0x520/0x520 [ 352.682198][ T9274] ? __lock_acquire+0x1273/0x7d40 [ 352.687293][ T9274] should_fail_ex+0x39d/0x4d0 [ 352.692054][ T9274] should_failslab+0x9/0x20 [ 352.696715][ T9274] slab_pre_alloc_hook+0x59/0x310 [ 352.701827][ T9274] kmem_cache_alloc+0x5a/0x2d0 [ 352.706652][ T9274] ? skb_clone+0x1eb/0x370 [ 352.711119][ T9274] skb_clone+0x1eb/0x370 [ 352.715404][ T9274] ? dev_queue_xmit_nit+0x451/0xbb0 [ 352.720653][ T9274] dev_queue_xmit_nit+0x24d/0xbb0 [ 352.725743][ T9274] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 352.730909][ T9274] dev_hard_start_xmit+0x148/0x740 [ 352.736099][ T9274] sch_direct_xmit+0x25e/0x4c0 [ 352.740914][ T9274] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 352.746981][ T9274] __dev_queue_xmit+0x165d/0x3660 [ 352.752070][ T9274] ? __dev_queue_xmit+0x265/0x3660 [ 352.757223][ T9274] ? lockdep_hardirqs_on+0x98/0x150 [ 352.762482][ T9274] ? read_seqbegin+0x1c8/0x270 [ 352.767307][ T9274] ? lockdep_hardirqs_on+0x98/0x150 [ 352.772645][ T9274] ? neigh_event_send+0x110/0x110 [ 352.777812][ T9274] ? netdev_core_pick_tx+0x340/0x340 [ 352.783141][ T9274] ? __asan_memcpy+0x40/0x70 [ 352.787816][ T9274] ? eth_header+0x11b/0x200 [ 352.792373][ T9274] ? llc_sysctl_exit+0x70/0x70 [ 352.797274][ T9274] ? neigh_resolve_output+0x618/0x730 [ 352.802711][ T9274] ip6_finish_output2+0xe3d/0x1630 [ 352.807875][ T9274] ? ip6_finish_output2+0x645/0x1630 [ 352.813296][ T9274] ? ip6_mtu+0x7d/0x3f0 [ 352.817494][ T9274] ? nf_hook+0x390/0x390 [ 352.821777][ T9274] ? ip6_finish_output+0x57b/0x820 [ 352.827031][ T9274] rawv6_send_hdrinc+0xd9e/0x1640 [ 352.832122][ T9274] ? txopt_get+0x3f0/0x3f0 [ 352.836667][ T9274] ? txopt_get+0x344/0x3f0 [ 352.841304][ T9274] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 352.847148][ T9274] ? fl6_sock_lookup+0xc0/0xc0 [ 352.851964][ T9274] rawv6_sendmsg+0x12cc/0x1770 [ 352.856903][ T9274] ? compat_rawv6_ioctl+0x70/0x70 [ 352.861979][ T9274] ? aa_sk_perm+0x83c/0x970 [ 352.866556][ T9274] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 352.873111][ T9274] ? inet_sendmsg+0x7c/0x2f0 [ 352.877741][ T9274] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 352.883068][ T9274] ? security_socket_sendmsg+0x80/0xa0 [ 352.888563][ T9274] ? inet_send_prepare+0x260/0x260 [ 352.893716][ T9274] ____sys_sendmsg+0x5ba/0x960 [ 352.898518][ T9274] ? __lock_acquire+0x7d40/0x7d40 [ 352.903589][ T9274] ? __asan_memset+0x22/0x40 [ 352.908218][ T9274] ? __sys_sendmsg_sock+0x30/0x30 [ 352.913272][ T9274] ? __import_iovec+0x5f2/0x850 [ 352.918178][ T9274] ? import_iovec+0x73/0xa0 [ 352.922721][ T9274] ___sys_sendmsg+0x2a6/0x360 [ 352.927533][ T9274] ? __sys_sendmsg+0x2a0/0x2a0 [ 352.932365][ T9274] ? trace_call_bpf+0xc3/0x6c0 [ 352.937210][ T9274] __se_sys_sendmsg+0x1c2/0x2b0 [ 352.942100][ T9274] ? __x64_sys_sendmsg+0x80/0x80 [ 352.947108][ T9274] ? lockdep_hardirqs_on+0x98/0x150 [ 352.952355][ T9274] do_syscall_64+0x55/0xa0 [ 352.956900][ T9274] ? clear_bhb_loop+0x40/0x90 [ 352.961611][ T9274] ? clear_bhb_loop+0x40/0x90 [ 352.966331][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.972352][ T9274] RIP: 0033:0x7fc0add9ce59 [ 352.976810][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.996547][ T9274] RSP: 002b:00007fc0aeb75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.005115][ T9274] RAX: ffffffffffffffda RBX: 00007fc0ae016090 RCX: 00007fc0add9ce59 [ 353.013386][ T9274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 353.021386][ T9274] RBP: 00007fc0aeb75090 R08: 0000000000000000 R09: 0000000000000000 [ 353.029389][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.037394][ T9274] R13: 00007fc0ae016128 R14: 00007fc0ae016090 R15: 00007ffd83182378 [ 353.045425][ T9274] [ 353.881370][ T9283] validate_nla: 5 callbacks suppressed [ 353.881391][ T9283] netlink: 'syz.2.1054': attribute type 10 has an invalid length. [ 355.396844][ T9305] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 355.434083][ T9305] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 355.484514][ T9305] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1063'. [ 355.670838][ T9305] openvswitch: netlink: Message has 4 unknown bytes. [ 356.135775][ T9316] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 356.297208][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1069'. [ 356.308293][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1069'. [ 356.329299][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1069'. [ 357.256244][ T9337] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 357.341689][ T9337] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1073'. [ 357.620902][ T9345] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 357.638657][ T9345] netlink: 'syz.3.1075': attribute type 3 has an invalid length. [ 357.666754][ T9345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1075'. [ 358.747616][ T9361] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 359.478017][ T9369] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1083'. [ 361.871308][ T9396] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1085'. [ 361.958924][ T9396] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 362.105143][ T9395] netlink: 'syz.4.1090': attribute type 2 has an invalid length. [ 362.202358][ T9395] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.1090'. [ 362.476817][ T9405] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 363.952011][ T9424] ================================================================== [ 363.960162][ T9424] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 363.968019][ T9424] Write of size 48 at addr ffff88803146fb90 by task syz.4.1098/9424 [ 363.976031][ T9424] [ 363.978381][ T9424] CPU: 1 PID: 9424 Comm: syz.4.1098 Not tainted syzkaller #0 [ 363.985799][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.995892][ T9424] Call Trace: [ 363.999203][ T9424] [ 364.002159][ T9424] dump_stack_lvl+0x18c/0x250 [ 364.006893][ T9424] ? read_lock_is_recursive+0x20/0x20 [ 364.012306][ T9424] ? show_regs_print_info+0x20/0x20 [ 364.017543][ T9424] ? load_image+0x420/0x420 [ 364.022084][ T9424] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 364.027682][ T9424] ? __virt_addr_valid+0x18c/0x540 [ 364.033623][ T9424] ? __virt_addr_valid+0x469/0x540 [ 364.038778][ T9424] print_report+0xa8/0x210 [ 364.043327][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 364.048480][ T9424] kasan_report+0x117/0x150 [ 364.053042][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 364.058179][ T9424] kasan_check_range+0x241/0x290 [ 364.063218][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 364.068522][ T9424] __asan_memcpy+0x40/0x70 [ 364.072964][ T9424] __bpf_get_stackid+0x6bf/0x900 [ 364.077934][ T9424] bpf_get_stackid_pe+0x343/0x410 [ 364.082986][ T9424] bpf_prog_1649ecc1a5870555+0x29/0x39 [ 364.088461][ T9424] bpf_overflow_handler+0x1fc/0x510 [ 364.093680][ T9424] ? bpf_overflow_handler+0xde/0x510 [ 364.098985][ T9424] ? tp_perf_event_destroy+0x20/0x20 [ 364.104301][ T9424] ? perf_trace_preemptirq_template+0xac/0x330 [ 364.110480][ T9424] ? __perf_event_account_interrupt+0x187/0x280 [ 364.116940][ T9424] __perf_event_overflow+0x447/0x630 [ 364.122299][ T9424] perf_swevent_event+0x319/0x570 [ 364.127360][ T9424] ? perf_tp_event+0x1520/0x1520 [ 364.132414][ T9424] ? __lock_acquire+0x1347/0x7d40 [ 364.137482][ T9424] ___perf_sw_event+0x4a7/0x730 [ 364.142852][ T9424] ? ___perf_sw_event+0x199/0x730 [ 364.147936][ T9424] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 364.154406][ T9424] ? __lock_acquire+0x1347/0x7d40 [ 364.159476][ T9424] ? __put_user_4+0x11/0x20 [ 364.164014][ T9424] ? perf_unpin_context+0x70/0x70 [ 364.169092][ T9424] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 364.175121][ T9424] ? lock_chain_count+0x20/0x20 [ 364.180036][ T9424] __perf_sw_event+0x139/0x270 [ 364.184925][ T9424] do_user_addr_fault+0x123e/0x12c0 [ 364.190151][ T9424] ? rcu_is_watching+0x15/0xb0 [ 364.194954][ T9424] exc_page_fault+0x64/0x100 [ 364.199567][ T9424] asm_exc_page_fault+0x26/0x30 [ 364.204434][ T9424] RIP: 0010:__put_user_4+0x11/0x20 [ 364.209566][ T9424] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 364.229186][ T9424] RSP: 0018:ffffc9000fe17c58 EFLAGS: 00050246 [ 364.235278][ T9424] RAX: 0000000000000303 RBX: 0000000000000000 RCX: 0000000000000000 [ 364.243704][ T9424] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 364.251685][ T9424] RBP: ffffc9000fe17d90 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 364.259849][ T9424] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 1ffff92001fc2f94 [ 364.267942][ T9424] R13: dffffc0000000000 R14: 00000000ae12e400 R15: 0000000000000303 [ 364.276225][ T9424] kernel_clone+0x36c/0x8a0 [ 364.280751][ T9424] ? create_io_thread+0x190/0x190 [ 364.285802][ T9424] ? do_futex+0x2ff/0x3e0 [ 364.290150][ T9424] __x64_sys_clone+0x1b7/0x230 [ 364.294938][ T9424] ? __ia32_sys_vfork+0x140/0x140 [ 364.300072][ T9424] ? lock_chain_count+0x20/0x20 [ 364.304938][ T9424] ? lockdep_hardirqs_on+0x98/0x150 [ 364.310154][ T9424] do_syscall_64+0x55/0xa0 [ 364.314581][ T9424] ? clear_bhb_loop+0x40/0x90 [ 364.319275][ T9424] ? clear_bhb_loop+0x40/0x90 [ 364.323969][ T9424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.329903][ T9424] RIP: 0033:0x7f7cd4d9ce59 [ 364.334335][ T9424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.354221][ T9424] RSP: 002b:00007f7cd5cddfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 364.362686][ T9424] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 364.370767][ T9424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400 [ 364.378838][ T9424] RBP: 00007f7cd4e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 364.386844][ T9424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 364.395265][ T9424] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 364.403262][ T9424] [ 364.406289][ T9424] [ 364.408621][ T9424] Allocated by task 9424: [ 364.412959][ T9424] kasan_set_track+0x4e/0x70 [ 364.417569][ T9424] __kasan_kmalloc+0x8f/0xa0 [ 364.422185][ T9424] __kmalloc_node+0xb4/0x230 [ 364.426788][ T9424] bpf_map_area_alloc+0x5e/0x110 [ 364.431737][ T9424] prealloc_elems_and_freelist+0x86/0x1c0 [ 364.437467][ T9424] stack_map_alloc+0x33a/0x4c0 [ 364.442239][ T9424] map_create+0x877/0x12f0 [ 364.446669][ T9424] __sys_bpf+0x651/0x890 [ 364.451018][ T9424] __x64_sys_bpf+0x7c/0x90 [ 364.455441][ T9424] do_syscall_64+0x55/0xa0 [ 364.459863][ T9424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.465770][ T9424] [ 364.468107][ T9424] Last potentially related work creation: [ 364.473923][ T9424] kasan_save_stack+0x3e/0x60 [ 364.478621][ T9424] __kasan_record_aux_stack+0xaf/0xc0 [ 364.484004][ T9424] call_rcu+0x153/0x950 [ 364.488170][ T9424] __nf_register_net_hook+0x788/0x910 [ 364.493555][ T9424] nf_register_net_hook+0xb2/0x190 [ 364.498683][ T9424] nf_register_net_hooks+0x44/0x1b0 [ 364.504005][ T9424] nf_ct_netns_do_get+0x3c0/0x5c0 [ 364.509050][ T9424] nf_ct_netns_inet_get+0x1f/0x150 [ 364.514174][ T9424] nf_conncount_init+0x127/0x380 [ 364.519215][ T9424] ovs_ct_init+0x316/0x490 [ 364.524714][ T9424] ovs_init_net+0x1e6/0x250 [ 364.529323][ T9424] ops_init+0x397/0x640 [ 364.533501][ T9424] setup_net+0x3b6/0xa30 [ 364.537875][ T9424] copy_net_ns+0x36d/0x5e0 [ 364.542359][ T9424] create_new_namespaces+0x3d3/0x6f0 [ 364.547672][ T9424] copy_namespaces+0x430/0x4a0 [ 364.552449][ T9424] copy_process+0x1724/0x3d80 [ 364.557139][ T9424] kernel_clone+0x24b/0x8a0 [ 364.561653][ T9424] __x64_sys_clone+0x1b7/0x230 [ 364.566423][ T9424] do_syscall_64+0x55/0xa0 [ 364.570846][ T9424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.576753][ T9424] [ 364.579080][ T9424] Second to last potentially related work creation: [ 364.585664][ T9424] kasan_save_stack+0x3e/0x60 [ 364.590371][ T9424] __kasan_record_aux_stack+0xaf/0xc0 [ 364.596016][ T9424] call_rcu+0x153/0x950 [ 364.600209][ T9424] __nf_register_net_hook+0x788/0x910 [ 364.605645][ T9424] nf_register_net_hook+0xb2/0x190 [ 364.610787][ T9424] nf_register_net_hooks+0x44/0x1b0 [ 364.615997][ T9424] nf_ct_netns_do_get+0x3c0/0x5c0 [ 364.621033][ T9424] nf_ct_netns_inet_get+0x1f/0x150 [ 364.626157][ T9424] nf_conncount_init+0x127/0x380 [ 364.631110][ T9424] ovs_ct_init+0x316/0x490 [ 364.635569][ T9424] ovs_init_net+0x1e6/0x250 [ 364.640086][ T9424] ops_init+0x397/0x640 [ 364.644254][ T9424] setup_net+0x3b6/0xa30 [ 364.648513][ T9424] copy_net_ns+0x36d/0x5e0 [ 364.652952][ T9424] create_new_namespaces+0x3d3/0x6f0 [ 364.658251][ T9424] unshare_nsproxy_namespaces+0x11a/0x160 [ 364.663980][ T9424] ksys_unshare+0x507/0x8c0 [ 364.668498][ T9424] __x64_sys_unshare+0x38/0x40 [ 364.673361][ T9424] do_syscall_64+0x55/0xa0 [ 364.677904][ T9424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.683825][ T9424] [ 364.686154][ T9424] The buggy address belongs to the object at ffff88803146fb80 [ 364.686154][ T9424] which belongs to the cache kmalloc-cg-64 of size 64 [ 364.700306][ T9424] The buggy address is located 16 bytes inside of [ 364.700306][ T9424] allocated 40-byte region [ffff88803146fb80, ffff88803146fba8) [ 364.714287][ T9424] [ 364.716615][ T9424] The buggy address belongs to the physical page: [ 364.723032][ T9424] page:ffffea0000c51bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3146f [ 364.733213][ T9424] memcg:ffff888031b7d201 [ 364.737592][ T9424] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 364.745251][ T9424] page_type: 0xffffffff() [ 364.749615][ T9424] raw: 00fff00000000800 ffff888017c4da00 ffffea0000bb5a80 0000000000000006 [ 364.758232][ T9424] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888031b7d201 [ 364.766827][ T9424] page dumped because: kasan: bad access detected [ 364.773250][ T9424] page_owner tracks the page as allocated [ 364.778966][ T9424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 25426004062, free_ts 25425532491 [ 364.796719][ T9424] post_alloc_hook+0x1c1/0x200 [ 364.801522][ T9424] get_page_from_freelist+0x1951/0x19e0 [ 364.807104][ T9424] __alloc_pages+0x1f0/0x460 [ 364.811718][ T9424] alloc_slab_page+0x4f/0x160 [ 364.816408][ T9424] new_slab+0x87/0x2d0 [ 364.820481][ T9424] ___slab_alloc+0xc5d/0x12f0 [ 364.825185][ T9424] __kmem_cache_alloc_node+0x19e/0x250 [ 364.830683][ T9424] __kmalloc_node+0xa4/0x230 [ 364.835304][ T9424] alloc_bulk+0x454/0x6d0 [ 364.839652][ T9424] bpf_mem_alloc_init+0x6c6/0x880 [ 364.844967][ T9424] bpf_global_ma_init+0x1a/0x40 [ 364.849833][ T9424] do_one_initcall+0x242/0x790 [ 364.854612][ T9424] do_initcall_level+0x137/0x1f0 [ 364.859565][ T9424] do_initcalls+0x69/0xd0 [ 364.863914][ T9424] kernel_init_freeable+0x3ed/0x580 [ 364.869153][ T9424] kernel_init+0x1d/0x1c0 [ 364.873504][ T9424] page last free stack trace: [ 364.878189][ T9424] free_unref_page_prepare+0x7b2/0x8c0 [ 364.883665][ T9424] free_unref_page+0x32/0x2e0 [ 364.888368][ T9424] vfree+0x1a6/0x320 [ 364.892275][ T9424] delayed_vfree_work+0x55/0x80 [ 364.897255][ T9424] process_scheduled_works+0xa5d/0x15d0 [ 364.902830][ T9424] worker_thread+0xa55/0xfc0 [ 364.907435][ T9424] kthread+0x2fa/0x390 [ 364.911513][ T9424] ret_from_fork+0x48/0x80 [ 364.915970][ T9424] ret_from_fork_asm+0x11/0x20 [ 364.920774][ T9424] [ 364.923114][ T9424] Memory state around the buggy address: [ 364.928764][ T9424] ffff88803146fa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 364.936841][ T9424] ffff88803146fb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 364.944973][ T9424] >ffff88803146fb80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 364.953214][ T9424] ^ [ 364.958620][ T9424] ffff88803146fc00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 364.966906][ T9424] ffff88803146fc80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 364.975077][ T9424] ================================================================== [ 364.983166][ T9424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 364.990372][ T9424] CPU: 1 PID: 9424 Comm: syz.4.1098 Not tainted syzkaller #0 [ 364.997753][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.007819][ T9424] Call Trace: [ 365.011111][ T9424] [ 365.014060][ T9424] dump_stack_lvl+0x18c/0x250 [ 365.018775][ T9424] ? show_regs_print_info+0x20/0x20 [ 365.024115][ T9424] ? load_image+0x420/0x420 [ 365.028696][ T9424] panic+0x2dc/0x730 [ 365.032718][ T9424] ? __lock_acquire+0x7d40/0x7d40 [ 365.037900][ T9424] ? bpf_jit_dump+0xd0/0xd0 [ 365.042507][ T9424] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 365.048522][ T9424] ? _raw_spin_unlock+0x40/0x40 [ 365.053418][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 365.058556][ T9424] check_panic_on_warn+0x84/0xa0 [ 365.063514][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 365.068640][ T9424] end_report+0x6f/0x130 [ 365.072962][ T9424] kasan_report+0x128/0x150 [ 365.077485][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 365.082615][ T9424] kasan_check_range+0x241/0x290 [ 365.087566][ T9424] ? __bpf_get_stackid+0x6bf/0x900 [ 365.092691][ T9424] __asan_memcpy+0x40/0x70 [ 365.097122][ T9424] __bpf_get_stackid+0x6bf/0x900 [ 365.102080][ T9424] bpf_get_stackid_pe+0x343/0x410 [ 365.107123][ T9424] bpf_prog_1649ecc1a5870555+0x29/0x39 [ 365.112607][ T9424] bpf_overflow_handler+0x1fc/0x510 [ 365.117913][ T9424] ? bpf_overflow_handler+0xde/0x510 [ 365.123216][ T9424] ? tp_perf_event_destroy+0x20/0x20 [ 365.128515][ T9424] ? perf_trace_preemptirq_template+0xac/0x330 [ 365.134693][ T9424] ? __perf_event_account_interrupt+0x187/0x280 [ 365.140947][ T9424] __perf_event_overflow+0x447/0x630 [ 365.146695][ T9424] perf_swevent_event+0x319/0x570 [ 365.151741][ T9424] ? perf_tp_event+0x1520/0x1520 [ 365.156695][ T9424] ? __lock_acquire+0x1347/0x7d40 [ 365.161743][ T9424] ___perf_sw_event+0x4a7/0x730 [ 365.166608][ T9424] ? ___perf_sw_event+0x199/0x730 [ 365.171644][ T9424] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 365.178076][ T9424] ? __lock_acquire+0x1347/0x7d40 [ 365.183204][ T9424] ? __put_user_4+0x11/0x20 [ 365.187729][ T9424] ? perf_unpin_context+0x70/0x70 [ 365.192855][ T9424] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 365.198856][ T9424] ? lock_chain_count+0x20/0x20 [ 365.203722][ T9424] __perf_sw_event+0x139/0x270 [ 365.208522][ T9424] do_user_addr_fault+0x123e/0x12c0 [ 365.214061][ T9424] ? rcu_is_watching+0x15/0xb0 [ 365.219276][ T9424] exc_page_fault+0x64/0x100 [ 365.223898][ T9424] asm_exc_page_fault+0x26/0x30 [ 365.228892][ T9424] RIP: 0010:__put_user_4+0x11/0x20 [ 365.234124][ T9424] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 365.253741][ T9424] RSP: 0018:ffffc9000fe17c58 EFLAGS: 00050246 [ 365.259879][ T9424] RAX: 0000000000000303 RBX: 0000000000000000 RCX: 0000000000000000 [ 365.267901][ T9424] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 365.275975][ T9424] RBP: ffffc9000fe17d90 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 365.284046][ T9424] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 1ffff92001fc2f94 [ 365.292025][ T9424] R13: dffffc0000000000 R14: 00000000ae12e400 R15: 0000000000000303 [ 365.300194][ T9424] kernel_clone+0x36c/0x8a0 [ 365.304793][ T9424] ? create_io_thread+0x190/0x190 [ 365.309838][ T9424] ? do_futex+0x2ff/0x3e0 [ 365.314196][ T9424] __x64_sys_clone+0x1b7/0x230 [ 365.318977][ T9424] ? __ia32_sys_vfork+0x140/0x140 [ 365.324017][ T9424] ? lock_chain_count+0x20/0x20 [ 365.328885][ T9424] ? lockdep_hardirqs_on+0x98/0x150 [ 365.334101][ T9424] do_syscall_64+0x55/0xa0 [ 365.338611][ T9424] ? clear_bhb_loop+0x40/0x90 [ 365.343305][ T9424] ? clear_bhb_loop+0x40/0x90 [ 365.347996][ T9424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.353904][ T9424] RIP: 0033:0x7f7cd4d9ce59 [ 365.358327][ T9424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.378031][ T9424] RSP: 002b:00007f7cd5cddfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 365.386546][ T9424] RAX: ffffffffffffffda RBX: 00007f7cd5015fa0 RCX: 00007f7cd4d9ce59 [ 365.394533][ T9424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400 [ 365.402532][ T9424] RBP: 00007f7cd4e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 365.410530][ T9424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 365.418515][ T9424] R13: 00007f7cd5016038 R14: 00007f7cd5015fa0 R15: 00007ffe716c02b8 [ 365.426508][ T9424] [ 365.430003][ T9424] Kernel Offset: disabled [ 365.434349][ T9424] Rebooting in 86400 seconds..