last executing test programs: 7.599267593s ago: executing program 0 (id=8606): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r5}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xc6, 0xd, &(0x7f0000000640)="1692ac79843a3d2b843186aadff09bb6c06c120f9760c2b9492d98169333059a8a50f734cab5ad4d7f31276ec465177df8c47755d28511e21f637756d74977408cac7582798f37be6ee49c07a0b90580d914ccb526a462b8bb3cef80f53a9552975a718cf0480147d31073957cacd8ab6f1811a784dfda91b5242a89cd96cb41e8edaf7a2ec789c12f2254407f8599824ecf850fb81b0ed07bfddf59a89fa130a97c3c4a682c0d1b8c3873b10ec53f167e40870cf00fd5780affdb6afbce471c3b00f3cdd3b5", &(0x7f0000000740)=""/13, 0x7ff, 0x0, 0xec, 0x39, &(0x7f0000000780)="2d30d43c16b1ae88600a75e7d58fcad6e15328b98ccf74627a8b394813583cf59ba77408f298bd54ea6f4b93e3190f68786f5b0cc3594885023243d6b552d6396676f267150094292256712b5d9deb163eb69aaba3c58ca2af8b8b469191be2f65e1c02b4ecc3fc7f943e2ad4c538573534e7061a3940f5590deefa8a8cc4c5df4b1b8ce2a426215147578d8222bb8db0fc0431c41efafc9350d04b2744d79ef9efa7d05250fbe4a46251aee61ab01bd0b2591ea77eb62d103817d578fdfeff7bf28611f7fb34e571465a52511910a0732504764ca426089e78472c17850f78f9f400059f59a121b4c3f67af", &(0x7f0000000880)="0336fc11394ee6d6c3de310fccc608b0525b050f50f40369f71a9282dfd0777fd6ea21c4adb71a1362af24f787b3a517a41b125d2b51654e02", 0x1, 0x0, 0x6}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000001640)={0x0, r3}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8922, &(0x7f0000000080)) 6.011532291s ago: executing program 0 (id=8612): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xd}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000680)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x16, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632000fc04082f00db5b686158bbcfe8875a060305000023000000000000000000000000ac1414aa3a2008"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="4d6ef6af", 0x4}], 0x1}, 0x80d1) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfc, 0xfffff004}, {0x6, 0x22, 0x0, 0xd}]}) sendmsg$inet(r9, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local}}}], 0x20}, 0x48000) sendmsg$inet(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) syz_clone(0x200080, &(0x7f0000000140)="ba815e8efbe4022ff6560aa41fd2a7424330e05416725efb3db76748b4fb62e3d7175240ee02cc5c3b5427ed5c80060ef883482587c6ca02a8733a75f216747c23ee624ea73a4cdb43e665bba14a44250f3ada0b5f2381664f1d4c86a60183ad872cf674e307a33286e6b088f2f0b5f4e6b1ed3a9e0a5d1ab846dc987982f1f66ead0b4b74bc0c4abd74844783e3a1cec56a3a662aeba494020340c157d1be738a92b60b7a5dd8cea892b74128d1304947bb1478535704b5a2234cbf19fc6b67", 0xc0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="4d785221b2673fc706b6b6de21c51a8c69fe01c321f908343af2265e876905711bf8889e5371edfa9e9f2742ffccecbf22c5aca920d23f7b80a2b716374662caf5ceba972215e0671342478bd954221e0f98c855a4a04242370e2a09ad576dd2ddddd15f8c8a359129500aac72d50184b545b63ffcceb60d298aefcd34195c27a9c37caae5a3ad69f64f2bc2ac18abd56a8775aa6f66a5c43de2c2c4ca19235ac0291b93953be5507194a295") r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r11, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f00000006c0), 0x0, 0xf4, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x4002b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 5.476805157s ago: executing program 1 (id=8614): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x4, @perf_config_ext={0x9, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x81, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000001b00)={&(0x7f00000000c0)=@ethernet={0x6}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001680)}, {&(0x7f00000017c0)="ce6eed18d0fdc5e2299c83822c73b7844f1a7bcfb85e298eb34c86379077222b46210cf706e560b21c059ad38d0c68bcfe77aeaa0a89bc5dcc490535f5778cd73e66856840a6ed8828339a418fce0e89f2bbb28e392f249246f3d7d094b9aa", 0x5f}, {&(0x7f0000001980)="62140378552445a970937e0f406413549ba3d902d886ba6d7fd5731c6c62848c93e173423afcdcc9f94fd7fdc0e04c77ffad70d3d6f23796a165f7ae62cbb722c222f4c118206adf0274853ffafb8cd7f5218723", 0x54}, {&(0x7f0000001a00)="8e6b0860365f4293bff26327402d7916", 0x10}], 0x4, &(0x7f0000001ac0)=[@timestamping={{0x14}}], 0x18}, 0x85) sendmsg$kcm(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b702000014fa0000b70300000000000085000000830000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) 5.132064917s ago: executing program 1 (id=8616): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1600000017000b63d25a80648c2594f94187c92b", 0x14}], 0x1}, 0x48014) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r1, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f00000016c0), 0x0, 0x92, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001740), &(0x7f0000000200), 0x8, 0x95, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r2, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x0, 0xd7, 0x0, 0x0, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 4.880167005s ago: executing program 0 (id=8617): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.457784587s ago: executing program 2 (id=8619): close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x92, 0x1, 0x9, 0x0, 0x80000001, 0x94020, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xc}, 0x102000, 0x1, 0x209, 0x9, 0x3, 0xfd87, 0x9, 0x0, 0x6f, 0x0, 0x8000007}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 3.952074752s ago: executing program 3 (id=8621): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x4, 0xfffffffffffffe72, 0xc, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000000100000007910000000000000630000ff000000009500680000070000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x21) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa4, 0x2, 0x1, 0xa5, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="33a28ec2974f562df3b844af00af5a6c5563788da165f458c1c819d53b92eb57db461233215da67a597b167d18b971ab0033ad2ee856c28bf52ae76ebd6791ff69638e8bb350a7b6597bd029e17794e40bd686235884064fd3fa8d714ad31fd3b78870bdec36b614331dde103485e5c383fbdb27", 0x74}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x3d8}, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc000, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000300)=0xd) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 3.786014777s ago: executing program 2 (id=8622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r0, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) 3.614939932s ago: executing program 1 (id=8623): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={0x0, &(0x7f0000001500)=""/159, 0x0, 0x9f, 0x1, 0xa, 0x10000, @value=r2}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r2, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], &(0x7f00000016c0), 0x0, 0xfc, &(0x7f0000001700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0x8, 0x90, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r2, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xd7, 0x0, 0x0, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (fail_nth: 7) sendmsg$kcm(r3, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000200)}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001e40)='^%\xa9(:+V/,]]\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 3.603129372s ago: executing program 2 (id=8624): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x4, @perf_config_ext={0x9, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x81, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000001b00)={&(0x7f00000000c0)=@ethernet={0x6}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001680)}, {&(0x7f00000017c0)="ce6eed18d0fdc5e2299c83822c73b7844f1a7bcfb85e298eb34c86379077222b46210cf706e560b21c059ad38d0c68bcfe77aeaa0a89bc5dcc490535f5778cd73e66856840a6ed8828339a418fce0e89f2bbb28e392f249246f3d7d094b9aa", 0x5f}, {&(0x7f0000001980)="62140378552445a970937e0f406413549ba3d902d886ba6d7fd5731c6c62848c93e173423afcdcc9f94fd7fdc0e04c77ffad70d3d6f23796a165f7ae62cbb722c222f4c118206adf0274853ffafb8cd7f5218723", 0x54}, {&(0x7f0000001a00)="8e6b0860365f4293bff26327402d7916", 0x10}], 0x4, &(0x7f0000001ac0)=[@timestamping={{0x14}}], 0x18}, 0x85) sendmsg$kcm(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b702000014fa0000b70300000000000085000000830000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) 2.796557757s ago: executing program 1 (id=8625): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002300)="d1f6093608578544318fdb66dabf7bbcbcdea1a51ef9140f9f264a751cf7ecca7b5dcdb25dcbf0daf40e8e101494a0ec13a7e21644bf843cdc5758e014a86616d7b60c713f9f5861038ea60205877986cbd2ea6998fec77a13b6d80a31776847e872db10a8e2c571b2cfb48d573097ce40b25ccaba576f863aa3942f37d6c1bae672fe3120da6facf15012d95a6080a4d74fea798b351430e40793157662bea9cd2a17ebd71953434fea5069ef84a2f8dfcd8e0e804b4de360a5127fa28f495a7e74da22d6002e18507b3c0a317117d61de2a17b5fc54b5f7b3d803bb78fd095fc40e789dea67dd77ba4ae7f8f90", 0xee}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f1dc307e000000000000000000001a00"/25], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x10e, 0x2, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c1f0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}], 0x20}, 0x48000) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2.765494158s ago: executing program 2 (id=8626): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002300)="d1f6093608578544318fdb66dabf7bbcbcdea1a51ef9140f9f264a751cf7ecca7b5dcdb25dcbf0daf40e8e101494a0ec13a7e21644bf843cdc5758e014a86616d7b60c713f9f5861038ea60205877986cbd2ea6998fec77a13b6d80a31776847e872db10a8e2c571b2cfb48d573097ce40b25ccaba576f863aa3942f37d6c1bae672fe3120da6facf15012d95a6080a4d74fea798b351430e40793157662bea9cd2a17ebd71953434fea5069ef84a2f8dfcd8e0e804b4de360a5127fa28f495a7e74da22d6002e18507b3c0a317117d61de2a17b5fc54b5f7b3d803bb78fd095fc40e789dea67dd77ba4ae7f8f90", 0xee}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f1dc307e000000000000000000001a00"/25], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x10e, 0x2, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c1f0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}], 0x20}, 0x48000) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2.628850852s ago: executing program 0 (id=8627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xc, &(0x7f0000000240)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x64}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000015c0)={0xffffffffffffffff, &(0x7f0000000500)="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", 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r3, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r6}, &(0x7f0000000c00), &(0x7f0000000c40)=r4}, 0x20) 2.392373769s ago: executing program 3 (id=8628): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={0x0, &(0x7f0000001500)=""/159, 0x0, 0x9f, 0x1, 0xa, 0x10000, @value=r2}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r2, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], &(0x7f00000016c0), 0x0, 0xfc, &(0x7f0000001700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0x8, 0x90, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r2, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xd7, 0x0, 0x0, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x241}, 0x20000811) sendmsg$kcm(r3, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000200)}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001e40)='^%\xa9(:+V/,]]\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 1.68480549s ago: executing program 3 (id=8629): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r0, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=0xffffffffffffffff}, 0x20) 1.667068241s ago: executing program 0 (id=8630): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x4, 0xfffffffffffffe72, 0xc, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000000100000007910000000000000630000ff000000009500680000070000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x21) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa4, 0x2, 0x1, 0xa5, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)="a26f360c1e4630ff9fd2f1183019348bb79c4f26e4517717c94640ef2f831fd019bfc3ce0936eb88bc6822738bca1a072081a9ef8d63f05b3d88d96cf87a16970291a2596e1d67075a8fdeaedc97f32f9186cf21a76cee7a237a2e46b41dc62a3657e63e5865a9784d9985c731b674c20bbcab3124c0161adf039d61978f90e235de857f92f59d53e19afeddb64193d3abdb7921d7ff77660487db327f24138851d6415d8484d1065f288f1d7feb965bd3c4e2f0d748717cab890314aaaab25bcd10f1480f34bc7872389d3db411f78613ab8819d3187bf94ed7981fcdc0007f785b0c3d490382025cdcdff3142130fc5e8bf1af21be761ebc7b04dbd8271b782cb4670bbc919ed984e7660fafbefb81d47cfc3424ca7ee1135e7f5534a63d478af8677ecb9fa613f72a093e417343151f0404d2bd1588b59b0cd9295f8420086cd9fad7b81e089de59fccb4be07c3f573e82e21c6258a564e78fc406961fa3bedfb10918c247973f4a9ae051f8f89611ed7c19b4f2d8802504c3ef74aad5d499c733125ff436ac6ccdf9b6966efdfb2923bd8343c1e501d843f2bb648945a74a40f858829649530bc82352cc827a5e897c43985b16c6382b6c966a5aaae352f6adacadee6ebfd0be7960751f8bc1b41a6bd6ccfa4ecd426db0daf12d0dbb65f08b3845e54fcf7da26eb958648c6922c25488b1122def2e24f4adbdf0805fdf6e3f7194235758563f5c7556a409a1e91236606eef457ac6605b94163d64c24c243cc95902691a5eb76c57d0b3ae36e4dc74e9aad606ec2830738c257d3a8e1008e79ac6f07ddbd40a5f2cacefea65010bbabfb2064c3ac90ff63f45df40afd6564a9f44c67f725292940912d599decb2d83c21f5e2043b42b93498de893e60a321e2a6cbd23bb5446a73bfcac264b47eca4562bf88ef9fa84ea54b93e37c86e14335944752a425aaad63ee084e3bc3ebfb74302df518deb8aaeac8ea498f52db407d0391ea5be4b11c3b90975b1e7140eb150cef9efc06dc0f84f79fe0899e50202c3dfec4423fb6c0d9ea655364ae623a81d55b5dcc63fc61011e15aa5b4fe40266a61095f4e4520ade685aca9f60d0bbc5e7f18ba6f131edf8dcff14f2f6eca115ae1623b1d01f9ea3f6f674cdd3386ecbe668a8a28af3c20fe44bcb3b62e6a8d38ce3b0e2701e60e72cd67903a53f8c8028cd2d7dfb7abba9cda3f51a1f7dc522b6b8b1029d31786672a41cef8cd2e261de1917e6d83988a995c6d497e577ab3fbbed958918326dc273da51cd547fa726b563e15af05150439c1e4fe36c2157c51d1bdd918d84481a5a0a9ba771f9c971565b6dddfa7423aaa358694877b0e70b05bd516e8bd26159efe77ad3f171b3021952be725d35fd5b33db44b9680db41d3a0c3209c2d2bcaaed5d8fc03b318cf961791d155fc4f6ec8f33f9add85371c00affbff2fc1f7e972ee63c5044e7a93cec577cf9779a1b7184120900cfcbab86a3cedd88b2d8c7f549d5bc2f349caa0de45302f8d8ab2d4db5c7d12b2ddbecf2293a659f7cb1df57952d115e67882f34e5aec1a3c5c0693bc634dc76fa8837a6c25d42b3e1f04111130d3d14ab43e3cb11ab105e68a2eabac948f141b2cf9e77f104aabcd14efe05b4d0a942e4adc645ec1b5b570c206b2f1a468232cde3f85396bc419e9b95431b129bc5a0f328cc52e681df8a218ce73d784e15990cd6a3bebebe52920623b4b5d8fdf555fb4fec0901e8c18cb14407fa377926da76135359cdec8d74b7c7a8bd26f53ff937325316dcc3fcd2b21078073ed1da15a17e662140b31d42c00d27e5f4de6ebd99d3c7a1edff189eaba709468178768f2b8465accdd6b261aa93d6ac08e0317a41bbe0b77542cae365c25cbf942a5e5a8055c8e70ba99541ae998417b3092b808d675dc24e8607c89cddb3fd6c408961426aefd5457ba3a6f5d09ed19691d33c47b64d1f974d0433e5cee91d11280034004c5892e1345de07d0746e1b03d16c479209b84e09aa635b0945ee3507f0b0c298d8152299dfdcb756d079706934a28725a632121c33a3c19573f11be07b6e41db94b830b97847cbb9af25ae1953ea16bee3781d7d5a42bcc8ecc497bac94dbcda78ea8f69671dabf1e077bd489467b5a1e3908bdae467ec5080b44dc75d8ab1a8ef87032ba548957fa2bd311d9784c0f6bf0bc7cad9018b7e3b7cb3d5d27e56d81dfcc5e3f6ea3710c00f92efb4c6700df877eff8c490f96a8ef09874d999988f5d81ac3a84b8cb6216c4a1d23ea998c0c4e296029bff505a585144badb704d3fe2867c10e7903e81a75e2e3a990cd48eba6db2cc1741a41114123e3a092a307f23cf1ed74d6b70cacc333f3cd5735d0ab5a3de6e42c358baa55fca8816843a06613c4bf463a23e78febf31162dd739559c26601eb40c28cdfa8cecbe20944b0a900257f63771b2d5a68521ffc1c622701855c2e1bf6ed1fa654bca3d2d7f1710a6629858292767acb94801a25ef798993ed7bc352ed7efa2a4e22c257bc145e5372cfc5fe4de21409231ee0a116ccd4e7e1def2114476153e37a42226738522b229ae7bce40973b6b988fc933b322355a8ae0b420cc1fe87907387355d6c37a5439546a8d0100d73e6515fec647d0ccdb0cb4debf7afd9d2f29aa1cf7398c18f22d8fdd7e6b7f022d8a7af2ba6a51d89a9f1667d9ac24aaf161f65a5938bc52ad9874b2df231fae17bd4903141bd35ee8aab234b7583b79696b585e5128d88a989266e67b25dbce10c20905d401f5abfe28624bc60ed6019a8c58349ac41fde842e07e2a49136922ab03f5f9f1f51fafec8987284975cea17787a7a1f301daf809467908cfb73f4658705fab99750120c8e46c32cb7420ad8afe500253219060ae61618c11e63eb02c255b60c7f2e6ec1749393ff3b6639531ae125968533851f6aec76768d00110899193960c8de745a3301841ffa0d2608b5143c5d0e80c9c302817626fa8b3ef0f4dcc1b9d030e1b45cf603b10cc609e383418bd772625fc44c3e6e3249d1f8c8023b84944349f709afaa3d6e962362baf8c7d819a0d8d2b766fe55d57d1e31abeb8ff1a6c1399bd92c9700fceebac79d2144979caea3c837036e5a80430e5de6b3897c49ebb4e5d9c2f38fa6712b8054250db6bcd8d5f3d365e970c4caf7f0767d7002c5680c0a84605bc957bfd247d44e94e0f243274437f0b50d483ba309ad4a6b47d25500c809bd7a4bbdc1871e4961308662fc38b726d14e8cfe509ed2f6ccc048dd99c772c871e7025984aa4294d08e37c05130d86fe7f4f70b1b69c1a2a63add42f8ad350a7b99076c63ada665c53cec105239e8da84b983169674d8ba89cf392bd79814b63ec6d364a5f5b68c13b6337ece2f83538422f5519320d02c0164e2a2a3464940a33f4fb3a95e10306c2462f71a66fb21b72a797e06d28efb4ac1fb8c3cd5325c981b1e21f5669738e35ee5c7693b8dd52e962501fdc6f82db31f0bde6d7a7fd4ebe12ed57ee13e8690d080b5d503a713699f71fb2574580acf18c8210eb06f93e9cdc31de975e9526cd7ca3a82babaa3f9133aec766dea051e51a9fbc5a10fefe9246c6584b50d7505a8bd70abe0995a6fa4f671989098e15367048858a736df881c159bd451395f4f015a0cfd774ca0d0538c939017d5f3d4302d57114c2fa00759788f6705803a1c21590d5fa72dc9710b2503e058122e6bbff584616445772148e63b59a04c87a089f56b45dea2facd5788f1c791f778e1c9c3b3ad3df0f8e7172131b8cd74eb0e27fa68d52965b42d1ab6ddb3ba67aa49a6852ad68ec12f223c4a738b2cda440f861f0a0d069835dd0e4219ad33568b14a518b6f84bf0eacb324831c806a97c6e3ff77e40cd3fcc135a1477a776a940c21565c4ffcc0c57bda70e081e882e51d2a73168f9e067d6913fa2413b1a20d4e15e7e8b741e94e63af90f29a63e0b0b4ab5ee579f8ed8125d44a4b074e19bc0fe81f1a82590b95c4dff4a679c18e5bdef0923dc5d4c7b9cc9f9e1e093c5c7b6d051c6c31808fcadfc99aa4b66d7eb2388b422717e55831f5615a2b43370b2cba564f3ae0e27b1eb43bcc9e78bffa2745ef121f2bc188b16c6ae4636da2c971847e8678e33b7a713e2cfb00c9b0a26c806198914e485add8ecde223c9a79701b25eb69f3160b33e14d35871a8a5a202ce636b7d863be6945e9a653e0e763e7641349b2f6a221bdd7fbb072e70e63c069424824e7e57b9e740cc183db529832aae051e19bc58a0de30b620ebdd6b8a71665240c7f2bfbeec481362514daad837913cd336e3d2c3c00f1b06098a7d3520333c726e8c701f3c37d60fb0cef9f6bbf2b55945cd21e63c4f48c192391b2682c917e37c7abcca323fcbffa6fdbf523b4d5b72b318dccdf64698d16ca557c17348e9a8c487ed3abf5c0368521b850dd097432afe7128d446d44c37a276a40e5b87462d49f8fa782218f3a2d617823e0f5db637a7a9af3f81332db4a1b88148be619a2f465067f5877676e63402470fefaf834709a601326b431656e8a421bb38c3c7ff9c89b44d4a5ed733868729d898becdcba193ca8368a8dd0e2ad8133eb87ee09b5f7d5441c8b2e83a23a7806dba13206fbd124d674868c2ef23ba9c78440d1dbbab7c42a3e3afdc140c1783e62f0bdea4ee30dec2b1001ccaab141b5f193ff32d74075d5611a0e34c90dcbfe5f66a94c7d1e33b8ebbff5c592c413991bd9fe22d4d52911ea761f0804c0993bf32b41f6433694b82361ca0ac719f70a47f55b071f2512f5a371a30cce52e57551f9930d26006712b9e6efd05f2c5fc45c27bf638a4e75eba0a2b1e974ef090601e43a660bf92f4803cf20d9a1ca795de1cfffff40d7c6158fc10c14bcdde150cb5b37e0650d6d022c541011bac918109486af1aa5eef0e4337ccad419a1faf4e659f1302e07ef4d2f1862b65bc4671511e77d0ece7732c8befc39d306bdd9184c32705698e8af7c58fe5ade903d449ecee1bbbc1ae056d1ae6064ae6b8cb519e2a92c3bcfd0c2f80c8b6f85dcca1c986b482775c2b1a2773114b754ad9115281905ddb229796232ac5dcb811cd8718b67a1aecd336299d22cf88078a0e45d4543fc2be0bd995f36f4f6d92dc6db784052584f4e756e32827da598f01fa1c67b845ac38f765c514ff5942104a47525377984c0b9f5ee025ad53646eadd4fcbca83877d53bf5c6dd9b0942fca0c06a272329262722db6c6d36cff8f1b487dc09c11b6862a30cda4a67af94e23df115af9845af6c429e3e119f7ed8a9632731af61a08b85f02b87c3452783f44fc83e1e0ad5bbcc5cfbdaf716ebe529017d3e7480aec4bf788696a2adbf1d884ef8ed165fe66d565bb9e6707f3bf6dbe1fb5ae4299c6162b567bf47d86e0c6d238ada868a61e2825036b15979ef9ffa8ed4e67a5235725e18eff5ad802bfe49a012ec500b0070e92aafebe7ebddae16dbb94df4c2d9aa8aa9e58390d58b82672b44aace18615d8e59782c49d71f2b819ee3e1ada310f439d31835b5d927e7242a26057b70f848c9ad0eb32b36904c9ea127073859e22d03ed728a6ee19cafbd8aff0e8e7a482aa5129e86e584fcf9c348ba641959d7488a6a9c16fe934370a5634408807926dbea54f43c247171e061c76c486abf217671dc490f69affe7bdeac29137761dd96c43ae78a41cd70361b3340589e2c4e7c1c7bfff06b3418f98f35b9031c81709eb8bce4e7efaebe8069461d0de9dc136463a7329a0945c04d0288738c542c948e1bb1a476027f950", 0x1000}, {&(0x7f0000000200)="33a28ec2974f562df3b844af00af5a6c5563788da165f458c1c819d53b92eb57db461233215da67a597b167d18b971ab0033ad2ee856c28bf52ae76ebd6791ff69638e8bb350a7b6597bd029e17794e40bd686235884064fd3fa8d714ad31fd3b78870bdec36b614331dde103485e5c383fbdb27", 0x74}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x3d8}, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc000, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000300)=0xd) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 1.517100345s ago: executing program 1 (id=8631): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x4, 0xfffffffffffffe72, 0xc, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000000100000007910000000000000630000ff000000009500680000070000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x21) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa4, 0x2, 0x1, 0xa5, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 1.448856047s ago: executing program 3 (id=8632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r0, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) 1.200264424s ago: executing program 3 (id=8633): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600efd0700060000000441a8000800a4001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace2bb981e64c2ee5a7f659cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.103054027s ago: executing program 2 (id=8634): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x4, @perf_config_ext={0x9, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x81, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000001b00)={&(0x7f00000000c0)=@ethernet={0x6}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001680)}, {&(0x7f00000017c0)="ce6eed18d0fdc5e2299c83822c73b7844f1a7bcfb85e298eb34c86379077222b46210cf706e560b21c059ad38d0c68bcfe77aeaa0a89bc5dcc490535f5778cd73e66856840a6ed8828339a418fce0e89f2bbb28e392f249246f3d7d094b9aa", 0x5f}, {&(0x7f0000001980)="62140378552445a970937e0f406413549ba3d902d886ba6d7fd5731c6c62848c93e173423afcdcc9f94fd7fdc0e04c77ffad70d3d6f23796a165f7ae62cbb722c222f4c118206adf0274853ffafb8cd7f5218723", 0x54}, {&(0x7f0000001a00)="8e6b0860365f4293bff26327402d7916", 0x10}], 0x4, &(0x7f0000001ac0)=[@timestamping={{0x14}}], 0x18}, 0x85) sendmsg$kcm(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b702000014fa0000b70300000000000085000000830000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) 779.207627ms ago: executing program 3 (id=8635): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x60cb01f8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1001000, @mcast2, 0x47}, 0x80, 0x0}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="180061cfcca3a29f0000090000000000001f6471158d18111d00b7ff3f7427a7c04244620e82476744e3dbf6c74347e64537b4a1ce9b9281bd88421f53338c8bebcc74932e92eefb308bf2262623095407679662cc49b3dc26cd2da0468d5b2c8e7d2656a1f5676efcf396d0bafdb5ce6d1fa92010c6fc066b79165241120d473d53503e57f38ed6dbfa7b7ff84b697a2f538b0ea05a91201ebe921b6ab1da8ce91794570be319cd468d6958d5c4c063c5b13f5403995768254899a21ea5ca3889d142c602e0b7bc7353fb5434f00cf0f7ee60d67c5537c800326d2fb6fb9a1e0554d205000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe7, &(0x7f00000002c0)=""/231, 0x41100, 0x39, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x3, 0x79c, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x0, 0x10, 0xfff}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}, 0xfc80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r3, r2, 0x4, 0x8}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0x10001) socketpair(0x2b, 0x6, 0xb59, &(0x7f0000000100)) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 778.391997ms ago: executing program 2 (id=8636): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x10, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000009c0)="3383808b370631a70f8408cbca4245fa77e014002f0660bb3fd42e25dd28f562d6a51076acebcb33b687433ed579993d9b061bc2c1dfbfb450dc9793be88cd63dce2012da885c28c0b3ac11203beb2a38236cbea0bde22e0dfa7958b2e980171be14b2", 0x0, &(0x7f0000000b80)="9f8a7fc4a93a3f162d577fe353d3d7fab74a2f3dfc9c70dc7046c1c3181e5dd8443c745acf8e4781f75c5c134300a89465fbf9921a6e724051e1310761a331dd16d4cf3843293ce28f1b5c7141a835188b22deeb5a889b972969e731ce0be7e70c093f0346515863f3f5558ac216c715a34632583c705eff3b76c34186c3c467baa329158cd9d7b3e2aa10ba4decd75aba5e74b64fc2b034346f659903a2f862b2890b30361f02375131977ab6d50accbfbaa849597ce4f6d3fccdee5938d3", &(0x7f0000000c40)="b1d16bb55a71781222a4006e8adde9d5a23f8607d75ab8d0ecde3235170a5e17b13fe0073724e4311376f8d81aaa562efd2f55889ca886300c62d526e8776de19005ee6456259410ba3f0e67be5224b494663192ae9a2a12e0fe5592921701d3cfc8ddcff7b804a643bd6ac67007675c5308904f23ae9c395d3e4d5fe23e104103e3b0816c05b7494d73fd340448f150fce4c72bc7a8bce6ccb339695ae6f248e351ed5194403eb6d2d707375c575a04a74af847a035d81eb8dc3ee89ed6ace58f5b6a247ee2d84e73db29d8aead455af7280b26d8e7975fa855c11db7df107df51539925a091ce11847288914965e1ba8a718102a92", 0x9, r3, 0x4}, 0xfffffffffffffd0e) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x24000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x10) perf_event_open$cgroup(&(0x7f0000004e40)={0x4, 0x80, 0x0, 0x9, 0x40, 0x5, 0x0, 0x5, 0x888, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff9}, 0x0, 0xfffffffffffffff7, 0x5, 0x5, 0x4, 0x8, 0x5190, 0x0, 0xe26, 0x0, 0xffffffffffffff01}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 523.829315ms ago: executing program 1 (id=8637): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={0x0, &(0x7f0000001500)=""/159, 0x0, 0x9f, 0x1, 0xa, 0x10000, @value=r2}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r2, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], &(0x7f00000016c0), 0x0, 0xfc, &(0x7f0000001700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0x8, 0x90, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r2, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xd7, 0x0, 0x0, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) 0s ago: executing program 0 (id=8638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xc, &(0x7f0000000240)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x64}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000015c0)={0xffffffffffffffff, &(0x7f0000000500)="39887569907deb90bb2a194ae8c75a73418df0b6fc2bd9c7aaed18000d011924f3c80f21a546e6e0a27d755dc18f806989200c37bf84557aa8bab88be642254babbe43d11a7eb10f35638cc573ff7bc6f08417c88676094bc998f59f6ca495f6063af0b30cbac0e4c1626c4551fca2b9162786d541e74965a5dad62607b4fcb31e4a08eefd0d157c69b926c8c6ab8eed19d04d88b9e6ebfd0a2f18c0991e101fb7fd6f5fb8d874c32c161d73e47d177e126deec87490df932cf6278508340ca8f1230c0bbbadf2052f44b3f468ec7262b3e4b6f41fd820465047b9217f46e27b80146e66096275b45867955d86c21692b3fbca9ae490e6b44aae579b0ad4a4635ac8a10a4cd07e3c064a15c00037b2a856414a6216d3481a3ab6b1b2c4476d7c98254003daa494d502f9522e2a9908624eccb3f7fb87196b9cbfb7725b8ad202eef66d6764a1ee653bffbcbc9c4783226ce52ffa8cd68383eb2e0009fcfb0866e058cb31bc463e1e657148c6f51bd5b3987f35258b642c856ec1074e1b4ec30bee06f7a0eb8ba536e78f8655422fba3c79375633cb0e25380ee1b9678d06f8867a86a3c291a74f6e226e4213a7fe5e04b2712393e9b3852acf26b416e2f90ef7a86f866432178ba911b9b232299f222adae72c1c740dd000fc5487255fe4019484ac01b988060d6b4ddc060b45a0375da53c4ddbfd7be9e47536632383221286aa2a0ad85cfbf270f15cc1ea6330e7a468353e3edf7e5c989836b5f23734297cb601fa6e91f4b8f78a0f82afe585a53fe5d89c2b0df8afc91f4cac3a4fc045ef5844353d9e75fb189dfc4c9067e410d529dfcd8fbf712d9875a9c57d2f0be4bdaae14fc07878663eae0479e9d1566e49f4d00ec75d960ee80c7e7155c70f40c97ba7a0da6c7145ce03e41fc8dd9cb74c2cfb3db62540054df19f1b6c97687b66fabc0870b27d1d5a9c9ba62c6608cce80a914f2a389bf21806180eafb73df4643ea225304daa98468d3c6b051385b2241f2e45c84c7b7d3084e7e0bae625524074e3d52a2a8a8939b9231c4ed1edd11a65d234bb9f7303189b669c9f2955bfef5a159b05b3713f15fb93a947a09aa025f398f27f683b8f1f6719e1c91f70d8d9c87540faebd1848bdd4c2b1ddfa996dc616df51947b23a083e443002f5c8002654533ea68e83ac0731b5a932fd6553f8ea22df1acd852946c6f59857650b486b9dcbe91a603dad33e28b69c5b4e1b33afff4436594c092a0f45fb63d303fd3076e35d4e96bf16c10e15ead9ceed0718e952f9e9c6286dce18eba567b52b09fa5439963a25714a6414dae5cb7b41b8ae74b2ab79546360009899ca4a3286e6fac41d5c30b7076ba58894ede03ca8df18ce474c8b095792f0608948a8753d690a12a16cf3053f1b264bf0a3c22e9a061cc77cb17a03850c2971b738aaa55ca744ca10894c663efe22686dd79449e885a71617ea885b9399c0e3cafa98b41ae9249947afd2497f3e4a0d81a4b0b69419ab3c0f592b507bcd280df65728a02e03d1b8963277d20541e88e4444f75a22d25a662a12f3c217867223d94d82c5410ebfd22f5fa3b15c0f51ba288dffc874db0b1a1dc09c898bcd5466a977ea0f9dd5e6a3cfa63d5594cb71daf770f9cc2d67fb8df0b60e2e21bba8b5d8d98fc5c34bfc9d3ca6c3d115d9e7adedb4bbe606385c9851028221385ac1cea122b8bc399d934c99aeb2f0dad75ae0d028676fa96b8637d4f9d20a17e5ec6d7fba4a5120a566d33844e3522da4833ea285d68230b23bc9d68cdf571593fa304da77d48a64075c89803bc91e56ab5f32c2a0f0b221b37eddf032cd625508e83e948d318192ec991486aef53051802a4ba7b5bd10f3d3b177da4249a014236888b8d43130bc810f96961fbd3f91f58ca3fcb34377d4fba2edbd1ec7f1236cb9ee81e479cb621d80bbfea6e3ad608d62b5e6dc79c6f535df9615746376a5df5d348452fe6c60267826e2d6f59a1c47b29295b55d4990babfd83113aa879455f661e0790464c3fcd30c1db1ef658f22ec4006c09661b02da9ecb2e43ac23ba465707632b0c9a8cf22946e2a8960c1b98ea854d7df6d76d3d9290cff7ff0a04e6a0ec43fb7b5cd9e2798513908120d8f4024849793768499eb9cd221b0bbffbcd7ed41a3b018c3b16655000a2509189a8c5161922bef144c5286401682001e5f34fcd765c85f22cef454a1fba3441cae91371c9858be721ed10ddd37446e605888bed52f0893a195fdc8460a963b5279e373c5dabdd29288f9daad37570d022910002ea6080eec209cab828482b6d349f39767c5820126d47efe63845f1c4a6fca125f721d28593ec95a94390b575b45b877808fbc400713e76eb997deb16d9d27170420b73e87ab4322ffaf34ffa51c3a3ab0561c328a6a5f753b5ad267cdb16081193315a64dae509ee7edfafbb85746ee5072bafd7a5970fe9e37c3453507232626f5d1bdcbe110d38de259cca8bdfde21d60028d35857d32f9331b23cc99edcebd80f4c7354e6db60810330e", 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r3, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r6}, &(0x7f0000000c00), &(0x7f0000000c40)=r4}, 0x20) kernel console output (not intermixed with test programs): ode [ 1221.858423][T27218] veth1_vlan: left promiscuous mode [ 1221.863866][T27218] veth0_vlan: left promiscuous mode [ 1222.249748][T28672] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7571'. [ 1223.230684][T28683] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7574'. [ 1223.260055][T28683] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1224.050731][T27218] team0 (unregistering): Port device team_slave_1 removed [ 1224.135046][T27218] team0 (unregistering): Port device team_slave_0 removed [ 1224.677041][T28666] netlink: 'syz.3.7567': attribute type 10 has an invalid length. [ 1225.621115][T28708] netlink: 'syz.0.7584': attribute type 9 has an invalid length. [ 1225.629243][T28708] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7584'. [ 1226.883792][T28724] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7589'. [ 1226.930678][T28719] netlink: 'syz.0.7586': attribute type 10 has an invalid length. [ 1227.087322][T28726] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7587'. [ 1227.167732][T28726] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1227.838953][T28739] netlink: 'syz.3.7594': attribute type 10 has an invalid length. [ 1227.867605][T28739] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7594'. [ 1228.411070][T28756] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7600'. [ 1228.880046][T28763] netlink: 'syz.1.7602': attribute type 10 has an invalid length. [ 1228.975720][T28763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.042843][T28763] bond0: (slave team0): Enslaving as an active interface with an up link [ 1229.597101][T28775] netlink: 'syz.1.7605': attribute type 9 has an invalid length. [ 1229.618599][T28775] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7605'. [ 1229.893515][T28779] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1229.924624][T28779] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1230.711653][T28790] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1231.095215][T28802] netlink: 'syz.1.7615': attribute type 10 has an invalid length. [ 1231.358853][T28802] bond0: (slave team0): Releasing backup interface [ 1231.523661][T28802] team0 (unregistering): Port device team_slave_0 removed [ 1231.571184][T28802] team0 (unregistering): Port device team_slave_1 removed [ 1231.588618][T28812] netlink: 'syz.3.7617': attribute type 9 has an invalid length. [ 1231.613541][T28812] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7617'. [ 1231.798940][T28815] netlink: 'syz.0.7614': attribute type 10 has an invalid length. [ 1233.032183][T28821] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7619'. [ 1233.045655][T28821] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1233.438633][T28835] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1234.000233][T28846] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1234.036128][T28842] netlink: 'syz.1.7627': attribute type 9 has an invalid length. [ 1234.159050][T28842] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7627'. [ 1234.800707][T28853] netlink: 'syz.2.7628': attribute type 10 has an invalid length. [ 1234.817190][T28852] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7630'. [ 1235.373432][T28857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.381286][T28857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.406635][T28857] bridge0: entered allmulticast mode [ 1235.622264][T28862] bridge_slave_1: left allmulticast mode [ 1235.671004][T28862] bridge_slave_1: left promiscuous mode [ 1235.681508][T28862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.728543][T28862] bridge_slave_0: left allmulticast mode [ 1235.734336][T28862] bridge_slave_0: left promiscuous mode [ 1235.808361][T28862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.915405][T28870] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7636'. [ 1235.985004][T28872] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7633'. [ 1236.005468][T28872] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1236.675150][T28883] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1236.904141][T28885] netlink: 'syz.0.7640': attribute type 9 has an invalid length. [ 1236.933720][T28885] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7640'. [ 1239.114940][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.121699][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.141029][T28920] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7649'. [ 1240.157184][T28930] netlink: 'syz.3.7652': attribute type 9 has an invalid length. [ 1240.188766][T28930] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7652'. [ 1240.203973][T28934] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7653'. [ 1241.180233][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1241.382287][T28951] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7661'. [ 1243.801762][T28978] netlink: 'syz.1.7667': attribute type 9 has an invalid length. [ 1243.812749][T28978] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7667'. [ 1246.331802][T29022] netlink: 'syz.1.7681': attribute type 9 has an invalid length. [ 1246.349316][T29022] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7681'. [ 1246.816651][T29020] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7680'. [ 1246.833014][T29026] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7679'. [ 1246.869161][T29020] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1247.083528][T29026] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1248.561568][T29051] netlink: 'syz.0.7687': attribute type 29 has an invalid length. [ 1248.606281][T29051] netlink: 'syz.0.7687': attribute type 29 has an invalid length. [ 1248.645304][T29053] netlink: 'syz.0.7687': attribute type 29 has an invalid length. [ 1248.790840][T29054] netlink: 'syz.0.7687': attribute type 29 has an invalid length. [ 1249.998112][T29065] netlink: 'syz.0.7690': attribute type 9 has an invalid length. [ 1250.006317][T29065] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7690'. [ 1250.399723][T29071] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7692'. [ 1250.452646][T29071] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1251.420615][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 1251.554805][T29094] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7696'. [ 1251.597743][T29094] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1252.470537][T29099] netlink: 'syz.2.7699': attribute type 29 has an invalid length. [ 1252.485609][T29099] netlink: 'syz.2.7699': attribute type 29 has an invalid length. [ 1252.520358][T29102] netlink: 'syz.2.7699': attribute type 29 has an invalid length. [ 1252.547958][T29103] netlink: 'syz.2.7699': attribute type 29 has an invalid length. [ 1252.735731][T29105] netlink: 'syz.3.7702': attribute type 9 has an invalid length. [ 1252.763684][T29105] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7702'. [ 1253.213646][T29113] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1253.261619][T29113] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1253.631236][T29111] netlink: 'syz.2.7703': attribute type 9 has an invalid length. [ 1253.662494][T29111] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7703'. [ 1253.929436][T29123] FAULT_INJECTION: forcing a failure. [ 1253.929436][T29123] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.942398][T29123] CPU: 0 PID: 29123 Comm: syz.2.7708 Not tainted syzkaller #0 [ 1253.950012][T29123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1253.960830][T29123] Call Trace: [ 1253.964165][T29123] [ 1253.967329][T29123] dump_stack_lvl+0x18c/0x250 [ 1253.972102][T29123] ? show_regs_print_info+0x20/0x20 [ 1253.977317][T29120] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7706'. [ 1253.986888][T29123] ? load_image+0x420/0x420 [ 1253.991465][T29123] ? __might_sleep+0xe0/0xe0 [ 1253.996329][T29123] ? __lock_acquire+0x7d40/0x7d40 [ 1254.001403][T29123] should_fail_ex+0x39d/0x4d0 [ 1254.006159][T29123] should_failslab+0x9/0x20 [ 1254.010917][T29123] slab_pre_alloc_hook+0x59/0x310 [ 1254.016007][T29123] ? kernfs_fop_write_iter+0x159/0x520 [ 1254.021540][T29123] ? kernfs_fop_write_iter+0x159/0x520 [ 1254.027307][T29123] __kmem_cache_alloc_node+0x53/0x250 [ 1254.033162][T29123] ? kernfs_fop_write_iter+0x159/0x520 [ 1254.038670][T29123] __kmalloc+0xa4/0x230 [ 1254.043609][T29123] kernfs_fop_write_iter+0x159/0x520 [ 1254.048968][T29123] vfs_write+0x46c/0x990 [ 1254.053268][T29123] ? file_end_write+0x250/0x250 [ 1254.058428][T29123] ? __fget_files+0x43d/0x4b0 [ 1254.063530][T29123] ? __fdget_pos+0x2a3/0x330 [ 1254.068264][T29123] ? ksys_write+0x75/0x260 [ 1254.072776][T29123] ksys_write+0x150/0x260 [ 1254.077292][T29123] ? __ia32_sys_read+0x90/0x90 [ 1254.082379][T29123] ? lockdep_hardirqs_on+0x98/0x150 [ 1254.087801][T29123] do_syscall_64+0x55/0xb0 [ 1254.092993][T29123] ? clear_bhb_loop+0x40/0x90 [ 1254.097902][T29123] ? clear_bhb_loop+0x40/0x90 [ 1254.102649][T29123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1254.108648][T29123] RIP: 0033:0x7f298f79ce59 [ 1254.113470][T29123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.133740][T29123] RSP: 002b:00007f29905a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1254.142334][T29123] RAX: ffffffffffffffda RBX: 00007f298fa15fa0 RCX: 00007f298f79ce59 [ 1254.150476][T29123] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000005 [ 1254.158482][T29123] RBP: 00007f29905a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.166671][T29123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.174690][T29123] R13: 00007f298fa16038 R14: 00007f298fa15fa0 R15: 00007ffd96fff4b8 [ 1254.182737][T29123] [ 1254.828303][T29131] netlink: 'syz.1.7711': attribute type 29 has an invalid length. [ 1254.866210][T29131] netlink: 'syz.1.7711': attribute type 29 has an invalid length. [ 1254.933815][T29133] netlink: 'syz.1.7711': attribute type 29 has an invalid length. [ 1255.008660][T29131] netlink: 'syz.1.7711': attribute type 29 has an invalid length. [ 1255.135497][T29129] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7710'. [ 1255.165468][T29129] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1255.745036][T29147] netlink: 'syz.2.7716': attribute type 9 has an invalid length. [ 1255.799860][T29147] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7716'. [ 1256.113313][T29156] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1256.147894][T29156] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1256.606990][T29160] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7720'. [ 1256.931271][T29166] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7722'. [ 1256.976513][T29167] netlink: 'syz.1.7729': attribute type 9 has an invalid length. [ 1257.027641][T29167] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7729'. [ 1257.711384][T29173] netlink: 'syz.2.7724': attribute type 9 has an invalid length. [ 1258.418631][T29187] __nla_validate_parse: 1 callbacks suppressed [ 1258.418655][T29187] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7731'. [ 1258.688221][T29195] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7732'. [ 1258.717636][T29195] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1260.670338][T29221] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7744'. [ 1262.358411][T29233] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1262.429287][T29233] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1263.294678][T29256] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1263.347521][T29256] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1263.592249][T29261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1263.759943][T29262] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7755'. [ 1263.949951][T29265] FAULT_INJECTION: forcing a failure. [ 1263.949951][T29265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.977595][T29265] CPU: 1 PID: 29265 Comm: syz.1.7756 Not tainted syzkaller #0 [ 1263.985502][T29265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.995606][T29265] Call Trace: [ 1263.998945][T29265] [ 1264.001930][T29265] dump_stack_lvl+0x18c/0x250 [ 1264.006683][T29265] ? show_regs_print_info+0x20/0x20 [ 1264.011949][T29265] ? load_image+0x420/0x420 [ 1264.016515][T29265] ? __might_fault+0xaa/0x120 [ 1264.021234][T29265] ? __lock_acquire+0x7d40/0x7d40 [ 1264.026301][T29265] should_fail_ex+0x39d/0x4d0 [ 1264.031112][T29265] _copy_from_user+0x2f/0xe0 [ 1264.036454][T29265] ___sys_sendmsg+0x1c7/0x360 [ 1264.041272][T29265] ? __sys_sendmsg+0x2a0/0x2a0 [ 1264.046277][T29265] ? __lock_acquire+0x7d40/0x7d40 [ 1264.051383][T29265] __se_sys_sendmsg+0x1c2/0x2b0 [ 1264.056374][T29265] ? __x64_sys_sendmsg+0x80/0x80 [ 1264.061471][T29265] ? lockdep_hardirqs_on+0x98/0x150 [ 1264.066799][T29265] do_syscall_64+0x55/0xb0 [ 1264.071251][T29265] ? clear_bhb_loop+0x40/0x90 [ 1264.075965][T29265] ? clear_bhb_loop+0x40/0x90 [ 1264.080779][T29265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.086878][T29265] RIP: 0033:0x7f416119ce59 [ 1264.091332][T29265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.111065][T29265] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.119618][T29265] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1264.127619][T29265] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1264.135627][T29265] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.145470][T29265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.153483][T29265] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1264.161594][T29265] [ 1264.670039][T29271] netlink: 'syz.1.7758': attribute type 9 has an invalid length. [ 1264.702971][T29273] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7761'. [ 1264.757906][T29271] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1266.476114][T29299] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7769'. [ 1266.528041][T29301] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7770'. [ 1266.790424][T14721] Bluetooth: hci4: command 0x0406 tx timeout [ 1267.013059][T29308] netlink: 'syz.1.7772': attribute type 9 has an invalid length. [ 1267.026147][T29308] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7772'. [ 1267.922034][T29312] netlink: 'syz.2.7774': attribute type 29 has an invalid length. [ 1268.067170][T29312] netlink: 'syz.2.7774': attribute type 29 has an invalid length. [ 1268.129612][T29315] netlink: 'syz.2.7774': attribute type 29 has an invalid length. [ 1268.200314][T29317] netlink: 'syz.2.7774': attribute type 29 has an invalid length. [ 1268.564433][T29324] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7776'. [ 1268.590586][T29324] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1269.611321][T29335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7781'. [ 1270.025575][T29342] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7783'. [ 1270.195407][T29345] netlink: 'syz.1.7784': attribute type 9 has an invalid length. [ 1270.230788][T29345] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7784'. [ 1275.146957][T29382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7796'. [ 1275.351014][T29388] netlink: 'syz.2.7795': attribute type 10 has an invalid length. [ 1279.065718][T29395] netlink: 'syz.3.7797': attribute type 29 has an invalid length. [ 1279.074258][T29395] netlink: 'syz.3.7797': attribute type 29 has an invalid length. [ 1279.083258][T29398] netlink: 'syz.3.7797': attribute type 29 has an invalid length. [ 1279.092759][T29402] netlink: 'syz.3.7797': attribute type 29 has an invalid length. [ 1279.355998][T29409] netlink: 'syz.1.7801': attribute type 12 has an invalid length. [ 1279.392706][T29409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7801'. [ 1279.488936][T29409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7801'. [ 1280.645127][T29421] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7805'. [ 1280.683824][T29421] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1281.449832][T29436] netlink: 'syz.3.7806': attribute type 10 has an invalid length. [ 1285.992329][T29473] netlink: 'syz.1.7819': attribute type 10 has an invalid length. [ 1286.408401][T29491] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7824'. [ 1286.432793][T29491] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1289.998161][T29512] netlink: 'syz.3.7832': attribute type 9 has an invalid length. [ 1290.006405][T29512] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1290.910090][T29529] netlink: 'syz.1.7834': attribute type 10 has an invalid length. [ 1291.508252][T29536] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7838'. [ 1291.553676][T29536] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1291.796861][T29541] netlink: 'syz.2.7841': attribute type 12 has an invalid length. [ 1291.831240][T29541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7841'. [ 1291.894597][T29543] FAULT_INJECTION: forcing a failure. [ 1291.894597][T29543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.925934][T29543] CPU: 1 PID: 29543 Comm: syz.2.7841 Not tainted syzkaller #0 [ 1291.933535][T29543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1291.943787][T29543] Call Trace: [ 1291.947147][T29543] [ 1291.950167][T29543] dump_stack_lvl+0x18c/0x250 [ 1291.954942][T29543] ? show_regs_print_info+0x20/0x20 [ 1291.960235][T29543] ? load_image+0x420/0x420 [ 1291.964850][T29543] ? __might_fault+0xaa/0x120 [ 1291.969797][T29543] ? __lock_acquire+0x7d40/0x7d40 [ 1291.974946][T29543] should_fail_ex+0x39d/0x4d0 [ 1291.979750][T29543] _copy_from_iter+0x1d9/0x12e0 [ 1291.984697][T29543] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1291.990090][T29543] ? __virt_addr_valid+0x18c/0x540 [ 1291.995308][T29543] ? __lock_acquire+0x7d40/0x7d40 [ 1292.000430][T29543] ? rcu_is_watching+0x15/0xb0 [ 1292.005390][T29543] ? copyout_mc+0x70/0x70 [ 1292.009996][T29543] ? __virt_addr_valid+0x18c/0x540 [ 1292.015211][T29543] ? __virt_addr_valid+0x18c/0x540 [ 1292.020501][T29543] ? __virt_addr_valid+0x469/0x540 [ 1292.025866][T29543] ? __check_object_size+0x506/0xa20 [ 1292.031385][T29543] netlink_sendmsg+0x76b/0xbf0 [ 1292.036347][T29543] ? perf_trace_lock+0x304/0x3b0 [ 1292.041415][T29543] ? netlink_getsockopt+0x590/0x590 [ 1292.046823][T29543] ? aa_sock_msg_perm+0x94/0x150 [ 1292.051972][T29543] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1292.057527][T29543] ? security_socket_sendmsg+0x80/0xa0 [ 1292.063086][T29543] ? netlink_getsockopt+0x590/0x590 [ 1292.068488][T29543] ____sys_sendmsg+0x5ba/0x960 [ 1292.073464][T29543] ? __asan_memset+0x22/0x40 [ 1292.078156][T29543] ? __sys_sendmsg_sock+0x30/0x30 [ 1292.083264][T29543] ? __import_iovec+0x5f2/0x850 [ 1292.088337][T29543] ? import_iovec+0x73/0xa0 [ 1292.093049][T29543] ___sys_sendmsg+0x2a6/0x360 [ 1292.097856][T29543] ? __sys_sendmsg+0x2a0/0x2a0 [ 1292.102937][T29543] ? __lock_acquire+0x7d40/0x7d40 [ 1292.108141][T29543] __se_sys_sendmsg+0x1c2/0x2b0 [ 1292.113102][T29543] ? __x64_sys_sendmsg+0x80/0x80 [ 1292.118185][T29543] ? lockdep_hardirqs_on+0x98/0x150 [ 1292.123566][T29543] do_syscall_64+0x55/0xb0 [ 1292.128047][T29543] ? clear_bhb_loop+0x40/0x90 [ 1292.132878][T29543] ? clear_bhb_loop+0x40/0x90 [ 1292.137624][T29543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.143585][T29543] RIP: 0033:0x7f298f79ce59 [ 1292.148058][T29543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.167818][T29543] RSP: 002b:00007f2990586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.176404][T29543] RAX: ffffffffffffffda RBX: 00007f298fa16090 RCX: 00007f298f79ce59 [ 1292.184442][T29543] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 1292.192474][T29543] RBP: 00007f2990586090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.200549][T29543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.208594][T29543] R13: 00007f298fa16128 R14: 00007f298fa16090 R15: 00007ffd96fff4b8 [ 1292.216664][T29543] [ 1292.428453][T29545] netlink: 'syz.3.7843': attribute type 29 has an invalid length. [ 1292.439641][T29545] netlink: 'syz.3.7843': attribute type 29 has an invalid length. [ 1292.450847][T29548] netlink: 'syz.3.7843': attribute type 29 has an invalid length. [ 1292.468053][T29545] netlink: 'syz.3.7843': attribute type 29 has an invalid length. [ 1293.805316][T29565] netlink: 'syz.3.7847': attribute type 10 has an invalid length. [ 1293.999625][T29578] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7852'. [ 1294.916132][T29588] netlink: 'syz.2.7857': attribute type 29 has an invalid length. [ 1294.992972][T29588] netlink: 'syz.2.7857': attribute type 29 has an invalid length. [ 1295.187122][T29593] netlink: 'syz.2.7857': attribute type 29 has an invalid length. [ 1295.268569][T29595] netlink: 'syz.2.7857': attribute type 29 has an invalid length. [ 1296.295617][T29615] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1296.551647][T29624] netlink: 'syz.2.7862': attribute type 10 has an invalid length. [ 1297.464706][T29637] netlink: 'syz.2.7871': attribute type 29 has an invalid length. [ 1297.531368][T29637] netlink: 'syz.2.7871': attribute type 29 has an invalid length. [ 1297.547953][T29640] netlink: 'syz.2.7871': attribute type 29 has an invalid length. [ 1297.620723][T29632] netlink: 'syz.2.7871': attribute type 29 has an invalid length. [ 1298.435934][T29651] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7879'. [ 1298.461530][T29652] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7878'. [ 1299.363344][T29664] netlink: 'syz.2.7880': attribute type 10 has an invalid length. [ 1300.187091][T29677] netlink: 'syz.3.7888': attribute type 29 has an invalid length. [ 1300.215975][T29677] netlink: 'syz.3.7888': attribute type 29 has an invalid length. [ 1300.230927][T29678] netlink: 'syz.3.7888': attribute type 29 has an invalid length. [ 1300.280361][T29677] netlink: 'syz.3.7888': attribute type 29 has an invalid length. [ 1300.360330][T29683] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7890'. [ 1300.553429][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.560426][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.677710][T29709] netlink: 'syz.1.7895': attribute type 10 has an invalid length. [ 1301.751599][T29702] netlink: 'syz.3.7900': attribute type 29 has an invalid length. [ 1301.853856][T29702] netlink: 'syz.3.7900': attribute type 29 has an invalid length. [ 1301.968800][T29707] netlink: 'syz.3.7900': attribute type 29 has an invalid length. [ 1302.009224][T29708] netlink: 'syz.3.7900': attribute type 29 has an invalid length. [ 1302.242584][T29712] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1302.954295][T29718] netlink: 'syz.3.7904': attribute type 9 has an invalid length. [ 1302.967617][T29718] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1304.213151][T29745] netlink: 'syz.2.7911': attribute type 9 has an invalid length. [ 1304.315947][T29745] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7911'. [ 1304.599938][T29750] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1304.666289][T29751] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7914'. [ 1305.903721][T29764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7917'. [ 1305.918920][T29764] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1306.086797][T29763] validate_nla: 1 callbacks suppressed [ 1306.086911][T29763] netlink: 'syz.0.7916': attribute type 9 has an invalid length. [ 1306.141377][T29763] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7916'. [ 1307.288348][T29775] netlink: 'syz.2.7922': attribute type 10 has an invalid length. [ 1310.046503][T29798] FAULT_INJECTION: forcing a failure. [ 1310.046503][T29798] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.066231][T29798] CPU: 0 PID: 29798 Comm: syz.1.7932 Not tainted syzkaller #0 [ 1310.073785][T29798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1310.083907][T29798] Call Trace: [ 1310.087322][T29798] [ 1310.090315][T29798] dump_stack_lvl+0x18c/0x250 [ 1310.095055][T29798] ? show_regs_print_info+0x20/0x20 [ 1310.100318][T29798] ? load_image+0x420/0x420 [ 1310.104916][T29798] ? __might_sleep+0xe0/0xe0 [ 1310.109566][T29798] ? __lock_acquire+0x7d40/0x7d40 [ 1310.114663][T29798] should_fail_ex+0x39d/0x4d0 [ 1310.119437][T29798] should_failslab+0x9/0x20 [ 1310.124002][T29798] slab_pre_alloc_hook+0x59/0x310 [ 1310.129109][T29798] ? kvmalloc_node+0x70/0x180 [ 1310.133872][T29798] ? kvmalloc_node+0x70/0x180 [ 1310.138701][T29798] __kmem_cache_alloc_node+0x53/0x250 [ 1310.144153][T29798] ? kvmalloc_node+0x70/0x180 [ 1310.149035][T29798] __kmalloc_node+0xa4/0x230 [ 1310.153710][T29798] kvmalloc_node+0x70/0x180 [ 1310.158293][T29798] page_pool_create+0x1eb/0x5c0 [ 1310.163223][T29798] bpf_test_run_xdp_live+0x203/0x1b20 [ 1310.168851][T29798] ? 0xffffffffa0004740 [ 1310.173079][T29798] ? 0xffffffffa0004740 [ 1310.177295][T29798] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1310.183257][T29798] ? 0xffffffffa0004740 [ 1310.187578][T29798] ? xdp_convert_md_to_buff+0x330/0x330 [ 1310.193238][T29798] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1310.199815][T29798] ? _copy_from_user+0xa5/0xe0 [ 1310.204745][T29798] ? bpf_test_init+0x119/0x140 [ 1310.209667][T29798] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1310.215199][T29798] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1310.220849][T29798] ? dev_put+0x80/0x80 [ 1310.225094][T29798] ? dev_put+0x80/0x80 [ 1310.229386][T29798] bpf_prog_test_run+0x321/0x390 [ 1310.234528][T29798] __sys_bpf+0x49d/0x890 [ 1310.238930][T29798] ? bpf_link_show_fdinfo+0x390/0x390 [ 1310.244388][T29798] ? lock_chain_count+0x20/0x20 [ 1310.249316][T29798] __x64_sys_bpf+0x7c/0x90 [ 1310.253804][T29798] do_syscall_64+0x55/0xb0 [ 1310.258280][T29798] ? clear_bhb_loop+0x40/0x90 [ 1310.263114][T29798] ? clear_bhb_loop+0x40/0x90 [ 1310.267959][T29798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1310.273916][T29798] RIP: 0033:0x7f416119ce59 [ 1310.278403][T29798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.298253][T29798] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1310.306726][T29798] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1310.315111][T29798] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1310.323429][T29798] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.331452][T29798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.339652][T29798] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1310.347794][T29798] [ 1310.365499][T29798] page_pool_create() gave up with errno -12 [ 1310.637089][T29795] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.7931'. [ 1310.648173][T29795] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1310.976883][T29810] netlink: 'syz.1.7935': attribute type 10 has an invalid length. [ 1311.392246][T29816] netlink: 'syz.2.7936': attribute type 9 has an invalid length. [ 1311.405087][T29816] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7936'. [ 1311.452796][T29819] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7944'. [ 1311.497564][T29819] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1314.425077][T29851] netlink: 'syz.0.7947': attribute type 10 has an invalid length. [ 1314.807833][T29862] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7953'. [ 1314.846447][T29858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1314.857761][T29858] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1315.026373][T29866] FAULT_INJECTION: forcing a failure. [ 1315.026373][T29866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.041984][T29866] CPU: 0 PID: 29866 Comm: syz.1.7954 Not tainted syzkaller #0 [ 1315.049730][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1315.060140][T29866] Call Trace: [ 1315.063504][T29866] [ 1315.066704][T29866] dump_stack_lvl+0x18c/0x250 [ 1315.071495][T29866] ? show_regs_print_info+0x20/0x20 [ 1315.076805][T29866] ? load_image+0x420/0x420 [ 1315.081715][T29866] ? __might_fault+0xaa/0x120 [ 1315.086648][T29866] ? __lock_acquire+0x7d40/0x7d40 [ 1315.091774][T29866] should_fail_ex+0x39d/0x4d0 [ 1315.096541][T29866] _copy_to_user+0x2f/0xa0 [ 1315.101034][T29866] bpf_test_finish+0x19f/0x650 [ 1315.106051][T29866] ? convert___skb_to_skb+0x590/0x590 [ 1315.111495][T29866] ? convert_skb_to___skb+0x420/0x420 [ 1315.117143][T29866] ? slab_build_skb+0x25f/0x3f0 [ 1315.122409][T29866] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1315.128033][T29866] ? cpu_online+0x60/0x60 [ 1315.132517][T29866] bpf_prog_test_run+0x321/0x390 [ 1315.139083][T29866] __sys_bpf+0x49d/0x890 [ 1315.144123][T29866] ? bpf_link_show_fdinfo+0x390/0x390 [ 1315.149705][T29866] ? lock_chain_count+0x20/0x20 [ 1315.154918][T29866] __x64_sys_bpf+0x7c/0x90 [ 1315.159503][T29866] do_syscall_64+0x55/0xb0 [ 1315.164179][T29866] ? clear_bhb_loop+0x40/0x90 [ 1315.168918][T29866] ? clear_bhb_loop+0x40/0x90 [ 1315.173755][T29866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1315.179744][T29866] RIP: 0033:0x7f416119ce59 [ 1315.184412][T29866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.204258][T29866] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1315.212831][T29866] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1315.221057][T29866] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1315.229796][T29866] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.238011][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.246193][T29866] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1315.254461][T29866] [ 1316.240582][T29885] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7962'. [ 1318.140888][T29893] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.7966'. [ 1318.198338][T29893] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1318.651036][T29910] netlink: 'syz.1.7973': attribute type 9 has an invalid length. [ 1318.676672][T29910] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7973'. [ 1319.241810][T29925] netlink: 'syz.1.7979': attribute type 29 has an invalid length. [ 1319.282672][T29925] netlink: 'syz.1.7979': attribute type 29 has an invalid length. [ 1319.341225][T29929] netlink: 'syz.1.7979': attribute type 29 has an invalid length. [ 1319.464651][T29931] netlink: 'syz.1.7979': attribute type 29 has an invalid length. [ 1320.426515][T29947] netlink: 'syz.0.7988': attribute type 6 has an invalid length. [ 1320.438496][T29947] netlink: 'syz.0.7988': attribute type 3 has an invalid length. [ 1320.474048][T29947] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.7988'. [ 1320.579449][T29950] netlink: 'syz.2.7987': attribute type 9 has an invalid length. [ 1320.593194][T29949] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1320.698409][T29950] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1320.758779][T29949] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1322.005872][T29963] netlink: 'syz.3.7991': attribute type 29 has an invalid length. [ 1322.147900][T29963] netlink: 'syz.3.7991': attribute type 29 has an invalid length. [ 1323.544646][T29982] mac80211_hwsim hwsim329 ..ãc¤±: renamed from wlan1 (while UP) [ 1323.838721][T29985] validate_nla: 2 callbacks suppressed [ 1323.838814][T29985] netlink: 'syz.3.7999': attribute type 9 has an invalid length. [ 1323.875541][T29991] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8000'. [ 1323.899830][T29985] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1323.975175][T29991] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1324.169527][T29990] netlink: 'syz.2.8002': attribute type 29 has an invalid length. [ 1324.772947][T29990] netlink: 'syz.2.8002': attribute type 29 has an invalid length. [ 1324.861449][T29993] netlink: 'syz.2.8002': attribute type 29 has an invalid length. [ 1324.889432][T29996] netlink: 'syz.2.8002': attribute type 29 has an invalid length. [ 1326.175290][T30028] netlink: 'syz.1.8011': attribute type 10 has an invalid length. [ 1326.191798][T30034] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8014'. [ 1326.967242][T30051] FAULT_INJECTION: forcing a failure. [ 1326.967242][T30051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.011106][T30051] CPU: 0 PID: 30051 Comm: syz.0.8020 Not tainted syzkaller #0 [ 1327.018706][T30051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1327.027003][T30042] netlink: 'syz.1.8016': attribute type 29 has an invalid length. [ 1327.028813][T30051] Call Trace: [ 1327.028830][T30051] [ 1327.028847][T30051] dump_stack_lvl+0x18c/0x250 [ 1327.028893][T30051] ? show_regs_print_info+0x20/0x20 [ 1327.028926][T30051] ? load_image+0x420/0x420 [ 1327.028987][T30051] ? __might_fault+0xaa/0x120 [ 1327.029042][T30051] should_fail_ex+0x39d/0x4d0 [ 1327.029104][T30051] copyin+0x1a/0x90 [ 1327.029150][T30051] _copy_from_iter+0x404/0x12e0 [ 1327.077257][T30051] ? __virt_addr_valid+0x18c/0x540 [ 1327.082477][T30051] ? __lock_acquire+0x7d40/0x7d40 [ 1327.087704][T30051] ? copyout_mc+0x70/0x70 [ 1327.092127][T30051] ? __virt_addr_valid+0x18c/0x540 [ 1327.097426][T30051] ? __virt_addr_valid+0x18c/0x540 [ 1327.102715][T30051] ? __virt_addr_valid+0x469/0x540 [ 1327.107921][T30051] ? __check_object_size+0x506/0xa20 [ 1327.113307][T30051] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 1327.119124][T30051] ? dev_get_by_index+0x22/0x2d0 [ 1327.124156][T30051] ? skb_put+0x11b/0x210 [ 1327.128510][T30051] packet_sendmsg+0x33ff/0x4c30 [ 1327.133560][T30051] ? __might_sleep+0xe0/0xe0 [ 1327.138515][T30051] ? perf_trace_lock_acquire+0x34f/0x410 [ 1327.144339][T30051] ? aa_sk_perm+0x83c/0x970 [ 1327.149027][T30051] ? packet_getsockopt+0xad0/0xad0 [ 1327.154253][T30051] ? tomoyo_write_file+0x76/0xc50 [ 1327.159378][T30042] netlink: 'syz.1.8016': attribute type 29 has an invalid length. [ 1327.159391][T30051] ? aa_sock_msg_perm+0x94/0x150 [ 1327.172398][T30051] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1327.177774][T30051] ? security_socket_sendmsg+0x80/0xa0 [ 1327.183314][T30051] ? packet_getsockopt+0xad0/0xad0 [ 1327.188534][T30051] ____sys_sendmsg+0x5ba/0x960 [ 1327.193443][T30051] ? __lock_acquire+0x7d40/0x7d40 [ 1327.198576][T30051] ? __asan_memset+0x22/0x40 [ 1327.203257][T30051] ? __sys_sendmsg_sock+0x30/0x30 [ 1327.208368][T30051] ? __import_iovec+0x3fa/0x850 [ 1327.213599][T30051] ? import_iovec+0x73/0xa0 [ 1327.218351][T30051] ___sys_sendmsg+0x2a6/0x360 [ 1327.223149][T30051] ? __sys_sendmsg+0x2a0/0x2a0 [ 1327.228084][T30051] ? trace_call_bpf+0xc3/0x6c0 [ 1327.233047][T30051] __se_sys_sendmsg+0x1c2/0x2b0 [ 1327.238001][T30051] ? __x64_sys_sendmsg+0x80/0x80 [ 1327.243091][T30051] ? lockdep_hardirqs_on+0x98/0x150 [ 1327.248392][T30051] do_syscall_64+0x55/0xb0 [ 1327.252887][T30051] ? clear_bhb_loop+0x40/0x90 [ 1327.253902][T30046] netlink: 'syz.1.8016': attribute type 29 has an invalid length. [ 1327.257620][T30051] ? clear_bhb_loop+0x40/0x90 [ 1327.257669][T30051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.257702][T30051] RIP: 0033:0x7fcb9fd9ce59 [ 1327.257731][T30051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.257753][T30051] RSP: 002b:00007fcba0bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.257785][T30051] RAX: ffffffffffffffda RBX: 00007fcba0015fa0 RCX: 00007fcb9fd9ce59 [ 1327.257806][T30051] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1327.257824][T30051] RBP: 00007fcba0bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.257842][T30051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.257860][T30051] R13: 00007fcba0016038 R14: 00007fcba0015fa0 R15: 00007ffe41793ee8 [ 1327.257939][T30051] [ 1327.371075][T30048] netlink: 'syz.1.8016': attribute type 29 has an invalid length. [ 1328.277639][T14721] Bluetooth: hci2: command 0x0406 tx timeout [ 1328.895485][T30079] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8026'. [ 1329.185239][T30087] validate_nla: 1 callbacks suppressed [ 1329.186856][T30087] netlink: 'syz.2.8031': attribute type 29 has an invalid length. [ 1329.225282][T30087] netlink: 'syz.2.8031': attribute type 29 has an invalid length. [ 1329.269442][T30088] netlink: 'syz.2.8031': attribute type 29 has an invalid length. [ 1329.296008][T30087] netlink: 'syz.2.8031': attribute type 29 has an invalid length. [ 1329.823344][T30083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1330.301351][T30106] netlink: 'syz.2.8038': attribute type 10 has an invalid length. [ 1330.868236][T30125] netlink: 'syz.3.8043': attribute type 29 has an invalid length. [ 1330.887209][T30125] netlink: 'syz.3.8043': attribute type 29 has an invalid length. [ 1330.903740][T30125] netlink: 'syz.3.8043': attribute type 29 has an invalid length. [ 1330.931009][T30125] netlink: 'syz.3.8043': attribute type 29 has an invalid length. [ 1331.984038][T30143] netlink: 'syz.0.8049': attribute type 10 has an invalid length. [ 1332.463976][T30158] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8052'. [ 1332.657561][T30155] FAULT_INJECTION: forcing a failure. [ 1332.657561][T30155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.689548][T30155] CPU: 0 PID: 30155 Comm: syz.0.8054 Not tainted syzkaller #0 [ 1332.697108][T30155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1332.707215][T30155] Call Trace: [ 1332.710545][T30155] [ 1332.713515][T30155] dump_stack_lvl+0x18c/0x250 [ 1332.718359][T30155] ? show_regs_print_info+0x20/0x20 [ 1332.723796][T30155] ? load_image+0x420/0x420 [ 1332.728375][T30155] ? __might_fault+0xaa/0x120 [ 1332.733111][T30155] ? __lock_acquire+0x7d40/0x7d40 [ 1332.738191][T30155] should_fail_ex+0x39d/0x4d0 [ 1332.742914][T30155] _copy_to_user+0x2f/0xa0 [ 1332.747462][T30155] bpf_test_finish+0x19f/0x650 [ 1332.752285][T30155] ? convert___skb_to_skb+0x590/0x590 [ 1332.757776][T30155] ? convert_skb_to___skb+0x420/0x420 [ 1332.763189][T30155] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1332.768609][T30155] ? cpu_online+0x60/0x60 [ 1332.772971][T30155] bpf_prog_test_run+0x321/0x390 [ 1332.777946][T30155] __sys_bpf+0x49d/0x890 [ 1332.782237][T30155] ? bpf_link_show_fdinfo+0x390/0x390 [ 1332.787652][T30155] ? lock_chain_count+0x20/0x20 [ 1332.792544][T30155] __x64_sys_bpf+0x7c/0x90 [ 1332.796996][T30155] do_syscall_64+0x55/0xb0 [ 1332.801444][T30155] ? clear_bhb_loop+0x40/0x90 [ 1332.806152][T30155] ? clear_bhb_loop+0x40/0x90 [ 1332.810869][T30155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.816803][T30155] RIP: 0033:0x7fcb9fd9ce59 [ 1332.821343][T30155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.840986][T30155] RSP: 002b:00007fcba0bf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1332.849444][T30155] RAX: ffffffffffffffda RBX: 00007fcba0015fa0 RCX: 00007fcb9fd9ce59 [ 1332.857451][T30155] RDX: 000000000000007f RSI: 0000200000000d80 RDI: 000000000000000a [ 1332.865551][T30155] RBP: 00007fcba0bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.873642][T30155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.881763][T30155] R13: 00007fcba0016038 R14: 00007fcba0015fa0 R15: 00007ffe41793ee8 [ 1332.889870][T30155] [ 1333.189840][T30170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1333.199301][T30170] team0: entered promiscuous mode [ 1333.204512][T30170] team_slave_0: entered promiscuous mode [ 1333.210685][T30170] team_slave_1: entered promiscuous mode [ 1333.216564][T30170] team0: entered allmulticast mode [ 1333.223322][T30170] team_slave_0: entered allmulticast mode [ 1333.231031][T30170] team_slave_1: entered allmulticast mode [ 1333.256668][T30170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.271536][T30170] bond0: (slave team0): Releasing backup interface [ 1333.293247][T30170] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1333.999451][T30190] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8066'. [ 1334.683233][T30195] validate_nla: 9 callbacks suppressed [ 1334.683256][T30195] netlink: 'syz.1.8067': attribute type 29 has an invalid length. [ 1334.980295][T30206] netlink: 'syz.0.8071': attribute type 9 has an invalid length. [ 1334.989423][T30206] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1335.629429][T30221] netlink: 'syz.2.8073': attribute type 10 has an invalid length. [ 1335.841359][T30221] team0: left promiscuous mode [ 1335.932078][T30221] team_slave_0: left promiscuous mode [ 1335.942121][T30221] team_slave_1: left promiscuous mode [ 1335.949696][T30221] team0: left allmulticast mode [ 1335.954913][T30221] team_slave_0: left allmulticast mode [ 1335.961334][T30221] team_slave_1: left allmulticast mode [ 1336.000485][T30221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.022692][T30221] bond0: (slave team0): Enslaving as an active interface with an up link [ 1336.223189][T30214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.334946][T30225] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8077'. [ 1336.793339][T30245] netlink: 'syz.1.8081': attribute type 9 has an invalid length. [ 1336.805837][T30245] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8081'. [ 1337.456404][T30252] netlink: 'syz.0.8084': attribute type 29 has an invalid length. [ 1337.603201][T30252] netlink: 'syz.0.8084': attribute type 29 has an invalid length. [ 1337.666976][T30253] netlink: 'syz.0.8084': attribute type 29 has an invalid length. [ 1337.700007][T30254] netlink: 'syz.0.8084': attribute type 29 has an invalid length. [ 1337.894646][T30262] netlink: 'syz.3.8085': attribute type 10 has an invalid length. [ 1338.814155][T30266] netlink: 'syz.2.8088': attribute type 10 has an invalid length. [ 1339.311549][T30283] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1339.395642][T30286] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8096'. [ 1340.195699][T30288] validate_nla: 2 callbacks suppressed [ 1340.195865][T30288] netlink: 'syz.3.8097': attribute type 29 has an invalid length. [ 1340.253778][T30291] netlink: 'syz.3.8097': attribute type 29 has an invalid length. [ 1340.277941][T30298] netlink: 'syz.1.8098': attribute type 10 has an invalid length. [ 1340.321872][T30293] netlink: 'syz.3.8097': attribute type 29 has an invalid length. [ 1340.513909][T30304] FAULT_INJECTION: forcing a failure. [ 1340.513909][T30304] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.526675][T30304] CPU: 0 PID: 30304 Comm: syz.0.8100 Not tainted syzkaller #0 [ 1340.534370][T30304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1340.544574][T30304] Call Trace: [ 1340.547990][T30304] [ 1340.551071][T30304] dump_stack_lvl+0x18c/0x250 [ 1340.555799][T30304] ? show_regs_print_info+0x20/0x20 [ 1340.561059][T30304] ? load_image+0x420/0x420 [ 1340.565793][T30304] ? perf_trace_lock+0xfc/0x3b0 [ 1340.570711][T30304] ? trace_event_raw_event_lock+0x250/0x250 [ 1340.576658][T30304] should_fail_ex+0x39d/0x4d0 [ 1340.581381][T30304] should_failslab+0x9/0x20 [ 1340.585927][T30304] slab_pre_alloc_hook+0x59/0x310 [ 1340.591167][T30304] kmem_cache_alloc_node+0x60/0x320 [ 1340.596408][T30304] ? __alloc_skb+0x103/0x2c0 [ 1340.601037][T30304] __alloc_skb+0x103/0x2c0 [ 1340.605496][T30304] arp_create+0x19f/0x9f0 [ 1340.609877][T30304] ? arp_send_dst+0x230/0x230 [ 1340.614682][T30304] ? arp_solicit+0x12c/0xe40 [ 1340.619312][T30304] arp_send_dst+0xa7/0x230 [ 1340.623767][T30304] arp_solicit+0xc05/0xe40 [ 1340.628223][T30304] ? arp_solicit+0x12c/0xe40 [ 1340.632849][T30304] ? arp_ifdown+0x20/0x20 [ 1340.637207][T30304] ? __lock_acquire+0x7d40/0x7d40 [ 1340.642279][T30304] ? __skb_clone+0x480/0x790 [ 1340.646907][T30304] ? arp_ifdown+0x20/0x20 [ 1340.651275][T30304] __neigh_event_send+0xed1/0x1440 [ 1340.656435][T30304] neigh_resolve_output+0x19b/0x730 [ 1340.661770][T30304] ? ip_finish_output2+0x11e0/0x11e0 [ 1340.667093][T30304] ? ip_mc_finish_output+0x250/0x250 [ 1340.672429][T30304] ? ip_finish_output2+0x457/0x11e0 [ 1340.677759][T30304] ip_finish_output2+0xd3a/0x11e0 [ 1340.682819][T30304] ? ip_finish_output2+0x457/0x11e0 [ 1340.688048][T30304] ? ip_mc_finish_output+0x250/0x250 [ 1340.693455][T30304] ? dev_loopback_xmit+0x2bf/0x430 [ 1340.698694][T30304] ? ip_fragment+0x210/0x210 [ 1340.703325][T30304] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 1340.708217][T30304] ? ip_finish_output+0x3ef/0x4c0 [ 1340.713289][T30304] ip_send_skb+0x12f/0x1d0 [ 1340.717742][T30304] raw_sendmsg+0x163e/0x1c00 [ 1340.722468][T30304] ? compat_raw_ioctl+0x70/0x70 [ 1340.727383][T30304] ? __lock_acquire+0x1273/0x7d40 [ 1340.732467][T30304] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1340.738924][T30304] ? sock_rps_record_flow+0x19/0x3f0 [ 1340.744273][T30304] ? inet_sendmsg+0x7c/0x2f0 [ 1340.748910][T30304] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1340.754249][T30304] ? security_socket_sendmsg+0x80/0xa0 [ 1340.759754][T30304] ? inet_send_prepare+0x260/0x260 [ 1340.764914][T30304] ____sys_sendmsg+0x5ba/0x960 [ 1340.769799][T30304] ? __lock_acquire+0x7d40/0x7d40 [ 1340.774865][T30304] ? __asan_memset+0x22/0x40 [ 1340.779513][T30304] ? __sys_sendmsg_sock+0x30/0x30 [ 1340.784573][T30304] ? __import_iovec+0x3fa/0x850 [ 1340.789553][T30304] ? import_iovec+0x73/0xa0 [ 1340.794097][T30304] ___sys_sendmsg+0x2a6/0x360 [ 1340.798897][T30304] ? __sys_sendmsg+0x2a0/0x2a0 [ 1340.803712][T30304] ? __lock_acquire+0x7d40/0x7d40 [ 1340.808804][T30304] __se_sys_sendmsg+0x1c2/0x2b0 [ 1340.813703][T30304] ? __x64_sys_sendmsg+0x80/0x80 [ 1340.819219][T30304] ? lockdep_hardirqs_on+0x98/0x150 [ 1340.824463][T30304] do_syscall_64+0x55/0xb0 [ 1340.828920][T30304] ? clear_bhb_loop+0x40/0x90 [ 1340.833634][T30304] ? clear_bhb_loop+0x40/0x90 [ 1340.838349][T30304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.844275][T30304] RIP: 0033:0x7fcb9fd9ce59 [ 1340.848722][T30304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.868366][T30304] RSP: 002b:00007fcba0bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1340.876815][T30304] RAX: ffffffffffffffda RBX: 00007fcba0015fa0 RCX: 00007fcb9fd9ce59 [ 1340.884818][T30304] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1340.892905][T30304] RBP: 00007fcba0bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.900996][T30304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.909009][T30304] R13: 00007fcba0016038 R14: 00007fcba0015fa0 R15: 00007ffe41793ee8 [ 1340.917217][T30304] [ 1342.012986][T30322] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8107'. [ 1342.529090][T30327] netlink: 'syz.2.8109': attribute type 9 has an invalid length. [ 1342.529696][T30332] netlink: 'syz.3.8110': attribute type 29 has an invalid length. [ 1342.541664][T30327] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1342.593036][T30332] netlink: 'syz.3.8110': attribute type 29 has an invalid length. [ 1342.628084][T30330] netlink: 'syz.3.8110': attribute type 29 has an invalid length. [ 1342.750390][T30332] netlink: 'syz.3.8110': attribute type 29 has an invalid length. [ 1343.271646][T30340] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8113'. [ 1343.480105][T30335] netlink: 'syz.3.8112': attribute type 10 has an invalid length. [ 1343.923945][T30347] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8115'. [ 1344.782724][T30359] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8119'. [ 1346.200198][T30378] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1346.238197][T30378] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1347.121263][T30393] validate_nla: 5 callbacks suppressed [ 1347.121286][T30393] netlink: 'syz.3.8131': attribute type 9 has an invalid length. [ 1347.157556][T30393] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1347.278519][T30391] netlink: 'syz.1.8130': attribute type 29 has an invalid length. [ 1347.395868][T30391] netlink: 'syz.1.8130': attribute type 29 has an invalid length. [ 1347.482132][T30395] netlink: 'syz.1.8130': attribute type 29 has an invalid length. [ 1347.559044][T30396] netlink: 'syz.1.8130': attribute type 29 has an invalid length. [ 1347.680475][T30403] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1347.721907][T30401] netlink: 'syz.0.8134': attribute type 9 has an invalid length. [ 1347.740786][T30401] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8134'. [ 1347.787330][T30403] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1349.161307][T30416] netlink: 'syz.0.8139': attribute type 9 has an invalid length. [ 1349.201333][T30416] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8139'. [ 1349.349169][T30423] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1349.369493][T30423] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1350.376201][T30432] netlink: 'syz.2.8145': attribute type 29 has an invalid length. [ 1350.428365][T30432] netlink: 'syz.2.8145': attribute type 29 has an invalid length. [ 1350.430062][T30438] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1350.502310][T30436] netlink: 'syz.2.8145': attribute type 29 has an invalid length. [ 1350.519117][T30439] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8147'. [ 1350.681630][T30440] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8148'. [ 1350.754789][T30438] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8146'. [ 1353.087119][T30470] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.8155'. [ 1353.123796][T30470] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1353.346244][T30469] validate_nla: 2 callbacks suppressed [ 1353.346306][T30469] netlink: 'syz.3.8157': attribute type 29 has an invalid length. [ 1353.498785][T30469] netlink: 'syz.3.8157': attribute type 29 has an invalid length. [ 1353.557984][T30471] netlink: 'syz.3.8157': attribute type 29 has an invalid length. [ 1353.598424][T30472] netlink: 'syz.3.8157': attribute type 29 has an invalid length. [ 1353.700637][T30485] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1353.751163][T30482] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8160'. [ 1353.831996][T30479] netlink: 'syz.1.8158': attribute type 9 has an invalid length. [ 1353.910572][T30479] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8158'. [ 1355.618246][T30499] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.8169'. [ 1355.651758][T30499] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1356.201677][T30513] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1356.411186][T30511] netlink: 'syz.3.8171': attribute type 29 has an invalid length. [ 1356.603118][T30511] netlink: 'syz.3.8171': attribute type 29 has an invalid length. [ 1356.671794][T30517] netlink: 'syz.3.8171': attribute type 29 has an invalid length. [ 1356.748547][T30519] netlink: 'syz.3.8171': attribute type 29 has an invalid length. [ 1357.163718][T30526] netlink: 'syz.0.8175': attribute type 9 has an invalid length. [ 1357.217577][T30526] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8175'. [ 1358.066447][T30539] team0: Port device dummy0 added [ 1358.782867][T30553] validate_nla: 1 callbacks suppressed [ 1358.782907][T30553] netlink: 'syz.0.8186': attribute type 9 has an invalid length. [ 1358.829833][T30553] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8186'. [ 1358.884900][T30552] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8185'. [ 1360.728207][T30562] netlink: 'syz.1.8188': attribute type 29 has an invalid length. [ 1361.086639][T30573] netlink: 'syz.2.8192': attribute type 9 has an invalid length. [ 1361.105026][T30562] netlink: 'syz.1.8188': attribute type 29 has an invalid length. [ 1361.141583][T30573] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8192'. [ 1361.160089][T30569] netlink: 'syz.1.8188': attribute type 29 has an invalid length. [ 1361.367759][T30561] netlink: 'syz.1.8188': attribute type 29 has an invalid length. [ 1361.998391][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.005774][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.631195][T30590] FAULT_INJECTION: forcing a failure. [ 1362.631195][T30590] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.680581][T30590] CPU: 0 PID: 30590 Comm: syz.0.8198 Not tainted syzkaller #0 [ 1362.688318][T30590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1362.698442][T30590] Call Trace: [ 1362.701773][T30590] [ 1362.704933][T30590] dump_stack_lvl+0x18c/0x250 [ 1362.709768][T30590] ? show_regs_print_info+0x20/0x20 [ 1362.715030][T30590] ? load_image+0x420/0x420 [ 1362.719613][T30590] ? __might_sleep+0xe0/0xe0 [ 1362.724264][T30590] ? __lock_acquire+0x7d40/0x7d40 [ 1362.729346][T30590] should_fail_ex+0x39d/0x4d0 [ 1362.734449][T30590] should_failslab+0x9/0x20 [ 1362.739090][T30590] slab_pre_alloc_hook+0x59/0x310 [ 1362.744159][T30590] ? rtnl_newlink+0x10d/0x20a0 [ 1362.748957][T30590] __kmem_cache_alloc_node+0x53/0x250 [ 1362.754548][T30590] ? rtnl_newlink+0x10d/0x20a0 [ 1362.759350][T30590] kmalloc_trace+0x2a/0xe0 [ 1362.763810][T30590] ? rtnl_setlink+0x4e0/0x4e0 [ 1362.768523][T30590] rtnl_newlink+0x10d/0x20a0 [ 1362.773236][T30590] ? arch_stack_walk+0x160/0x190 [ 1362.778242][T30590] ? __mutex_trylock_common+0x159/0x260 [ 1362.783856][T30590] ? rtnl_setlink+0x4e0/0x4e0 [ 1362.788565][T30590] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1362.794748][T30590] ? rcu_is_watching+0x15/0xb0 [ 1362.799640][T30590] ? trace_contention_end+0x39/0xe0 [ 1362.804873][T30590] ? __mutex_lock+0x315/0xcc0 [ 1362.809596][T30590] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1362.814831][T30590] ? mutex_lock_nested+0x20/0x20 [ 1362.819810][T30590] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1362.824963][T30590] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1362.830104][T30590] ? rtnl_setlink+0x4e0/0x4e0 [ 1362.834816][T30590] rtnetlink_rcv_msg+0x869/0xfa0 [ 1362.839799][T30590] ? rtnetlink_bind+0x80/0x80 [ 1362.844506][T30590] ? perf_trace_preemptirq_template+0xac/0x330 [ 1362.850702][T30590] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1362.856718][T30590] ? lock_chain_count+0x20/0x20 [ 1362.861602][T30590] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1362.867047][T30590] ? lockdep_hardirqs_on+0x98/0x150 [ 1362.872291][T30590] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1362.877694][T30590] ? _local_bh_enable+0xa0/0xa0 [ 1362.882577][T30590] ? __dev_queue_xmit+0x265/0x3660 [ 1362.887718][T30590] ? __dev_queue_xmit+0x265/0x3660 [ 1362.892870][T30590] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1362.898114][T30590] ? __dev_queue_xmit+0x265/0x3660 [ 1362.903285][T30590] ? perf_trace_lock+0xfc/0x3b0 [ 1362.908185][T30590] netlink_rcv_skb+0x241/0x4d0 [ 1362.913028][T30590] ? rtnetlink_bind+0x80/0x80 [ 1362.917742][T30590] ? netlink_ack+0x1180/0x1180 [ 1362.922564][T30590] ? __lock_acquire+0x7d40/0x7d40 [ 1362.927800][T30590] ? netlink_deliver_tap+0x2e/0x1b0 [ 1362.933052][T30590] netlink_unicast+0x751/0x8d0 [ 1362.937871][T30590] netlink_sendmsg+0x8d0/0xbf0 [ 1362.942694][T30590] ? netlink_getsockopt+0x590/0x590 [ 1362.947935][T30590] ? aa_sock_msg_perm+0x94/0x150 [ 1362.952994][T30590] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1362.958348][T30590] ? security_socket_sendmsg+0x80/0xa0 [ 1362.963845][T30590] ? netlink_getsockopt+0x590/0x590 [ 1362.969179][T30590] ____sys_sendmsg+0x5ba/0x960 [ 1362.974066][T30590] ? __asan_memset+0x22/0x40 [ 1362.978693][T30590] ? __sys_sendmsg_sock+0x30/0x30 [ 1362.983765][T30590] ? __import_iovec+0x3fa/0x850 [ 1362.988665][T30590] ? import_iovec+0x73/0xa0 [ 1362.993215][T30590] ___sys_sendmsg+0x2a6/0x360 [ 1362.997950][T30590] ? __sys_sendmsg+0x2a0/0x2a0 [ 1363.002775][T30590] ? __lock_acquire+0x7d40/0x7d40 [ 1363.007867][T30590] __se_sys_sendmsg+0x1c2/0x2b0 [ 1363.012751][T30590] ? __x64_sys_sendmsg+0x80/0x80 [ 1363.017768][T30590] ? lockdep_hardirqs_on+0x98/0x150 [ 1363.023018][T30590] do_syscall_64+0x55/0xb0 [ 1363.027477][T30590] ? clear_bhb_loop+0x40/0x90 [ 1363.032371][T30590] ? clear_bhb_loop+0x40/0x90 [ 1363.037086][T30590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.043133][T30590] RIP: 0033:0x7fcb9fd9ce59 [ 1363.047656][T30590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.067398][T30590] RSP: 002b:00007fcba0bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.075953][T30590] RAX: ffffffffffffffda RBX: 00007fcba0015fa0 RCX: 00007fcb9fd9ce59 [ 1363.084051][T30590] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1363.092060][T30590] RBP: 00007fcba0bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.100168][T30590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.108195][T30590] R13: 00007fcba0016038 R14: 00007fcba0015fa0 R15: 00007ffe41793ee8 [ 1363.116312][T30590] [ 1363.161337][T30587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8197'. [ 1363.533092][T30588] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8195'. [ 1363.557644][T30588] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1363.652546][T30594] netlink: 'syz.0.8199': attribute type 9 has an invalid length. [ 1363.681896][T30594] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1365.204915][T30609] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8204'. [ 1365.247591][T30609] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1365.880603][T30616] netlink: 'syz.2.8206': attribute type 29 has an invalid length. [ 1365.912175][T30616] netlink: 'syz.2.8206': attribute type 29 has an invalid length. [ 1365.958197][T30614] netlink: 'syz.2.8206': attribute type 29 has an invalid length. [ 1366.060904][T30616] netlink: 'syz.2.8206': attribute type 29 has an invalid length. [ 1366.867225][T30638] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8213'. [ 1367.113674][T30639] netlink: 'syz.1.8212': attribute type 9 has an invalid length. [ 1367.180073][T30639] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8212'. [ 1367.210957][T30644] netlink: 'syz.0.8215': attribute type 10 has an invalid length. [ 1367.282513][T30644] team0: Port device dummy0 added [ 1367.837791][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1367.880590][T30653] FAULT_INJECTION: forcing a failure. [ 1367.880590][T30653] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.928775][T30653] CPU: 1 PID: 30653 Comm: syz.2.8219 Not tainted syzkaller #0 [ 1367.936435][T30653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1367.946577][T30653] Call Trace: [ 1367.949911][T30653] [ 1367.952893][T30653] dump_stack_lvl+0x18c/0x250 [ 1367.957643][T30653] ? show_regs_print_info+0x20/0x20 [ 1367.962914][T30653] ? load_image+0x420/0x420 [ 1367.967529][T30653] ? __might_sleep+0xe0/0xe0 [ 1367.972278][T30653] ? __lock_acquire+0x7d40/0x7d40 [ 1367.977371][T30653] should_fail_ex+0x39d/0x4d0 [ 1367.982130][T30653] should_failslab+0x9/0x20 [ 1367.986708][T30653] slab_pre_alloc_hook+0x59/0x310 [ 1367.991902][T30653] ? nsim_fib_event_nb+0x6c1/0x1080 [ 1367.997166][T30653] ? atomic_notifier_call_chain+0x26/0x180 [ 1368.003038][T30653] kmem_cache_alloc_node+0x60/0x320 [ 1368.008302][T30653] ? __alloc_skb+0x103/0x2c0 [ 1368.012960][T30653] __alloc_skb+0x103/0x2c0 [ 1368.017441][T30653] ? fib4_rule_fill+0x4b0/0x4b0 [ 1368.022346][T30653] notify_rule_change+0xab/0x210 [ 1368.027351][T30653] fib_nl_delrule+0x1bd9/0x1da0 [ 1368.032390][T30653] ? notify_rule_change+0x210/0x210 [ 1368.037791][T30653] ? notify_rule_change+0x210/0x210 [ 1368.043149][T30653] rtnetlink_rcv_msg+0x869/0xfa0 [ 1368.048309][T30653] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1368.053464][T30653] ? rtnetlink_bind+0x80/0x80 [ 1368.058221][T30653] ? perf_trace_preemptirq_template+0xac/0x330 [ 1368.064425][T30653] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1368.070446][T30653] ? lock_chain_count+0x20/0x20 [ 1368.075422][T30653] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1368.080865][T30653] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.086100][T30653] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1368.091513][T30653] ? _local_bh_enable+0xa0/0xa0 [ 1368.096404][T30653] ? __dev_queue_xmit+0x265/0x3660 [ 1368.101567][T30653] ? __dev_queue_xmit+0x265/0x3660 [ 1368.106732][T30653] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1368.111986][T30653] ? __dev_queue_xmit+0x265/0x3660 [ 1368.117153][T30653] ? perf_trace_lock+0xfc/0x3b0 [ 1368.122057][T30653] netlink_rcv_skb+0x241/0x4d0 [ 1368.126869][T30653] ? rtnetlink_bind+0x80/0x80 [ 1368.131580][T30653] ? netlink_ack+0x1180/0x1180 [ 1368.136401][T30653] ? __lock_acquire+0x7d40/0x7d40 [ 1368.141480][T30653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1368.146737][T30653] netlink_unicast+0x751/0x8d0 [ 1368.151573][T30653] netlink_sendmsg+0x8d0/0xbf0 [ 1368.156388][T30653] ? netlink_getsockopt+0x590/0x590 [ 1368.161651][T30653] ? aa_sock_msg_perm+0x94/0x150 [ 1368.166626][T30653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1368.171957][T30653] ? security_socket_sendmsg+0x80/0xa0 [ 1368.177458][T30653] ? netlink_getsockopt+0x590/0x590 [ 1368.182803][T30653] ____sys_sendmsg+0x5ba/0x960 [ 1368.187702][T30653] ? __asan_memset+0x22/0x40 [ 1368.192346][T30653] ? __sys_sendmsg_sock+0x30/0x30 [ 1368.197499][T30653] ? __import_iovec+0x5f2/0x850 [ 1368.202393][T30653] ? import_iovec+0x73/0xa0 [ 1368.207019][T30653] ___sys_sendmsg+0x2a6/0x360 [ 1368.211920][T30653] ? __sys_sendmsg+0x2a0/0x2a0 [ 1368.216749][T30653] ? __lock_acquire+0x7d40/0x7d40 [ 1368.222029][T30653] __se_sys_sendmsg+0x1c2/0x2b0 [ 1368.227119][T30653] ? __x64_sys_sendmsg+0x80/0x80 [ 1368.232132][T30653] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.237395][T30653] do_syscall_64+0x55/0xb0 [ 1368.241971][T30653] ? clear_bhb_loop+0x40/0x90 [ 1368.246811][T30653] ? clear_bhb_loop+0x40/0x90 [ 1368.251548][T30653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.257515][T30653] RIP: 0033:0x7f298f79ce59 [ 1368.261983][T30653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.281638][T30653] RSP: 002b:00007f29905a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.290187][T30653] RAX: ffffffffffffffda RBX: 00007f298fa15fa0 RCX: 00007f298f79ce59 [ 1368.298280][T30653] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1368.306328][T30653] RBP: 00007f29905a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.314338][T30653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.322339][T30653] R13: 00007f298fa16038 R14: 00007f298fa15fa0 R15: 00007ffd96fff4b8 [ 1368.330358][T30653] [ 1368.823315][T30665] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1369.555963][T30672] sctp: [Deprecated]: syz.0.8226 (pid 30672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1369.555963][T30672] Use struct sctp_sack_info instead [ 1369.614391][T30674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8225'. [ 1369.983240][T30686] netlink: 'syz.2.8230': attribute type 9 has an invalid length. [ 1370.048528][T30686] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8230'. [ 1371.789321][T30693] netlink: 198584 bytes leftover after parsing attributes in process `syz.1.8233'. [ 1371.813540][T30693] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1373.176065][T30728] netlink: 'syz.1.8243': attribute type 9 has an invalid length. [ 1373.203113][T30728] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8243'. [ 1373.654765][T30737] netlink: 'syz.0.8246': attribute type 29 has an invalid length. [ 1374.124482][T30737] netlink: 'syz.0.8246': attribute type 29 has an invalid length. [ 1374.136384][T30740] FAULT_INJECTION: forcing a failure. [ 1374.136384][T30740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1374.151911][T30740] CPU: 0 PID: 30740 Comm: syz.0.8246 Not tainted syzkaller #0 [ 1374.159792][T30740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1374.169904][T30740] Call Trace: [ 1374.173358][T30740] [ 1374.176321][T30740] dump_stack_lvl+0x18c/0x250 [ 1374.181055][T30740] ? show_regs_print_info+0x20/0x20 [ 1374.186380][T30740] ? load_image+0x420/0x420 [ 1374.190940][T30740] ? __lock_acquire+0x7d40/0x7d40 [ 1374.196011][T30740] ? mark_lock+0x94/0x320 [ 1374.200519][T30740] should_fail_ex+0x39d/0x4d0 [ 1374.205509][T30740] prepare_alloc_pages+0x1e2/0x5f0 [ 1374.210745][T30740] __alloc_pages+0x134/0x460 [ 1374.215370][T30740] ? zone_statistics+0x170/0x170 [ 1374.220538][T30740] ? do_wp_page+0x7ca/0x35f0 [ 1374.225380][T30740] ? do_wp_page+0xfc5/0x35f0 [ 1374.230025][T30740] __folio_alloc+0x10/0x20 [ 1374.234483][T30740] vma_alloc_folio+0x47a/0x8f0 [ 1374.239292][T30740] do_wp_page+0x1243/0x35f0 [ 1374.243859][T30740] ? folio_put+0xd0/0xd0 [ 1374.248240][T30740] ? do_raw_spin_lock+0x11f/0x2c0 [ 1374.253575][T30740] ? __rwlock_init+0x150/0x150 [ 1374.259196][T30740] handle_mm_fault+0x135d/0x4c00 [ 1374.264354][T30740] ? handle_mm_fault+0xe7/0x4c00 [ 1374.269342][T30740] ? numa_migrate_prep+0x350/0x350 [ 1374.274501][T30740] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1374.279823][T30740] do_user_addr_fault+0x730/0x12c0 [ 1374.284984][T30740] exc_page_fault+0x64/0x100 [ 1374.289621][T30740] asm_exc_page_fault+0x26/0x30 [ 1374.294513][T30740] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1374.300546][T30740] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1374.320375][T30740] RSP: 0018:ffffc90003927630 EFLAGS: 00050202 [ 1374.326514][T30740] RAX: ffffffff8427fb01 RBX: 0000000000000d78 RCX: 0000000000000d78 [ 1374.334629][T30740] RDX: 0000000000000000 RSI: ffff888062538000 RDI: 0000200000002100 [ 1374.342741][T30740] RBP: ffffc900039277c0 R08: ffff888062538d77 R09: 1ffff1100c4a71ae [ 1374.351540][T30740] R10: dffffc0000000000 R11: ffffed100c4a71af R12: 0000200000002e78 [ 1374.360293][T30740] R13: ffffc90003927e40 R14: 0000200000002100 R15: ffff888062538000 [ 1374.368792][T30740] ? copyout+0x1/0x90 [ 1374.372831][T30740] copyout+0x70/0x90 [ 1374.376953][T30740] _copy_to_iter+0x432/0x1120 [ 1374.381953][T30740] ? iov_iter_init+0x1e0/0x1e0 [ 1374.387148][T30740] ? __virt_addr_valid+0x18c/0x540 [ 1374.393186][T30740] ? __virt_addr_valid+0x469/0x540 [ 1374.398459][T30740] ? __phys_addr_symbol+0x2f/0x70 [ 1374.403545][T30740] __skb_datagram_iter+0xdb/0x780 [ 1374.408618][T30740] ? skb_copy_datagram_iter+0x200/0x200 [ 1374.414409][T30740] skb_copy_datagram_iter+0xb1/0x200 [ 1374.419765][T30740] netlink_recvmsg+0x2d4/0xe60 [ 1374.424597][T30740] ? netlink_sendmsg+0xbf0/0xbf0 [ 1374.429809][T30740] ? aa_af_perm+0x330/0x330 [ 1374.434526][T30740] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1374.439852][T30740] ? security_socket_recvmsg+0x89/0xb0 [ 1374.445364][T30740] ? netlink_sendmsg+0xbf0/0xbf0 [ 1374.450527][T30740] ____sys_recvmsg+0x2ce/0x5e0 [ 1374.455429][T30740] ? __sys_recvmsg_sock+0x50/0x50 [ 1374.460962][T30740] ? import_iovec+0x73/0xa0 [ 1374.465526][T30740] ___sys_recvmsg+0x216/0x590 [ 1374.470268][T30740] ? __sys_recvmsg+0x2a0/0x2a0 [ 1374.475087][T30740] ? trace_call_bpf+0xc3/0x6c0 [ 1374.480001][T30740] ? trace_call_bpf+0x5e9/0x6c0 [ 1374.485112][T30740] ? __fget_files+0x43d/0x4b0 [ 1374.490034][T30740] __x64_sys_recvmsg+0x20c/0x2e0 [ 1374.495155][T30740] ? ___sys_recvmsg+0x590/0x590 [ 1374.500344][T30740] ? lockdep_hardirqs_on+0x98/0x150 [ 1374.505868][T30740] do_syscall_64+0x55/0xb0 [ 1374.511066][T30740] ? clear_bhb_loop+0x40/0x90 [ 1374.516170][T30740] ? clear_bhb_loop+0x40/0x90 [ 1374.520906][T30740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.526854][T30740] RIP: 0033:0x7fcb9fd9ce59 [ 1374.531328][T30740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.550991][T30740] RSP: 002b:00007fcba0bd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1374.559818][T30740] RAX: ffffffffffffffda RBX: 00007fcba0016090 RCX: 00007fcb9fd9ce59 [ 1374.567839][T30740] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 1374.576037][T30740] RBP: 00007fcba0bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.584057][T30740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.592342][T30740] R13: 00007fcba0016128 R14: 00007fcba0016090 R15: 00007ffe41793ee8 [ 1374.600467][T30740] [ 1374.672206][T30740] netlink: 'syz.0.8246': attribute type 29 has an invalid length. [ 1374.922017][T30751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8250'. [ 1375.311193][T30749] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.8249'. [ 1375.346245][T30749] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1375.817844][T30764] netlink: 'syz.2.8254': attribute type 29 has an invalid length. [ 1375.836520][T30764] netlink: 'syz.2.8254': attribute type 29 has an invalid length. [ 1375.872117][T30764] netlink: 'syz.2.8254': attribute type 29 has an invalid length. [ 1376.392143][T30768] netlink: 'syz.0.8256': attribute type 10 has an invalid length. [ 1376.419131][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8257'. [ 1376.971037][T30781] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8261'. [ 1377.577582][T30794] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8263'. [ 1378.650766][T30796] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8264'. [ 1378.792142][T30807] FAULT_INJECTION: forcing a failure. [ 1378.792142][T30807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.804495][T30796] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1378.852882][T30807] CPU: 1 PID: 30807 Comm: syz.1.8266 Not tainted syzkaller #0 [ 1378.860453][T30807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1378.870570][T30807] Call Trace: [ 1378.873895][T30807] [ 1378.876874][T30807] dump_stack_lvl+0x18c/0x250 [ 1378.881617][T30807] ? show_regs_print_info+0x20/0x20 [ 1378.886874][T30807] ? load_image+0x420/0x420 [ 1378.891448][T30807] ? __might_fault+0xaa/0x120 [ 1378.896180][T30807] ? __lock_acquire+0x7d40/0x7d40 [ 1378.901352][T30807] should_fail_ex+0x39d/0x4d0 [ 1378.906097][T30807] _copy_from_user+0x2f/0xe0 [ 1378.910744][T30807] bpf_prog_test_run_skb+0x266/0x12b0 [ 1378.916182][T30807] ? lockdep_hardirqs_on+0x98/0x150 [ 1378.921441][T30807] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1378.927663][T30807] ? cpu_online+0x60/0x60 [ 1378.932063][T30807] bpf_prog_test_run+0x321/0x390 [ 1378.937054][T30807] __sys_bpf+0x49d/0x890 [ 1378.941444][T30807] ? bpf_link_show_fdinfo+0x390/0x390 [ 1378.946887][T30807] ? lock_chain_count+0x20/0x20 [ 1378.951804][T30807] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1378.957864][T30807] __x64_sys_bpf+0x7c/0x90 [ 1378.962349][T30807] do_syscall_64+0x55/0xb0 [ 1378.966861][T30807] ? clear_bhb_loop+0x40/0x90 [ 1378.971598][T30807] ? clear_bhb_loop+0x40/0x90 [ 1378.976351][T30807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.982322][T30807] RIP: 0033:0x7f416119ce59 [ 1378.986788][T30807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.006463][T30807] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1379.014948][T30807] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1379.023157][T30807] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1379.031190][T30807] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.039212][T30807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.047345][T30807] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1379.055515][T30807] [ 1379.448562][T30813] netlink: 'syz.2.8269': attribute type 10 has an invalid length. [ 1379.549591][T30818] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8271'. [ 1380.117868][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1380.870090][T30840] netlink: 'syz.1.8282': attribute type 10 has an invalid length. [ 1381.529333][T30848] netlink: 'syz.2.8279': attribute type 9 has an invalid length. [ 1381.545082][T30848] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8279'. [ 1382.537297][T30854] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8281'. [ 1382.619334][T30854] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1383.114629][T30871] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1383.137728][T30871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.244529][T30872] netlink: 'syz.0.8295': attribute type 9 has an invalid length. [ 1383.268523][T30872] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8295'. [ 1384.990183][T30892] netlink: 'syz.2.8289': attribute type 10 has an invalid length. [ 1385.448906][T30899] caif0: entered promiscuous mode [ 1385.495718][T30899] caif0: entered allmulticast mode [ 1385.729124][T30905] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8294'. [ 1385.759286][T30905] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1386.769663][T30913] FAULT_INJECTION: forcing a failure. [ 1386.769663][T30913] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.850734][T30924] netlink: 'syz.0.8302': attribute type 9 has an invalid length. [ 1386.852667][T30913] CPU: 1 PID: 30913 Comm: syz.1.8298 Not tainted syzkaller #0 [ 1386.866245][T30913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1386.876450][T30913] Call Trace: [ 1386.879803][T30913] [ 1386.882979][T30913] dump_stack_lvl+0x18c/0x250 [ 1386.887726][T30913] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1386.891891][T30924] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8302'. [ 1386.893923][T30913] ? show_regs_print_info+0x20/0x20 [ 1386.908575][T30913] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1386.914796][T30913] ? dump_stack+0x9/0x20 [ 1386.919104][T30913] should_fail_ex+0x39d/0x4d0 [ 1386.923863][T30913] should_failslab+0x9/0x20 [ 1386.928439][T30913] slab_pre_alloc_hook+0x59/0x310 [ 1386.933557][T30913] kmem_cache_alloc+0x5a/0x2d0 [ 1386.938392][T30913] ? security_inode_alloc+0x34/0x110 [ 1386.943761][T30913] security_inode_alloc+0x34/0x110 [ 1386.949054][T30913] inode_init_always+0x8fc/0xc90 [ 1386.954055][T30913] new_inode_pseudo+0x95/0x1d0 [ 1386.958908][T30913] __sock_create+0x12d/0x940 [ 1386.963563][T30913] ? __might_fault+0xaa/0x120 [ 1386.968298][T30913] ? __might_fault+0xc6/0x120 [ 1386.973048][T30913] __sys_socketpair+0x1c1/0x550 [ 1386.977994][T30913] __x64_sys_socketpair+0x9b/0xb0 [ 1386.983199][T30913] do_syscall_64+0x55/0xb0 [ 1386.987757][T30913] ? clear_bhb_loop+0x40/0x90 [ 1386.992501][T30913] ? clear_bhb_loop+0x40/0x90 [ 1386.997248][T30913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.003465][T30913] RIP: 0033:0x7f416119ce59 [ 1387.007934][T30913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.027701][T30913] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1387.036270][T30913] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1387.044411][T30913] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000023 [ 1387.052442][T30913] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.060471][T30913] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1387.068683][T30913] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1387.076818][T30913] [ 1387.285628][T30913] socket: no more sockets [ 1387.385557][T30921] netlink: 'syz.3.8300': attribute type 9 has an invalid length. [ 1387.455723][T30921] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1388.435972][T30939] netlink: 'syz.1.8303': attribute type 10 has an invalid length. [ 1388.849664][T30943] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8308'. [ 1388.976138][T30947] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8309'. [ 1388.986072][T30947] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1389.688898][T30954] netlink: 'syz.0.8312': attribute type 13 has an invalid length. [ 1389.696816][T30954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8312'. [ 1389.769046][T30954] syz_tun: refused to change device tx_queue_len [ 1389.780121][T30954] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1389.811397][T30955] netlink: 'syz.1.8311': attribute type 13 has an invalid length. [ 1389.872387][T30955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8311'. [ 1389.929599][T30955] syz_tun: refused to change device tx_queue_len [ 1389.950173][T30955] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1390.544182][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8314'. [ 1390.601732][T30962] netlink: 'syz.2.8314': attribute type 21 has an invalid length. [ 1390.637810][T30962] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8314'. [ 1390.669819][T30975] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1391.502334][T30983] netlink: 'syz.3.8319': attribute type 10 has an invalid length. [ 1391.710073][T30989] syzkaller0: entered promiscuous mode [ 1391.715778][T30989] syzkaller0: entered allmulticast mode [ 1391.794049][T30995] netlink: 'syz.1.8321': attribute type 9 has an invalid length. [ 1391.818726][T30995] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8321'. [ 1392.054528][T31000] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8323'. [ 1392.094080][T31000] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1394.933481][T31018] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8330'. [ 1395.357746][T31030] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8334'. [ 1395.388049][T31033] netlink: 'syz.3.8332': attribute type 10 has an invalid length. [ 1395.734186][T31032] netlink: 'syz.0.8335': attribute type 29 has an invalid length. [ 1395.774769][T31032] netlink: 'syz.0.8335': attribute type 29 has an invalid length. [ 1395.800175][T31035] netlink: 'syz.0.8335': attribute type 29 has an invalid length. [ 1395.828295][T31036] netlink: 'syz.0.8335': attribute type 29 has an invalid length. [ 1396.645859][T31049] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8337'. [ 1396.695809][T31049] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1397.187752][T31058] netlink: 'syz.3.8341': attribute type 29 has an invalid length. [ 1397.209817][T31058] netlink: 'syz.3.8341': attribute type 29 has an invalid length. [ 1397.232470][T31061] netlink: 'syz.3.8341': attribute type 29 has an invalid length. [ 1397.251335][T31062] netlink: 'syz.3.8341': attribute type 29 has an invalid length. [ 1397.384441][T31064] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8343'. [ 1397.703786][T31070] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8345'. [ 1397.782368][T31071] netlink: 'syz.1.8344': attribute type 10 has an invalid length. [ 1398.215029][T31075] netlink: 'syz.2.8346': attribute type 29 has an invalid length. [ 1398.424666][T31080] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8348'. [ 1399.361340][T31092] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8351'. [ 1399.373296][T31092] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1399.708771][T31107] FAULT_INJECTION: forcing a failure. [ 1399.708771][T31107] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.747719][T31107] CPU: 0 PID: 31107 Comm: syz.0.8355 Not tainted syzkaller #0 [ 1399.755283][T31107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1399.765400][T31107] Call Trace: [ 1399.768723][T31107] [ 1399.771788][T31107] dump_stack_lvl+0x18c/0x250 [ 1399.776505][T31107] ? show_regs_print_info+0x20/0x20 [ 1399.781742][T31107] ? load_image+0x420/0x420 [ 1399.786288][T31107] ? __might_sleep+0xe0/0xe0 [ 1399.790918][T31107] ? __lock_acquire+0x7d40/0x7d40 [ 1399.795983][T31107] should_fail_ex+0x39d/0x4d0 [ 1399.800721][T31107] should_failslab+0x9/0x20 [ 1399.805369][T31107] slab_pre_alloc_hook+0x59/0x310 [ 1399.810478][T31107] ? sctp_transport_new+0x7e/0x630 [ 1399.815646][T31107] __kmem_cache_alloc_node+0x53/0x250 [ 1399.821080][T31107] ? sctp_transport_new+0x7e/0x630 [ 1399.826242][T31107] kmalloc_trace+0x2a/0xe0 [ 1399.830704][T31107] sctp_transport_new+0x7e/0x630 [ 1399.835712][T31107] sctp_assoc_add_peer+0x259/0x1390 [ 1399.840956][T31107] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 1399.846280][T31107] sctp_connect_new_asoc+0x323/0x6a0 [ 1399.851609][T31107] ? __sctp_connect+0xd80/0xd80 [ 1399.856501][T31107] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1399.861998][T31107] ? _local_bh_enable+0xa0/0xa0 [ 1399.866881][T31107] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1399.872726][T31107] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1399.878571][T31107] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1399.884246][T31107] ? security_sctp_bind_connect+0x89/0xb0 [ 1399.890006][T31107] sctp_sendmsg+0x15d2/0x2910 [ 1399.894734][T31107] ? sctp_getsockopt+0xb60/0xb60 [ 1399.900062][T31107] ? aa_sk_perm+0x83c/0x970 [ 1399.904611][T31107] ? aa_af_perm+0x330/0x330 [ 1399.909143][T31107] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1399.915788][T31107] ? sock_rps_record_flow+0x19/0x3f0 [ 1399.921149][T31107] ? inet_sendmsg+0x7c/0x2f0 [ 1399.925801][T31107] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1399.931138][T31107] ? security_socket_sendmsg+0x80/0xa0 [ 1399.936699][T31107] ? inet_send_prepare+0x260/0x260 [ 1399.941874][T31107] ____sys_sendmsg+0x5ba/0x960 [ 1399.946681][T31107] ? __lock_acquire+0x7d40/0x7d40 [ 1399.951756][T31107] ? __asan_memset+0x22/0x40 [ 1399.956412][T31107] ? __sys_sendmsg_sock+0x30/0x30 [ 1399.961654][T31107] ? __import_iovec+0x5f2/0x850 [ 1399.966551][T31107] ? import_iovec+0x73/0xa0 [ 1399.971195][T31107] ___sys_sendmsg+0x2a6/0x360 [ 1399.976017][T31107] ? __sys_sendmsg+0x2a0/0x2a0 [ 1399.980971][T31107] ? __lock_acquire+0x7d40/0x7d40 [ 1399.986063][T31107] __se_sys_sendmsg+0x1c2/0x2b0 [ 1399.990957][T31107] ? __x64_sys_sendmsg+0x80/0x80 [ 1399.995959][T31107] ? lockdep_hardirqs_on+0x98/0x150 [ 1400.001295][T31107] do_syscall_64+0x55/0xb0 [ 1400.005755][T31107] ? clear_bhb_loop+0x40/0x90 [ 1400.010571][T31107] ? clear_bhb_loop+0x40/0x90 [ 1400.015387][T31107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.021416][T31107] RIP: 0033:0x7fcb9fd9ce59 [ 1400.025899][T31107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.045629][T31107] RSP: 002b:00007fcba0bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1400.054171][T31107] RAX: ffffffffffffffda RBX: 00007fcba0015fa0 RCX: 00007fcb9fd9ce59 [ 1400.062356][T31107] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1400.070366][T31107] RBP: 00007fcba0bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.078462][T31107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1400.086752][T31107] R13: 00007fcba0016038 R14: 00007fcba0015fa0 R15: 00007ffe41793ee8 [ 1400.094768][T31107] [ 1400.107498][T31105] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8354'. [ 1400.411122][T31116] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8366'. [ 1401.150252][T31131] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8361'. [ 1401.174518][T31129] validate_nla: 5 callbacks suppressed [ 1401.174565][T31129] netlink: 'syz.1.8360': attribute type 29 has an invalid length. [ 1401.251692][T31129] netlink: 'syz.1.8360': attribute type 29 has an invalid length. [ 1401.266807][T31132] netlink: 'syz.1.8360': attribute type 29 has an invalid length. [ 1401.282037][T31133] netlink: 'syz.1.8360': attribute type 29 has an invalid length. [ 1402.201538][T31146] netlink: 'syz.0.8367': attribute type 29 has an invalid length. [ 1402.224556][T31146] netlink: 'syz.0.8367': attribute type 29 has an invalid length. [ 1402.275193][T31147] netlink: 'syz.0.8367': attribute type 29 has an invalid length. [ 1402.309681][T31150] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8368'. [ 1402.325517][T31149] netlink: 'syz.0.8367': attribute type 29 has an invalid length. [ 1402.991969][T31162] netlink: 'syz.1.8370': attribute type 10 has an invalid length. [ 1403.344469][T31164] netlink: 'syz.0.8373': attribute type 29 has an invalid length. [ 1403.533713][T31172] FAULT_INJECTION: forcing a failure. [ 1403.533713][T31172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.605922][T31172] CPU: 0 PID: 31172 Comm: syz.3.8375 Not tainted syzkaller #0 [ 1403.613578][T31172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1403.623683][T31172] Call Trace: [ 1403.627006][T31172] [ 1403.629981][T31172] dump_stack_lvl+0x18c/0x250 [ 1403.634730][T31172] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1403.640944][T31172] ? show_regs_print_info+0x20/0x20 [ 1403.646279][T31172] ? load_image+0x420/0x420 [ 1403.650855][T31172] should_fail_ex+0x39d/0x4d0 [ 1403.655599][T31172] strncpy_from_user+0x36/0x2d0 [ 1403.660507][T31172] getname_flags+0xf6/0x500 [ 1403.665149][T31172] user_path_create+0x25/0x50 [ 1403.669884][T31172] bpf_obj_pin_user+0x149/0x330 [ 1403.674796][T31172] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1403.681011][T31172] ? verifier_remove_insns+0x1370/0x1370 [ 1403.686717][T31172] __sys_bpf+0x7be/0x890 [ 1403.691015][T31172] ? bpf_link_show_fdinfo+0x390/0x390 [ 1403.696559][T31172] __x64_sys_bpf+0x7c/0x90 [ 1403.701032][T31172] do_syscall_64+0x55/0xb0 [ 1403.705491][T31172] ? clear_bhb_loop+0x40/0x90 [ 1403.710215][T31172] ? clear_bhb_loop+0x40/0x90 [ 1403.714956][T31172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.720898][T31172] RIP: 0033:0x7f0a1459ce59 [ 1403.725429][T31172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.745073][T31172] RSP: 002b:00007f0a154e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1403.753782][T31172] RAX: ffffffffffffffda RBX: 00007f0a14815fa0 RCX: 00007f0a1459ce59 [ 1403.761794][T31172] RDX: 0000000000000018 RSI: 0000200000000100 RDI: 0000000000000006 [ 1403.769793][T31172] RBP: 00007f0a154e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.777970][T31172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.785984][T31172] R13: 00007f0a14816038 R14: 00007f0a14815fa0 R15: 00007ffc6d1cf468 [ 1403.794019][T31172] [ 1403.912275][T31175] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8377'. [ 1404.211729][T31185] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8379'. [ 1406.022418][T31205] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1406.645644][T31222] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8390'. [ 1408.212519][T31250] validate_nla: 9 callbacks suppressed [ 1408.212544][T31250] netlink: 'syz.0.8400': attribute type 29 has an invalid length. [ 1408.326215][T31250] netlink: 'syz.0.8400': attribute type 29 has an invalid length. [ 1408.416329][T31254] netlink: 'syz.0.8400': attribute type 29 has an invalid length. [ 1408.522525][T31246] netlink: 'syz.1.8399': attribute type 10 has an invalid length. [ 1408.564353][T31256] netlink: 'syz.0.8400': attribute type 29 has an invalid length. [ 1408.840024][T31262] FAULT_INJECTION: forcing a failure. [ 1408.840024][T31262] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.883276][T31262] CPU: 0 PID: 31262 Comm: syz.2.8402 Not tainted syzkaller #0 [ 1408.890854][T31262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1408.900968][T31262] Call Trace: [ 1408.904309][T31262] [ 1408.907291][T31262] dump_stack_lvl+0x18c/0x250 [ 1408.912032][T31262] ? show_regs_print_info+0x20/0x20 [ 1408.917274][T31262] ? load_image+0x420/0x420 [ 1408.921824][T31262] ? __might_sleep+0xe0/0xe0 [ 1408.926449][T31262] ? __lock_acquire+0x7d40/0x7d40 [ 1408.931511][T31262] should_fail_ex+0x39d/0x4d0 [ 1408.936237][T31262] should_failslab+0x9/0x20 [ 1408.940786][T31262] slab_pre_alloc_hook+0x59/0x310 [ 1408.945872][T31262] ? rtnl_newlink+0x10d/0x20a0 [ 1408.950762][T31262] __kmem_cache_alloc_node+0x53/0x250 [ 1408.956177][T31262] ? rtnl_newlink+0x10d/0x20a0 [ 1408.960981][T31262] kmalloc_trace+0x2a/0xe0 [ 1408.965435][T31262] ? rtnl_setlink+0x4e0/0x4e0 [ 1408.970148][T31262] rtnl_newlink+0x10d/0x20a0 [ 1408.974780][T31262] ? arch_stack_walk+0x160/0x190 [ 1408.979781][T31262] ? __mutex_trylock_common+0x159/0x260 [ 1408.985369][T31262] ? rtnl_setlink+0x4e0/0x4e0 [ 1408.990091][T31262] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1408.996303][T31262] ? rcu_is_watching+0x15/0xb0 [ 1409.001151][T31262] ? trace_contention_end+0x39/0xe0 [ 1409.006392][T31262] ? __mutex_lock+0x315/0xcc0 [ 1409.011139][T31262] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1409.016289][T31262] ? mutex_lock_nested+0x20/0x20 [ 1409.021442][T31262] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1409.026595][T31262] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1409.031750][T31262] ? rtnl_setlink+0x4e0/0x4e0 [ 1409.036769][T31262] rtnetlink_rcv_msg+0x869/0xfa0 [ 1409.041753][T31262] ? rtnetlink_bind+0x80/0x80 [ 1409.046463][T31262] ? perf_trace_preemptirq_template+0xac/0x330 [ 1409.052676][T31262] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1409.058718][T31262] ? lock_chain_count+0x20/0x20 [ 1409.063770][T31262] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1409.069192][T31262] ? lockdep_hardirqs_on+0x98/0x150 [ 1409.074441][T31262] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1409.079938][T31262] ? _local_bh_enable+0xa0/0xa0 [ 1409.084834][T31262] ? __dev_queue_xmit+0x265/0x3660 [ 1409.089996][T31262] ? __dev_queue_xmit+0x265/0x3660 [ 1409.095151][T31262] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1409.100486][T31262] ? __dev_queue_xmit+0x265/0x3660 [ 1409.105651][T31262] ? perf_trace_lock+0xfc/0x3b0 [ 1409.110557][T31262] netlink_rcv_skb+0x241/0x4d0 [ 1409.115371][T31262] ? rtnetlink_bind+0x80/0x80 [ 1409.120102][T31262] ? netlink_ack+0x1180/0x1180 [ 1409.124924][T31262] ? __lock_acquire+0x7d40/0x7d40 [ 1409.130008][T31262] ? netlink_deliver_tap+0x2e/0x1b0 [ 1409.135257][T31262] netlink_unicast+0x751/0x8d0 [ 1409.140074][T31262] netlink_sendmsg+0x8d0/0xbf0 [ 1409.144933][T31262] ? netlink_getsockopt+0x590/0x590 [ 1409.150202][T31262] ? aa_sock_msg_perm+0x94/0x150 [ 1409.155175][T31262] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1409.160501][T31262] ? security_socket_sendmsg+0x80/0xa0 [ 1409.166003][T31262] ? netlink_getsockopt+0x590/0x590 [ 1409.171250][T31262] ____sys_sendmsg+0x5ba/0x960 [ 1409.176064][T31262] ? __asan_memset+0x22/0x40 [ 1409.180701][T31262] ? __sys_sendmsg_sock+0x30/0x30 [ 1409.185799][T31262] ? __import_iovec+0x5f2/0x850 [ 1409.190719][T31262] ? import_iovec+0x73/0xa0 [ 1409.195280][T31262] ___sys_sendmsg+0x2a6/0x360 [ 1409.200027][T31262] ? __sys_sendmsg+0x2a0/0x2a0 [ 1409.204848][T31262] ? __lock_acquire+0x7d40/0x7d40 [ 1409.210035][T31262] __se_sys_sendmsg+0x1c2/0x2b0 [ 1409.214979][T31262] ? __x64_sys_sendmsg+0x80/0x80 [ 1409.219986][T31262] ? lockdep_hardirqs_on+0x98/0x150 [ 1409.225230][T31262] do_syscall_64+0x55/0xb0 [ 1409.229675][T31262] ? clear_bhb_loop+0x40/0x90 [ 1409.234394][T31262] ? clear_bhb_loop+0x40/0x90 [ 1409.239136][T31262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.245092][T31262] RIP: 0033:0x7f298f79ce59 [ 1409.249738][T31262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.269390][T31262] RSP: 002b:00007f29905a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.277842][T31262] RAX: ffffffffffffffda RBX: 00007f298fa15fa0 RCX: 00007f298f79ce59 [ 1409.285861][T31262] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1409.293875][T31262] RBP: 00007f29905a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.302069][T31262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.310076][T31262] R13: 00007f298fa16038 R14: 00007f298fa15fa0 R15: 00007ffd96fff4b8 [ 1409.318100][T31262] [ 1409.403306][T31264] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1409.963500][T31277] netlink: 'syz.3.8407': attribute type 10 has an invalid length. [ 1410.073969][T31277] team0: Device bond0 is already an upper device of the team interface [ 1410.620929][T31283] netlink: 198584 bytes leftover after parsing attributes in process `syz.2.8410'. [ 1410.679863][T31283] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1410.750423][T31287] FAULT_INJECTION: forcing a failure. [ 1410.750423][T31287] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.804635][T31287] CPU: 0 PID: 31287 Comm: syz.1.8411 Not tainted syzkaller #0 [ 1410.812287][T31287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1410.822566][T31287] Call Trace: [ 1410.826049][T31287] [ 1410.829098][T31287] dump_stack_lvl+0x18c/0x250 [ 1410.834254][T31287] ? show_regs_print_info+0x20/0x20 [ 1410.839749][T31287] ? load_image+0x420/0x420 [ 1410.845027][T31287] ? __might_sleep+0xe0/0xe0 [ 1410.849662][T31287] ? __lock_acquire+0x7d40/0x7d40 [ 1410.854900][T31287] ? rcu_is_watching+0x15/0xb0 [ 1410.859704][T31287] should_fail_ex+0x39d/0x4d0 [ 1410.864427][T31287] should_failslab+0x9/0x20 [ 1410.868970][T31287] slab_pre_alloc_hook+0x59/0x310 [ 1410.874179][T31287] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1410.880115][T31287] __kmem_cache_alloc_node+0x53/0x250 [ 1410.885724][T31287] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1410.891657][T31287] kmalloc_trace+0x2a/0xe0 [ 1410.896120][T31287] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1410.901892][T31287] sctp_association_new+0x15d3/0x25c0 [ 1410.907323][T31287] sctp_connect_new_asoc+0x2de/0x6a0 [ 1410.912651][T31287] ? __sctp_connect+0xd80/0xd80 [ 1410.917539][T31287] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1410.923041][T31287] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1410.928631][T31287] ? security_sctp_bind_connect+0x89/0xb0 [ 1410.934407][T31287] sctp_sendmsg+0x15d2/0x2910 [ 1410.939146][T31287] ? sctp_getsockopt+0xb60/0xb60 [ 1410.944120][T31287] ? aa_sk_perm+0x83c/0x970 [ 1410.948713][T31287] ? aa_af_perm+0x330/0x330 [ 1410.953245][T31287] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1410.959889][T31287] ? sock_rps_record_flow+0x19/0x3f0 [ 1410.965230][T31287] ? inet_sendmsg+0xe9/0x2f0 [ 1410.970048][T31287] ? inet_send_prepare+0x260/0x260 [ 1410.975234][T31287] ____sys_sendmsg+0x5ba/0x960 [ 1410.980148][T31287] ? __lock_acquire+0x7d40/0x7d40 [ 1410.985309][T31287] ? __asan_memset+0x22/0x40 [ 1410.989945][T31287] ? __sys_sendmsg_sock+0x30/0x30 [ 1410.995012][T31287] ? __import_iovec+0x5f2/0x850 [ 1410.999994][T31287] ? import_iovec+0x73/0xa0 [ 1411.004541][T31287] ___sys_sendmsg+0x2a6/0x360 [ 1411.009361][T31287] ? __sys_sendmsg+0x2a0/0x2a0 [ 1411.014183][T31287] ? __lock_acquire+0x7d40/0x7d40 [ 1411.019373][T31287] __se_sys_sendmsg+0x1c2/0x2b0 [ 1411.024263][T31287] ? __x64_sys_sendmsg+0x80/0x80 [ 1411.029256][T31287] ? lockdep_hardirqs_on+0x98/0x150 [ 1411.034582][T31287] do_syscall_64+0x55/0xb0 [ 1411.039151][T31287] ? clear_bhb_loop+0x40/0x90 [ 1411.043919][T31287] ? clear_bhb_loop+0x40/0x90 [ 1411.048671][T31287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.054624][T31287] RIP: 0033:0x7f416119ce59 [ 1411.059081][T31287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.079269][T31287] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.087755][T31287] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1411.095845][T31287] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1411.103934][T31287] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.112127][T31287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.120579][T31287] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1411.128601][T31287] [ 1411.453958][T31289] netlink: 'syz.0.8412': attribute type 29 has an invalid length. [ 1411.478401][T31298] netlink: 'syz.2.8415': attribute type 10 has an invalid length. [ 1411.478443][T31298] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8415'. [ 1411.478475][T31298] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1411.944763][T31289] netlink: 'syz.0.8412': attribute type 29 has an invalid length. [ 1412.016008][T31291] netlink: 'syz.0.8412': attribute type 29 has an invalid length. [ 1412.040749][T31302] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1413.012815][T31328] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8424'. [ 1413.145367][T31323] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1413.183866][T31321] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1413.228214][T31321] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1413.531687][T31335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8425'. [ 1413.694505][T31337] validate_nla: 2 callbacks suppressed [ 1413.694574][T31337] netlink: 'syz.3.8427': attribute type 29 has an invalid length. [ 1413.732083][T31337] netlink: 'syz.3.8427': attribute type 29 has an invalid length. [ 1413.749214][T31339] netlink: 'syz.3.8427': attribute type 29 has an invalid length. [ 1413.827636][T31342] netlink: 'syz.3.8427': attribute type 29 has an invalid length. [ 1413.885649][T31343] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8428'. [ 1415.636049][T31363] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8435'. [ 1415.658217][T31363] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1415.811794][T31366] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8436'. [ 1415.907626][T31368] netlink: 'syz.1.8438': attribute type 29 has an invalid length. [ 1415.951485][T31368] netlink: 'syz.1.8438': attribute type 29 has an invalid length. [ 1415.991407][T31372] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8439'. [ 1416.576310][T31378] netlink: 'syz.3.8440': attribute type 29 has an invalid length. [ 1416.608009][T31378] netlink: 'syz.3.8440': attribute type 29 has an invalid length. [ 1416.629407][T31384] netlink: 'syz.3.8440': attribute type 29 has an invalid length. [ 1416.664233][T31386] netlink: 'syz.3.8440': attribute type 29 has an invalid length. [ 1417.005624][T31389] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1417.027373][T31381] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.8448'. [ 1417.114092][T31381] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1419.444251][T31413] netlink: 'syz.3.8449': attribute type 10 has an invalid length. [ 1419.865320][T31417] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8450'. [ 1421.447929][T31434] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8455'. [ 1421.514779][T31434] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1421.914478][T31438] netlink: 'syz.2.8456': attribute type 29 has an invalid length. [ 1421.944089][T31443] netlink: 'syz.1.8457': attribute type 10 has an invalid length. [ 1422.413138][T31443] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1422.471312][T31438] netlink: 'syz.2.8456': attribute type 29 has an invalid length. [ 1422.578618][T31445] netlink: 'syz.2.8456': attribute type 29 has an invalid length. [ 1422.597866][T31444] netlink: 'syz.2.8456': attribute type 29 has an invalid length. [ 1422.798929][T31454] netlink: 'syz.3.8460': attribute type 10 has an invalid length. [ 1423.125093][T31452] netlink: 'syz.0.8459': attribute type 29 has an invalid length. [ 1423.162337][T31459] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8463'. [ 1423.276006][T31452] netlink: 'syz.0.8459': attribute type 29 has an invalid length. [ 1423.295076][T31457] netlink: 'syz.0.8459': attribute type 29 has an invalid length. [ 1423.432608][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.439167][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.941455][T31469] FAULT_INJECTION: forcing a failure. [ 1423.941455][T31469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.030046][T31469] CPU: 1 PID: 31469 Comm: syz.3.8466 Not tainted syzkaller #0 [ 1424.037698][T31469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1424.048117][T31469] Call Trace: [ 1424.051499][T31469] [ 1424.054532][T31469] dump_stack_lvl+0x18c/0x250 [ 1424.059343][T31469] ? show_regs_print_info+0x20/0x20 [ 1424.064744][T31469] ? load_image+0x420/0x420 [ 1424.070020][T31469] ? __might_fault+0xaa/0x120 [ 1424.075204][T31469] ? __lock_acquire+0x7d40/0x7d40 [ 1424.081552][T31469] should_fail_ex+0x39d/0x4d0 [ 1424.086577][T31469] _copy_from_user+0x2f/0xe0 [ 1424.091472][T31469] __sys_bpf+0x23e/0x890 [ 1424.096038][T31469] ? bpf_link_show_fdinfo+0x390/0x390 [ 1424.101624][T31469] ? lock_chain_count+0x20/0x20 [ 1424.106624][T31469] __x64_sys_bpf+0x7c/0x90 [ 1424.111256][T31469] do_syscall_64+0x55/0xb0 [ 1424.115777][T31469] ? clear_bhb_loop+0x40/0x90 [ 1424.120629][T31469] ? clear_bhb_loop+0x40/0x90 [ 1424.125429][T31469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1424.131604][T31469] RIP: 0033:0x7f0a1459ce59 [ 1424.136198][T31469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.155892][T31469] RSP: 002b:00007f0a154e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1424.164539][T31469] RAX: ffffffffffffffda RBX: 00007f0a14815fa0 RCX: 00007f0a1459ce59 [ 1424.172847][T31469] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 1424.180893][T31469] RBP: 00007f0a154e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.188943][T31469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.196996][T31469] R13: 00007f0a14816038 R14: 00007f0a14815fa0 R15: 00007ffc6d1cf468 [ 1424.205103][T31469] [ 1424.690630][T31474] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8467'. [ 1424.741988][T31474] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1425.233050][T31482] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8469'. [ 1426.191367][T31488] validate_nla: 1 callbacks suppressed [ 1426.191395][T31488] netlink: 'syz.0.8470': attribute type 29 has an invalid length. [ 1426.748224][T31488] netlink: 'syz.0.8470': attribute type 29 has an invalid length. [ 1426.794616][T31487] netlink: 'syz.0.8470': attribute type 29 has an invalid length. [ 1426.973349][T31485] netlink: 'syz.0.8470': attribute type 29 has an invalid length. [ 1427.040831][T31492] netlink: 'syz.2.8471': attribute type 10 has an invalid length. [ 1427.643936][T31498] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1428.492660][T31512] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8477'. [ 1429.534240][T31517] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8478'. [ 1429.609079][T31517] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1430.953199][T31535] netlink: 'syz.3.8482': attribute type 29 has an invalid length. [ 1431.040320][T31535] netlink: 'syz.3.8482': attribute type 29 has an invalid length. [ 1431.097985][T31534] netlink: 'syz.3.8482': attribute type 29 has an invalid length. [ 1431.205056][T31535] netlink: 'syz.3.8482': attribute type 29 has an invalid length. [ 1432.297082][T31549] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1432.321835][T31540] netlink: 'syz.0.8485': attribute type 10 has an invalid length. [ 1432.536869][T31553] FAULT_INJECTION: forcing a failure. [ 1432.536869][T31553] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.593969][T31553] CPU: 0 PID: 31553 Comm: syz.0.8489 Not tainted syzkaller #0 [ 1432.602058][T31553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1432.612351][T31553] Call Trace: [ 1432.615689][T31553] [ 1432.618768][T31553] dump_stack_lvl+0x18c/0x250 [ 1432.623515][T31553] ? show_regs_print_info+0x20/0x20 [ 1432.628783][T31553] ? load_image+0x420/0x420 [ 1432.633447][T31553] ? __might_sleep+0xe0/0xe0 [ 1432.638116][T31553] ? __lock_acquire+0x7d40/0x7d40 [ 1432.643222][T31553] should_fail_ex+0x39d/0x4d0 [ 1432.647974][T31553] should_failslab+0x9/0x20 [ 1432.652634][T31553] slab_pre_alloc_hook+0x59/0x310 [ 1432.657756][T31553] ? __lock_acquire+0x7d40/0x7d40 [ 1432.662848][T31553] kmem_cache_alloc_node+0x60/0x320 [ 1432.668204][T31553] ? __alloc_skb+0x103/0x2c0 [ 1432.673152][T31553] __alloc_skb+0x103/0x2c0 [ 1432.677738][T31553] netlink_sendmsg+0x66a/0xbf0 [ 1432.682614][T31553] ? netlink_getsockopt+0x590/0x590 [ 1432.687910][T31553] ? aa_sock_msg_perm+0x94/0x150 [ 1432.692929][T31553] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1432.699037][T31553] ? security_socket_sendmsg+0x80/0xa0 [ 1432.704568][T31553] ? netlink_getsockopt+0x590/0x590 [ 1432.709930][T31553] ____sys_sendmsg+0x5ba/0x960 [ 1432.714959][T31553] ? __asan_memset+0x22/0x40 [ 1432.720053][T31553] ? __sys_sendmsg_sock+0x30/0x30 [ 1432.725124][T31553] ? __import_iovec+0x5f2/0x850 [ 1432.730045][T31553] ? import_iovec+0x73/0xa0 [ 1432.734690][T31553] ___sys_sendmsg+0x2a6/0x360 [ 1432.739449][T31553] ? __sys_sendmsg+0x2a0/0x2a0 [ 1432.744584][T31553] ? __lock_acquire+0x7d40/0x7d40 [ 1432.749713][T31553] __se_sys_sendmsg+0x1c2/0x2b0 [ 1432.754642][T31553] ? __x64_sys_sendmsg+0x80/0x80 [ 1432.759660][T31553] ? lockdep_hardirqs_on+0x98/0x150 [ 1432.764931][T31553] do_syscall_64+0x55/0xb0 [ 1432.769406][T31553] ? clear_bhb_loop+0x40/0x90 [ 1432.774676][T31553] ? clear_bhb_loop+0x40/0x90 [ 1432.779426][T31553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1432.785397][T31553] RIP: 0033:0x7fcb9fd9ce59 [ 1432.789888][T31553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.809647][T31553] RSP: 002b:00007fcba0bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1432.818237][T31553] RAX: ffffffffffffffda RBX: 00007fcba0015fa0 RCX: 00007fcb9fd9ce59 [ 1432.826374][T31553] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1432.834592][T31553] RBP: 00007fcba0bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.842824][T31553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1432.850871][T31553] R13: 00007fcba0016038 R14: 00007fcba0015fa0 R15: 00007ffe41793ee8 [ 1432.859619][T31553] [ 1433.005329][T31552] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8486'. [ 1433.496903][T31555] netlink: 198584 bytes leftover after parsing attributes in process `syz.2.8490'. [ 1433.513589][T31555] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1434.520615][T31573] netlink: 'syz.2.8494': attribute type 29 has an invalid length. [ 1434.578885][T31573] netlink: 'syz.2.8494': attribute type 29 has an invalid length. [ 1434.639666][T31570] netlink: 'syz.2.8494': attribute type 29 has an invalid length. [ 1434.754872][T31573] netlink: 'syz.2.8494': attribute type 29 has an invalid length. [ 1435.034476][T31581] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8498'. [ 1435.929972][T31594] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1435.987695][T31594] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1436.303714][T31597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8503'. [ 1436.524765][T31606] netlink: 'syz.0.8507': attribute type 29 has an invalid length. [ 1436.546942][T31606] netlink: 'syz.0.8507': attribute type 29 has an invalid length. [ 1436.583664][T31609] netlink: 'syz.0.8507': attribute type 29 has an invalid length. [ 1436.616205][T31606] netlink: 'syz.0.8507': attribute type 29 has an invalid length. [ 1438.235757][T31626] netlink: 'syz.2.8512': attribute type 29 has an invalid length. [ 1438.263936][T31626] netlink: 'syz.2.8512': attribute type 29 has an invalid length. [ 1438.313973][T31631] netlink: 'syz.2.8512': attribute type 29 has an invalid length. [ 1438.338778][T31626] netlink: 'syz.2.8512': attribute type 29 has an invalid length. [ 1439.059729][T31635] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8514'. [ 1439.088462][T31635] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1439.828130][T31649] netlink: 'syz.1.8518': attribute type 29 has an invalid length. [ 1439.859700][T31649] netlink: 'syz.1.8518': attribute type 29 has an invalid length. [ 1440.789529][T31664] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8522'. [ 1440.834602][T31648] bond0: (slave team0): Releasing backup interface [ 1441.023472][T31648] team0 (unregistering): Port device team_slave_0 removed [ 1441.288134][T31648] team0 (unregistering): Port device team_slave_1 removed [ 1441.438105][T31648] team0 (unregistering): Port device dummy0 removed [ 1442.682217][T31675] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8526'. [ 1442.731929][T31675] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1442.985273][T31686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.026651][T31686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.322732][T31686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.352604][T31686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.926175][T31686] bond0: (slave batadv0): Releasing backup interface [ 1444.085398][T31689] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1444.157944][T31689] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1444.584119][T31700] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8534'. [ 1444.629542][T31692] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8530'. [ 1445.419199][T31695] validate_nla: 3 callbacks suppressed [ 1445.419241][T31695] netlink: 'syz.1.8532': attribute type 10 has an invalid length. [ 1447.299555][T31718] netlink: 198584 bytes leftover after parsing attributes in process `syz.2.8539'. [ 1447.450590][T31718] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1449.185463][T31740] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1449.227360][T31733] netlink: 198584 bytes leftover after parsing attributes in process `syz.2.8543'. [ 1449.251896][T31733] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1452.158883][T31754] netlink: 'syz.0.8547': attribute type 10 has an invalid length. [ 1452.375243][T31767] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8552'. [ 1452.685754][T31767] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1454.926458][T31754] bond0: (slave team0): Releasing backup interface [ 1455.067865][T31754] team0 (unregistering): Port device team_slave_0 removed [ 1455.122166][T31754] team0 (unregistering): Port device team_slave_1 removed [ 1455.174810][T31754] team0 (unregistering): Port device dummy0 removed [ 1455.565809][T31779] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8557'. [ 1455.774082][T31789] netlink: 'syz.3.8560': attribute type 10 has an invalid length. [ 1455.963962][T31795] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8562'. [ 1456.772901][T31808] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8565'. [ 1456.930783][T31814] netlink: 'syz.2.8567': attribute type 29 has an invalid length. [ 1456.961044][T31814] netlink: 'syz.2.8567': attribute type 29 has an invalid length. [ 1457.719755][T31819] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8568'. [ 1457.759593][T31819] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1458.441798][T31829] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8574'. [ 1458.553492][T31826] netlink: 'syz.3.8571': attribute type 29 has an invalid length. [ 1458.625426][T31826] netlink: 'syz.3.8571': attribute type 29 has an invalid length. [ 1458.703871][T31832] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8572'. [ 1458.717145][T31827] netlink: 'syz.3.8571': attribute type 29 has an invalid length. [ 1458.764665][T31833] netlink: 'syz.1.8573': attribute type 10 has an invalid length. [ 1458.827478][T31834] netlink: 'syz.3.8571': attribute type 29 has an invalid length. [ 1459.264238][T31848] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1461.057884][T31861] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8580'. [ 1461.151392][T31861] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1461.673372][T31867] netlink: 'syz.1.8583': attribute type 10 has an invalid length. [ 1461.699920][T31870] netlink: 'syz.0.8592': attribute type 29 has an invalid length. [ 1461.740077][T31870] netlink: 'syz.0.8592': attribute type 29 has an invalid length. [ 1461.825323][T31875] netlink: 'syz.0.8592': attribute type 29 has an invalid length. [ 1461.872334][T31876] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8585'. [ 1461.896721][T31877] netlink: 'syz.0.8592': attribute type 29 has an invalid length. [ 1462.775725][T31885] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1466.440078][T31918] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1466.517772][T31918] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1467.262949][T31932] FAULT_INJECTION: forcing a failure. [ 1467.262949][T31932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.305616][T31932] CPU: 0 PID: 31932 Comm: syz.2.8600 Not tainted syzkaller #0 [ 1467.313452][T31932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1467.323905][T31932] Call Trace: [ 1467.327274][T31932] [ 1467.330257][T31932] dump_stack_lvl+0x18c/0x250 [ 1467.334994][T31932] ? show_regs_print_info+0x20/0x20 [ 1467.340333][T31932] ? load_image+0x420/0x420 [ 1467.344883][T31932] ? __lock_acquire+0x7d40/0x7d40 [ 1467.349951][T31932] ? snprintf+0xe9/0x140 [ 1467.354348][T31932] should_fail_ex+0x39d/0x4d0 [ 1467.359071][T31932] _copy_to_user+0x2f/0xa0 [ 1467.363527][T31932] simple_read_from_buffer+0xe7/0x150 [ 1467.369043][T31932] proc_fail_nth_read+0x1e8/0x260 [ 1467.374216][T31932] ? proc_fault_inject_write+0x360/0x360 [ 1467.380095][T31932] ? proc_fault_inject_write+0x360/0x360 [ 1467.386030][T31932] vfs_read+0x28b/0x970 [ 1467.390244][T31932] ? kernel_read+0x1e0/0x1e0 [ 1467.394964][T31932] ? __fget_files+0x28/0x4b0 [ 1467.399631][T31932] ? __fget_files+0x28/0x4b0 [ 1467.404353][T31932] ? __fget_files+0x43d/0x4b0 [ 1467.409204][T31932] ? __fdget_pos+0x2a3/0x330 [ 1467.414106][T31932] ? ksys_read+0x75/0x260 [ 1467.418673][T31932] ksys_read+0x150/0x260 [ 1467.423161][T31932] ? vfs_write+0x990/0x990 [ 1467.427639][T31932] ? lockdep_hardirqs_on+0x98/0x150 [ 1467.433080][T31932] do_syscall_64+0x55/0xb0 [ 1467.437656][T31932] ? clear_bhb_loop+0x40/0x90 [ 1467.442397][T31932] ? clear_bhb_loop+0x40/0x90 [ 1467.447399][T31932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.453809][T31932] RIP: 0033:0x7f298f75d68e [ 1467.458430][T31932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1467.478176][T31932] RSP: 002b:00007f29905a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1467.486924][T31932] RAX: ffffffffffffffda RBX: 00007f29905a76c0 RCX: 00007f298f75d68e [ 1467.495049][T31932] RDX: 000000000000000f RSI: 00007f29905a70a0 RDI: 0000000000000008 [ 1467.503066][T31932] RBP: 00007f29905a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.511078][T31932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.519262][T31932] R13: 00007f298fa16038 R14: 00007f298fa15fa0 R15: 00007ffd96fff4b8 [ 1467.527357][T31932] [ 1468.142784][T31945] validate_nla: 4 callbacks suppressed [ 1468.142804][T31945] netlink: 'syz.1.8604': attribute type 39 has an invalid length. [ 1469.616478][T31955] netlink: 'syz.1.8608': attribute type 29 has an invalid length. [ 1469.655828][T31955] netlink: 'syz.1.8608': attribute type 29 has an invalid length. [ 1469.713604][T31960] netlink: 'syz.1.8608': attribute type 29 has an invalid length. [ 1469.785260][T31955] netlink: 'syz.1.8608': attribute type 29 has an invalid length. [ 1470.359686][T31970] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.8611'. [ 1470.734447][T31967] netlink: 198584 bytes leftover after parsing attributes in process `syz.3.8609'. [ 1470.793325][T31967] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1471.232639][T31977] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8612'. [ 1471.460294][T31981] netlink: 'syz.3.8613': attribute type 29 has an invalid length. [ 1471.523648][T31981] netlink: 'syz.3.8613': attribute type 29 has an invalid length. [ 1472.350686][T31996] netlink: 'syz.0.8617': attribute type 39 has an invalid length. [ 1473.386599][T32008] FAULT_INJECTION: forcing a failure. [ 1473.386599][T32008] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.409027][T32008] CPU: 1 PID: 32008 Comm: syz.1.8623 Not tainted syzkaller #0 [ 1473.416655][T32008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1473.426858][T32008] Call Trace: [ 1473.430189][T32008] [ 1473.433188][T32008] dump_stack_lvl+0x18c/0x250 [ 1473.437923][T32008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1473.444141][T32008] ? show_regs_print_info+0x20/0x20 [ 1473.449647][T32008] ? load_image+0x420/0x420 [ 1473.454191][T32008] ? lock_acquire+0x208/0x420 [ 1473.458912][T32008] should_fail_ex+0x39d/0x4d0 [ 1473.463912][T32008] should_failslab+0x9/0x20 [ 1473.468465][T32008] slab_pre_alloc_hook+0x59/0x310 [ 1473.473562][T32008] ? inet_bind2_bucket_find+0x62/0x620 [ 1473.479072][T32008] kmem_cache_alloc+0x5a/0x2d0 [ 1473.484132][T32008] ? __inet_hash_connect+0xbe4/0x1870 [ 1473.489601][T32008] __inet_hash_connect+0xbe4/0x1870 [ 1473.495671][T32008] ? inet_bhash2_reset_saddr+0x80/0x80 [ 1473.501245][T32008] tcp_v4_connect+0xcac/0x18e0 [ 1473.506174][T32008] ? tcp_twsk_unique+0x990/0x990 [ 1473.511171][T32008] __inet_stream_connect+0x254/0xdc0 [ 1473.516613][T32008] ? inet_dgram_connect+0x360/0x360 [ 1473.521880][T32008] ? kasan_poison+0x50/0x70 [ 1473.526445][T32008] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 1473.531703][T32008] tcp_sendmsg_locked+0x4621/0x4bd0 [ 1473.536962][T32008] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1473.543245][T32008] ? mark_lock+0x94/0x320 [ 1473.547706][T32008] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1473.553994][T32008] ? lock_chain_count+0x20/0x20 [ 1473.558888][T32008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1473.565099][T32008] ? lockdep_hardirqs_on+0x98/0x150 [ 1473.570357][T32008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1473.576562][T32008] ? tcp_sendmsg+0x21/0x50 [ 1473.581498][T32008] ? tcp_set_state+0x680/0x680 [ 1473.586306][T32008] ? __local_bh_enable_ip+0x142/0x1c0 [ 1473.591730][T32008] tcp_sendmsg+0x2f/0x50 [ 1473.596018][T32008] ? inet_send_prepare+0x260/0x260 [ 1473.601180][T32008] ____sys_sendmsg+0x5ba/0x960 [ 1473.606176][T32008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1473.612471][T32008] ? __asan_memset+0x22/0x40 [ 1473.617132][T32008] ? __sys_sendmsg_sock+0x30/0x30 [ 1473.622296][T32008] ? __import_iovec+0x3fa/0x850 [ 1473.627209][T32008] ? import_iovec+0x73/0xa0 [ 1473.631760][T32008] ___sys_sendmsg+0x2a6/0x360 [ 1473.636690][T32008] ? __sys_sendmsg+0x2a0/0x2a0 [ 1473.641621][T32008] __se_sys_sendmsg+0x1c2/0x2b0 [ 1473.646514][T32008] ? __x64_sys_sendmsg+0x80/0x80 [ 1473.651591][T32008] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1473.657718][T32008] do_syscall_64+0x55/0xb0 [ 1473.662173][T32008] ? clear_bhb_loop+0x40/0x90 [ 1473.666891][T32008] ? clear_bhb_loop+0x40/0x90 [ 1473.671608][T32008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1473.677631][T32008] RIP: 0033:0x7f416119ce59 [ 1473.682080][T32008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.701734][T32008] RSP: 002b:00007f416200d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1473.710470][T32008] RAX: ffffffffffffffda RBX: 00007f4161415fa0 RCX: 00007f416119ce59 [ 1473.718573][T32008] RDX: 0000000020000811 RSI: 0000200000000fc0 RDI: 0000000000000009 [ 1473.726583][T32008] RBP: 00007f416200d090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.734618][T32008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.742802][T32008] R13: 00007f4161416038 R14: 00007f4161415fa0 R15: 00007ffdb6491878 [ 1473.751029][T32008] [ 1474.002093][T32003] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8621'. [ 1474.040043][T32003] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1475.650334][T32037] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8631'. [ 1475.667663][T32037] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1475.834138][T32039] netlink: 'syz.3.8633': attribute type 21 has an invalid length. [ 1475.882441][T32039] netlink: 'syz.3.8633': attribute type 6 has an invalid length. [ 1475.891026][T32036] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8630'. [ 1475.934136][T32036] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1477.011835][T32053] ================================================================== [ 1477.020021][T32053] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1477.028273][T32053] Write of size 72 at addr ffff88806a518910 by task syz.1.8637/32053 [ 1477.036841][T32053] [ 1477.039691][T32053] CPU: 1 PID: 32053 Comm: syz.1.8637 Not tainted syzkaller #0 [ 1477.047459][T32053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1477.057734][T32053] Call Trace: [ 1477.061165][T32053] [ 1477.064144][T32053] dump_stack_lvl+0x18c/0x250 [ 1477.068898][T32053] ? __lock_acquire+0x7d40/0x7d40 [ 1477.074166][T32053] ? show_regs_print_info+0x20/0x20 [ 1477.079515][T32053] ? load_image+0x420/0x420 [ 1477.084080][T32053] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1477.089621][T32053] ? __virt_addr_valid+0x18c/0x540 [ 1477.095134][T32053] ? __virt_addr_valid+0x469/0x540 [ 1477.100334][T32053] print_report+0xa8/0x210 [ 1477.104821][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1477.110185][T32053] kasan_report+0x117/0x150 [ 1477.115494][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1477.120777][T32053] kasan_check_range+0x241/0x290 [ 1477.125885][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1477.131150][T32053] __asan_memcpy+0x40/0x70 [ 1477.135633][T32053] __bpf_get_stackid+0x6bf/0x900 [ 1477.140739][T32053] bpf_get_stackid_pe+0x343/0x410 [ 1477.146072][T32053] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1477.151776][T32053] bpf_overflow_handler+0x1fc/0x510 [ 1477.157143][T32053] ? bpf_overflow_handler+0xde/0x510 [ 1477.162758][T32053] ? tp_perf_event_destroy+0x20/0x20 [ 1477.168109][T32053] ? perf_trace_preemptirq_template+0x144/0x330 [ 1477.174779][T32053] ? __perf_event_account_interrupt+0x187/0x280 [ 1477.181247][T32053] __perf_event_overflow+0x447/0x630 [ 1477.186595][T32053] perf_swevent_event+0x319/0x570 [ 1477.191683][T32053] ? perf_tp_event+0x1520/0x1520 [ 1477.196721][T32053] ___perf_sw_event+0x4a7/0x730 [ 1477.201662][T32053] ? ___perf_sw_event+0x199/0x730 [ 1477.206890][T32053] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1477.213590][T32053] ? __lock_acquire+0x1347/0x7d40 [ 1477.218707][T32053] ? rep_movs_alternative+0x4a/0x90 [ 1477.224009][T32053] ? verify_lock_unused+0x140/0x140 [ 1477.229349][T32053] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1477.235548][T32053] ? lock_chain_count+0x20/0x20 [ 1477.240637][T32053] __perf_sw_event+0x139/0x270 [ 1477.245473][T32053] do_user_addr_fault+0x123e/0x12c0 [ 1477.250748][T32053] ? rcu_is_watching+0x15/0xb0 [ 1477.255575][T32053] exc_page_fault+0x64/0x100 [ 1477.260230][T32053] asm_exc_page_fault+0x26/0x30 [ 1477.265157][T32053] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1477.271021][T32053] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1477.291209][T32053] RSP: 0018:ffffc9000d637bd0 EFLAGS: 00050206 [ 1477.297506][T32053] RAX: ffffffff842a5101 RBX: 000000000000056d RCX: 000000000000032c [ 1477.305715][T32053] RDX: 0000000000000001 RSI: 00002000000fa000 RDI: ffff8880794b9241 [ 1477.313927][T32053] RBP: ffffc9000d637d20 R08: 0000000000000004 R09: 0000000000000005 [ 1477.322051][T32053] R10: dffffc0000000000 R11: ffffed100f2972ad R12: 00002000000fa32c [ 1477.330179][T32053] R13: 1ffff92001ac6fbd R14: ffff8880794b9000 R15: 00002000000f9dbf [ 1477.338448][T32053] ? rcuref_put_slowpath+0xe1/0x150 [ 1477.343803][T32053] _copy_from_user+0x8b/0xe0 [ 1477.348459][T32053] generic_map_update_batch+0x59a/0x810 [ 1477.354085][T32053] ? rcu_read_unlock+0xa0/0xa0 [ 1477.358938][T32053] ? __fdget+0x180/0x210 [ 1477.363453][T32053] ? rcu_read_unlock+0xa0/0xa0 [ 1477.368275][T32053] bpf_map_do_batch+0x3d7/0x610 [ 1477.373201][T32053] __sys_bpf+0x381/0x890 [ 1477.377726][T32053] ? bpf_link_show_fdinfo+0x390/0x390 [ 1477.383258][T32053] ? lock_chain_count+0x20/0x20 [ 1477.388355][T32053] __x64_sys_bpf+0x7c/0x90 [ 1477.393022][T32053] do_syscall_64+0x55/0xb0 [ 1477.397677][T32053] ? clear_bhb_loop+0x40/0x90 [ 1477.402610][T32053] ? clear_bhb_loop+0x40/0x90 [ 1477.407516][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.413492][T32053] RIP: 0033:0x7f416119ce59 [ 1477.417984][T32053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.438267][T32053] RSP: 002b:00007f4161fcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1477.446984][T32053] RAX: ffffffffffffffda RBX: 00007f4161416180 RCX: 00007f416119ce59 [ 1477.455016][T32053] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1477.463480][T32053] RBP: 00007f4161232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1477.471504][T32053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.479782][T32053] R13: 00007f4161416218 R14: 00007f4161416180 R15: 00007ffdb6491878 [ 1477.488005][T32053] [ 1477.491183][T32053] [ 1477.493657][T32053] Allocated by task 32051: [ 1477.498458][T32053] kasan_set_track+0x4e/0x70 [ 1477.503121][T32053] __kasan_kmalloc+0x8f/0xa0 [ 1477.507874][T32053] __kmalloc_node+0xb4/0x230 [ 1477.512633][T32053] bpf_map_area_alloc+0x5e/0x110 [ 1477.517648][T32053] prealloc_elems_and_freelist+0x86/0x1c0 [ 1477.523449][T32053] stack_map_alloc+0x33a/0x4c0 [ 1477.528308][T32053] map_create+0x877/0x12f0 [ 1477.532789][T32053] __sys_bpf+0x651/0x890 [ 1477.537089][T32053] __x64_sys_bpf+0x7c/0x90 [ 1477.541567][T32053] do_syscall_64+0x55/0xb0 [ 1477.546045][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.552152][T32053] [ 1477.554536][T32053] Last potentially related work creation: [ 1477.560366][T32053] kasan_save_stack+0x3e/0x60 [ 1477.565109][T32053] __kasan_record_aux_stack+0xaf/0xc0 [ 1477.570543][T32053] call_rcu+0x153/0x950 [ 1477.574763][T32053] __nf_register_net_hook+0x788/0x910 [ 1477.580195][T32053] nf_register_net_hook+0xb2/0x190 [ 1477.585361][T32053] nf_register_net_hooks+0x44/0x1b0 [ 1477.590717][T32053] ipt_register_table+0x53d/0x7d0 [ 1477.596149][T32053] iptable_mangle_table_init+0x41/0x60 [ 1477.601687][T32053] xt_find_table_lock+0x306/0x3e0 [ 1477.606860][T32053] xt_request_find_table_lock+0x26/0x100 [ 1477.612748][T32053] do_ipt_get_ctl+0x717/0x1200 [ 1477.617581][T32053] nf_getsockopt+0x262/0x280 [ 1477.622247][T32053] ip_getsockopt+0x19f/0x230 [ 1477.626981][T32053] do_sock_getsockopt+0x379/0x450 [ 1477.632150][T32053] __x64_sys_getsockopt+0x1d6/0x280 [ 1477.637425][T32053] do_syscall_64+0x55/0xb0 [ 1477.641989][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.647961][T32053] [ 1477.650407][T32053] Second to last potentially related work creation: [ 1477.657134][T32053] kasan_save_stack+0x3e/0x60 [ 1477.661875][T32053] __kasan_record_aux_stack+0xaf/0xc0 [ 1477.667929][T32053] call_rcu+0x153/0x950 [ 1477.672150][T32053] __nf_register_net_hook+0x788/0x910 [ 1477.677687][T32053] nf_register_net_hook+0xb2/0x190 [ 1477.682874][T32053] nf_register_net_hooks+0x44/0x1b0 [ 1477.688306][T32053] ebt_register_table+0xcec/0x10b0 [ 1477.693486][T32053] find_inlist_lock_noload+0x178/0x260 [ 1477.698998][T32053] do_ebt_get_ctl+0x2d6/0x1d80 [ 1477.703832][T32053] nf_getsockopt+0x262/0x280 [ 1477.708567][T32053] ip_getsockopt+0x19f/0x230 [ 1477.713324][T32053] do_sock_getsockopt+0x379/0x450 [ 1477.718545][T32053] __x64_sys_getsockopt+0x1d6/0x280 [ 1477.723979][T32053] do_syscall_64+0x55/0xb0 [ 1477.728517][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.734601][T32053] [ 1477.736976][T32053] The buggy address belongs to the object at ffff88806a518900 [ 1477.736976][T32053] which belongs to the cache kmalloc-cg-64 of size 64 [ 1477.751346][T32053] The buggy address is located 16 bytes inside of [ 1477.751346][T32053] allocated 40-byte region [ffff88806a518900, ffff88806a518928) [ 1477.765430][T32053] [ 1477.767807][T32053] The buggy address belongs to the physical page: [ 1477.774272][T32053] page:ffffea0001a94600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a518 [ 1477.784492][T32053] memcg:ffff88802c170201 [ 1477.788783][T32053] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1477.796651][T32053] page_type: 0xffffffff() [ 1477.801051][T32053] raw: 00fff00000000800 ffff888017c4da00 ffffea00008fb440 0000000000000004 [ 1477.809758][T32053] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802c170201 [ 1477.818666][T32053] page dumped because: kasan: bad access detected [ 1477.825160][T32053] page_owner tracks the page as allocated [ 1477.831100][T32053] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 19173, tgid 19173 (syz-executor), ts 787661409181, free_ts 787660016867 [ 1477.850872][T32053] post_alloc_hook+0x1c1/0x200 [ 1477.855715][T32053] get_page_from_freelist+0x1951/0x19e0 [ 1477.861406][T32053] __alloc_pages+0x1f0/0x460 [ 1477.866051][T32053] alloc_slab_page+0x5d/0x160 [ 1477.870785][T32053] new_slab+0x87/0x2d0 [ 1477.874927][T32053] ___slab_alloc+0xc5d/0x12f0 [ 1477.879682][T32053] __kmem_cache_alloc_node+0x19e/0x250 [ 1477.885212][T32053] kmalloc_trace+0x2a/0xe0 [ 1477.889881][T32053] alloc_fdtable+0xca/0x2c0 [ 1477.894479][T32053] dup_fd+0x786/0xa50 [ 1477.898644][T32053] copy_files+0xc3/0x120 [ 1477.903780][T32053] copy_process+0x15ab/0x3dc0 [ 1477.908522][T32053] kernel_clone+0x24b/0x8a0 [ 1477.913079][T32053] __x64_sys_clone+0x1b7/0x230 [ 1477.918099][T32053] do_syscall_64+0x55/0xb0 [ 1477.922587][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.928645][T32053] page last free stack trace: [ 1477.933526][T32053] free_unref_page_prepare+0x7b2/0x8c0 [ 1477.939236][T32053] free_unref_page+0x32/0x2e0 [ 1477.944169][T32053] __slab_free+0x35a/0x400 [ 1477.948730][T32053] qlist_free_all+0x75/0xd0 [ 1477.953516][T32053] kasan_quarantine_reduce+0x143/0x160 [ 1477.959374][T32053] __kasan_slab_alloc+0x22/0x80 [ 1477.965824][T32053] slab_post_alloc_hook+0x6e/0x4b0 [ 1477.971113][T32053] kmem_cache_alloc+0x11a/0x2d0 [ 1477.976760][T32053] getname_flags+0xbb/0x500 [ 1477.981765][T32053] __x64_sys_mkdirat+0x7c/0xa0 [ 1477.986984][T32053] do_syscall_64+0x55/0xb0 [ 1477.991945][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.998447][T32053] [ 1478.001047][T32053] Memory state around the buggy address: [ 1478.007658][T32053] ffff88806a518800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1478.017270][T32053] ffff88806a518880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1478.025566][T32053] >ffff88806a518900: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1478.034035][T32053] ^ [ 1478.039457][T32053] ffff88806a518980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1478.047656][T32053] ffff88806a518a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1478.055783][T32053] ================================================================== [ 1478.064265][T32053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1478.072076][T32053] CPU: 1 PID: 32053 Comm: syz.1.8637 Not tainted syzkaller #0 [ 1478.079674][T32053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1478.090469][T32053] Call Trace: [ 1478.093815][T32053] [ 1478.096945][T32053] dump_stack_lvl+0x18c/0x250 [ 1478.101851][T32053] ? show_regs_print_info+0x20/0x20 [ 1478.107387][T32053] ? load_image+0x420/0x420 [ 1478.112062][T32053] panic+0x2dc/0x730 [ 1478.116293][T32053] ? __lock_acquire+0x7d40/0x7d40 [ 1478.121398][T32053] ? bpf_jit_dump+0xd0/0xd0 [ 1478.126118][T32053] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1478.132070][T32053] ? _raw_spin_unlock+0x40/0x40 [ 1478.136980][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1478.142146][T32053] check_panic_on_warn+0x84/0xa0 [ 1478.147266][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1478.152550][T32053] end_report+0x6f/0x130 [ 1478.156939][T32053] kasan_report+0x128/0x150 [ 1478.161715][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1478.166896][T32053] kasan_check_range+0x241/0x290 [ 1478.172089][T32053] ? __bpf_get_stackid+0x6bf/0x900 [ 1478.177291][T32053] __asan_memcpy+0x40/0x70 [ 1478.181786][T32053] __bpf_get_stackid+0x6bf/0x900 [ 1478.186795][T32053] bpf_get_stackid_pe+0x343/0x410 [ 1478.191998][T32053] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1478.197653][T32053] bpf_overflow_handler+0x1fc/0x510 [ 1478.203274][T32053] ? bpf_overflow_handler+0xde/0x510 [ 1478.208643][T32053] ? tp_perf_event_destroy+0x20/0x20 [ 1478.214272][T32053] ? perf_trace_preemptirq_template+0x144/0x330 [ 1478.220765][T32053] ? __perf_event_account_interrupt+0x187/0x280 [ 1478.227149][T32053] __perf_event_overflow+0x447/0x630 [ 1478.232499][T32053] perf_swevent_event+0x319/0x570 [ 1478.237706][T32053] ? perf_tp_event+0x1520/0x1520 [ 1478.242811][T32053] ___perf_sw_event+0x4a7/0x730 [ 1478.248009][T32053] ? ___perf_sw_event+0x199/0x730 [ 1478.253092][T32053] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1478.259784][T32053] ? __lock_acquire+0x1347/0x7d40 [ 1478.264867][T32053] ? rep_movs_alternative+0x4a/0x90 [ 1478.270144][T32053] ? verify_lock_unused+0x140/0x140 [ 1478.275432][T32053] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1478.281479][T32053] ? lock_chain_count+0x20/0x20 [ 1478.286488][T32053] __perf_sw_event+0x139/0x270 [ 1478.291520][T32053] do_user_addr_fault+0x123e/0x12c0 [ 1478.296901][T32053] ? rcu_is_watching+0x15/0xb0 [ 1478.301919][T32053] exc_page_fault+0x64/0x100 [ 1478.306659][T32053] asm_exc_page_fault+0x26/0x30 [ 1478.311710][T32053] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1478.317759][T32053] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1478.337518][T32053] RSP: 0018:ffffc9000d637bd0 EFLAGS: 00050206 [ 1478.343635][T32053] RAX: ffffffff842a5101 RBX: 000000000000056d RCX: 000000000000032c [ 1478.352404][T32053] RDX: 0000000000000001 RSI: 00002000000fa000 RDI: ffff8880794b9241 [ 1478.360776][T32053] RBP: ffffc9000d637d20 R08: 0000000000000004 R09: 0000000000000005 [ 1478.369153][T32053] R10: dffffc0000000000 R11: ffffed100f2972ad R12: 00002000000fa32c [ 1478.377449][T32053] R13: 1ffff92001ac6fbd R14: ffff8880794b9000 R15: 00002000000f9dbf [ 1478.385650][T32053] ? rcuref_put_slowpath+0xe1/0x150 [ 1478.390932][T32053] _copy_from_user+0x8b/0xe0 [ 1478.395585][T32053] generic_map_update_batch+0x59a/0x810 [ 1478.401860][T32053] ? rcu_read_unlock+0xa0/0xa0 [ 1478.406851][T32053] ? __fdget+0x180/0x210 [ 1478.411250][T32053] ? rcu_read_unlock+0xa0/0xa0 [ 1478.416069][T32053] bpf_map_do_batch+0x3d7/0x610 [ 1478.420988][T32053] __sys_bpf+0x381/0x890 [ 1478.425291][T32053] ? bpf_link_show_fdinfo+0x390/0x390 [ 1478.430753][T32053] ? lock_chain_count+0x20/0x20 [ 1478.435807][T32053] __x64_sys_bpf+0x7c/0x90 [ 1478.440297][T32053] do_syscall_64+0x55/0xb0 [ 1478.444871][T32053] ? clear_bhb_loop+0x40/0x90 [ 1478.449799][T32053] ? clear_bhb_loop+0x40/0x90 [ 1478.454903][T32053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1478.460850][T32053] RIP: 0033:0x7f416119ce59 [ 1478.465403][T32053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.485249][T32053] RSP: 002b:00007f4161fcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1478.493728][T32053] RAX: ffffffffffffffda RBX: 00007f4161416180 RCX: 00007f416119ce59 [ 1478.501926][T32053] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1478.509954][T32053] RBP: 00007f4161232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1478.518239][T32053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.526442][T32053] R13: 00007f4161416218 R14: 00007f4161416180 R15: 00007ffdb6491878 [ 1478.534661][T32053] [ 1478.538317][T32053] Kernel Offset: disabled [ 1478.542665][T32053] Rebooting in 86400 seconds..