last executing test programs: 9.848146551s ago: executing program 3 (id=4868): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x9, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xc, 0x8}, 0x0, 0x10000, 0x6, 0x1, 0x8, 0x2020008, 0xb, 0x0, 0x0, 0x0, 0x2d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/65, 0x62, 0x41, 0x0, 0x10000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a1", 0x1c}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000000640), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r3, &(0x7f0000002200)={&(0x7f0000000280)=@isdn={0x22, 0xf, 0x6, 0x1, 0x7}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000300)="3b24586d1e54d658b201ceb035863ff0129e3c28e5876037a67ccdd6f3fef45d98941c582dafe42b4b95839618ef05dd8ba8b657e6d3ef76336e64c4997719dc79a0ba16dea65ea03338ec8d71d682ef9e014ba4e4bf13493c0d0ab9ce887d7c7fe217a289fe40ec8c", 0x69}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000580)="cd2405e0c6d15c6e51e66650f2e6e9b74189a0e243c2f9878c09c6967b7500676fb60302fa50ec4da09bc79343334e9339f8dec75de5019ddefc528f48b00f6a16419451cef91c34f5faa071cb4579df3563c3ed184dfdd923ca61c7cfe22dfb4c26bfd8e9ac0c404886fb5c38acfe64e5b74c725c0b59db1effc579b688b0d727c7ea5f1ba00ff41d78a7c5337567e510e7", 0x92}, {&(0x7f0000001ac0)="1830c3e3437db1de5de41293eac71bdf0711123690aef16b777b0eb4969b1d42f7298bf4784872b475de036c896adc68b0901069bd1d2445a7eff1361787f900f9f2b4f8bc780a268096d4b8d7238728d21b16a6190cf4964994f6dd63fb4290012618694243133d96ba2ce9d9561b13fdcc5b285e336f05f516230f96e6b0c74d64f5b678aaea3b8ac0a1bcaccdab2f956e60ca11cbeb1dae839c8879895abacac5c8eaacc7184eaa659f3765dc77e9e35b1594a364167d39c1d5f5c53a912ddc7b66931be252723edca6a1f6bb14af76c69dea66", 0xd5}, {&(0x7f0000001bc0)="96996e21622f61e35dd55cece4b02e3a592f2dfe1dad4fa320427fb931822340d4caa81f7fffd7c7b022b7bb4847d0a4ed83df48c89f852f676e1f648a2a8be0d61e0957616bab6ec622d80eec1978d9a17f60e61cfc6eecaccf268489217181dc447e433bb8e8845bb4e9753ca201f0aa9d475cb524483b556cd04c6684dae76e87d44cb1150c4f8e6296f1448895184c32cfed69e0e77bbe018f3d719cfc454867a397bfeafec041383d5f39c39c33a40ebc9111c40000f20e0c1cc96f469c7a4d30915da18789141eec61a96059fa465cfb9543e86576e15fafeb2a2cc20aa085e5c11d9bd993d2702e8534d4c942344cc25a39", 0xf5}, {&(0x7f00000000c0)="133a0480a6e186fa34eaf8e3314bdfb0f57aaf1eeac35cf7112aa70a491ad9aa360136fa172a5daa4a71161e0b2a3efaea0fe3b3d0d4a7b9261caed6e4c8f6bfa0f89b45b185388c1badf4490862dd8aebc22d2e2395f27e05b8bd9685375384a87aeed009dc6c", 0x67}], 0x7, &(0x7f0000003180)=ANY=[@ANYBLOB="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", @ANYBLOB="309495421d1f195800d6700a986a1ef96205b9f22167cf191be91abaf37258eb7e1e41e37d543f1b23d6788164177286602feb47b2fab15aa960221e12c4c8fa7501ecd730cea0d25d7bfefbb00aba3296d6a544963fe96bd49aa1fb45673b4a3e2ffded6c9906b0b54a29ca7a84a503960943a41712a81dba6f4596298ba6c5a1e575f75ab3ccc15dd1291d86aaaf553ad5179ea192f7bbd91c337c305b090ce41109344f095fca175b2c1be2e0449573", @ANYRES64, @ANYRESHEX=r5, @ANYRESOCT=r1], 0x3f8}, 0x44050) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="0f000000ca0000411a9000040000004700000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="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", @ANYBLOB="1f0a27404e543274311d37d59e53c89818118dbabe4391ae7b220f72dd1742355ddf108b6f695be4f9fc5c61e6341a2f73279653bafd5141feb95ebda79bdc7fb803ad51551f9e3d9859479b7e9853abcf1532bb23eca5d9bff72ad542dd9b154621f8f67440a4f9e78203a8458fb336b808fe613d70c047de094312ff16ff28991349816e6ba75f9c29465f6a9eb030bc5b9c772aa868c89d3a3324d2d12eb55aca97254e3fc7b702839529796f294c970e59e99d869037490ab70c625682748d", @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1a502, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000002c40)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002ec0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002340)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bdb2b20ca677f3e83352bf283cb703000003000000850000000600000085100016863b641d11b6facf9c42fddb270830c079ffefc4e175f298f7d76928e28a6e565a39edcb0ac7b95b982d018b6dce2adf78b65f85c36c8dfa66511224fb96527e36ad0fe8f67c601e4f123b7dd4d5352089800acb2548483c03afe263f2341dbe3e0ebb0dab3b260bfed306c2b20443007d5f103b13e598eb850b54469acf9796c803d83bdd04cc2258a2de14202469b445479917"], &(0x7f0000002d00)='syzkaller\x00', 0x8, 0xcf, &(0x7f0000002d40)=""/207, 0x40f00, 0x8, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000002e40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002e80)={0x0, 0x5, 0xf7a, 0x7fff}, 0x10, 0xc934, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002fc0)=@o_path={&(0x7f0000002f80)='./file0\x00', 0x0, 0x0, r2}, 0x18) sendmsg$unix(r1, &(0x7f0000003140)={&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002240)="5ff5aa6c3b62a53be51c048bf8e8b59776065decdc93539afb116e1bff4c2944d8e3c8aec4457e50f72c76f040713215fce0e10c", 0x34}, {&(0x7f0000002280)="ef6c5e232ed2e07f5ff07e7286cd068e195d9ca5d37aa2f532cd3884001a5bea21bbd592fa26038a99", 0x29}, {&(0x7f00000022c0)="e9e2b5e61f92b77b8897388da521aab1108612007decf6ae721ee74d668d713b8b3b5d6ca6e5b11ab4bc7770ff42ef975445e0ffafdfc33ecc90505a3d43ae3240d3745631b912a48c195829be052cf4e9160e468d126a907c36eaa4c19b0e3420f98a8770c7547abd3e", 0x6a}, {&(0x7f00000024c0)="115c298d77a07b409aa8ddd2e24f25", 0xf}, {&(0x7f0000002580)="4479da0fb484c26c7c3a0ff3d2adc73a73791fd8fc92002e5e18a55a9b43f8247747f1db523a54f9ec02dbe17e07e7d14a3e862b8002623004b53b0d2180d22d7466c514c534d48f1bb978189d4efc89f77b4a475ada4f01fe6337ad406da2280bed954af7bdb8d17e170708ec4c12f4d0f5dc218f24ae6fa5a714f64ad670c104a7bfce11ddc22957971bbc9c92fd6bcc983a6baed5658fbf046e9fa719d71131f0083486b27c76a2f37282f0695d56eb18fa5df4fa20c70591d7e7151b6048b7", 0xc1}, {&(0x7f0000002680)="27248682c8ca1e6ac6c0ad573fdba2e10739ac5c4b0b27b69369df055a1faea06e49dbe042b642f39cebb428c6b43ae0cec7951a3f36717a7602b4862aa519ae04a367e7f9ea119c65a5e97e5d17fe3520944d9bb8", 0x55}, {&(0x7f0000002700)="4c03c082fdef30d8c545589895dccdc662523bd98d3151b2f9f030064409403cfc9173ad584c7b4a107af1022ebbd5adc2cbfa2ae41b135d25db5f00c94ded4138a46281ff633c79a14d534ba2cd0691f1cd6e", 0x53}], 0x7, &(0x7f0000003000), 0x0, 0x4000084}, 0x150) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) socket$kcm(0x29, 0x2, 0x0) 9.776297383s ago: executing program 0 (id=4869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x106) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x4000}) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 9.44338009s ago: executing program 0 (id=4871): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000200711035000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.010026222s ago: executing program 0 (id=4872): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x4, r2}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00", @ANYRES16=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x103, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 8.006953002s ago: executing program 4 (id=4873): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 7.863836655s ago: executing program 3 (id=4876): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362", 0xeb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb", 0xa4}, {0x0}, {&(0x7f0000002600)}], 0x6}, 0x60404) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000300)=0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 7.460319454s ago: executing program 4 (id=4877): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="d80000001c0081044e81", 0xa}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000"], 0x20}, 0x0) 7.456662624s ago: executing program 3 (id=4878): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)='<\x00\x00\x00', 0x4}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (fail_nth: 1) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 7.307005367s ago: executing program 2 (id=4880): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x400, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf}, 0x10}, 0x94) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c00e, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 6.242660861s ago: executing program 4 (id=4881): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x1f4, 0x8, 0x0, &(0x7f0000000940)="c7fd425aafd8d6c5", 0x0, 0x2fc, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000200142603600e12080005007f370401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaabb"]) write$cgroup_int(r3, &(0x7f0000000040), 0x12) close(r2) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 6.242070071s ago: executing program 1 (id=4882): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003940)=""/4101, 0x1005}], 0x1}, 0x40000040) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x6, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(r1, &(0x7f0000000a00)={&(0x7f0000000580)=@sco, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000000640)=""/8, 0x8}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000780)=""/90, 0x5a}], 0x4, &(0x7f0000000900)=""/213, 0xd5}, 0x2023) r7 = socket$kcm(0x22, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x9, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x5}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x43, 0x2}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x39dfdfe7a26d1702}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x81}, {0x10, 0x5a}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @restrict={0x10}]}, {0x0, [0x0, 0x0, 0x30, 0x61, 0x61, 0x0, 0x61]}}, &(0x7f0000000380)=""/184, 0xbd, 0xb8, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x4, '\x00', 0x0, r9, 0x1, 0x1, 0x2}, 0x50) close(r7) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @broadcast}) 5.669148644s ago: executing program 0 (id=4883): r0 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x4000, &(0x7f0000000040)="b0d1db3ae615d39d8702934b", 0xc, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="c044977b8a8a41ef6717932ba8bb08a93169e20a25e9571bf39383b6d8830ef696f7e6b97d782bea10793885758f129f016e08252bc0a7aa239c354dcd1af3f5090d14b8ed9aff0e65b0f4de933d933a6358a611d2cfbd83693c4c1f0f8f1bcbea503eea2f3516dc298f2c508b126be27f305a229f5aba94fef6f76eec766a8b433e4245e266f21ae763c0") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000008c0)={r1}) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x8, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x41}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000840)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x0, 0x20, 0x4ce}, 0x2f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24008004) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000008000000000000000d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000216200000083000000bf09000000000000550901000000000095000000000000001827000000000000000000", @ANYRES32=0x1, @ANYBLOB="00000000209c36658520000003000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xaa, &(0x7f00000002c0)=""/170, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0xdb, 0x45e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xc0, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x91, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, 0x0, 0x0) 5.658288634s ago: executing program 2 (id=4884): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010000000"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 5.301233022s ago: executing program 2 (id=4885): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu'], 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x105408, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2060600003060000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.022874058s ago: executing program 3 (id=4886): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000200711035000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.022507428s ago: executing program 2 (id=4887): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 4.962190369s ago: executing program 1 (id=4888): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4100, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) 3.965548541s ago: executing program 1 (id=4889): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.893445523s ago: executing program 2 (id=4890): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x214240, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x60731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x43, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x0, 0xd6, 0x8d, &(0x7f0000000200)="b1d46ef8a7fbeab578835fbcebfb28bb00bac604c7999909ae148f10a43b64df63836f118dbf562ff0f249739f6117e4288ea0de8ebbc575c6de48be2fe7ff060de46ec20c18974ff0375b6b88bceb1109d969cb204adacd8912d0a960fafbea5d589ac30316a834dd37a97e5a3e6b9d4f804438915782c4a7126206109a682e2d15073a8cd88f05e0ae787194beb7be836609f3cbaf6852ae838049dd1c3bc28a2c2e0eaeee663fd9ffa2e23579b73c2eacc643b3ec350ce2e08b2ca5861054f44b03f5d730e17d1a00"/214, &(0x7f0000001700)=""/141, 0x4, 0x0, 0xffa, 0xed, &(0x7f0000000440)="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"/4090, &(0x7f0000001440)="71f2fe32e920033943f140b7da17f1e5f4b36b304ca8f78a0b380babfec3df3d67b452f33053cfa0aebf592cacb6e8d74612f53cc2a01c489e2b9c58705f310f64bad1f3766842999fe32214ce200211571acaeb0a95f7b17a2219bf3317291c88b0fabdea5ce57745e5829836434c6c793d866b049d78e7fefe0e9d4b4e5ba82cc0ae8e80815234e3e14c39c11e4925bb7ccfff622009308a5505ce445b63aba5b7cec8e80011fa3332d0f722bc8ac9cf6bed334b59e0904d2edf6b5cf1ff2b3f1815c540c709da2df9689515d5026bb2f24297dff3042f535c22ce47e8abbc34877349417d1a38eca2fa735d", 0x4}, 0x50) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000015c0)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000016c0)={&(0x7f0000000100)=@llc={0x1a, 0x337, 0x7, 0xfe, 0x9, 0xd}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)}, {&(0x7f00000002c0)="8460225ad3bf5603c0cbc7eeea41a595c655462cb36e2831288d57f3c17ec4689f7e981ca2ea45c881f4404dfdd2b9bc1229", 0x32}, {&(0x7f0000000340)="f4ce68686f5c612c09726a412a890eb3bae42f665b127d40181c71cc12f054d7e4f72723d651370e71b9354cc837b175b530b029bacabe4242b15e4ef8d5d9034b8f49cf071ecc5c2a11ad76a8dbcefc07dc637c7d086d4dc309bccaf315892b373a20e8833cb34df616a31b05af73249d2f17558041d2bd6cf6", 0x7a}, {&(0x7f0000000440)="39ffd7bc46d496798f6bf9ef0c77bb368192203d887d0b92d796737a10e50ce8ff010cbd9910b631e448fd64a0e77e19fbf54aea66a6b960e9121f5047c05a9072c25ec446af9ec88042dbe4a0a1a78125d0ac76bf614c3382c2fa7e6418aab23ba0d107008eb8f59106fc7632b8fb1f90363b2e12f1d166c6ecd1b0b3b3a21670e4e2df7ce049ce5ad8a0cf29fd94010b9d7d5602", 0x95}, {&(0x7f0000000500)="66fd7d09d0f2bd7aa8f7979e8a2c566319a95567ad5053ff403d0f190b9e92ab09cd513d6911b3c027e10ede077a2143a540685f1335fa7f045f04d21b61c9cc1aca50c8d5045e2a5246ef727abe4c59df7cdd49a3c329a07aa46d829b1bc32cfd942a189acf", 0x66}], 0x5, &(0x7f0000000600)=[{0x38, 0x103, 0xd16, "59e6d1bac9cfc3caf6416478162dea5b5b2966b1dd3465bf75d858707ec33a6b3a844530"}], 0x38}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="cb000000150081054e81f7820244b904021f08010a000000040000a118010200ac479fefecbfdc7c43af73eba443fe141414ffff0d1208000f010081040188001603000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fdae408f456211bef32d400000000cb09efff001fb791643a5ecb001b146218a09345d600a7214f842ea90300000000d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db7d3ac000040fad95667e0060000000000000080bb9ad809d5e1ca", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x24008804) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010200000028000001294", 0x2e}], 0x1}, 0x20000800) 3.877366084s ago: executing program 4 (id=4891): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 3.876387924s ago: executing program 3 (id=4901): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x80, 0x0}, 0x2000f761) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000200711035000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.775103006s ago: executing program 0 (id=4892): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x4, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x106, 0x106, 0x3, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @const={0xb}, @enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x9, [{0xa, 0x4, 0x1}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x52, 0x0, 0x7d, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x3d, 0x4}, @enum64={0xd, 0x7, 0x0, 0x13, 0x1, 0xf, [{0x2, 0xfffff800, 0x2}, {0x5, 0x10001, 0x6664}, {0x5, 0x9db, 0x2}, {0xb, 0x7, 0x40}, {0x9, 0x5, 0x5}, {0x10, 0xffffffc0, 0xb5e}, {0xa, 0x41e5, 0x1}]}, @datasec={0xc, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x8, 0x3}, {0x5, 0x3}, {0x5, 0xffff}, {0x1, 0x12fb, 0x9}], "a37b"}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000140)=""/200, 0x123, 0xc8, 0x1, 0x1ff}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.732446767s ago: executing program 1 (id=4893): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00a4858e767ca5025900ac5dad270000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000200)="ba"}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0xfe33) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xa9, 0x3, 0x5, 0x3, 0x0, 0x3, 0x4, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x41b, 0x53d}, 0x10022, 0x4, 0x401, 0x8, 0x1, 0x4, 0xd830, 0x0, 0x70ee, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x4d, 0xa1, 0xa5, 0x81, 0x0, 0x7, 0xd9810, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp, 0x400, 0x6, 0x4, 0x8, 0x8e, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)=""/16, 0x2}, 0x20) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x47, 0x1, 0x3, 0x40, 0x0, 0x3, 0x482, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xb, 0x7fffffff}, 0x21, 0x3, 0x0, 0x8, 0xcde, 0x0, 0x2a, 0x0, 0x3, 0x0, 0x8}, r2, 0x5, r3, 0x8) 3.60229228s ago: executing program 1 (id=4894): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x4, r2}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00", @ANYRES16=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x103, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 3.515516561s ago: executing program 4 (id=4895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)}, 0x20000040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r2) socketpair(0x8, 0x1, 0x6, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x78}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x2000000, 0xe80, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.801582577s ago: executing program 2 (id=4896): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010000000"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 223.122155ms ago: executing program 3 (id=4897): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x114101, 0x800000000000004, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x0, 0xe0, 0x8, 0xa, 0x0, 0x8, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x24000000000000, 0x81}, 0x820, 0x1, 0x2, 0x7, 0xc, 0x1f, 0x9, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, r3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b01"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xd, &(0x7f00000000c0), 0x4f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r8, @ANYRES8], 0x9a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 134.914577ms ago: executing program 4 (id=4898): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu'], 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x105408, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2060600003060000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.501468ms ago: executing program 1 (id=4899): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x100000, 0x0, 0xb316, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x20000005}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400, 0x0, 0x0, 0x7, 0x0, 0x10001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_open_procfs$namespace(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) close(r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x2, 0x10, 0x5}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}, 0x40850) socketpair(0x1, 0x3, 0x1f, &(0x7f0000000340)) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r9, 0x1c) 0s ago: executing program 0 (id=4900): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu'], 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x105408, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=r4, @ANYBLOB="1000"/18, @ANYRES32, @ANYRES32, @ANYBLOB="05000000010000000800000000001000"/28], 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(r6, &(0x7f0000000600)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 573.431918][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.468269][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.475553][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.493856][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 573.543148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.563390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.613891][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.621192][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.690203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.720173][T13531] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3217'. [ 573.821461][T13539] netlink: 'syz.1.3218': attribute type 30 has an invalid length. [ 573.867091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 573.913646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 573.940274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.995597][T13547] netlink: 'syz.3.3219': attribute type 30 has an invalid length. [ 574.074244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.097406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 574.167449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.206055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.244293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.266602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 574.278758][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 574.292059][T13553] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.3221'. [ 574.350246][T13359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.988378][T13572] netlink: 'syz.3.3222': attribute type 30 has an invalid length. [ 575.002410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.045164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 575.068013][T13359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.170738][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 575.189744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.263491][T13582] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3225'. [ 575.301926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 575.320862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 575.343216][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.377814][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.406812][T13359] device veth0_vlan entered promiscuous mode [ 575.446580][T13359] device veth1_vlan entered promiscuous mode [ 575.505239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 575.530603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 575.622417][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.656790][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.680737][T13359] device veth0_macvtap entered promiscuous mode [ 575.732079][T13592] netlink: 'syz.0.3227': attribute type 27 has an invalid length. [ 575.847760][T13592] bond0: (slave bond_slave_0): Releasing backup interface [ 575.934410][T13359] device veth1_macvtap entered promiscuous mode [ 575.962161][T13597] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3229'. [ 576.012150][T13359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.040433][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 576.065781][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 576.113455][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.152862][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.177933][T13359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.192722][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.216668][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.260249][T13359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.293034][T13359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.313280][T13359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.332590][T13359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.367628][T13606] netlink: 'syz.0.3232': attribute type 30 has an invalid length. [ 576.392419][T13609] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3233'. [ 576.458470][T13612] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 576.601100][T13612] team0 (unregistering): Port device team_slave_0 removed [ 576.647986][T13612] team0 (unregistering): Port device team_slave_1 removed [ 576.714226][T13609] netlink: 'syz.1.3233': attribute type 25 has an invalid length. [ 576.736957][T13609] netlink: 'syz.1.3233': attribute type 25 has an invalid length. [ 576.927707][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.963051][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.007238][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.007342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.034911][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.068428][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 577.120970][T13629] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3237'. [ 577.377433][T13636] FAULT_INJECTION: forcing a failure. [ 577.377433][T13636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.475041][T13636] CPU: 1 PID: 13636 Comm: syz.1.3239 Not tainted syzkaller #0 [ 577.482570][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.492649][T13636] Call Trace: [ 577.495964][T13636] [ 577.498907][T13636] dump_stack_lvl+0x188/0x24e [ 577.503598][T13636] ? show_regs_print_info+0x12/0x12 [ 577.508801][T13636] ? load_image+0x410/0x410 [ 577.513299][T13636] ? __lock_acquire+0x7c40/0x7c40 [ 577.518324][T13636] ? snprintf+0xe5/0x140 [ 577.523081][T13636] should_fail_ex+0x390/0x4c0 [ 577.527758][T13636] _copy_to_user+0x2c/0x130 [ 577.532252][T13636] simple_read_from_buffer+0xe3/0x150 [ 577.537616][T13636] proc_fail_nth_read+0x1a6/0x220 [ 577.542636][T13636] ? proc_fault_inject_write+0x310/0x310 [ 577.548259][T13636] ? fsnotify_perm+0x248/0x550 [ 577.553013][T13636] ? proc_fault_inject_write+0x310/0x310 [ 577.558637][T13636] vfs_read+0x2db/0x960 [ 577.562793][T13636] ? kernel_read+0x1e0/0x1e0 [ 577.567378][T13636] ? __fget_files+0x28/0x460 [ 577.571965][T13636] ? __fget_files+0x3fc/0x460 [ 577.576642][T13636] ? __fdget_pos+0x2ae/0x360 [ 577.581225][T13636] ? ksys_read+0x70/0x260 [ 577.585550][T13636] ksys_read+0x14d/0x260 [ 577.589790][T13636] ? vfs_write+0x9a0/0x9a0 [ 577.594201][T13636] ? syscall_enter_from_user_mode+0x2a/0x80 [ 577.600093][T13636] do_syscall_64+0x4c/0xa0 [ 577.604501][T13636] ? clear_bhb_loop+0x60/0xb0 [ 577.609169][T13636] ? clear_bhb_loop+0x60/0xb0 [ 577.613839][T13636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.619725][T13636] RIP: 0033:0x7f7928d5e68e [ 577.624136][T13636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 577.643758][T13636] RSP: 002b:00007f7929b88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.652175][T13636] RAX: ffffffffffffffda RBX: 00007f7929b896c0 RCX: 00007f7928d5e68e [ 577.660138][T13636] RDX: 000000000000000f RSI: 00007f7929b890a0 RDI: 0000000000000009 [ 577.668708][T13636] RBP: 00007f7929b89090 R08: 0000000000000000 R09: 0000000000000000 [ 577.676667][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.684712][T13636] R13: 00007f7929026038 R14: 00007f7929025fa0 R15: 00007ffc2a7b4528 [ 577.692695][T13636] [ 577.814647][T13643] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3241'. [ 578.417983][T13660] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3245'. [ 578.679212][T13668] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3248'. [ 578.791984][T13671] netlink: 'syz.1.3247': attribute type 21 has an invalid length. [ 578.815074][T13671] netlink: 'syz.1.3247': attribute type 6 has an invalid length. [ 578.857595][T13671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3247'. [ 579.079217][T13683] netlink: 'syz.0.3249': attribute type 30 has an invalid length. [ 579.138490][T13684] netlink: 'syz.2.3252': attribute type 30 has an invalid length. [ 579.723597][T13695] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3254'. [ 580.924197][T13722] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3261'. [ 580.972870][T13725] netlink: 'syz.1.3262': attribute type 30 has an invalid length. [ 581.527627][T13728] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3263'. [ 581.743814][T13730] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3264'. [ 581.804204][T13732] netlink: 'syz.2.3264': attribute type 10 has an invalid length. [ 581.909900][T13739] netlink: 'syz.4.3267': attribute type 30 has an invalid length. [ 582.242569][T13746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.256102][T13746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.300217][T13746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.349213][T13746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.571313][T13750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3272'. [ 583.299055][T13759] netlink: 'syz.1.3275': attribute type 3 has an invalid length. [ 583.318830][T13759] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3275'. [ 583.348220][T13762] netlink: 'syz.2.3278': attribute type 30 has an invalid length. [ 583.385119][T13763] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3277'. [ 583.580508][T13769] netlink: 'syz.3.3280': attribute type 30 has an invalid length. [ 583.797892][T13772] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3279'. [ 583.854096][T13772] netlink: 'syz.1.3279': attribute type 10 has an invalid length. [ 585.457886][T13779] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3282'. [ 585.471296][T13779] netlink: 'syz.4.3282': attribute type 10 has an invalid length. [ 585.783094][T13786] device syzkaller0 entered promiscuous mode [ 585.808405][T13792] netlink: 'syz.1.3288': attribute type 30 has an invalid length. [ 587.852382][T13798] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3290'. [ 587.891149][T13800] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3291'. [ 587.908647][T13798] netlink: 'syz.0.3290': attribute type 10 has an invalid length. [ 588.072599][T13798] team0 (unregistering): Port device team_slave_0 removed [ 588.136783][T13798] team0 (unregistering): Port device team_slave_1 removed [ 588.191538][T13798] team0 (unregistering): Port device bridge_slave_1 removed [ 588.271307][T13803] netlink: 'syz.0.3290': attribute type 25 has an invalid length. [ 588.289030][T13803] netlink: 'syz.0.3290': attribute type 25 has an invalid length. [ 588.340209][T13807] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3294'. [ 588.378648][T13807] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3294'. [ 588.416652][T13808] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3294'. [ 588.792041][T13810] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3295'. [ 588.815152][T13815] netlink: 'syz.4.3295': attribute type 10 has an invalid length. [ 588.823366][T13817] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3297'. [ 589.117657][T13830] netlink: 'syz.1.3303': attribute type 30 has an invalid length. [ 589.364346][T13838] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3305'. [ 589.958002][T13852] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3308'. [ 590.015263][T13851] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 590.246779][T13851] team0 (unregistering): Port device team_slave_0 removed [ 590.330603][T13851] team0 (unregistering): Port device team_slave_1 removed [ 590.380215][T13852] netlink: 'syz.4.3308': attribute type 25 has an invalid length. [ 590.400611][T13852] netlink: 'syz.4.3308': attribute type 25 has an invalid length. [ 590.424218][T13858] netlink: 'syz.0.3312': attribute type 30 has an invalid length. [ 590.453320][T13854] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3310'. [ 590.477682][T13862] netlink: 'syz.2.3310': attribute type 10 has an invalid length. [ 590.509927][T13864] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3313'. [ 590.890702][T13872] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3316'. [ 590.944543][T13872] netlink: 'syz.3.3316': attribute type 10 has an invalid length. [ 591.016818][T13875] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3317'. [ 591.099484][T13877] netlink: 'syz.2.3319': attribute type 30 has an invalid length. [ 591.208601][T13881] netlink: 'syz.0.3320': attribute type 30 has an invalid length. [ 591.269083][T13883] device syzkaller0 entered promiscuous mode [ 591.810989][T13889] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3326'. [ 591.840354][T13889] netlink: 'syz.4.3326': attribute type 10 has an invalid length. [ 592.082361][T13900] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3328'. [ 592.408911][T13906] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3332'. [ 594.468696][T13930] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3339'. [ 594.489249][T13930] netlink: 'syz.4.3339': attribute type 10 has an invalid length. [ 594.789273][T13939] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3342'. [ 594.965127][T13944] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3345'. [ 597.661651][T13974] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3358'. [ 598.318916][T13989] FAULT_INJECTION: forcing a failure. [ 598.318916][T13989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.352473][T13989] CPU: 1 PID: 13989 Comm: syz.2.3364 Not tainted syzkaller #0 [ 598.360001][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.370084][T13989] Call Trace: [ 598.373383][T13989] [ 598.376333][T13989] dump_stack_lvl+0x188/0x24e [ 598.381045][T13989] ? show_regs_print_info+0x12/0x12 [ 598.386269][T13989] ? load_image+0x410/0x410 [ 598.390808][T13989] ? __lock_acquire+0x7c40/0x7c40 [ 598.395874][T13989] should_fail_ex+0x390/0x4c0 [ 598.400583][T13989] _copy_from_user+0x2c/0x170 [ 598.405287][T13989] bpf_prog_test_run_skb+0x263/0x18e0 [ 598.410691][T13989] ? __fget_files+0x28/0x460 [ 598.415308][T13989] ? __fget_files+0x3fc/0x460 [ 598.420029][T13989] ? cpu_online+0xa0/0xa0 [ 598.424381][T13989] bpf_prog_test_run+0x31c/0x390 [ 598.429350][T13989] __sys_bpf+0x62b/0x780 [ 598.433622][T13989] ? bpf_link_show_fdinfo+0x380/0x380 [ 598.439048][T13989] ? lock_chain_count+0x20/0x20 [ 598.443947][T13989] __x64_sys_bpf+0x78/0x90 [ 598.448396][T13989] do_syscall_64+0x4c/0xa0 [ 598.452856][T13989] ? clear_bhb_loop+0x60/0xb0 [ 598.457554][T13989] ? clear_bhb_loop+0x60/0xb0 [ 598.462261][T13989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.468177][T13989] RIP: 0033:0x7fa9e5d9de59 [ 598.472618][T13989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.492264][T13989] RSP: 002b:00007fa9e3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.500715][T13989] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9de59 [ 598.508708][T13989] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 598.516708][T13989] RBP: 00007fa9e3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 598.524702][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.532700][T13989] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffe3da33958 [ 598.540722][T13989] [ 599.559793][T14007] FAULT_INJECTION: forcing a failure. [ 599.559793][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.622225][T14007] CPU: 0 PID: 14007 Comm: syz.2.3372 Not tainted syzkaller #0 [ 599.629739][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.639794][T14007] Call Trace: [ 599.643065][T14007] [ 599.645987][T14007] dump_stack_lvl+0x188/0x24e [ 599.650670][T14007] ? show_regs_print_info+0x12/0x12 [ 599.655863][T14007] ? load_image+0x410/0x410 [ 599.660361][T14007] ? __lock_acquire+0x7c40/0x7c40 [ 599.665381][T14007] should_fail_ex+0x390/0x4c0 [ 599.670055][T14007] _copy_from_iter+0x1c0/0x1130 [ 599.674899][T14007] ? __lock_acquire+0x7c40/0x7c40 [ 599.679915][T14007] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 599.685282][T14007] ? copyout_mc+0x110/0x110 [ 599.689783][T14007] ? __virt_addr_valid+0x188/0x540 [ 599.694892][T14007] ? __virt_addr_valid+0x188/0x540 [ 599.699994][T14007] ? __virt_addr_valid+0x467/0x540 [ 599.705099][T14007] ? __check_object_size+0x4f6/0xa70 [ 599.710376][T14007] skb_copy_datagram_from_iter+0xee/0x6b0 [ 599.716091][T14007] ? skb_put+0x10e/0x200 [ 599.720331][T14007] tun_get_user+0xc41/0x3c20 [ 599.724929][T14007] ? rcu_read_unlock+0xa0/0xa0 [ 599.729703][T14007] ? tun_get+0x1c/0x2e0 [ 599.733853][T14007] ? __lock_acquire+0x7c40/0x7c40 [ 599.738875][T14007] ? tun_get+0x1c/0x2e0 [ 599.743026][T14007] tun_chr_write_iter+0x112/0x1f0 [ 599.748049][T14007] vfs_write+0x482/0x9a0 [ 599.752291][T14007] ? file_end_write+0x250/0x250 [ 599.757166][T14007] ? __fget_files+0x3fc/0x460 [ 599.761841][T14007] ? __fdget_pos+0x1d4/0x360 [ 599.766446][T14007] ? ksys_write+0x70/0x260 [ 599.770861][T14007] ksys_write+0x14d/0x260 [ 599.775188][T14007] ? __ia32_sys_read+0x80/0x80 [ 599.779954][T14007] ? lockdep_hardirqs_on+0x94/0x140 [ 599.785153][T14007] do_syscall_64+0x4c/0xa0 [ 599.789570][T14007] ? clear_bhb_loop+0x60/0xb0 [ 599.794236][T14007] ? clear_bhb_loop+0x60/0xb0 [ 599.798906][T14007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.804791][T14007] RIP: 0033:0x7fa9e5d9de59 [ 599.809202][T14007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.828798][T14007] RSP: 002b:00007fa9e3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.837200][T14007] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9de59 [ 599.845162][T14007] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 599.853122][T14007] RBP: 00007fa9e3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 599.861081][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.869041][T14007] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffe3da33958 [ 599.877016][T14007] [ 600.031629][T14010] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3373'. [ 600.793902][T14032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3376'. [ 601.066192][T14027] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3376'. [ 601.104095][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 601.116479][T14040] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 601.123793][T14040] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 601.135493][T14027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.155666][T14041] netlink: 'syz.1.3383': attribute type 27 has an invalid length. [ 601.223985][T14041] bond0: (slave bond_slave_0): Releasing backup interface [ 601.328681][T14045] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3387'. [ 602.091496][T14069] netlink: 'syz.4.3395': attribute type 11 has an invalid length. [ 602.127333][T14069] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3395'. [ 602.164730][T14069] netlink: 'syz.4.3395': attribute type 11 has an invalid length. [ 602.193762][T14069] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3395'. [ 602.219538][T14068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.393666][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'. [ 602.450198][T14076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3398'. [ 602.776870][T14088] netlink: 'syz.0.3402': attribute type 27 has an invalid length. [ 604.880670][T14115] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 604.962188][T14116] sctp: [Deprecated]: syz.3.3409 (pid 14116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.962188][T14116] Use struct sctp_sack_info instead [ 605.022633][T14115] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 605.056050][T14115] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3410'. [ 605.107634][T14119] netlink: 'syz.2.3410': attribute type 29 has an invalid length. [ 605.139708][T14119] netlink: 'syz.2.3410': attribute type 29 has an invalid length. [ 605.170213][T14115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3410'. [ 605.481083][T14136] netlink: 'syz.2.3419': attribute type 27 has an invalid length. [ 606.148612][T14136] bond0: (slave bond_slave_0): Releasing backup interface [ 608.912765][T14153] netlink: 'syz.3.3424': attribute type 27 has an invalid length. [ 609.202830][T14173] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3431'. [ 609.231294][T14180] netlink: 'syz.1.3431': attribute type 10 has an invalid length. [ 610.376232][T14198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3441'. [ 610.405534][T14197] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3442'. [ 610.428772][T14198] netlink: 'syz.1.3441': attribute type 10 has an invalid length. [ 610.454252][T14197] netlink: 'syz.4.3442': attribute type 10 has an invalid length. [ 610.944507][T14217] netlink: 'syz.2.3450': attribute type 21 has an invalid length. [ 610.999339][T14217] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.049202][T14217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.056565][T14217] IPv6: NLM_F_CREATE should be set when creating new route [ 611.063858][T14217] IPv6: NLM_F_CREATE should be set when creating new route [ 611.071256][T14217] IPv6: NLM_F_CREATE should be set when creating new route [ 611.086052][T14216] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3451'. [ 611.105806][T14223] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 611.655547][T14237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3457'. [ 611.696908][T14237] netlink: 'syz.4.3457': attribute type 10 has an invalid length. [ 612.640821][T14253] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3464'. [ 612.666678][T14253] netlink: 'syz.2.3464': attribute type 10 has an invalid length. [ 612.888319][T14266] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3470'. [ 612.898645][T14266] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 612.941411][T14266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.971004][T14264] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3469'. [ 613.001450][T14264] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 613.263365][T14273] sctp: [Deprecated]: syz.0.3472 (pid 14273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.263365][T14273] Use struct sctp_sack_info instead [ 613.264446][T14264] team0 (unregistering): Port device team_slave_0 removed [ 613.349926][T14264] team0 (unregistering): Port device team_slave_1 removed [ 615.001025][T14289] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3479'. [ 615.057361][T14289] netlink: 'syz.3.3479': attribute type 10 has an invalid length. [ 615.161842][T14300] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3483'. [ 615.226799][T14300] netlink: 'syz.1.3483': attribute type 10 has an invalid length. [ 615.668307][T14316] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3490'. [ 615.736809][T14316] netlink: 'syz.4.3490': attribute type 10 has an invalid length. [ 617.409702][T14327] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3496'. [ 617.446829][T14335] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3497'. [ 617.467227][T14327] netlink: 'syz.1.3496': attribute type 10 has an invalid length. [ 617.494948][T14335] netlink: 'syz.0.3497': attribute type 10 has an invalid length. [ 618.851707][T14365] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3507'. [ 618.879800][T14365] netlink: 'syz.3.3507': attribute type 10 has an invalid length. [ 620.479446][T14365] team0 (unregistering): Port device team_slave_0 removed [ 620.533287][T14365] team0 (unregistering): Port device team_slave_1 removed [ 620.630291][T14368] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3512'. [ 620.659007][T14376] netlink: 'syz.4.3512': attribute type 10 has an invalid length. [ 622.030826][T14413] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3524'. [ 622.064072][T14417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3525'. [ 622.090051][T14415] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3527'. [ 622.113668][T14413] netlink: 'syz.1.3524': attribute type 10 has an invalid length. [ 622.146770][T14415] netlink: 'syz.2.3527': attribute type 10 has an invalid length. [ 622.247235][T14421] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3529'. [ 622.311367][T14421] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 622.370891][T14421] netlink: 'syz.4.3529': attribute type 25 has an invalid length. [ 622.408777][T14421] netlink: 'syz.4.3529': attribute type 25 has an invalid length. [ 622.480350][T14433] netlink: 'syz.3.3533': attribute type 10 has an invalid length. [ 622.515493][T14433] device macvlan0 entered promiscuous mode [ 623.476440][T14454] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3541'. [ 623.512170][T14454] netlink: 'syz.4.3541': attribute type 10 has an invalid length. [ 624.039156][T14467] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3543'. [ 624.061517][T14467] netlink: 'syz.2.3543': attribute type 10 has an invalid length. [ 624.277685][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.284291][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.171901][T14503] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3555'. [ 627.198043][T14503] netlink: 'syz.2.3555': attribute type 10 has an invalid length. [ 630.028884][T14531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3565'. [ 630.347794][T14538] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3570'. [ 630.372329][T14538] netlink: 'syz.4.3570': attribute type 10 has an invalid length. [ 630.699590][T14549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3574'. [ 630.721873][T14549] netlink: 'syz.3.3574': attribute type 10 has an invalid length. [ 630.759856][T14549] netlink: 'syz.3.3574': attribute type 25 has an invalid length. [ 630.771119][T14549] netlink: 'syz.3.3574': attribute type 25 has an invalid length. [ 631.012235][T14559] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3579'. [ 631.084053][T14565] netlink: 'syz.2.3579': attribute type 10 has an invalid length. [ 631.151512][T14559] netlink: 'syz.2.3579': attribute type 25 has an invalid length. [ 631.222244][T14559] netlink: 'syz.2.3579': attribute type 25 has an invalid length. [ 632.996493][T14576] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3586'. [ 633.033837][T14580] netlink: 'syz.3.3586': attribute type 10 has an invalid length. [ 633.056569][T14580] device macvlan0 left promiscuous mode [ 633.434631][T14596] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3594'. [ 633.511976][T14596] netlink: 'syz.0.3594': attribute type 10 has an invalid length. [ 633.552517][T14596] netlink: 'syz.0.3594': attribute type 25 has an invalid length. [ 633.582415][T14596] netlink: 'syz.0.3594': attribute type 25 has an invalid length. [ 633.608091][T14603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3596'. [ 633.656424][T14606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3597'. [ 633.679713][T14603] netlink: 'syz.3.3596': attribute type 10 has an invalid length. [ 633.702238][T14606] netlink: 'syz.1.3597': attribute type 10 has an invalid length. [ 633.720971][T14603] netlink: 'syz.3.3596': attribute type 25 has an invalid length. [ 633.739532][T14603] netlink: 'syz.3.3596': attribute type 25 has an invalid length. [ 633.767081][T14606] netlink: 'syz.1.3597': attribute type 25 has an invalid length. [ 633.786540][T14606] netlink: 'syz.1.3597': attribute type 25 has an invalid length. [ 634.048923][T14615] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3603'. [ 634.202309][T14619] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3602'. [ 636.534595][T14648] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3614'. [ 636.574707][T14652] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3615'. [ 636.724201][T14654] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3616'. [ 636.791369][T14656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3618'. [ 639.402972][T14689] __nla_validate_parse: 2 callbacks suppressed [ 639.403005][T14689] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3632'. [ 639.474473][T14688] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3631'. [ 639.490565][T14695] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3630'. [ 639.505681][T14697] validate_nla: 18 callbacks suppressed [ 639.505696][T14697] netlink: 'syz.2.3630': attribute type 25 has an invalid length. [ 639.543759][T14697] netlink: 'syz.2.3630': attribute type 25 has an invalid length. [ 639.567595][T14696] netlink: 'syz.4.3632': attribute type 10 has an invalid length. [ 639.579005][T14689] netlink: 'syz.4.3632': attribute type 25 has an invalid length. [ 639.592079][T14689] netlink: 'syz.4.3632': attribute type 25 has an invalid length. [ 639.607545][T14688] netlink: 'syz.0.3631': attribute type 10 has an invalid length. [ 641.093747][T14737] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3648'. [ 641.171843][T14737] netlink: 'syz.2.3648': attribute type 10 has an invalid length. [ 641.203264][T14740] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3650'. [ 641.224922][T14737] netlink: 'syz.2.3648': attribute type 25 has an invalid length. [ 641.234036][T14737] netlink: 'syz.2.3648': attribute type 25 has an invalid length. [ 641.253636][T14740] netlink: 'syz.3.3650': attribute type 10 has an invalid length. [ 641.428093][T14746] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3662'. [ 641.705377][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 642.118007][T14775] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3663'. [ 643.335290][T14794] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3668'. [ 643.750672][T14808] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3679'. [ 644.018178][T14822] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3683'. [ 644.043383][T14821] device pim6reg1 entered promiscuous mode [ 644.700132][T14845] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3694'. [ 644.749257][T14845] validate_nla: 10 callbacks suppressed [ 644.749276][T14845] netlink: 'syz.3.3694': attribute type 10 has an invalid length. [ 644.911947][T14853] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3699'. [ 644.975994][T14853] netlink: 'syz.1.3699': attribute type 25 has an invalid length. [ 644.992114][T14853] netlink: 'syz.1.3699': attribute type 25 has an invalid length. [ 645.026151][T14857] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3701'. [ 645.054581][T14857] netlink: 'syz.2.3701': attribute type 25 has an invalid length. [ 645.087254][T14857] netlink: 'syz.2.3701': attribute type 25 has an invalid length. [ 645.561455][T14875] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3711'. [ 645.588709][T14877] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3709'. [ 645.628638][T14875] netlink: 'syz.4.3711': attribute type 10 has an invalid length. [ 645.646426][T14883] netlink: 'syz.3.3709': attribute type 10 has an invalid length. [ 645.908570][T14895] netlink: 'syz.3.3716': attribute type 27 has an invalid length. [ 645.998225][T14897] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3720'. [ 646.128822][T14897] netlink: 'syz.4.3720': attribute type 25 has an invalid length. [ 646.151552][T14897] netlink: 'syz.4.3720': attribute type 25 has an invalid length. [ 647.048150][T14910] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3725'. [ 647.381797][T14928] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3730'. [ 648.555950][T14949] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3739'. [ 651.094110][T14988] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3757'. [ 651.147221][T14994] validate_nla: 7 callbacks suppressed [ 651.147237][T14994] netlink: 'syz.0.3757': attribute type 10 has an invalid length. [ 652.191639][T15020] netlink: 'syz.3.3768': attribute type 27 has an invalid length. [ 652.359116][T15027] netlink: 'syz.2.3771': attribute type 4 has an invalid length. [ 652.376879][T15027] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3771'. [ 654.133382][T15036] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3774'. [ 654.178609][T15037] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3773'. [ 654.245672][T15036] netlink: 'syz.4.3774': attribute type 10 has an invalid length. [ 654.269557][T15042] netlink: 'syz.4.3774': attribute type 25 has an invalid length. [ 654.300171][T15042] netlink: 'syz.4.3774': attribute type 25 has an invalid length. [ 654.336142][T15037] netlink: 'syz.0.3773': attribute type 10 has an invalid length. [ 655.445168][T15062] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3783'. [ 655.454786][T15062] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 655.550482][T15068] FAULT_INJECTION: forcing a failure. [ 655.550482][T15068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.676900][T15068] CPU: 1 PID: 15068 Comm: syz.0.3786 Not tainted syzkaller #0 [ 655.684429][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.694687][T15068] Call Trace: [ 655.697983][T15068] [ 655.700940][T15068] dump_stack_lvl+0x188/0x24e [ 655.705657][T15068] ? show_regs_print_info+0x12/0x12 [ 655.710891][T15068] ? load_image+0x410/0x410 [ 655.715430][T15068] ? __lock_acquire+0x7c40/0x7c40 [ 655.720500][T15068] should_fail_ex+0x390/0x4c0 [ 655.725224][T15068] _copy_from_user+0x2c/0x170 [ 655.729931][T15068] ___sys_sendmsg+0x1c3/0x360 [ 655.734641][T15068] ? __sys_sendmsg+0x2a0/0x2a0 [ 655.739481][T15068] ? __lock_acquire+0x7c40/0x7c40 [ 655.744613][T15068] __se_sys_sendmsg+0x1c3/0x2b0 [ 655.749467][T15068] ? perf_trace_preemptirq_template+0x268/0x320 [ 655.755706][T15068] ? __x64_sys_sendmsg+0x80/0x80 [ 655.760652][T15068] ? lockdep_hardirqs_on+0x94/0x140 [ 655.765845][T15068] do_syscall_64+0x4c/0xa0 [ 655.770257][T15068] ? clear_bhb_loop+0x60/0xb0 [ 655.774929][T15068] ? clear_bhb_loop+0x60/0xb0 [ 655.779598][T15068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.785489][T15068] RIP: 0033:0x7fc06279de59 [ 655.789896][T15068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.809593][T15068] RSP: 002b:00007fc06365b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.818000][T15068] RAX: ffffffffffffffda RBX: 00007fc062a25fa0 RCX: 00007fc06279de59 [ 655.825964][T15068] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 655.833927][T15068] RBP: 00007fc06365b090 R08: 0000000000000000 R09: 0000000000000000 [ 655.841888][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.849855][T15068] R13: 00007fc062a26038 R14: 00007fc062a25fa0 R15: 00007ffcabdbb1a8 [ 655.857832][T15068] [ 656.248448][T15089] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3791'. [ 656.273577][T15089] netlink: 'syz.2.3791': attribute type 10 has an invalid length. [ 656.298469][T15089] netlink: 'syz.2.3791': attribute type 25 has an invalid length. [ 656.307007][T15089] netlink: 'syz.2.3791': attribute type 25 has an invalid length. [ 656.386028][T15092] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 657.065013][T12373] Bluetooth: hci5: command 0x0406 tx timeout [ 658.469768][T15092] bond0: (slave bond_slave_0): Releasing backup interface [ 659.077924][T15120] netlink: 'syz.2.3803': attribute type 27 has an invalid length. [ 659.092650][T15127] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3805'. [ 659.156117][T15127] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 661.744132][T15149] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3814'. [ 661.790426][T15149] netlink: 'syz.0.3814': attribute type 10 has an invalid length. [ 661.832085][T15154] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3817'. [ 661.881781][T15154] netlink: 'syz.4.3817': attribute type 10 has an invalid length. [ 661.886057][T15157] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3818'. [ 661.910657][T15154] netlink: 'syz.4.3817': attribute type 25 has an invalid length. [ 661.944051][T15154] netlink: 'syz.4.3817': attribute type 25 has an invalid length. [ 662.011896][T15159] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3819'. [ 662.119379][T15159] netlink: 'syz.0.3819': attribute type 10 has an invalid length. [ 662.151313][T15159] netlink: 'syz.0.3819': attribute type 25 has an invalid length. [ 662.175063][T15159] netlink: 'syz.0.3819': attribute type 25 has an invalid length. [ 662.952506][T15178] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3825'. [ 662.975953][T15178] netlink: 'syz.2.3825': attribute type 10 has an invalid length. [ 663.250848][T15188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3829'. [ 663.286404][T15188] netlink: 'syz.1.3829': attribute type 10 has an invalid length. [ 663.321262][T15188] netlink: 'syz.1.3829': attribute type 25 has an invalid length. [ 663.519977][T15196] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3834'. [ 663.581669][T15198] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3837'. [ 664.289418][T15224] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3844'. [ 664.763824][T15229] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3847'. [ 667.304981][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 667.370906][T15292] __nla_validate_parse: 4 callbacks suppressed [ 667.370948][T15292] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3872'. [ 667.409759][T15292] validate_nla: 12 callbacks suppressed [ 667.409843][T15292] netlink: 'syz.1.3872': attribute type 10 has an invalid length. [ 667.589321][T15300] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3874'. [ 667.601384][T15300] netlink: 'syz.4.3874': attribute type 10 has an invalid length. [ 667.984722][T15302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3878'. [ 668.049455][T15306] netlink: 'syz.1.3877': attribute type 27 has an invalid length. [ 668.088029][T15302] netlink: 'syz.4.3878': attribute type 25 has an invalid length. [ 668.107211][T15302] netlink: 'syz.4.3878': attribute type 25 has an invalid length. [ 671.519954][T15326] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3885'. [ 671.567061][T15326] netlink: 'syz.1.3885': attribute type 10 has an invalid length. [ 671.633102][T15332] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3888'. [ 671.664273][T15332] netlink: 'syz.0.3888': attribute type 10 has an invalid length. [ 671.787417][T15334] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3889'. [ 671.831575][T15334] netlink: 'syz.2.3889': attribute type 10 has an invalid length. [ 671.911112][T15341] netlink: 'syz.4.3891': attribute type 27 has an invalid length. [ 673.820502][T15361] netlink: 175 bytes leftover after parsing attributes in process `syz.0.3900'. [ 673.848431][T15361] netlink: 'syz.0.3900': attribute type 10 has an invalid length. [ 673.938601][T15363] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3901'. [ 673.958061][T15363] netlink: 'syz.3.3901': attribute type 10 has an invalid length. [ 674.097068][T15366] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3903'. [ 674.118607][T15366] netlink: 'syz.4.3903': attribute type 10 has an invalid length. [ 674.593645][T15384] netlink: 'syz.0.3910': attribute type 27 has an invalid length. [ 675.852724][T15404] netlink: 175 bytes leftover after parsing attributes in process `syz.2.3919'. [ 675.892060][T15404] netlink: 'syz.2.3919': attribute type 10 has an invalid length. [ 676.216455][T15420] netlink: 'syz.2.3925': attribute type 27 has an invalid length. [ 677.544943][T12373] Bluetooth: hci1: command 0x0406 tx timeout [ 677.907738][T15448] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3936'. [ 677.978402][T15448] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 678.216253][T15451] netlink: 'syz.1.3937': attribute type 2 has an invalid length. [ 678.281002][T15451] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 678.345151][T15451] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3937'. [ 680.011342][T15466] netlink: 'syz.2.3943': attribute type 27 has an invalid length. [ 681.403251][T15484] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3948'. [ 681.434566][T15491] netlink: 'syz.0.3958': attribute type 27 has an invalid length. [ 681.482615][T15484] netlink: 'syz.2.3948': attribute type 25 has an invalid length. [ 681.502783][T15484] netlink: 'syz.2.3948': attribute type 25 has an invalid length. [ 681.587925][T15493] netlink: 175 bytes leftover after parsing attributes in process `syz.3.3952'. [ 681.630099][T15493] netlink: 'syz.3.3952': attribute type 10 has an invalid length. [ 683.029528][T15528] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3965'. [ 683.071041][T15528] netlink: 'syz.4.3965': attribute type 25 has an invalid length. [ 683.088144][T15528] netlink: 'syz.4.3965': attribute type 25 has an invalid length. [ 684.432278][T15557] netlink: 175 bytes leftover after parsing attributes in process `syz.1.3975'. [ 684.445868][T15557] netlink: 'syz.1.3975': attribute type 10 has an invalid length. [ 684.784159][T15563] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3979'. [ 685.020390][T15571] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3981'. [ 685.067312][T15571] netlink: 'syz.3.3981': attribute type 25 has an invalid length. [ 685.100785][T15571] netlink: 'syz.3.3981': attribute type 25 has an invalid length. [ 685.718518][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.724895][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.308050][T15597] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3992'. [ 687.550070][T15610] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3995'. [ 687.787119][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 688.127449][T15618] netlink: 'syz.0.4000': attribute type 10 has an invalid length. [ 688.158178][T15618] netlink: 'syz.0.4000': attribute type 25 has an invalid length. [ 688.174434][T15618] netlink: 'syz.0.4000': attribute type 25 has an invalid length. [ 689.441580][T15633] FAULT_INJECTION: forcing a failure. [ 689.441580][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 689.454648][T15633] CPU: 0 PID: 15633 Comm: syz.1.4006 Not tainted syzkaller #0 [ 689.462130][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.472212][T15633] Call Trace: [ 689.475504][T15633] [ 689.478452][T15633] dump_stack_lvl+0x188/0x24e [ 689.483156][T15633] ? show_regs_print_info+0x12/0x12 [ 689.488388][T15633] ? load_image+0x410/0x410 [ 689.492916][T15633] should_fail_ex+0x390/0x4c0 [ 689.497610][T15633] should_failslab+0x5/0x20 [ 689.502111][T15633] slab_pre_alloc_hook+0x59/0x300 [ 689.507143][T15633] kmem_cache_alloc+0x56/0x2f0 [ 689.511915][T15633] ? sctp_get_port_local+0x69b/0x1500 [ 689.517366][T15633] sctp_get_port_local+0x69b/0x1500 [ 689.522563][T15633] ? __lock_acquire+0x7c40/0x7c40 [ 689.527590][T15633] ? sctp_do_bind+0x8f0/0x8f0 [ 689.532263][T15633] ? sctp_bind_addr_match+0x2c/0x2a0 [ 689.537553][T15633] sctp_do_bind+0x4c0/0x8f0 [ 689.542073][T15633] sctp_connect_new_asoc+0x266/0x6a0 [ 689.547367][T15633] ? __sctp_connect+0xd80/0xd80 [ 689.552215][T15633] ? __local_bh_enable_ip+0x136/0x1c0 [ 689.557583][T15633] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 689.563123][T15633] ? security_sctp_bind_connect+0x85/0xb0 [ 689.568848][T15633] sctp_sendmsg+0x1686/0x2940 [ 689.573534][T15633] ? sctp_getsockopt+0x8a0/0x8a0 [ 689.578469][T15633] ? __might_fault+0xa6/0x120 [ 689.583139][T15633] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 689.589582][T15633] ? aa_sock_msg_perm+0x94/0x150 [ 689.594522][T15633] ? inet_sendmsg+0xca/0x2a0 [ 689.599147][T15633] ? inet_send_prepare+0x250/0x250 [ 689.604359][T15633] ____sys_sendmsg+0x5ed/0x9a0 [ 689.609125][T15633] ? __sys_sendmsg_sock+0x30/0x30 [ 689.614151][T15633] ? __import_iovec+0x306/0x510 [ 689.619009][T15633] ? import_iovec+0x6f/0xa0 [ 689.623512][T15633] ___sys_sendmsg+0x2a2/0x360 [ 689.628193][T15633] ? __sys_sendmsg+0x2a0/0x2a0 [ 689.632967][T15633] ? __lock_acquire+0x7c40/0x7c40 [ 689.638012][T15633] __se_sys_sendmsg+0x1c3/0x2b0 [ 689.642861][T15633] ? __x64_sys_sendmsg+0x80/0x80 [ 689.647806][T15633] ? lockdep_hardirqs_on+0x94/0x140 [ 689.652997][T15633] do_syscall_64+0x4c/0xa0 [ 689.657411][T15633] ? clear_bhb_loop+0x60/0xb0 [ 689.662090][T15633] ? clear_bhb_loop+0x60/0xb0 [ 689.666763][T15633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.672648][T15633] RIP: 0033:0x7f7928d9de59 [ 689.677061][T15633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.696689][T15633] RSP: 002b:00007f7929b89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.705095][T15633] RAX: ffffffffffffffda RBX: 00007f7929025fa0 RCX: 00007f7928d9de59 [ 689.713059][T15633] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 689.721021][T15633] RBP: 00007f7929b89090 R08: 0000000000000000 R09: 0000000000000000 [ 689.728981][T15633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.736944][T15633] R13: 00007f7929026038 R14: 00007f7929025fa0 R15: 00007ffc2a7b4528 [ 689.744920][T15633] [ 689.823820][T15634] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4005'. [ 689.884777][T15634] netlink: 'syz.2.4005': attribute type 10 has an invalid length. [ 690.465498][T15650] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4010'. [ 690.491490][T15649] netlink: 'syz.1.4021': attribute type 10 has an invalid length. [ 690.513104][T15649] netlink: 'syz.1.4021': attribute type 25 has an invalid length. [ 690.534695][T15649] netlink: 'syz.1.4021': attribute type 25 has an invalid length. [ 690.747385][T15658] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4014'. [ 692.012977][T15676] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4022'. [ 692.034378][T15676] netlink: 'syz.0.4022': attribute type 10 has an invalid length. [ 692.496852][T15692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4028'. [ 692.608995][T15694] netlink: 'syz.0.4030': attribute type 10 has an invalid length. [ 692.641656][T15688] netlink: 'syz.0.4030': attribute type 25 has an invalid length. [ 692.675291][T15688] netlink: 'syz.0.4030': attribute type 25 has an invalid length. [ 693.502125][T15703] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4034'. [ 694.732626][T15725] netlink: 'syz.4.4043': attribute type 10 has an invalid length. [ 694.773852][T15725] netlink: 'syz.4.4043': attribute type 25 has an invalid length. [ 694.786351][T15725] netlink: 'syz.4.4043': attribute type 25 has an invalid length. [ 694.890685][T15732] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4045'. [ 694.955902][T15732] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4045'. [ 698.674461][T15774] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4066'. [ 698.743315][T15778] netlink: 'syz.4.4065': attribute type 10 has an invalid length. [ 698.795311][T15781] netlink: 'syz.4.4065': attribute type 25 has an invalid length. [ 698.826523][T15781] netlink: 'syz.4.4065': attribute type 25 has an invalid length. [ 699.169969][T15794] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4072'. [ 699.232545][T15794] netlink: 'syz.2.4072': attribute type 10 has an invalid length. [ 701.501109][T15820] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4081'. [ 701.527372][T15818] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4080'. [ 701.575138][T15823] netlink: 'syz.4.4080': attribute type 10 has an invalid length. [ 701.636121][T15818] netlink: 'syz.4.4080': attribute type 25 has an invalid length. [ 701.644257][T15818] netlink: 'syz.4.4080': attribute type 25 has an invalid length. [ 701.701965][T15822] netlink: 'syz.3.4083': attribute type 10 has an invalid length. [ 701.731070][T15828] netlink: 'syz.3.4083': attribute type 25 has an invalid length. [ 701.744702][T15828] netlink: 'syz.3.4083': attribute type 25 has an invalid length. [ 701.815633][T12373] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 701.945412][T15833] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 702.375261][T15842] delete_channel: no stack [ 703.864972][T12373] Bluetooth: hci1: command 0x2016 tx timeout [ 706.288990][T15860] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4097'. [ 706.298535][T15858] netlink: 175 bytes leftover after parsing attributes in process `syz.3.4096'. [ 706.317332][T15862] validate_nla: 1 callbacks suppressed [ 706.317348][T15862] netlink: 'syz.3.4096': attribute type 10 has an invalid length. [ 706.646896][T15870] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4098'. [ 706.677062][T15865] netlink: 'syz.0.4099': attribute type 10 has an invalid length. [ 706.695746][T15870] netlink: 'syz.4.4098': attribute type 10 has an invalid length. [ 706.724595][T15865] netlink: 'syz.0.4099': attribute type 25 has an invalid length. [ 706.733873][T15865] netlink: 'syz.0.4099': attribute type 25 has an invalid length. [ 706.745382][T15870] netlink: 'syz.4.4098': attribute type 25 has an invalid length. [ 706.753397][T15870] netlink: 'syz.4.4098': attribute type 25 has an invalid length. [ 707.223979][T15887] netlink: 'syz.1.4109': attribute type 27 has an invalid length. [ 708.425582][T15899] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4113'. [ 708.492997][ T4278] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 709.062807][T15907] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4116'. [ 709.078169][T15909] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4117'. [ 709.090464][T15912] netlink: 'syz.1.4116': attribute type 10 has an invalid length. [ 709.099459][T15915] netlink: 'syz.1.4116': attribute type 25 has an invalid length. [ 709.743328][T15936] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4127'. [ 709.855319][T15940] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4129'. [ 710.430820][T15950] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4133'. [ 710.460364][T15952] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4134'. [ 710.504932][T12373] Bluetooth: hci4: command 0x2016 tx timeout [ 710.612285][ T4278] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 711.203945][T15966] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 712.677853][ T4278] Bluetooth: hci5: command 0x2016 tx timeout [ 712.807498][T15987] __nla_validate_parse: 2 callbacks suppressed [ 712.807531][T15987] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4148'. [ 712.839777][T15991] validate_nla: 14 callbacks suppressed [ 712.839796][T15991] netlink: 'syz.0.4149': attribute type 27 has an invalid length. [ 713.041001][T15996] netlink: 'syz.2.4151': attribute type 27 has an invalid length. [ 713.065882][T15998] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4152'. [ 713.131520][T16005] netlink: 'syz.0.4153': attribute type 27 has an invalid length. [ 713.165884][T15998] netlink: 'syz.4.4152': attribute type 10 has an invalid length. [ 713.178634][T16006] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4155'. [ 713.240351][T15998] netlink: 'syz.4.4152': attribute type 25 has an invalid length. [ 713.262237][T15998] netlink: 'syz.4.4152': attribute type 25 has an invalid length. [ 713.795401][T16026] netlink: 'syz.0.4162': attribute type 17 has an invalid length. [ 713.803596][T16026] netlink: 'syz.0.4162': attribute type 16 has an invalid length. [ 713.816041][T16026] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4162'. [ 713.891505][T16028] FAULT_INJECTION: forcing a failure. [ 713.891505][T16028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.905292][T16028] CPU: 1 PID: 16028 Comm: syz.1.4164 Not tainted syzkaller #0 [ 713.912786][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.922876][T16028] Call Trace: [ 713.926171][T16028] [ 713.929114][T16028] dump_stack_lvl+0x188/0x24e [ 713.933818][T16028] ? show_regs_print_info+0x12/0x12 [ 713.939034][T16028] ? load_image+0x410/0x410 [ 713.943565][T16028] ? __lock_acquire+0x7c40/0x7c40 [ 713.948622][T16028] should_fail_ex+0x390/0x4c0 [ 713.953323][T16028] _copy_from_user+0x2c/0x170 [ 713.958024][T16028] ___sys_sendmsg+0x1c3/0x360 [ 713.962728][T16028] ? __sys_sendmsg+0x2a0/0x2a0 [ 713.967533][T16028] ? __lock_acquire+0x7c40/0x7c40 [ 713.972605][T16028] __se_sys_sendmsg+0x1c3/0x2b0 [ 713.977476][T16028] ? __x64_sys_sendmsg+0x80/0x80 [ 713.982444][T16028] ? lockdep_hardirqs_on+0x94/0x140 [ 713.987656][T16028] do_syscall_64+0x4c/0xa0 [ 713.992091][T16028] ? clear_bhb_loop+0x60/0xb0 [ 713.996801][T16028] ? clear_bhb_loop+0x60/0xb0 [ 714.001496][T16028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.007405][T16028] RIP: 0033:0x7f7928d9de59 [ 714.011836][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.031472][T16028] RSP: 002b:00007f7926fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.039916][T16028] RAX: ffffffffffffffda RBX: 00007f7929026180 RCX: 00007f7928d9de59 [ 714.047904][T16028] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000b [ 714.055897][T16028] RBP: 00007f7926fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 714.063891][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.071884][T16028] R13: 00007f7929026218 R14: 00007f7929026180 R15: 00007ffc2a7b4528 [ 714.079888][T16028] [ 715.294089][T16032] netlink: 'syz.3.4165': attribute type 27 has an invalid length. [ 715.366863][T16031] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4168'. [ 715.393653][T16031] netlink: 'syz.4.4168': attribute type 10 has an invalid length. [ 715.645436][T16045] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4171'. [ 715.715903][T16046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4170'. [ 716.153651][T16064] device syzkaller0 entered promiscuous mode [ 717.295054][T16073] delete_channel: no stack [ 720.226843][T16082] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4183'. [ 720.244938][T16088] validate_nla: 2 callbacks suppressed [ 720.244953][T16088] netlink: 'syz.4.4182': attribute type 27 has an invalid length. [ 720.281111][T16087] netlink: 'syz.0.4183': attribute type 10 has an invalid length. [ 720.315307][ T4278] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 720.538446][T16101] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4200'. [ 720.600872][T16101] netlink: 'syz.0.4200': attribute type 10 has an invalid length. [ 720.666070][T16106] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4191'. [ 720.699614][T16106] netlink: 'syz.2.4191': attribute type 10 has an invalid length. [ 720.958688][T16119] netlink: 'syz.4.4197': attribute type 27 has an invalid length. [ 722.206527][T16127] netlink: 'syz.1.4199': attribute type 10 has an invalid length. [ 722.638516][T16127] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 722.905126][T16134] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4201'. [ 723.011731][T16140] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4205'. [ 723.032358][T16141] netlink: 'syz.4.4206': attribute type 10 has an invalid length. [ 723.130778][T16141] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 723.140772][T16140] netlink: 'syz.1.4205': attribute type 10 has an invalid length. [ 723.336357][T16149] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4209'. [ 723.373420][T16149] netlink: 'syz.1.4209': attribute type 10 has an invalid length. [ 724.427971][T16171] netlink: 'syz.0.4217': attribute type 27 has an invalid length. [ 724.656996][T16174] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4219'. [ 725.291060][T16198] validate_nla: 2 callbacks suppressed [ 725.291096][T16198] netlink: 'syz.1.4228': attribute type 4 has an invalid length. [ 725.324468][T16198] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4228'. [ 725.362379][T16203] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4231'. [ 725.395618][T16203] netlink: 'syz.3.4231': attribute type 10 has an invalid length. [ 725.423277][T16203] netlink: 'syz.3.4231': attribute type 25 has an invalid length. [ 725.452751][T16203] netlink: 'syz.3.4231': attribute type 25 has an invalid length. [ 727.500747][T16214] netlink: 'syz.3.4234': attribute type 27 has an invalid length. [ 727.520031][T16215] device sit0 entered promiscuous mode [ 727.780450][T16219] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4235'. [ 727.829734][T16219] netlink: 'syz.0.4235': attribute type 10 has an invalid length. [ 727.991575][T16228] netlink: 'syz.3.4239': attribute type 27 has an invalid length. [ 728.259333][T16234] netlink: 'syz.0.4241': attribute type 2 has an invalid length. [ 728.295633][T16234] netlink: 'syz.0.4241': attribute type 1 has an invalid length. [ 728.303526][T16234] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4241'. [ 728.568047][T16243] netlink: 'syz.3.4246': attribute type 27 has an invalid length. [ 730.136537][T16253] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4251'. [ 730.205881][T16259] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4252'. [ 730.248425][T16261] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4253'. [ 731.027617][T16281] FAULT_INJECTION: forcing a failure. [ 731.027617][T16281] name failslab, interval 1, probability 0, space 0, times 0 [ 731.114878][T16281] CPU: 0 PID: 16281 Comm: syz.4.4260 Not tainted syzkaller #0 [ 731.122410][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.132475][T16281] Call Trace: [ 731.135764][T16281] [ 731.138699][T16281] dump_stack_lvl+0x188/0x24e [ 731.143397][T16281] ? show_regs_print_info+0x12/0x12 [ 731.148609][T16281] ? load_image+0x410/0x410 [ 731.153123][T16281] ? __lock_acquire+0x7c40/0x7c40 [ 731.158157][T16281] ? rcu_is_watching+0x11/0xa0 [ 731.163021][T16281] ? __alloc_pages+0x290/0x4f0 [ 731.167807][T16281] should_fail_ex+0x390/0x4c0 [ 731.172505][T16281] should_failslab+0x5/0x20 [ 731.177016][T16281] slab_pre_alloc_hook+0x59/0x300 [ 731.182054][T16281] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 731.188061][T16281] __kmem_cache_alloc_node+0x4f/0x270 [ 731.193447][T16281] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 731.199366][T16281] kmalloc_trace+0x26/0xe0 [ 731.203802][T16281] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 731.209535][T16281] ? sctp_stream_interleave_init+0x54/0x90 [ 731.215363][T16281] sctp_association_new+0x15d4/0x2520 [ 731.220834][T16281] sctp_connect_new_asoc+0x2da/0x6a0 [ 731.226150][T16281] ? __sctp_connect+0xd80/0xd80 [ 731.231035][T16281] ? __local_bh_enable_ip+0x136/0x1c0 [ 731.236438][T16281] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 731.242005][T16281] ? security_sctp_bind_connect+0x85/0xb0 [ 731.247754][T16281] sctp_sendmsg+0x1686/0x2940 [ 731.252470][T16281] ? sctp_getsockopt+0x8a0/0x8a0 [ 731.257426][T16281] ? __might_fault+0xa6/0x120 [ 731.262117][T16281] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 731.268560][T16281] ? aa_sock_msg_perm+0x94/0x150 [ 731.273542][T16281] ? inet_sendmsg+0xca/0x2a0 [ 731.278156][T16281] ? inet_send_prepare+0x250/0x250 [ 731.283297][T16281] ____sys_sendmsg+0x5ed/0x9a0 [ 731.288091][T16281] ? __sys_sendmsg_sock+0x30/0x30 [ 731.293132][T16281] ? __import_iovec+0x306/0x510 [ 731.298026][T16281] ? import_iovec+0x6f/0xa0 [ 731.302551][T16281] ___sys_sendmsg+0x2a2/0x360 [ 731.307248][T16281] ? __sys_sendmsg+0x2a0/0x2a0 [ 731.312054][T16281] ? __lock_acquire+0x7c40/0x7c40 [ 731.317125][T16281] __se_sys_sendmsg+0x1c3/0x2b0 [ 731.321996][T16281] ? __x64_sys_sendmsg+0x80/0x80 [ 731.326962][T16281] ? lockdep_hardirqs_on+0x94/0x140 [ 731.332281][T16281] do_syscall_64+0x4c/0xa0 [ 731.336719][T16281] ? clear_bhb_loop+0x60/0xb0 [ 731.341423][T16281] ? clear_bhb_loop+0x60/0xb0 [ 731.346124][T16281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.352079][T16281] RIP: 0033:0x7f1c9699de59 [ 731.356505][T16281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.376125][T16281] RSP: 002b:00007f1c97807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.384554][T16281] RAX: ffffffffffffffda RBX: 00007f1c96c25fa0 RCX: 00007f1c9699de59 [ 731.392537][T16281] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 731.400517][T16281] RBP: 00007f1c97807090 R08: 0000000000000000 R09: 0000000000000000 [ 731.408505][T16281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.416488][T16281] R13: 00007f1c96c26038 R14: 00007f1c96c25fa0 R15: 00007fffa4a0ee98 [ 731.424491][T16281] [ 731.636078][T16293] validate_nla: 2 callbacks suppressed [ 731.636110][T16293] netlink: 'syz.1.4263': attribute type 27 has an invalid length. [ 731.702129][T16292] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4264'. [ 732.628755][T16311] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4269'. [ 732.780970][T16319] netlink: 'syz.0.4274': attribute type 21 has an invalid length. [ 733.006495][T16323] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4275'. [ 733.076122][T16322] netlink: 'syz.3.4276': attribute type 13 has an invalid length. [ 733.104999][T16322] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4276'. [ 733.232833][T16322] erspan0: refused to change device tx_queue_len [ 733.275871][T16323] netlink: 'syz.1.4275': attribute type 10 has an invalid length. [ 733.290793][T16333] netlink: 'syz.1.4275': attribute type 25 has an invalid length. [ 733.321407][T16333] netlink: 'syz.1.4275': attribute type 25 has an invalid length. [ 734.358544][T16337] device syzkaller0 entered promiscuous mode [ 734.617156][T16341] netlink: 'syz.2.4283': attribute type 27 has an invalid length. [ 734.710367][T16343] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4282'. [ 734.755996][T16343] netlink: 'syz.1.4282': attribute type 10 has an invalid length. [ 734.837170][T16347] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4286'. [ 734.862583][T16351] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4287'. [ 734.918472][T16347] netlink: 'syz.0.4286': attribute type 4 has an invalid length. [ 735.120429][T16363] netlink: 'syz.0.4292': attribute type 6 has an invalid length. [ 735.128905][T16363] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4292'. [ 735.322637][T16368] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4294'. [ 735.450586][T16370] device syzkaller0 entered promiscuous mode [ 736.586047][T16382] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4298'. [ 737.029069][T16404] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4309'. [ 737.285846][T16414] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4313'. [ 737.319576][T16414] validate_nla: 5 callbacks suppressed [ 737.319699][T16414] netlink: 'syz.4.4313': attribute type 10 has an invalid length. [ 737.422893][T16420] netlink: 'syz.2.4314': attribute type 27 has an invalid length. [ 737.984263][T16431] delete_channel: no stack [ 738.030766][T16429] netlink: 'syz.0.4329': attribute type 27 has an invalid length. [ 738.030999][T16433] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4320'. [ 738.159382][T16433] netlink: 'syz.2.4320': attribute type 4 has an invalid length. [ 738.251799][T16441] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4323'. [ 738.303089][T16441] netlink: 'syz.0.4323': attribute type 10 has an invalid length. [ 738.323607][T16441] netlink: 'syz.0.4323': attribute type 25 has an invalid length. [ 738.339746][T16441] netlink: 'syz.0.4323': attribute type 25 has an invalid length. [ 738.354766][T16444] netlink: 'syz.2.4324': attribute type 6 has an invalid length. [ 738.385280][T16444] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4324'. [ 738.469528][T16449] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4326'. [ 738.556511][T16451] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4327'. [ 738.595362][T16451] netlink: 'syz.0.4327': attribute type 10 has an invalid length. [ 739.228765][T16464] netlink: 'syz.0.4334': attribute type 27 has an invalid length. [ 739.502882][T16478] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4340'. [ 739.763052][T16489] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4344'. [ 739.982975][T16497] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4347'. [ 741.425801][T16531] FAULT_INJECTION: forcing a failure. [ 741.425801][T16531] name failslab, interval 1, probability 0, space 0, times 0 [ 741.438874][T16531] CPU: 1 PID: 16531 Comm: syz.1.4360 Not tainted syzkaller #0 [ 741.446367][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.456441][T16531] Call Trace: [ 741.459735][T16531] [ 741.462682][T16531] dump_stack_lvl+0x188/0x24e [ 741.467387][T16531] ? show_regs_print_info+0x12/0x12 [ 741.472608][T16531] ? load_image+0x410/0x410 [ 741.477138][T16531] ? __might_sleep+0xd0/0xd0 [ 741.481747][T16531] ? __lock_acquire+0x7c40/0x7c40 [ 741.486802][T16531] should_fail_ex+0x390/0x4c0 [ 741.491502][T16531] should_failslab+0x5/0x20 [ 741.496020][T16531] slab_pre_alloc_hook+0x59/0x300 [ 741.501056][T16531] ? __lock_acquire+0x7c40/0x7c40 [ 741.506087][T16531] ? kvmalloc_node+0x6c/0x180 [ 741.510859][T16531] __kmem_cache_alloc_node+0x4f/0x270 [ 741.516317][T16531] ? schedule_delayed_monitor_work+0x160/0x160 [ 741.522475][T16531] ? kvmalloc_node+0x6c/0x180 [ 741.527146][T16531] __kmalloc_node+0xa2/0x240 [ 741.531745][T16531] kvmalloc_node+0x6c/0x180 [ 741.536245][T16531] bpf_test_run_xdp_live+0x1da/0x1a90 [ 741.541619][T16531] ? 0xffffffffa0004140 [ 741.545765][T16531] ? text_poke_copy+0x7b/0x90 [ 741.550529][T16531] ? 0xffffffffa0004140 [ 741.554678][T16531] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 741.560641][T16531] ? xdp_convert_md_to_buff+0x330/0x330 [ 741.566204][T16531] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 741.572445][T16531] ? bpf_test_init+0x119/0x140 [ 741.577198][T16531] ? xdp_convert_md_to_buff+0x5b/0x330 [ 741.582649][T16531] bpf_prog_test_run_xdp+0x757/0xf80 [ 741.587928][T16531] ? __lock_acquire+0x7c40/0x7c40 [ 741.592955][T16531] ? dev_put+0x80/0x80 [ 741.597029][T16531] ? dev_put+0x80/0x80 [ 741.601177][T16531] bpf_prog_test_run+0x31c/0x390 [ 741.606115][T16531] __sys_bpf+0x62b/0x780 [ 741.610353][T16531] ? bpf_link_show_fdinfo+0x380/0x380 [ 741.615730][T16531] ? lock_chain_count+0x20/0x20 [ 741.620583][T16531] __x64_sys_bpf+0x78/0x90 [ 741.624997][T16531] do_syscall_64+0x4c/0xa0 [ 741.629411][T16531] ? clear_bhb_loop+0x60/0xb0 [ 741.634081][T16531] ? clear_bhb_loop+0x60/0xb0 [ 741.638752][T16531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.644639][T16531] RIP: 0033:0x7f7928d9de59 [ 741.649046][T16531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.668646][T16531] RSP: 002b:00007f7929b89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.677050][T16531] RAX: ffffffffffffffda RBX: 00007f7929025fa0 RCX: 00007f7928d9de59 [ 741.685024][T16531] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 741.692985][T16531] RBP: 00007f7929b89090 R08: 0000000000000000 R09: 0000000000000000 [ 741.700944][T16531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.708907][T16531] R13: 00007f7929026038 R14: 00007f7929025fa0 R15: 00007ffc2a7b4528 [ 741.716881][T16531] [ 742.132797][T16549] __nla_validate_parse: 4 callbacks suppressed [ 742.132836][T16549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4366'. [ 743.391633][T16573] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4376'. [ 743.436539][T16574] validate_nla: 16 callbacks suppressed [ 743.436561][T16574] netlink: 'syz.1.4375': attribute type 27 has an invalid length. [ 744.370056][T16583] netlink: 'syz.0.4378': attribute type 27 has an invalid length. [ 744.388417][T16586] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4379'. [ 744.445514][T16590] netlink: 'syz.4.4379': attribute type 10 has an invalid length. [ 744.477364][T16586] netlink: 'syz.4.4379': attribute type 25 has an invalid length. [ 744.538256][T16586] netlink: 'syz.4.4379': attribute type 25 has an invalid length. [ 744.925194][T16601] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4386'. [ 744.954739][T16601] netlink: 'syz.3.4386': attribute type 1 has an invalid length. [ 745.791710][T16612] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4391'. [ 746.039948][T16621] netlink: 'syz.2.4393': attribute type 27 has an invalid length. [ 746.061016][T16626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4396'. [ 746.105535][T16626] netlink: 'syz.0.4396': attribute type 10 has an invalid length. [ 746.116316][T16625] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4395'. [ 746.131711][T16626] netlink: 'syz.0.4396': attribute type 25 has an invalid length. [ 746.150767][T16626] netlink: 'syz.0.4396': attribute type 25 has an invalid length. [ 746.753842][T16644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4403'. [ 747.111634][T16664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4411'. [ 747.157593][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.163947][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.864650][T16685] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4422'. [ 748.172803][T16699] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4428'. [ 749.516197][T16736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4440'. [ 749.552749][T16736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4440'. [ 749.580067][T16741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4440'. [ 749.605328][T16740] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4441'. [ 749.628324][T16738] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4438'. [ 749.639497][T16736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4440'. [ 749.674479][T16740] validate_nla: 17 callbacks suppressed [ 749.674514][T16740] netlink: 'syz.3.4441': attribute type 10 has an invalid length. [ 749.716186][T16738] netlink: 'syz.4.4438': attribute type 10 has an invalid length. [ 749.738345][T16750] netlink: 'syz.3.4441': attribute type 25 has an invalid length. [ 749.765491][T16750] netlink: 'syz.3.4441': attribute type 25 has an invalid length. [ 749.784452][T16743] netlink: 'syz.2.4442': attribute type 27 has an invalid length. [ 749.818307][T16738] netlink: 'syz.4.4438': attribute type 25 has an invalid length. [ 749.850350][T16738] netlink: 'syz.4.4438': attribute type 25 has an invalid length. [ 750.609304][T16777] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 750.625959][T16777] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 751.089922][T16781] netlink: 'syz.4.4455': attribute type 4 has an invalid length. [ 751.149277][T16781] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4455'. [ 751.432191][T16789] netlink: 'syz.3.4456': attribute type 21 has an invalid length. [ 751.559180][T16791] netlink: 'syz.0.4457': attribute type 27 has an invalid length. [ 751.579911][T16794] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4458'. [ 752.007726][T16808] FAULT_INJECTION: forcing a failure. [ 752.007726][T16808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.058284][T16808] CPU: 1 PID: 16808 Comm: syz.2.4465 Not tainted syzkaller #0 [ 752.065802][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 752.075864][T16808] Call Trace: [ 752.079142][T16808] [ 752.082081][T16808] dump_stack_lvl+0x188/0x24e [ 752.086761][T16808] ? show_regs_print_info+0x12/0x12 [ 752.091956][T16808] ? load_image+0x410/0x410 [ 752.096453][T16808] ? __lock_acquire+0x7c40/0x7c40 [ 752.101478][T16808] should_fail_ex+0x390/0x4c0 [ 752.106164][T16808] _copy_from_user+0x2c/0x170 [ 752.110837][T16808] __sys_bpf+0x2ea/0x780 [ 752.115083][T16808] ? bpf_link_show_fdinfo+0x380/0x380 [ 752.120464][T16808] ? lock_chain_count+0x20/0x20 [ 752.125402][T16808] __x64_sys_bpf+0x78/0x90 [ 752.129815][T16808] do_syscall_64+0x4c/0xa0 [ 752.134227][T16808] ? clear_bhb_loop+0x60/0xb0 [ 752.138901][T16808] ? clear_bhb_loop+0x60/0xb0 [ 752.143581][T16808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.149468][T16808] RIP: 0033:0x7fa9e5d9de59 [ 752.153874][T16808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.173474][T16808] RSP: 002b:00007fa9e3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 752.181881][T16808] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9de59 [ 752.189846][T16808] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 000000000000000d [ 752.197806][T16808] RBP: 00007fa9e3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 752.205766][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.213775][T16808] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffe3da33958 [ 752.221914][T16808] [ 752.983163][T16840] __nla_validate_parse: 1 callbacks suppressed [ 752.983207][T16840] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.4477'. [ 753.167429][T16843] FAULT_INJECTION: forcing a failure. [ 753.167429][T16843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.181319][T16843] CPU: 1 PID: 16843 Comm: syz.3.4478 Not tainted syzkaller #0 [ 753.188817][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 753.198885][T16843] Call Trace: [ 753.202190][T16843] [ 753.205153][T16843] dump_stack_lvl+0x188/0x24e [ 753.209857][T16843] ? show_regs_print_info+0x12/0x12 [ 753.215079][T16843] ? load_image+0x410/0x410 [ 753.219606][T16843] ? __lock_acquire+0x7c40/0x7c40 [ 753.224649][T16843] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 753.230826][T16843] should_fail_ex+0x390/0x4c0 [ 753.235535][T16843] _copy_to_user+0x2c/0x130 [ 753.240234][T16843] simple_read_from_buffer+0xe3/0x150 [ 753.245635][T16843] proc_fail_nth_read+0x1a6/0x220 [ 753.250683][T16843] ? proc_fault_inject_write+0x310/0x310 [ 753.256345][T16843] ? fsnotify_perm+0x248/0x550 [ 753.261214][T16843] ? proc_fault_inject_write+0x310/0x310 [ 753.266872][T16843] vfs_read+0x2db/0x960 [ 753.271058][T16843] ? kernel_read+0x1e0/0x1e0 [ 753.275677][T16843] ? __fget_files+0x28/0x460 [ 753.280292][T16843] ? __fget_files+0x3fc/0x460 [ 753.285010][T16843] ? __fdget_pos+0x2ae/0x360 [ 753.289623][T16843] ? ksys_read+0x70/0x260 [ 753.293982][T16843] ksys_read+0x14d/0x260 [ 753.298248][T16843] ? vfs_write+0x9a0/0x9a0 [ 753.302688][T16843] ? syscall_enter_from_user_mode+0x2a/0x80 [ 753.308615][T16843] do_syscall_64+0x4c/0xa0 [ 753.313059][T16843] ? clear_bhb_loop+0x60/0xb0 [ 753.317762][T16843] ? clear_bhb_loop+0x60/0xb0 [ 753.322459][T16843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.328370][T16843] RIP: 0033:0x7fbd47f5e68e [ 753.332801][T16843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.352426][T16843] RSP: 002b:00007fbd48dbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.360955][T16843] RAX: ffffffffffffffda RBX: 00007fbd48dbf6c0 RCX: 00007fbd47f5e68e [ 753.368949][T16843] RDX: 000000000000000f RSI: 00007fbd48dbf0a0 RDI: 0000000000000008 [ 753.376944][T16843] RBP: 00007fbd48dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 753.384936][T16843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.392941][T16843] R13: 00007fbd48226038 R14: 00007fbd48225fa0 R15: 00007ffdce582f58 [ 753.400956][T16843] [ 755.337979][T16884] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4490'. [ 755.377359][T16884] validate_nla: 8 callbacks suppressed [ 755.377375][T16884] netlink: 'syz.2.4490': attribute type 10 has an invalid length. [ 755.473915][T16892] netlink: 'syz.2.4490': attribute type 25 has an invalid length. [ 755.507129][T16892] netlink: 'syz.2.4490': attribute type 25 has an invalid length. [ 755.767047][T16900] netlink: 'syz.2.4497': attribute type 21 has an invalid length. [ 755.811640][T16900] netlink: 'syz.2.4497': attribute type 10 has an invalid length. [ 756.368116][T16916] netlink: 'syz.0.4505': attribute type 10 has an invalid length. [ 756.489574][T16924] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4508'. [ 756.559312][T16924] netlink: 'syz.2.4508': attribute type 10 has an invalid length. [ 756.602749][T16924] netlink: 'syz.2.4508': attribute type 25 has an invalid length. [ 756.614161][T16924] netlink: 'syz.2.4508': attribute type 25 has an invalid length. [ 756.958606][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4513'. [ 756.979257][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4513'. [ 757.006064][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4513'. [ 757.021823][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4513'. [ 757.368703][T16948] netlink: 175 bytes leftover after parsing attributes in process `syz.3.4520'. [ 757.418845][T16948] netlink: 'syz.3.4520': attribute type 10 has an invalid length. [ 757.478469][T16956] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4521'. [ 758.619112][T16990] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4535'. [ 759.667385][T17007] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4539'. [ 761.354476][T17036] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4548'. [ 761.403806][T17036] validate_nla: 7 callbacks suppressed [ 761.403876][T17036] netlink: 'syz.0.4548': attribute type 10 has an invalid length. [ 761.771446][T17047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4552'. [ 761.815418][T17052] netlink: 'syz.4.4552': attribute type 10 has an invalid length. [ 761.920800][T17047] netlink: 'syz.4.4552': attribute type 25 has an invalid length. [ 761.945256][T17047] netlink: 'syz.4.4552': attribute type 25 has an invalid length. [ 762.105991][T17055] netlink: 'syz.2.4554': attribute type 27 has an invalid length. [ 764.190957][T17070] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4568'. [ 764.276316][T17070] netlink: 'syz.3.4568': attribute type 10 has an invalid length. [ 764.328498][T17070] netlink: 'syz.3.4568': attribute type 25 has an invalid length. [ 764.339101][T17070] netlink: 'syz.3.4568': attribute type 25 has an invalid length. [ 764.539099][T17078] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4563'. [ 764.589043][T17078] netlink: 'syz.1.4563': attribute type 10 has an invalid length. [ 764.621390][T17084] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4565'. [ 764.851694][T17087] can: request_module (can-proto-0) failed. [ 764.939505][T17095] netlink: 'syz.4.4571': attribute type 27 has an invalid length. [ 767.755194][T17114] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4579'. [ 767.795760][T17114] netlink: 'syz.0.4579': attribute type 10 has an invalid length. [ 768.052990][T17127] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4584'. [ 768.112280][T17127] netlink: 'syz.0.4584': attribute type 10 has an invalid length. [ 768.116651][T17130] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4585'. [ 768.129319][T17127] netlink: 'syz.0.4584': attribute type 25 has an invalid length. [ 768.142836][T17127] netlink: 'syz.0.4584': attribute type 25 has an invalid length. [ 768.340794][T17135] netlink: 'syz.0.4587': attribute type 27 has an invalid length. [ 768.703360][T17147] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4593'. [ 768.746023][T17147] netlink: 'syz.0.4593': attribute type 10 has an invalid length. [ 768.792766][T17147] netlink: 'syz.0.4593': attribute type 25 has an invalid length. [ 768.819515][T17147] netlink: 'syz.0.4593': attribute type 25 has an invalid length. [ 768.961081][T17153] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4594'. [ 768.982478][T17153] netlink: 'syz.2.4594': attribute type 10 has an invalid length. [ 769.159044][T17161] netlink: 'syz.1.4600': attribute type 27 has an invalid length. [ 769.260946][T17164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4602'. [ 769.654289][T17184] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4611'. [ 769.816900][T17187] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4612'. [ 770.184727][T17201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4618'. [ 770.520997][T17210] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4622'. [ 771.033084][T17233] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.4629'. [ 771.095115][T17233] netlink: zone id is out of range [ 771.169849][T17233] netlink: zone id is out of range [ 771.175729][T17233] netlink: zone id is out of range [ 771.181229][T17233] netlink: zone id is out of range [ 771.188607][T17237] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.4633'. [ 771.269709][T17233] netlink: zone id is out of range [ 771.286305][T17233] netlink: zone id is out of range [ 771.363161][T17233] netlink: zone id is out of range [ 771.446947][T17233] netlink: zone id is out of range [ 771.508085][T17233] netlink: zone id is out of range [ 771.547344][T17233] netlink: zone id is out of range [ 771.864523][T17249] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4638'. [ 772.603768][T17263] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4645'. [ 772.835378][T17274] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4649'. [ 773.254482][T17286] validate_nla: 17 callbacks suppressed [ 773.254572][T17286] netlink: 'syz.3.4653': attribute type 10 has an invalid length. [ 773.340575][T17290] netlink: 'syz.1.4656': attribute type 27 has an invalid length. [ 773.375252][T17294] netlink: 'syz.2.4658': attribute type 10 has an invalid length. [ 773.413969][T17294] netlink: 'syz.2.4658': attribute type 25 has an invalid length. [ 773.438358][T17294] netlink: 'syz.2.4658': attribute type 25 has an invalid length. [ 773.724000][T17302] netlink: 'syz.2.4661': attribute type 10 has an invalid length. [ 774.021903][T17315] netlink: 'syz.1.4666': attribute type 10 has an invalid length. [ 774.074630][T17315] netlink: 'syz.1.4666': attribute type 25 has an invalid length. [ 774.099155][T17315] netlink: 'syz.1.4666': attribute type 25 has an invalid length. [ 774.840513][T17332] netlink: 'syz.0.4672': attribute type 27 has an invalid length. [ 774.881196][T17333] __nla_validate_parse: 6 callbacks suppressed [ 774.881231][T17333] netlink: 175 bytes leftover after parsing attributes in process `syz.3.4670'. [ 775.538391][T17352] IPv6: pim6reg1: Disabled Multicast RS [ 776.436964][T17378] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4689'. [ 776.469850][T17379] netlink: 175 bytes leftover after parsing attributes in process `syz.3.4687'. [ 777.546333][T17400] can: request_module (can-proto-0) failed. [ 778.862673][T17416] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4702'. [ 778.923239][T17416] validate_nla: 10 callbacks suppressed [ 778.923274][T17416] netlink: 'syz.2.4702': attribute type 10 has an invalid length. [ 778.968770][T17416] netlink: 'syz.2.4702': attribute type 25 has an invalid length. [ 779.015375][T17416] netlink: 'syz.2.4702': attribute type 25 has an invalid length. [ 779.089601][T17420] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4704'. [ 779.122588][T17425] netlink: 'syz.1.4704': attribute type 10 has an invalid length. [ 779.799647][T17449] netlink: 'syz.1.4715': attribute type 27 has an invalid length. [ 780.138594][T17464] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4718'. [ 780.150774][T17464] netlink: 'syz.0.4718': attribute type 10 has an invalid length. [ 780.723201][T17466] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4719'. [ 780.770436][T17466] netlink: 'syz.3.4719': attribute type 10 has an invalid length. [ 780.790490][T17466] netlink: 'syz.3.4719': attribute type 25 has an invalid length. [ 780.817348][T17466] netlink: 'syz.3.4719': attribute type 25 has an invalid length. [ 781.480264][T17494] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4729'. [ 781.516088][T17494] net_ratelimit: 3 callbacks suppressed [ 781.516105][T17494] openvswitch: netlink: Message has 6 unknown bytes. [ 781.659628][T17499] netlink: 'syz.3.4731': attribute type 27 has an invalid length. [ 781.948206][T17504] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4733'. [ 781.979619][T17509] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4735'. [ 782.930038][T17512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4736'. [ 783.661796][T17556] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4749'. [ 784.003537][T17568] FAULT_INJECTION: forcing a failure. [ 784.003537][T17568] name failslab, interval 1, probability 0, space 0, times 0 [ 784.115101][T17568] CPU: 1 PID: 17568 Comm: syz.2.4756 Not tainted syzkaller #0 [ 784.122626][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.132699][T17568] Call Trace: [ 784.135990][T17568] [ 784.138934][T17568] dump_stack_lvl+0x188/0x24e [ 784.143641][T17568] ? show_regs_print_info+0x12/0x12 [ 784.148865][T17568] ? load_image+0x410/0x410 [ 784.153389][T17568] ? __might_sleep+0xd0/0xd0 [ 784.158031][T17568] ? __lock_acquire+0x7c40/0x7c40 [ 784.163087][T17568] should_fail_ex+0x390/0x4c0 [ 784.167786][T17568] should_failslab+0x5/0x20 [ 784.172315][T17568] slab_pre_alloc_hook+0x59/0x300 [ 784.177404][T17568] ? __get_vm_area_node+0x122/0x330 [ 784.182634][T17568] __kmem_cache_alloc_node+0x4f/0x270 [ 784.188026][T17568] ? __get_vm_area_node+0x122/0x330 [ 784.193244][T17568] kmalloc_node_trace+0x22/0xe0 [ 784.198124][T17568] __get_vm_area_node+0x122/0x330 [ 784.203256][T17568] __vmalloc_node_range+0x357/0x1380 [ 784.208551][T17568] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.214115][T17568] ? aa_get_newest_label+0xf9/0x5b0 [ 784.219309][T17568] ? free_vm_area+0x50/0x50 [ 784.223805][T17568] ? end_current_label_crit_section+0x170/0x170 [ 784.230043][T17568] ? __lock_acquire+0x7c40/0x7c40 [ 784.235069][T17568] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.240611][T17568] __vmalloc+0x76/0x80 [ 784.244674][T17568] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.250220][T17568] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.255683][T17568] ? bpf_prog_alloc+0x13/0x1b0 [ 784.260459][T17568] bpf_prog_alloc+0x1c/0x1b0 [ 784.265049][T17568] bpf_prog_load+0x7d4/0x1530 [ 784.269738][T17568] ? map_freeze+0x390/0x390 [ 784.274247][T17568] ? __might_fault+0xa6/0x120 [ 784.278933][T17568] ? __might_fault+0xa6/0x120 [ 784.283604][T17568] ? __might_fault+0xc2/0x120 [ 784.288277][T17568] ? __might_fault+0xa6/0x120 [ 784.292949][T17568] ? bpf_lsm_bpf+0x5/0x10 [ 784.297274][T17568] ? security_bpf+0x7a/0xa0 [ 784.301776][T17568] __sys_bpf+0x5b8/0x780 [ 784.306020][T17568] ? bpf_link_show_fdinfo+0x380/0x380 [ 784.311397][T17568] ? lock_chain_count+0x20/0x20 [ 784.316268][T17568] __x64_sys_bpf+0x78/0x90 [ 784.320707][T17568] do_syscall_64+0x4c/0xa0 [ 784.325129][T17568] ? clear_bhb_loop+0x60/0xb0 [ 784.329810][T17568] ? clear_bhb_loop+0x60/0xb0 [ 784.334506][T17568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.340408][T17568] RIP: 0033:0x7fa9e5d9de59 [ 784.344828][T17568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.364459][T17568] RSP: 002b:00007fa9e3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.372866][T17568] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9de59 [ 784.380834][T17568] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 784.388798][T17568] RBP: 00007fa9e3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 784.396770][T17568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.404729][T17568] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffe3da33958 [ 784.412702][T17568] [ 784.444461][T17568] syz.2.4756: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 784.499258][T17568] CPU: 0 PID: 17568 Comm: syz.2.4756 Not tainted syzkaller #0 [ 784.506784][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.516861][T17568] Call Trace: [ 784.520167][T17568] [ 784.523112][T17568] dump_stack_lvl+0x188/0x24e [ 784.527815][T17568] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 784.534248][T17568] ? show_regs_print_info+0x12/0x12 [ 784.539470][T17568] ? load_image+0x410/0x410 [ 784.543996][T17568] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 784.550436][T17568] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 784.556962][T17568] warn_alloc+0x242/0x330 [ 784.561410][T17568] ? __get_vm_area_node+0x122/0x330 [ 784.566637][T17568] ? zone_watermark_ok_safe+0x270/0x270 [ 784.572208][T17568] ? rcu_is_watching+0x11/0xa0 [ 784.577002][T17568] ? __get_vm_area_node+0x318/0x330 [ 784.582226][T17568] __vmalloc_node_range+0x37c/0x1380 [ 784.587555][T17568] ? aa_get_newest_label+0xf9/0x5b0 [ 784.592778][T17568] ? free_vm_area+0x50/0x50 [ 784.597298][T17568] ? end_current_label_crit_section+0x170/0x170 [ 784.603542][T17568] ? __lock_acquire+0x7c40/0x7c40 [ 784.608567][T17568] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.614110][T17568] __vmalloc+0x76/0x80 [ 784.618174][T17568] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.623799][T17568] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 784.629162][T17568] ? bpf_prog_alloc+0x13/0x1b0 [ 784.633922][T17568] bpf_prog_alloc+0x1c/0x1b0 [ 784.638521][T17568] bpf_prog_load+0x7d4/0x1530 [ 784.643203][T17568] ? map_freeze+0x390/0x390 [ 784.647701][T17568] ? __might_fault+0xa6/0x120 [ 784.652378][T17568] ? __might_fault+0xa6/0x120 [ 784.657046][T17568] ? __might_fault+0xc2/0x120 [ 784.661710][T17568] ? __might_fault+0xa6/0x120 [ 784.666378][T17568] ? bpf_lsm_bpf+0x5/0x10 [ 784.670709][T17568] ? security_bpf+0x7a/0xa0 [ 784.675209][T17568] __sys_bpf+0x5b8/0x780 [ 784.679535][T17568] ? bpf_link_show_fdinfo+0x380/0x380 [ 784.684913][T17568] ? lock_chain_count+0x20/0x20 [ 784.689764][T17568] __x64_sys_bpf+0x78/0x90 [ 784.694183][T17568] do_syscall_64+0x4c/0xa0 [ 784.698595][T17568] ? clear_bhb_loop+0x60/0xb0 [ 784.703268][T17568] ? clear_bhb_loop+0x60/0xb0 [ 784.707939][T17568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.713830][T17568] RIP: 0033:0x7fa9e5d9de59 [ 784.718236][T17568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.737832][T17568] RSP: 002b:00007fa9e3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.746247][T17568] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9de59 [ 784.754211][T17568] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 784.762173][T17568] RBP: 00007fa9e3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 784.770135][T17568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.778096][T17568] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffe3da33958 [ 784.786069][T17568] [ 784.790249][T17583] validate_nla: 8 callbacks suppressed [ 784.790261][T17583] netlink: 'syz.4.4760': attribute type 21 has an invalid length. [ 784.806335][T17568] Mem-Info: [ 784.815730][T17568] active_anon:16463 inactive_anon:0 isolated_anon:0 [ 784.815730][T17568] active_file:23639 inactive_file:40245 isolated_file:0 [ 784.815730][T17568] unevictable:768 dirty:273 writeback:0 [ 784.815730][T17568] slab_reclaimable:21412 slab_unreclaimable:98718 [ 784.815730][T17568] mapped:40925 shmem:11527 pagetables:670 [ 784.815730][T17568] sec_pagetables:0 bounce:0 [ 784.815730][T17568] kernel_misc_reclaimable:0 [ 784.815730][T17568] free:1304414 free_pcp:6755 free_cma:0 [ 784.816658][T17583] netlink: 'syz.4.4760': attribute type 2 has an invalid length. [ 784.874983][T17568] Node 0 active_anon:65996kB inactive_anon:0kB active_file:94556kB inactive_file:160780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163720kB dirty:1092kB writeback:0kB shmem:44640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10424kB pagetables:2752kB sec_pagetables:0kB all_unreclaimable? no [ 784.961233][T17583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4760'. [ 784.970586][T17568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 785.004344][T17568] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.042744][T17585] netlink: 'syz.0.4759': attribute type 27 has an invalid length. [ 785.086481][T17568] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 785.098498][T17568] Node 0 DMA32 free:1295308kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:68896kB inactive_anon:0kB active_file:94556kB inactive_file:160780kB unevictable:1536kB writepending:1092kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:12724kB local_pcp:4768kB free_cma:0kB [ 785.202549][T17568] lowmem_reserve[]: 0 0 1 1 1 [ 785.219942][T17568] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.315509][T17568] lowmem_reserve[]: 0 0 0 0 0 [ 785.341031][T17568] Node 1 Normal free:3903772kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15168kB local_pcp:9216kB free_cma:0kB [ 785.475032][T17568] lowmem_reserve[]: 0 0 0 0 0 [ 785.483350][T17568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 785.496357][T17598] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4764'. [ 785.505970][T17598] netlink: 'syz.0.4764': attribute type 10 has an invalid length. [ 785.536373][T17602] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4763'. [ 785.567052][T17568] Node 0 DMA32: 4*4kB (UME) 15*8kB (UME) 13*16kB (UE) 2534*32kB (UME) 1754*64kB (UME) 661*128kB (UME) 303*256kB (UM) 208*512kB (UM) 73*1024kB (UME) 42*2048kB (UME) 162*4096kB (UM) = 1286680kB [ 785.622391][T17568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 785.725867][T17568] Node 1 Normal: 229*4kB (UME) 63*8kB (UME) 29*16kB (UME) 76*32kB (UME) 43*64kB (UME) 23*128kB (UME) 8*256kB (U) 5*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3903772kB [ 785.825624][T17568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.857970][T17568] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.945936][T17568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.029965][T17568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 786.110204][T17568] 80200 total pagecache pages [ 786.156021][T17568] 0 pages in swap cache [ 786.160241][T17568] Free swap = 124996kB [ 786.165292][T17616] netlink: 'syz.3.4772': attribute type 27 has an invalid length. [ 786.234438][T17568] Total swap = 124996kB [ 786.285517][T17568] 2097051 pages RAM [ 786.289401][T17568] 0 pages HighMem/MovableOnly [ 786.294102][T17568] 415222 pages reserved [ 786.365052][T17568] 0 pages cma reserved [ 786.484385][T17625] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4775'. [ 786.549985][T17625] netlink: 'syz.1.4775': attribute type 10 has an invalid length. [ 786.587435][T17625] netlink: 'syz.1.4775': attribute type 25 has an invalid length. [ 786.615118][T17625] netlink: 'syz.1.4775': attribute type 25 has an invalid length. [ 786.636212][T17630] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4778'. [ 786.651000][T17630] netlink: 'syz.0.4778': attribute type 10 has an invalid length. [ 786.729265][T17637] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.736781][T17637] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.770460][T17633] netlink: 'syz.2.4777': attribute type 1 has an invalid length. [ 786.812016][T17633] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4777'. [ 787.080161][T17652] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4783'. [ 787.580064][T17668] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4790'. [ 787.605872][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 787.632010][T17668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.671564][T17671] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4791'. [ 788.177140][T17686] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4797'. [ 788.213053][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4798'. [ 788.433844][T17697] FAULT_INJECTION: forcing a failure. [ 788.433844][T17697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.467287][T17697] CPU: 1 PID: 17697 Comm: syz.2.4800 Not tainted syzkaller #0 [ 788.474820][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.484898][T17697] Call Trace: [ 788.488194][T17697] [ 788.491147][T17697] dump_stack_lvl+0x188/0x24e [ 788.495858][T17697] ? show_regs_print_info+0x12/0x12 [ 788.501088][T17697] ? load_image+0x410/0x410 [ 788.505636][T17697] ? __lock_acquire+0x7c40/0x7c40 [ 788.510702][T17697] should_fail_ex+0x390/0x4c0 [ 788.515412][T17697] _copy_from_iter+0x1c0/0x1130 [ 788.520297][T17697] ? copyout_mc+0x110/0x110 [ 788.524830][T17697] ? copyout_mc+0x110/0x110 [ 788.529349][T17697] ? __virt_addr_valid+0x188/0x540 [ 788.534490][T17697] ? page_copy_sane+0x194/0x390 [ 788.539366][T17697] copy_page_from_iter+0x77/0x100 [ 788.544419][T17697] skb_copy_datagram_from_iter+0x2c5/0x6b0 [ 788.550257][T17697] unix_stream_sendmsg+0x4d5/0xa70 [ 788.555408][T17697] ? unix_show_fdinfo+0x2c0/0x2c0 [ 788.560458][T17697] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 788.566907][T17697] ? apparmor_socket_sendmsg+0x8a/0x330 [ 788.572493][T17697] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 788.577803][T17697] ? security_socket_sendmsg+0x7c/0xa0 [ 788.583296][T17697] sock_write_iter+0x2d5/0x3e0 [ 788.588094][T17697] ? sock_read_iter+0x3a0/0x3a0 [ 788.592981][T17697] ? common_file_perm+0x171/0x1c0 [ 788.598050][T17697] vfs_write+0x482/0x9a0 [ 788.602324][T17697] ? file_end_write+0x250/0x250 [ 788.607208][T17697] ? __fget_files+0x3fc/0x460 [ 788.611920][T17697] ? __fdget_pos+0x1d4/0x360 [ 788.616533][T17697] ? ksys_write+0x70/0x260 [ 788.620981][T17697] ksys_write+0x14d/0x260 [ 788.625387][T17697] ? __ia32_sys_read+0x80/0x80 [ 788.630172][T17697] ? lockdep_hardirqs_on+0x94/0x140 [ 788.635388][T17697] do_syscall_64+0x4c/0xa0 [ 788.639826][T17697] ? clear_bhb_loop+0x60/0xb0 [ 788.644524][T17697] ? clear_bhb_loop+0x60/0xb0 [ 788.649239][T17697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.655152][T17697] RIP: 0033:0x7fa9e5d9de59 [ 788.659587][T17697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.679222][T17697] RSP: 002b:00007fa9e3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.687668][T17697] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9de59 [ 788.695662][T17697] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 788.703659][T17697] RBP: 00007fa9e3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 788.711657][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.719654][T17697] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffe3da33958 [ 788.727670][T17697] [ 789.579826][T17725] FAULT_INJECTION: forcing a failure. [ 789.579826][T17725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.607823][T17725] CPU: 0 PID: 17725 Comm: syz.4.4811 Not tainted syzkaller #0 [ 789.615348][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 789.625509][T17725] Call Trace: [ 789.628800][T17725] [ 789.631740][T17725] dump_stack_lvl+0x188/0x24e [ 789.636448][T17725] ? show_regs_print_info+0x12/0x12 [ 789.641674][T17725] ? load_image+0x410/0x410 [ 789.646206][T17725] ? __lock_acquire+0x7c40/0x7c40 [ 789.651265][T17725] should_fail_ex+0x390/0x4c0 [ 789.655976][T17725] _copy_from_user+0x2c/0x170 [ 789.660678][T17725] __sys_bpf+0x2ea/0x780 [ 789.664945][T17725] ? bpf_link_show_fdinfo+0x380/0x380 [ 789.670356][T17725] ? lock_chain_count+0x20/0x20 [ 789.675230][T17725] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 789.681332][T17725] __x64_sys_bpf+0x78/0x90 [ 789.685779][T17725] do_syscall_64+0x4c/0xa0 [ 789.690219][T17725] ? clear_bhb_loop+0x60/0xb0 [ 789.694912][T17725] ? clear_bhb_loop+0x60/0xb0 [ 789.699607][T17725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.705520][T17725] RIP: 0033:0x7f1c9699de59 [ 789.709953][T17725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.729582][T17725] RSP: 002b:00007f1c97807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 789.738037][T17725] RAX: ffffffffffffffda RBX: 00007f1c96c25fa0 RCX: 00007f1c9699de59 [ 789.746040][T17725] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 789.754036][T17725] RBP: 00007f1c97807090 R08: 0000000000000000 R09: 0000000000000000 [ 789.762027][T17725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.770016][T17725] R13: 00007f1c96c26038 R14: 00007f1c96c25fa0 R15: 00007fffa4a0ee98 [ 789.778028][T17725] [ 790.026833][T17744] validate_nla: 12 callbacks suppressed [ 790.026852][T17744] netlink: 'syz.0.4818': attribute type 2 has an invalid length. [ 790.067582][T17742] netlink: 'syz.3.4814': attribute type 1 has an invalid length. [ 790.090848][T17748] netlink: 'syz.3.4814': attribute type 29 has an invalid length. [ 790.195344][T17748] netlink: 'syz.3.4814': attribute type 29 has an invalid length. [ 790.401200][T17754] netlink: 'syz.1.4820': attribute type 10 has an invalid length. [ 790.588580][T17758] netlink: 'syz.0.4821': attribute type 27 has an invalid length. [ 790.603915][T17758] __nla_validate_parse: 4 callbacks suppressed [ 790.603947][T17758] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4821'. [ 790.622239][T17759] netlink: 'syz.4.4822': attribute type 27 has an invalid length. [ 790.980065][T17766] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4824'. [ 791.129644][T17766] netlink: 'syz.3.4824': attribute type 10 has an invalid length. [ 791.226578][T17766] netlink: 'syz.3.4824': attribute type 25 has an invalid length. [ 791.288769][T17766] netlink: 'syz.3.4824': attribute type 25 has an invalid length. [ 791.659112][T17790] FAULT_INJECTION: forcing a failure. [ 791.659112][T17790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.733686][T17790] CPU: 0 PID: 17790 Comm: syz.3.4832 Not tainted syzkaller #0 [ 791.741219][T17790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.751299][T17790] Call Trace: [ 791.754588][T17790] [ 791.757531][T17790] dump_stack_lvl+0x188/0x24e [ 791.762236][T17790] ? lockdep_hardirqs_on+0x94/0x140 [ 791.767451][T17790] ? show_regs_print_info+0x12/0x12 [ 791.772676][T17790] ? audit_tree_destroy_watch+0x20/0x20 [ 791.778334][T17790] should_fail_ex+0x390/0x4c0 [ 791.783038][T17790] _copy_to_user+0x2c/0x130 [ 791.787556][T17790] simple_read_from_buffer+0xe3/0x150 [ 791.792951][T17790] proc_fail_nth_read+0x1a6/0x220 [ 791.797997][T17790] ? proc_fault_inject_write+0x310/0x310 [ 791.803824][T17790] ? fsnotify_perm+0x248/0x550 [ 791.808597][T17790] ? proc_fault_inject_write+0x310/0x310 [ 791.814245][T17790] vfs_read+0x2db/0x960 [ 791.818427][T17790] ? kernel_read+0x1e0/0x1e0 [ 791.823038][T17790] ? __fget_files+0x28/0x460 [ 791.827644][T17790] ? __fget_files+0x3fc/0x460 [ 791.832343][T17790] ? __fdget_pos+0x2ae/0x360 [ 791.836949][T17790] ? ksys_read+0x70/0x260 [ 791.841293][T17790] ksys_read+0x14d/0x260 [ 791.845558][T17790] ? vfs_write+0x9a0/0x9a0 [ 791.849994][T17790] ? lockdep_hardirqs_on+0x94/0x140 [ 791.855214][T17790] do_syscall_64+0x4c/0xa0 [ 791.859656][T17790] ? clear_bhb_loop+0x60/0xb0 [ 791.864344][T17790] ? clear_bhb_loop+0x60/0xb0 [ 791.869039][T17790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.874946][T17790] RIP: 0033:0x7fbd47f5e68e [ 791.879372][T17790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 791.899002][T17790] RSP: 002b:00007fbd48dbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 791.907438][T17790] RAX: ffffffffffffffda RBX: 00007fbd48dbf6c0 RCX: 00007fbd47f5e68e [ 791.915424][T17790] RDX: 000000000000000f RSI: 00007fbd48dbf0a0 RDI: 0000000000000006 [ 791.923409][T17790] RBP: 00007fbd48dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 791.931395][T17790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.939392][T17790] R13: 00007fbd48226038 R14: 00007fbd48225fa0 R15: 00007ffdce582f58 [ 791.947398][T17790] [ 792.559281][T17799] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4833'. [ 793.897535][T17801] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4835'. [ 793.917521][T17803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4845'. [ 793.932535][T17805] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4837'. [ 795.534665][T17839] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4849'. [ 795.569466][T17839] validate_nla: 8 callbacks suppressed [ 795.569481][T17839] netlink: 'syz.2.4849': attribute type 10 has an invalid length. [ 795.591608][T17843] netlink: 'syz.0.4850': attribute type 27 has an invalid length. [ 795.796531][T17849] netlink: 'syz.1.4854': attribute type 27 has an invalid length. [ 795.852083][T17849] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4854'. [ 795.881768][T17852] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4855'. [ 797.349978][T17874] netlink: 'syz.2.4861': attribute type 21 has an invalid length. [ 797.407094][T17874] netlink: 'syz.2.4861': attribute type 2 has an invalid length. [ 797.439975][T17874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4861'. [ 797.457593][T17873] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4863'. [ 797.485822][T17873] netlink: 'syz.0.4863': attribute type 10 has an invalid length. [ 797.658816][T17881] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 797.667718][T17881] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 797.679114][T17881] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 797.688463][T17881] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 798.384682][T17887] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4868'. [ 798.531882][T17896] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4870'. [ 800.301179][T17908] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4875'. [ 800.954988][T17916] FAULT_INJECTION: forcing a failure. [ 800.954988][T17916] name failslab, interval 1, probability 0, space 0, times 0 [ 801.067910][T17924] validate_nla: 3 callbacks suppressed [ 801.067928][T17924] netlink: 'syz.1.4879': attribute type 27 has an invalid length. [ 801.082832][T17916] CPU: 0 PID: 17916 Comm: syz.3.4878 Not tainted syzkaller #0 [ 801.090362][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.100463][T17916] Call Trace: [ 801.103793][T17916] [ 801.106782][T17916] dump_stack_lvl+0x188/0x24e [ 801.111516][T17916] ? show_regs_print_info+0x12/0x12 [ 801.116749][T17916] ? lockdep_hardirqs_on+0x94/0x140 [ 801.121968][T17916] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 801.128167][T17916] should_fail_ex+0x390/0x4c0 [ 801.132872][T17916] should_failslab+0x5/0x20 [ 801.137469][T17916] slab_pre_alloc_hook+0x59/0x300 [ 801.142501][T17916] ? migrate_enable+0x148/0x220 [ 801.147457][T17916] ? __get_vm_area_node+0x122/0x330 [ 801.152672][T17916] __kmem_cache_alloc_node+0x4f/0x270 [ 801.158145][T17916] ? trace_call_bpf+0x5d6/0x6b0 [ 801.163012][T17916] ? __get_vm_area_node+0x122/0x330 [ 801.168222][T17916] kmalloc_node_trace+0x22/0xe0 [ 801.173194][T17916] __get_vm_area_node+0x122/0x330 [ 801.178225][T17916] ? aa_label_sk_perm+0x4cc/0x660 [ 801.183263][T17916] __vmalloc_node_range+0x357/0x1380 [ 801.188560][T17916] ? netlink_sendmsg+0x5ec/0xbd0 [ 801.193506][T17916] ? aa_sk_perm+0x950/0x950 [ 801.198055][T17916] ? __might_sleep+0xd0/0xd0 [ 801.202654][T17916] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 801.208652][T17916] ? free_vm_area+0x50/0x50 [ 801.213219][T17916] ? netlink_sendmsg+0x5ec/0xbd0 [ 801.218192][T17916] vmalloc+0x75/0x80 [ 801.222114][T17916] ? netlink_sendmsg+0x5ec/0xbd0 [ 801.227065][T17916] netlink_sendmsg+0x5ec/0xbd0 [ 801.231865][T17916] ? netlink_getsockopt+0x550/0x550 [ 801.237085][T17916] ? apparmor_socket_sendmsg+0x8a/0x330 [ 801.242685][T17916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 801.247997][T17916] ? security_socket_sendmsg+0x7c/0xa0 [ 801.253473][T17916] sock_write_iter+0x2d5/0x3e0 [ 801.258271][T17916] ? sock_read_iter+0x3a0/0x3a0 [ 801.263159][T17916] ? common_file_perm+0x171/0x1c0 [ 801.268210][T17916] vfs_write+0x482/0x9a0 [ 801.272486][T17916] ? file_end_write+0x250/0x250 [ 801.277395][T17916] ksys_write+0x14d/0x260 [ 801.281741][T17916] ? __ia32_sys_read+0x80/0x80 [ 801.286526][T17916] ? syscall_enter_from_user_mode+0x2a/0x80 [ 801.292434][T17916] do_syscall_64+0x4c/0xa0 [ 801.296858][T17916] ? clear_bhb_loop+0x60/0xb0 [ 801.301546][T17916] ? clear_bhb_loop+0x60/0xb0 [ 801.306241][T17916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.312148][T17916] RIP: 0033:0x7fbd47f9de59 [ 801.316576][T17916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.336283][T17916] RSP: 002b:00007fbd48dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 801.344729][T17916] RAX: ffffffffffffffda RBX: 00007fbd48225fa0 RCX: 00007fbd47f9de59 [ 801.352728][T17916] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 801.360720][T17916] RBP: 00007fbd48dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 801.368701][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.376680][T17916] R13: 00007fbd48226038 R14: 00007fbd48225fa0 R15: 00007ffdce582f58 [ 801.384690][T17916] [ 801.590539][T17916] syz.3.4878: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 801.691995][T17916] CPU: 1 PID: 17916 Comm: syz.3.4878 Not tainted syzkaller #0 [ 801.699522][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.709597][T17916] Call Trace: [ 801.712893][T17916] [ 801.715839][T17916] dump_stack_lvl+0x188/0x24e [ 801.720534][T17916] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 801.726967][T17916] ? show_regs_print_info+0x12/0x12 [ 801.732183][T17916] ? load_image+0x410/0x410 [ 801.736703][T17916] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 801.743224][T17916] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 801.749749][T17916] warn_alloc+0x242/0x330 [ 801.754100][T17916] ? __get_vm_area_node+0x122/0x330 [ 801.759318][T17916] ? zone_watermark_ok_safe+0x270/0x270 [ 801.764888][T17916] ? rcu_is_watching+0x11/0xa0 [ 801.769683][T17916] ? __get_vm_area_node+0x318/0x330 [ 801.774895][T17916] ? aa_label_sk_perm+0x4cc/0x660 [ 801.779940][T17916] __vmalloc_node_range+0x37c/0x1380 [ 801.785238][T17916] ? aa_sk_perm+0x950/0x950 [ 801.789768][T17916] ? __might_sleep+0xd0/0xd0 [ 801.794370][T17916] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 801.800373][T17916] ? free_vm_area+0x50/0x50 [ 801.804907][T17916] ? netlink_sendmsg+0x5ec/0xbd0 [ 801.809860][T17916] vmalloc+0x75/0x80 [ 801.813769][T17916] ? netlink_sendmsg+0x5ec/0xbd0 [ 801.818724][T17916] netlink_sendmsg+0x5ec/0xbd0 [ 801.823513][T17916] ? netlink_getsockopt+0x550/0x550 [ 801.828737][T17916] ? apparmor_socket_sendmsg+0x8a/0x330 [ 801.834312][T17916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 801.839608][T17916] ? security_socket_sendmsg+0x7c/0xa0 [ 801.845094][T17916] sock_write_iter+0x2d5/0x3e0 [ 801.849886][T17916] ? sock_read_iter+0x3a0/0x3a0 [ 801.854766][T17916] ? common_file_perm+0x171/0x1c0 [ 801.859811][T17916] vfs_write+0x482/0x9a0 [ 801.864090][T17916] ? file_end_write+0x250/0x250 [ 801.868975][T17916] ksys_write+0x14d/0x260 [ 801.873331][T17916] ? __ia32_sys_read+0x80/0x80 [ 801.878117][T17916] ? syscall_enter_from_user_mode+0x2a/0x80 [ 801.884030][T17916] do_syscall_64+0x4c/0xa0 [ 801.888460][T17916] ? clear_bhb_loop+0x60/0xb0 [ 801.893151][T17916] ? clear_bhb_loop+0x60/0xb0 [ 801.897854][T17916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.903774][T17916] RIP: 0033:0x7fbd47f9de59 [ 801.908203][T17916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.927828][T17916] RSP: 002b:00007fbd48dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 801.936274][T17916] RAX: ffffffffffffffda RBX: 00007fbd48225fa0 RCX: 00007fbd47f9de59 [ 801.944261][T17916] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 801.952251][T17916] RBP: 00007fbd48dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 801.960238][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.968224][T17916] R13: 00007fbd48226038 R14: 00007fbd48225fa0 R15: 00007ffdce582f58 [ 801.976228][T17916] [ 802.038442][T17927] netlink: 'syz.4.4881': attribute type 21 has an invalid length. [ 802.050537][T17927] netlink: 'syz.4.4881': attribute type 2 has an invalid length. [ 802.070260][T17927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4881'. [ 802.094774][T17916] Mem-Info: [ 802.101870][T17916] active_anon:6263 inactive_anon:0 isolated_anon:0 [ 802.101870][T17916] active_file:23639 inactive_file:40251 isolated_file:0 [ 802.101870][T17916] unevictable:768 dirty:85 writeback:100 [ 802.101870][T17916] slab_reclaimable:21264 slab_unreclaimable:103855 [ 802.101870][T17916] mapped:30092 shmem:1361 pagetables:619 [ 802.101870][T17916] sec_pagetables:0 bounce:0 [ 802.101870][T17916] kernel_misc_reclaimable:0 [ 802.101870][T17916] free:1312388 free_pcp:5201 free_cma:0 [ 802.163832][T17916] Node 0 active_anon:25052kB inactive_anon:0kB active_file:94556kB inactive_file:160804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120368kB dirty:340kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10228kB pagetables:2476kB sec_pagetables:0kB all_unreclaimable? no [ 802.289375][T17916] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 802.326424][T17916] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.379696][T17932] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4884'. [ 802.406215][T17932] netlink: 'syz.2.4884': attribute type 10 has an invalid length. [ 802.414595][T17916] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 802.420891][T17916] Node 0 DMA32 free:1327984kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:26652kB inactive_anon:0kB active_file:94556kB inactive_file:160804kB unevictable:1536kB writepending:340kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:14144kB local_pcp:2636kB free_cma:0kB [ 802.451891][T17916] lowmem_reserve[]: 0 0 1 1 1 [ 802.456793][T17916] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.489699][T17932] netlink: 'syz.2.4884': attribute type 25 has an invalid length. [ 802.502740][T17932] netlink: 'syz.2.4884': attribute type 25 has an invalid length. [ 802.516708][T17936] netlink: 'syz.0.4883': attribute type 39 has an invalid length. [ 802.524693][T17916] lowmem_reserve[]: 0 0 0 0 0 [ 802.524753][T17916] Node 1 Normal free:3903772kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15168kB local_pcp:9216kB free_cma:0kB [ 802.599900][T17916] lowmem_reserve[]: 0 0 0 0 0 [ 802.604709][T17916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 802.630886][T17916] Node 0 DMA32: 1976*4kB (UE) 2524*8kB (UME) 1801*16kB (UME) 3835*32kB (UME) 1472*64kB (UME) 634*128kB (UME) 197*256kB (UM) 182*512kB (UM) 74*1024kB (UME) 42*2048kB (UME) 162*4096kB (UM) = 1323952kB [ 802.666877][T17916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 802.689923][T17916] Node 1 Normal: 229*4kB (UME) 63*8kB (UME) 29*16kB (UME) 76*32kB (UME) 43*64kB (UME) 23*128kB (UME) 8*256kB (U) 5*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3903772kB [ 802.714968][T17916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.725187][T17916] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.734500][T17916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.754877][T17916] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.764235][T17916] 67326 total pagecache pages [ 802.776537][T17916] 0 pages in swap cache [ 802.780758][T17916] Free swap = 124996kB [ 802.794955][T17916] Total swap = 124996kB [ 802.799179][T17916] 2097051 pages RAM [ 802.814890][T17916] 0 pages HighMem/MovableOnly [ 802.819619][T17916] 415222 pages reserved [ 802.823788][T17916] 0 pages cma reserved [ 802.936453][T17938] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4883'. [ 803.973802][T17946] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4887'. [ 804.243209][T17955] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4891'. [ 804.318246][T17956] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4890'. [ 804.338622][T17955] netlink: 'syz.4.4891': attribute type 10 has an invalid length. [ 804.359752][T17956] netlink: 'syz.2.4890': attribute type 10 has an invalid length. [ 804.378379][T17955] netlink: 'syz.4.4891': attribute type 25 has an invalid length. [ 807.623429][T17967] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4896'. [ 807.665091][T17968] validate_nla: 1 callbacks suppressed [ 807.665106][T17968] netlink: 'syz.2.4896': attribute type 10 has an invalid length. [ 807.789171][T17969] netlink: 'syz.2.4896': attribute type 25 has an invalid length. [ 807.825440][T17969] netlink: 'syz.2.4896': attribute type 25 has an invalid length. [ 807.982189][ C1] [ 807.982199][ C1] ================================ [ 807.982202][ C1] WARNING: inconsistent lock state [ 807.982222][ C1] syzkaller #0 Not tainted [ 807.982232][ C1] -------------------------------- [ 807.982236][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 807.982243][ C1] syz.3.4897/17975 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 807.982261][ C1] ffff88807592f238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8f/0x680 [ 807.982389][ C1] {INITIAL USE} state was registered at: [ 807.982395][ C1] lock_acquire+0x1bb/0x4a0 [ 807.982415][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 807.982432][ C1] trie_update_elem+0xc7/0xdd0 [ 807.982448][ C1] bpf_map_update_value+0x59d/0x670 [ 807.982466][ C1] generic_map_update_batch+0x52e/0x7f0 [ 807.982482][ C1] bpf_map_do_batch+0x475/0x5f0 [ 807.982500][ C1] __sys_bpf+0x6f7/0x780 [ 807.982517][ C1] __x64_sys_bpf+0x78/0x90 [ 807.982531][ C1] do_syscall_64+0x4c/0xa0 [ 807.982550][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.982572][ C1] irq event stamp: 1988 [ 807.982578][ C1] hardirqs last enabled at (1987): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 807.982601][ C1] hardirqs last disabled at (1988): [] exc_debug+0x6e/0x130 [ 807.982624][ C1] softirqs last enabled at (1760): [] unix_release_sock+0x4c9/0xf10 [ 807.982644][ C1] softirqs last disabled at (1758): [] unix_release_sock+0x451/0xf10 [ 807.982663][ C1] [ 807.982663][ C1] other info that might help us debug this: [ 807.982668][ C1] Possible unsafe locking scenario: [ 807.982668][ C1] [ 807.982671][ C1] CPU0 [ 807.982674][ C1] ---- [ 807.982677][ C1] lock(&trie->lock); [ 807.982686][ C1] [ 807.982689][ C1] lock(&trie->lock); [ 807.982698][ C1] [ 807.982698][ C1] *** DEADLOCK *** [ 807.982698][ C1] [ 807.982701][ C1] no locks held by syz.3.4897/17975. [ 807.982707][ C1] [ 807.982707][ C1] stack backtrace: [ 807.982712][ C1] CPU: 1 PID: 17975 Comm: syz.3.4897 Not tainted syzkaller #0 [ 807.982727][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.982736][ C1] Call Trace: [ 807.982742][ C1] <#DB> [ 807.982747][ C1] dump_stack_lvl+0x188/0x24e [ 807.982768][ C1] ? show_regs_print_info+0x12/0x12 [ 807.982791][ C1] ? print_usage_bug+0x42a/0x690 [ 807.982811][ C1] ? verify_lock_unused+0x15/0x140 [ 807.982832][ C1] lock_acquire+0x2df/0x4a0 [ 807.982852][ C1] ? trie_delete_elem+0x8f/0x680 [ 807.982873][ C1] ? read_lock_is_recursive+0x10/0x10 [ 807.982893][ C1] ? rcu_is_watching+0x11/0xa0 [ 807.982913][ C1] ? lock_release+0xcf/0x920 [ 807.982931][ C1] ? look_up_lock_class+0x75/0x140 [ 807.982947][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 807.982962][ C1] ? trie_delete_elem+0x8f/0x680 [ 807.982981][ C1] ? _raw_spin_lock+0x40/0x40 [ 807.982995][ C1] ? lock_acquire+0x2df/0x4a0 [ 807.983015][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 807.983051][ C1] trie_delete_elem+0x8f/0x680 [ 807.983071][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 807.983088][ C1] ? look_up_lock_class+0x75/0x140 [ 807.983102][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 807.983124][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 807.983141][ C1] bpf_overflow_handler+0x50b/0x790 [ 807.983159][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 807.983176][ C1] ? perf_swevent_overflow+0x230/0x230 [ 807.983193][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 807.983212][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 807.983234][ C1] __perf_event_overflow+0x457/0x630 [ 807.983257][ C1] perf_swevent_event+0x315/0x570 [ 807.983279][ C1] ? perf_tp_event+0xc10/0xc10 [ 807.983300][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 807.983324][ C1] perf_bp_event+0x311/0x3f0 [ 807.983344][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 807.983368][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 807.983400][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 807.983418][ C1] ? read_lock_is_recursive+0x10/0x10 [ 807.983440][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 807.983464][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 807.983481][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 807.983499][ C1] notify_die+0x141/0x1a0 [ 807.983517][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 807.983539][ C1] notify_debug+0x20/0x30 [ 807.983596][ C1] exc_debug+0xd9/0x130 [ 807.983618][ C1] asm_exc_debug+0x1a/0x40 [ 807.983636][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 807.983659][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 807.983672][ C1] RSP: 0018:ffffc900124dfb40 EFLAGS: 00050206 [ 807.983685][ C1] RAX: ffffffff84154f01 RBX: 0000000000000b68 RCX: 0000000000000840 [ 807.983696][ C1] RDX: 0000000000000b68 RSI: 0000200000000328 RDI: ffff8880344344c0 [ 807.983706][ C1] RBP: 0000000000000000 R08: ffff888034434cff R09: 1ffff1100688699f [ 807.983717][ C1] R10: dffffc0000000000 R11: ffffed10068869a0 R12: 00007fffffffe498 [ 807.983728][ C1] R13: 0000000000000d40 R14: ffff888034434198 R15: 0000200000000000 [ 807.983741][ C1] ? _copy_from_user+0x51/0x170 [ 807.983760][ C1] [ 807.983765][ C1] [ 807.983769][ C1] _copy_from_user+0xf4/0x170 [ 807.983785][ C1] bpf_test_init+0xde/0x140 [ 807.983803][ C1] bpf_prog_test_run_xdp+0x488/0xf80 [ 807.983820][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 807.983843][ C1] ? dev_put+0x80/0x80 [ 807.983862][ C1] ? dev_put+0x80/0x80 [ 807.983877][ C1] bpf_prog_test_run+0x31c/0x390 [ 807.983897][ C1] __sys_bpf+0x62b/0x780 [ 807.983917][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 807.983942][ C1] ? lock_chain_count+0x20/0x20 [ 807.983961][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 807.983984][ C1] __x64_sys_bpf+0x78/0x90 [ 807.984003][ C1] do_syscall_64+0x4c/0xa0 [ 807.984021][ C1] ? clear_bhb_loop+0x60/0xb0 [ 807.984046][ C1] ? clear_bhb_loop+0x60/0xb0 [ 807.984065][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.984084][ C1] RIP: 0033:0x7fbd47f9de59 [ 807.984096][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.984108][ C1] RSP: 002b:00007fbd48dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 807.984123][ C1] RAX: ffffffffffffffda RBX: 00007fbd48225fa0 RCX: 00007fbd47f9de59 [ 807.984134][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 807.984144][ C1] RBP: 00007fbd48033e6f R08: 0000000000000000 R09: 0000000000000000 [ 807.984153][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.984161][ C1] R13: 00007fbd48226038 R14: 00007fbd48225fa0 R15: 00007ffdce582f58 [ 807.984177][ C1] [ 808.656461][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.662794][ T1279] ieee802154 phy1 wpan1: encryption failed: -22