last executing test programs: 8.711860655s ago: executing program 1 (id=13766): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000de0080000085000000750000009500000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10481, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9a2, 0x9, 0x0, 0x9, 0x0, 0x3, 0xb90, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="f0870326b11ee273b2bb5efaa052410fbc7f05a4cb493afcc770e22288d64d8bc0beecc363a9964a034186484560ea66820c841178bbcfdfc2f80cf938240b94a822215f11a9224252d9e77db5bcc6b7546b1ea8da962a54c11d35a1e0ecc59e57799aa89bd5c414724410c77eaaccc00f897aa9cca9970da1f202ee6cd5276c8bb35f70c0578abe8308ee667591", 0x8e}, {&(0x7f0000001480)="9bd27c6fe7c3bbb3c17f8095af05eb8cb31be4226d1966829fb1daf7e193418d760d347a7b662b16fc3c1bff447e7ffa55c0fc930ece4cd3470205db0ded8f5810c3c8a62153bea27413b73f422ddae1497d883e0ef7a4edadc95f290196a8c794ecf0872728989e5eaca9dbc44a065eb2ca8d84d187d4e57e986e4c26fc6acf8fec23e8fdf35afab9a567edabc6fbe31a50f20a6f95d6fcdcfc6ef9c025a1773e5dc4da8c1e464fe84be9a638c7ed83d80314c2a06129f92d30c33df0367fe7c39e40ef8797e5bded4493a735e861e78759af3d0a0e8f67576f9c85496da9e9f2855ade069de2ed94b2", 0xea}, {&(0x7f0000001580)="1855c794fffad4492e60e022129525c9167ac9798f98ffb01fce29858acd42aad55dcdecdc14e29796e69cb74a956b6c936e881644d5facad40f686b5857544e91a1bd51dba60a063a48eee06e4522810d495643b7be7b9876a0c9576e", 0x5d}], 0x6, 0x0, 0x0, 0x10000000}, 0x524c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000007110b20000000000950000009c960000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 8.640106897s ago: executing program 2 (id=13768): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0xfffffffe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xf, 0x7fffffff, 0x1, 0x4a, r1, 0x4, '\x00', r2, r4, 0x3, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 5.126851265s ago: executing program 2 (id=13772): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000de0080000085000000750000009500000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10481, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9a2, 0x9, 0x0, 0x9, 0x0, 0x3, 0xb90, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="f0870326b11ee273b2bb5efaa052410fbc7f05a4cb493afcc770e22288d64d8bc0beecc363a9964a034186484560ea66820c841178bbcfdfc2f80cf938240b94a822215f11a9224252d9e77db5bcc6b7546b1ea8da962a54c11d35a1e0ecc59e57799aa89bd5c414724410c77eaaccc00f897aa9cca9970da1f202ee6cd5276c8bb35f70c0578abe8308ee667591", 0x8e}, {&(0x7f0000001480)="9bd27c6fe7c3bbb3c17f8095af05eb8cb31be4226d1966829fb1daf7e193418d760d347a7b662b16fc3c1bff447e7ffa55c0fc930ece4cd3470205db0ded8f5810c3c8a62153bea27413b73f422ddae1497d883e0ef7a4edadc95f290196a8c794ecf0872728989e5eaca9dbc44a065eb2ca8d84d187d4e57e986e4c26fc6acf8fec23e8fdf35afab9a567edabc6fbe31a50f20a6f95d6fcdcfc6ef9c025a1773e5dc4da8c1e464fe84be9a638c7ed83d80314c2a06129f92d30c33df0367fe7c39e40ef8797e5bded4493a735e861e78759af3d0a0e8f67576f9c85496da9e9f2855ade069de2ed94b2", 0xea}, {&(0x7f0000001580)="1855c794fffad4492e60e022129525c9167ac9798f98ffb01fce29858acd42aad55dcdecdc14e29796e69cb74a956b6c936e881644d5facad40f686b5857544e91a1bd51dba60a063a48eee06e4522810d495643b7be7b9876a0c9576e", 0x5d}], 0x6, 0x0, 0x0, 0x10000000}, 0x524c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000007110b20000000000950000009c960000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 5.087084216s ago: executing program 4 (id=13773): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x108080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x6}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079106f501afa2e009500000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x23) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r3, &(0x7f00000009c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000006c0)="5b864665eba2e462224a7c6238829431c454ae7199131a7df28fecafb22130c8db369c7f88476e98d383939f6d5d57bb5c5929ebc22c67eec09d6382143b46e97e2f054f715a5c69233e9f321a6535f96dbee3dc24db6d35f008fbeca8bfafe936bfe02f8665c4667fb3010239d7252fe5436808938e6f8f9ec090939db19532c4a9eb55", 0x84}, {&(0x7f0000000880)="60724b7ea215498c6043834ad65ea1a5f8fb2584ad714c0749433fbff5a8c7c3c40009f2f53beb703a77f9a04280dab1fb", 0x31}], 0x2, &(0x7f0000000900)="f4a958be8408670c8deee943fff9b1da5536ad2adc8f53da5033a50b7c530ea86e19cbbe2c97b2db5e7a62ce4621d948b883356644df51c5c2c2abb1623e00df2800a2a50685f7c3196644ebcdef5462b94c039a9f8edcb87d56cf5ee93baffa8c896c4d9fb49ea81db0407c4ae7a2320eba9c9c5bc447fd3f7638c23bc98e8e5c5f13d5e2c1", 0x86, 0x2400009c}, 0x4004804) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000035be000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) 4.986502088s ago: executing program 3 (id=13774): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) 4.985752488s ago: executing program 0 (id=13776): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd63"], 0xfdef) 4.936041839s ago: executing program 1 (id=13777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdaa}, 0xffffffffffffffff, 0x5, r6, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000580)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x3}, 0x7202, 0xf7e9, 0x6, 0x0, 0x34d, 0x0, 0x4, 0x0, 0xff}, 0xffffffffffffffff, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8, 0x0, 0x2}, {0x0, 0x0, 0xff, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x1}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.745414074s ago: executing program 4 (id=13778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2000000000000205, &(0x7f00000017c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1900000000043c0000006700008000f518110000", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff0, &(0x7f0000000240)=""/4080}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYBLOB="000500"/14, @ANYRESHEX, @ANYRES8, @ANYBLOB="06000000000088ea563c3f80c730e2faeee5cc90f74ee14ded0f41a0750f9441e6c30acc0b0e7eb5d2a52ab03024cdddf01a504b3641b4b6a6e968c4df5bad11c4d0be8f37315c1ff261bf8d27ddc0b3e51d816c62071857175f29fcf58063a63749ad792a1d1fb6104111960bb521f8fe136c3d0ede6a4ac87a229455320f8100b0acc1b7ae00"/150, @ANYRES32, @ANYRES16], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)="e300", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 4.649807556s ago: executing program 3 (id=13779): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x108080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x6}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x23) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r3, &(0x7f00000009c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000006c0)="5b864665eba2e462224a7c6238829431c454ae7199131a7df28fecafb22130c8db369c7f88476e98d383939f6d5d57bb5c5929ebc22c67eec09d6382143b46e97e2f054f715a5c69233e9f321a6535f96dbee3dc24db6d35f008fbeca8bfafe936bfe02f8665c4667fb3010239d7252fe5436808938e6f8f9ec090939db19532c4a9eb55", 0x84}, {&(0x7f0000000880)="60724b7ea215498c6043834ad65ea1a5f8fb2584ad714c0749433fbff5a8c7c3c40009f2f53beb703a77f9a04280dab1fb", 0x31}], 0x2, &(0x7f0000000900)="f4a958be8408670c8deee943fff9b1da5536ad2adc8f53da5033a50b7c530ea86e19cbbe2c97b2db5e7a62ce4621d948b883356644df51c5c2c2abb1623e00df2800a2a50685f7c3196644ebcdef5462b94c039a9f8edcb87d56cf5ee93baffa8c896c4d9fb49ea81db0407c4ae7a2320eba9c9c5bc447fd3f7638c23bc98e8e5c5f13d5e2c1", 0x86, 0x2400009c}, 0x4004804) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000035be000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) 4.509431679s ago: executing program 4 (id=13780): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x9, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(0x3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r7], 0x12) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6c, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x32, 0x0, 0x6}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x31, 0x0, 0x0) 4.508444169s ago: executing program 0 (id=13790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2000000000000205, &(0x7f00000017c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1900000000043c0000006700008000f518110000", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff0, &(0x7f0000000240)=""/4080}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYBLOB="000500"/14, @ANYRESHEX, @ANYRES8, @ANYBLOB="06000000000088ea563c3f80c730e2faeee5cc90f74ee14ded0f41a0750f9441e6c30acc0b0e7eb5d2a52ab03024cdddf01a504b3641b4b6a6e968c4df5bad11c4d0be8f37315c1ff261bf8d27ddc0b3e51d816c62071857175f29fcf58063a63749ad792a1d1fb6104111960bb521f8fe136c3d0ede6a4ac87a229455320f8100b0acc1b7ae00"/150, @ANYRES32, @ANYRES16], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)="e300", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 4.409610551s ago: executing program 1 (id=13781): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000700)=""/186, 0xba}, {&(0x7f0000004480)=""/4126, 0x101e}, {&(0x7f0000002180)=""/4063, 0xfdf}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x4}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0, 0xc3}, 0x80) 4.315334403s ago: executing program 0 (id=13782): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x108080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x6}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079106f501afa2e009500000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x23) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r2, &(0x7f00000009c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000006c0)="5b864665eba2e462224a7c6238829431c454ae7199131a7df28fecafb22130c8db369c7f88476e98d383939f6d5d57bb5c5929ebc22c67eec09d6382143b46e97e2f054f715a5c69233e9f321a6535f96dbee3dc24db6d35f008fbeca8bfafe936bfe02f8665c4667fb3010239d7252fe5436808938e6f8f9ec090939db19532c4a9eb55", 0x84}, {&(0x7f0000000880)="60724b7ea215498c6043834ad65ea1a5f8fb2584ad714c0749433fbff5a8c7c3c40009f2f53beb703a77f9a04280dab1fb", 0x31}], 0x2, &(0x7f0000000900)="f4a958be8408670c8deee943fff9b1da5536ad2adc8f53da5033a50b7c530ea86e19cbbe2c97b2db5e7a62ce4621d948b883356644df51c5c2c2abb1623e00df2800a2a50685f7c3196644ebcdef5462b94c039a9f8edcb87d56cf5ee93baffa8c896c4d9fb49ea81db0407c4ae7a2320eba9c9c5bc447fd3f7638c23bc98e8e5c5f13d5e2c1", 0x86, 0x2400009c}, 0x4004804) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000035be000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) 4.314341203s ago: executing program 3 (id=13793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2000000000000205, &(0x7f00000017c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1900000000043c0000006700008000f518110000", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff0, &(0x7f0000000240)=""/4080}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYBLOB="000500"/14, @ANYRESHEX, @ANYRES8, @ANYBLOB="06000000000088ea563c3f80c730e2faeee5cc90f74ee14ded0f41a0750f9441e6c30acc0b0e7eb5d2a52ab03024cdddf01a504b3641b4b6a6e968c4df5bad11c4d0be8f37315c1ff261bf8d27ddc0b3e51d816c62071857175f29fcf58063a63749ad792a1d1fb6104111960bb521f8fe136c3d0ede6a4ac87a229455320f8100b0acc1b7ae00"/150, @ANYRES32, @ANYRES16], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)="e300", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 4.312291803s ago: executing program 2 (id=13783): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xf, 0x7fffffff, 0x1, 0x4a, r1, 0x4, '\x00', r2, r4, 0x3, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES16=r5], &(0x7f0000000600)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 3.863901853s ago: executing program 3 (id=13784): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x9}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x1d, 0x1, 0x300000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xbcaa}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000003c0)=""/144, 0x38, 0x90, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000010e000a", 0x23}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) 3.793294005s ago: executing program 1 (id=13785): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0xfffffffe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xf, 0x7fffffff, 0x1, 0x4a, r1, 0x4, '\x00', r2, r4, 0x3, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 3.746232796s ago: executing program 4 (id=13786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000de0080000085000000750000009500000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10481, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9a2, 0x9, 0x0, 0x9, 0x0, 0x3, 0xb90, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="f0870326b11ee273b2bb5efaa052410fbc7f05a4cb493afcc770e22288d64d8bc0beecc363a9964a034186484560ea66820c841178bbcfdfc2f80cf938240b94a822215f11a9224252d9e77db5bcc6b7546b1ea8da962a54c11d35a1e0ecc59e57799aa89bd5c414724410c77eaaccc00f897aa9cca9970da1f202ee6cd5276c8bb35f70c0578abe8308ee667591", 0x8e}, {&(0x7f0000001480)="9bd27c6fe7c3bbb3c17f8095af05eb8cb31be4226d1966829fb1daf7e193418d760d347a7b662b16fc3c1bff447e7ffa55c0fc930ece4cd3470205db0ded8f5810c3c8a62153bea27413b73f422ddae1497d883e0ef7a4edadc95f290196a8c794ecf0872728989e5eaca9dbc44a065eb2ca8d84d187d4e57e986e4c26fc6acf8fec23e8fdf35afab9a567edabc6fbe31a50f20a6f95d6fcdcfc6ef9c025a1773e5dc4da8c1e464fe84be9a638c7ed83d80314c2a06129f92d30c33df0367fe7c39e40ef8797e5bded4493a735e861e78759af3d0a0e8f67576f9c85496da9e9f2855ade069de2ed94b2", 0xea}, {&(0x7f0000001580)="1855c794fffad4492e60e022129525c9167ac9798f98ffb01fce29858acd42aad55dcdecdc14e29796e69cb74a956b6c936e881644d5facad40f686b5857544e91a1bd51dba60a063a48eee06e4522810d495643b7be7b9876a0c9576e", 0x5d}], 0x6, 0x0, 0x0, 0x10000000}, 0x524c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000007110b20000000000950000009c960000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 3.715358437s ago: executing program 0 (id=13787): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x63}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 585.623767ms ago: executing program 1 (id=13788): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x108080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x6}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079106f501afa2e009500000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x23) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) sendmsg$tipc(r3, &(0x7f00000009c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000006c0)="5b864665eba2e462224a7c6238829431c454ae7199131a7df28fecafb22130c8db369c7f88476e98d383939f6d5d57bb5c5929ebc22c67eec09d6382143b46e97e2f054f715a5c69233e9f321a6535f96dbee3dc24db6d35f008fbeca8bfafe936bfe02f8665c4667fb3010239d7252fe5436808938e6f8f9ec090939db19532c4a9eb55", 0x84}, {&(0x7f0000000880)="60724b7ea215498c6043834ad65ea1a5f8fb2584ad714c0749433fbff5a8c7c3c40009f2f53beb703a77f9a04280dab1fb", 0x31}], 0x2, &(0x7f0000000900)="f4a958be8408670c8deee943fff9b1da5536ad2adc8f53da5033a50b7c530ea86e19cbbe2c97b2db5e7a62ce4621d948b883356644df51c5c2c2abb1623e00df2800a2a50685f7c3196644ebcdef5462b94c039a9f8edcb87d56cf5ee93baffa8c896c4d9fb49ea81db0407c4ae7a2320eba9c9c5bc447fd3f7638c23bc98e8e5c5f13d5e2c1", 0x86, 0x2400009c}, 0x4004804) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000035be000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) 575.230837ms ago: executing program 3 (id=13789): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) 555.761277ms ago: executing program 2 (id=13791): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd63"], 0xfdef) 527.261898ms ago: executing program 0 (id=13792): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8210000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 519.770828ms ago: executing program 4 (id=13794): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x108080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x6}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x23) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r3, &(0x7f00000009c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000006c0)="5b864665eba2e462224a7c6238829431c454ae7199131a7df28fecafb22130c8db369c7f88476e98d383939f6d5d57bb5c5929ebc22c67eec09d6382143b46e97e2f054f715a5c69233e9f321a6535f96dbee3dc24db6d35f008fbeca8bfafe936bfe02f8665c4667fb3010239d7252fe5436808938e6f8f9ec090939db19532c4a9eb55", 0x84}, {&(0x7f0000000880)="60724b7ea215498c6043834ad65ea1a5f8fb2584ad714c0749433fbff5a8c7c3c40009f2f53beb703a77f9a04280dab1fb", 0x31}], 0x2, &(0x7f0000000900)="f4a958be8408670c8deee943fff9b1da5536ad2adc8f53da5033a50b7c530ea86e19cbbe2c97b2db5e7a62ce4621d948b883356644df51c5c2c2abb1623e00df2800a2a50685f7c3196644ebcdef5462b94c039a9f8edcb87d56cf5ee93baffa8c896c4d9fb49ea81db0407c4ae7a2320eba9c9c5bc447fd3f7638c23bc98e8e5c5f13d5e2c1", 0x86, 0x2400009c}, 0x4004804) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000035be000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) 354.257882ms ago: executing program 3 (id=13795): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000de0080000085000000750000009500000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10481, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9a2, 0x9, 0x0, 0x9, 0x0, 0x3, 0xb90, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000380)="b6c03d0caea64dd4eeafed400d24a51ceee0d51f5c0ff6c6716f3f4dcf57730256936888fea6a70fdf839e12beaf533d9d56a0c0410c055063c9aec900fd53accc9e6b3077e7ffb58f689b4a5ea6ed26001a51bbde1760aaba99cdff5ec5bd55e9b7807c2cfc2086b24a7bfcfe19091c5a09db4039188a564dd8b450f0264f74002bfdde41762dac78619718067d4439c5710884c5becbfd8973ae3cef9246532b209163d17950f4eea1af9e259626de9ee24f99a4b63747fde150f84c9de3790d854673dc9e0339737ff7033216e35f70308e5f493b24780ef7ee753df6d0a07864fdb31bc0e14029b81fb3078d312979f8011264972ac8897bdb179d617dca2b70ebbde9cfcc7d149103f48b1ffdfe7892200fe7437a7a22e80fbf7d6f2c97a61ea5baf1ecd51ea0495f684dfcc75a2881ff57cf95fb98ca5f5e71e54dc24fb44be9e3f6c1a92703bdb7ccd8e6c4e495acf7809bf09052a28b5548a0aaef170830284f5b71981d059edbadf4f4d39ead579756cf49d242dd630efcfe105df0ecbb2dcdb35e8d77ba81a138a4e53a369a653a09cd175386034383e368b66fc0c01c2de9e6689da5668beefa4364d22c71334758c69ad83ba9cd5e20788f2dd49b53309f90693ee9d40aa521a398ba65544422729515c59d4ee8368326c2fd1cf4f03a31f962e1013fa5f22bb865877e6409ea071427327caf697e093b8a57daffdbf3459111d7ccc78bb9c7f015df0a04a8281736054a8f746cc44ba088b3ed4b479c7fa7b56f0a2e48c1a823e36dc9ee2d782d8ed29e53983d1121dac7465163f67ce39f3464c382e1bddab5925fcb29165f1fb8dd9f89a19c7ebcd42e557aa5d3b9a627e9c57f0290cb626d45c7def7dd50845f52370a8d45ecaa0567f7293116e096fc7658b1c67c75cdab514efb478c7c6fdab9aef140684aa136f89207d50595b1f0cccde3ef9e8ee28a56dc6fdb12d80b014713583f338a4dc000babce4f2af7454e6218b8524ca5d3982ac87de77946ab81abf8cc2885a9548f30cbb91512364e8c3c13effe6013d016bfcc38dfc7400f0c55f6b75ede2e1befeb8b29ef56cbc80651b211e5e08a39f6168f6bc4f7498fcc958d4ae18840665d48eed8f4a1b04b6393ebe0e6b70f76184e8241ed9a6e6bbcb2d7d021cbdfe9ef384e52dece093ed6f12c70bb8f018af0bf1c0496408e17bcafdee3f5ef85a3c325d8b3b15d348ef855bb41aa59109dbd12dcd0dc5e2a1e9a164e768115049d299dd6dfc9d9842713470d753ecae3aa7cdc21fab316db02bf80f221124ed5b1a6da102473070723084e0b2aff8342388fadd27b3cc8631a2811e706e44e72e8d7a6de5a00462347d9a6419f61be17f41939e67137b487fbd2629ffee9421c96d977399430c4548c84692790d64c1ff7b832aa721cb5bf07c3c4ac58182ca69f3702cbce0bae55b688d6bc6f664e82545902b29e6e64e335659a1c4ef7d7f8133cd360449edee04013ab32dde533a289f2039e332b1bcb01a7bd78da645ef97ba5ea0dc14590b9f489dcc6c23f44875642572e8ef18f3f5bb20ecc2318ac12ba306e5f09b3caa9af35297c47af926e96f1c3c6133642d0a4e3914cf21dff031928fbf7815a945895658ac923029b9732d3f62cc9b74ca26140f880815640e8802ee1e261628150de590bb9203ceffa3ee7a38ca19a6502950d00d824e2db40852de7582fa6d72ad1b670120013aa65474545964c3f088c186b5a4f25ee3c6e6e739bdd07ef41145f615d8ef7c6461cc1bbc93ba25bf7b1f017637d2e25806f7f70d8affacb77d4cbd491f39640f6555c0d0e007cfb8c6e7a37ce5aaf981b1a826ff4c0f1b955aa21a78e427e9b9dab803e055147bde57a71fc0c776b639e9821bacdccb355516a474dbb9d674a882f002b6222ed88959fb65a808425a05d607741dd711de5cd4745bd6410a20392e618d0cfca23f0fd4a6634c2745ddfeff8bbdfe09ccab4f69e3448df8233b91d751b67ab4dd51bb90005483d5aeafee285766b12590b87c08b79627d793c1057dbd94f3af678b1e0990d7e27ffbf1fc283bd64b0574e0ecef3fafac842827df3790da7fab8248dc0e5b4f7f4f6932518379ed52c255025c33faf6f78df7de0d1d6eb3a9596902eba53d3d0537e9146abf7b39bcbedaeb9632aca3e228e7cb177b8ef2d4343ecc33e81fcddbb98d7d4b3ef2cf2db5800c31ec43810796dcc5db00f33cc567608a641517c94478d2bb0a82485077799821c0261fedb13ad5da773865054553fd97904692e0bea03b593e1276602e7302e8bee5c289d06effa6422b1c989f47bdf72d8f2bcdfd9b3188a0ba612ec31046902e14d6e11779069917269facf7e13c7e67ff835f1b1b9e682a2992b05757c9365d5bd89d21f0f9a3f8638c7dd99a14a9ac72c3d882ea081e823120c479e44aa435b8fde36ea7f9f417e5985713ac39d90ef73d79c37ba6071811ca2099f7c02c8e6664b4fb117f93ebc4b0b8501e5ecacc8348097e00a25ced95205cd1cf6f9118f88acef9983bb8130dadf67287d7813cbf837cb16476157f20cd6c68572fab3ee10486cffcbac8249fb2472892797194f272f825faf4c08cc2e72cf996e6559caa0b2da233f4361dd79e04e3319e589de0279624841c2de06f2f728f4500b414dc03dc00f7054bbe93d246413642bbaea5883e6f7a688057eb521ce4ae635352cfa9a4b12485ea6358be4283d88c24e7d53496a88d2f3f839a424b88c21692940c735f18f18f46eb1b2b48d3852f528f58c081a6634aff79ffd8a955ea79707d21cd9a1a8d0b414ce3be2cc01c245a78dc1c490ab384f8f4a3a29661df578842f23bcb71e6b738df6ac745d477497cbc8ebae88aaac16dbc432b62dee0d7dad383196fe012c1a8d9ab29130b395a8d9aa9d06d4ef58937e04fe3f8fbe768c4707b6e2f01d98b564d10fa4d18ea9f0cb99a3083d6392f0b4b9d8d04097e94d5a48fe869851dd902defa7691856398d1fbdae811648c485ef698115ac3bd1d358b498409be0c4f34a96f6104a7cd11339d34aadf958e745089b063fffcc14273a7f22690d44b4044814a2817844539c7696a99ed1c84e08f6daba935bb1cf94d4a07c3e6d17d67a777e89f889e8559a7d827ed3100544ace58617c59bcd56eed3852e291f0a5098d2a959777f113e1a600a9eecb354b15abfcae12823d07ac536f4fbd33c3104d9b1e935099789d5dbf88c65156e6104fe261711a1f9c9dada6d7952cdcd8834db9d148c104fdf289844c975b9c5ae83043d9f96fa3f756dd9046978c3e1447eaa11c78a6f7a535c076bbaef432aba7e1a46717309344d9172d721e4e2b9555cc1ad0fb56dd2367496059ec9867692879c698fe574860f4f4b1ca85a9e1a9a0445c6ba48f83e19a3e59f40ec6366e3521cf5477dcc95bd7795014a1bb79dc505699ef3cf78b927533d7661aeb4c8ac90ccc06697621ad6a9bd67274973c2110bbfd670bb08c675a74962e729de76aedab4717a75b2fcd9f3a6e83db03ed29059f08612ba7bd8ffe911d92c090510b592661797db17c2654673476a94da0efba367904baf1965ac92b9428a3e566c1f250d03660dfd85c8f2ff1ccfc266a4775573afe8cbaeea5cbf03dff9817d3402383c6b9a9f216ee766307a51a317529652a7d27982630bf1bb0566c63e197f29940df45bf0f07d6fdbd0368f679661962dfc00e2f5d050a8e55d4bc2d06d8d556c3885dfb5e34befb421ce4725c79792ad05371c2116381bb828f5a9af3f7d733d724ab4f9d8a6b495fafd4623dc70ffa8b6edf4ec4f4b4fbe332eb452491b30b5ca1377d41010a274bd7664f84706963cbeac77cfafc85463b96b05a85fbc86a6eb1967866744a848f00e0b37c5cf3ba2254b679ac02fddfd2d7a32dba987b9e5528b9c42ba47fd272380fb951659d4c9da8aba19435c25f1bd09e10976924d04aa425adf0acb25317759bec89b6e4289ac8b9d5e97d5eb6360819ba2e26be9243af9c7ae676c313b9288fe129077949b0ad5c5121e32ad01d63b093e667c13f10272c391a63376c6e1fa52a97a4a83f355e72955887a534bd46c9ba4c5f7668454132294ef9a2b8342d6ae909df5c221095d11eff5b27477f8fb3400eb662aa6eaa4ce16509b95e4bc926e6d8073fc1d5f49d524742c02bc01b5dc995e86ff09ef38610e208cdcc2955503970bae680252c9d8d5a64695387a4c4feb6ee99e32a64e81ec45bf179f7051c5a3b2f9c0cc6da5625fc480f88dd840ea6e9ea91158a76cb934308da762fe7795ea796e9d1374564b150bd19b2a9d853fa05dc2fa919a41122c342a05d358e45354cb979e0cdb1b0d539570727ea45e839d3f4a49070b16f1405b61c9925bae31ca8572c5d9aa5db4338767555304be9203335619faa292b0dcd47389104940dfd34d522f7b814e21dd0742d630097c38a905897f8106bbf516eb517d5268942f02494d5cda343ceec17f3c593f634c581bc4902dfe9ca3fc435eed28a4f24aae5b6381b8c289542731225246ab4b72d087ecba07fa01ab3ad5a1d3f7e2f2911d630ae4b4eb1ac22e315ed9722a0e68257124611aa098328fbc21860ab6f6c172077301869369c26f98145167408519f0f5212627331722af3b067916e37b2e64b6ef9e41d836ac49087f703bda91a2c9eef5aa145736fc2a5b35ae4658a0f28d76b6f3ffb93e0200b1f4889dbf4e6e8ca311423e892632a164a83db9627caf96495c7afc6e4272a1b170396ef71c8e89eb523f58186546a06e7b848e88e3f053a85d082ff4756cabf438fa65362a2a5a56658a56c9bddc1d2ca83c844d99b834c41758031c0c941a8cfcd6b4ddd3f447016e326187d3fbdb463db077fbc8615ef893593b28d451b60a85fbef0eeffb8904c77772bb454cf5cd64991938a5ae2c4ac260bd6de13b00b34ff52fdc4f9e35e35a6169090e4d571ddb8a5cb4f0bcf8c366f69213fdaa22856e960df3a23ad26d6d9db8713837d8b023ba4623d2f38781792d43867cfc4713670935289957c7b34ddea83100a7aa79954c42d12fa549d58d6dbc77210fd1d0a1cae6c0a4e0edec504526a5f7bfee56610c181e1104024facd21eac3e888275e590cb91b3571e24f26dd393db0ba6d23f179c6d7ea268f359ef52dc7eb06bbc3016bf2c0e13a0a16b5799ba359798d02e3eddce2a7d7f15ee038731e4bb3fa29d1aab28ac1d55741e605f1e330de465fec669108c15becc84241c1be5883f62bd93037cba5a64824ead53edcb853e9a8e0f1c284fbfdec666e6f30409672a0d104ad912a4de5721d431f1b419e641fc14cd5788706e908f30a73bad35ed1ec65a34c9c00158c8bd6384e53ec7e9fd7162974af04e509635ef266031d56f690b127a659196a37b643b81274531a7c1e8f75eec27b9b6bac2a7f2c9b2f33ed909430776513955167e46980e44a9b0cbf366ac81ed8226e860fde6e88068575802b7d84c9d3812092375c40525ceddb388ef0c8446b0181dfdb344361a30141416527ae23e0038816ead7e4689d8a91b915a867f501e8b9a57956b00d7bc46598d58bbfe1c2ca72080682c8cbd64961fd7e0568d27d83266a1ff0adea180e4cf549f5dcd759f05f1010bdc4c815285e6bae74c1be77d0e02c19a6ea1d94a67897784f3454652aa064450cdb0a0d01693c239948862dae9a26e89e75e0e5824734ec2d9ab2b7cb77ffec1923f1fa911334c76c220822160416c16aebdc9807df4737d51963afbc7556dbd61e1b58ecb3cdda42ba30b3", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="f0870326b11ee273b2bb5efaa052410fbc7f05a4cb493afcc770e22288d64d8bc0beecc363a9964a034186484560ea66820c841178bbcfdfc2f80cf938240b94a822215f11a9224252d9e77db5bcc6b7546b1ea8da962a54c11d35a1e0ecc59e57799aa89bd5c414724410c77eaaccc00f897aa9cca9970da1f202ee6cd5276c8bb35f70c0578abe8308ee667591", 0x8e}, {&(0x7f0000001480)="9bd27c6fe7c3bbb3c17f8095af05eb8cb31be4226d1966829fb1daf7e193418d760d347a7b662b16fc3c1bff447e7ffa55c0fc930ece4cd3470205db0ded8f5810c3c8a62153bea27413b73f422ddae1497d883e0ef7a4edadc95f290196a8c794ecf0872728989e5eaca9dbc44a065eb2ca8d84d187d4e57e986e4c26fc6acf8fec23e8fdf35afab9a567edabc6fbe31a50f20a6f95d6fcdcfc6ef9c025a1773e5dc4da8c1e464fe84be9a638c7ed83d80314c2a06129f92d30c33df0367fe7c39e40ef8797e5bded4493a735e861e78759af3d0a0e8f67576f9c85496da9e9f2855ade069de2ed94b2", 0xea}, {&(0x7f0000001580)="1855c794fffad4492e60e022129525c9167ac9798f98ffb01fce29858acd42aad55dcdecdc14e29796e69cb74a956b6c936e881644d5facad40f686b5857544e91a1bd51dba60a063a48eee06e4522810d495643b7be7b9876a0c9576e", 0x5d}], 0x6, 0x0, 0x0, 0x10000000}, 0x524c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000007110b20000000000950000009c960000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 284.656784ms ago: executing program 2 (id=13796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2000000000000205, &(0x7f00000017c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1900000000043c0000006700008000f518110000", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff0, &(0x7f0000000240)=""/4080}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYBLOB="000500"/21, @ANYRESHEX, @ANYRES8, @ANYBLOB="06000000000088ea563c3f80c730e2faeee5cc90f74ee14ded0f41a0750f9441e6c30acc0b0e7eb5d2a52ab03024cdddf01a504b3641b4b6a6e968c4df5bad11c4d0be8f37315c1ff261bf8d27ddc0b3e51d816c62071857175f29fcf58063a63749ad792a1d1fb6104111960bb521f8fe136c3d0ede6a4ac87a229455320f8100b0acc1b7ae00"/150, @ANYRES32, @ANYRES16], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)="e300", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 201.248965ms ago: executing program 0 (id=13797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdaa}, 0xffffffffffffffff, 0x5, r6, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000580)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x3}, 0x7202, 0xf7e9, 0x6, 0x0, 0x34d, 0x0, 0x4, 0x0, 0xff}, 0xffffffffffffffff, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8, 0x0, 0x2}, {0x0, 0x0, 0xff, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x1}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 166.830486ms ago: executing program 1 (id=13798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r3, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(r1, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x13, 0x20, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) r8 = perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x4, 0x6, 0x9, 0xaf, 0x0, 0x3, 0x20, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x534}, 0x15d9cd1a7b41a52, 0xffffffffffffffff, 0xfffff3d2, 0x7, 0x8000000000000001, 0x6, 0x71, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x1, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000800)='[\xf5+^#\x9d[\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e14060200000000", 0x20}], 0x1}, 0x40000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r12, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000240)={'veth1\x00', 0x600}) 364.76µs ago: executing program 2 (id=13799): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x9, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(0x3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r7], 0x12) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6c, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x32, 0x0, 0x6}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x31, 0x0, 0x0) 0s ago: executing program 4 (id=13800): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0xfffffffe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xf, 0x7fffffff, 0x1, 0x4a, r1, 0x4, '\x00', r2, r4, 0x3, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): .851717][ T9253] _copy_from_iter+0x447/0x1130 [ 1753.856620][ T9253] ? copyout_mc+0x110/0x110 [ 1753.861149][ T9253] ? __virt_addr_valid+0x188/0x540 [ 1753.866291][ T9253] ? __virt_addr_valid+0x188/0x540 [ 1753.871428][ T9253] ? __virt_addr_valid+0x467/0x540 [ 1753.876670][ T9253] ? __phys_addr_symbol+0x2b/0x70 [ 1753.881723][ T9253] ? __check_object_size+0x4f6/0xa70 [ 1753.887041][ T9253] netlink_sendmsg+0x755/0xbd0 [ 1753.891842][ T9253] ? netlink_getsockopt+0x550/0x550 [ 1753.897079][ T9253] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1753.902740][ T9253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1753.908053][ T9253] ? security_socket_sendmsg+0x7c/0xa0 [ 1753.913546][ T9253] ? netlink_getsockopt+0x550/0x550 [ 1753.918771][ T9253] ____sys_sendmsg+0x5ed/0x9a0 [ 1753.923570][ T9253] ? __sys_sendmsg_sock+0x30/0x30 [ 1753.928624][ T9253] ? __import_iovec+0x306/0x510 [ 1753.933506][ T9253] ? import_iovec+0x6f/0xa0 [ 1753.938042][ T9253] ___sys_sendmsg+0x2a2/0x360 [ 1753.942750][ T9253] ? __sys_sendmsg+0x2a0/0x2a0 [ 1753.947564][ T9253] ? __lock_acquire+0x7c40/0x7c40 [ 1753.952635][ T9253] __se_sys_sendmsg+0x1c3/0x2b0 [ 1753.957511][ T9253] ? ct_nmi_exit+0x145/0x1c0 [ 1753.962131][ T9253] ? __x64_sys_sendmsg+0x80/0x80 [ 1753.967108][ T9253] ? lockdep_hardirqs_on+0x94/0x140 [ 1753.972325][ T9253] do_syscall_64+0x4c/0xa0 [ 1753.976772][ T9253] ? clear_bhb_loop+0x60/0xb0 [ 1753.981479][ T9253] ? clear_bhb_loop+0x60/0xb0 [ 1753.986179][ T9253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1753.992097][ T9253] RIP: 0033:0x7ff2c259de99 [ 1753.996534][ T9253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.016167][ T9253] RSP: 002b:00007ff2c3403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1754.024613][ T9253] RAX: ffffffffffffffda RBX: 00007ff2c2825fa0 RCX: 00007ff2c259de99 [ 1754.032604][ T9253] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1754.040595][ T9253] RBP: 00007ff2c3403090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.048580][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.056572][ T9253] R13: 00007ff2c2826038 R14: 00007ff2c2825fa0 R15: 00007ffc803becb8 [ 1754.064580][ T9253] [ 1754.356517][ T9268] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12801'. [ 1754.503364][ T9272] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1754.561994][ T9272] netlink: 118788 bytes leftover after parsing attributes in process `syz.0.12804'. [ 1754.713633][ T9274] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12805'. [ 1755.100784][ T9284] netlink: 'syz.3.12809': attribute type 3 has an invalid length. [ 1755.131101][ T9284] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12809'. [ 1755.295927][ T9285] netlink: 'syz.2.12808': attribute type 1 has an invalid length. [ 1755.365732][ T9285] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12808'. [ 1755.407674][ T9292] FAULT_INJECTION: forcing a failure. [ 1755.407674][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.432983][ T9292] CPU: 0 PID: 9292 Comm: syz.4.12811 Not tainted syzkaller #0 [ 1755.440508][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1755.450592][ T9292] Call Trace: [ 1755.453920][ T9292] [ 1755.456875][ T9292] dump_stack_lvl+0x188/0x24e [ 1755.461594][ T9292] ? show_regs_print_info+0x12/0x12 [ 1755.466834][ T9292] ? load_image+0x410/0x410 [ 1755.471381][ T9292] ? __might_sleep+0xd0/0xd0 [ 1755.476015][ T9292] ? __lock_acquire+0x7c40/0x7c40 [ 1755.481082][ T9292] should_fail_ex+0x390/0x4c0 [ 1755.485805][ T9292] should_failslab+0x5/0x20 [ 1755.490347][ T9292] slab_pre_alloc_hook+0x59/0x300 [ 1755.495421][ T9292] kmem_cache_alloc_node+0x5a/0x310 [ 1755.500667][ T9292] ? if_nlmsg_size+0x659/0x960 [ 1755.505482][ T9292] ? __alloc_skb+0xf9/0x7d0 [ 1755.510059][ T9292] __alloc_skb+0xf9/0x7d0 [ 1755.514431][ T9292] rtmsg_ifinfo_build_skb+0x80/0x190 [ 1755.519769][ T9292] rtnetlink_event+0xd1/0x1a0 [ 1755.524490][ T9292] raw_notifier_call_chain+0xcb/0x160 [ 1755.529990][ T9292] netdev_update_features+0xb3/0x100 [ 1755.535319][ T9292] ? dev_disable_lro+0x290/0x290 [ 1755.540294][ T9292] ? xdp_rxq_info_unreg+0x67/0xf0 [ 1755.545357][ T9292] ? veth_disable_xdp+0x3b6/0x430 [ 1755.550426][ T9292] veth_xdp+0x4fb/0x6a0 [ 1755.554617][ T9292] bpf_xdp_link_release+0x397/0x4e0 [ 1755.559853][ T9292] ? veth_set_rx_headroom+0x330/0x330 [ 1755.565254][ T9292] ? __netdev_adjacent_dev_remove+0x5a0/0x5a0 [ 1755.571384][ T9292] ? __fget_files+0x3fc/0x460 [ 1755.576107][ T9292] ? bpf_xdp_link_dealloc+0x20/0x20 [ 1755.581350][ T9292] bpf_xdp_link_detach+0x11/0x20 [ 1755.586336][ T9292] link_detach+0x16d/0x1e0 [ 1755.590796][ T9292] __sys_bpf+0x3ea/0x780 [ 1755.595081][ T9292] ? bpf_link_show_fdinfo+0x380/0x380 [ 1755.600506][ T9292] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1755.606710][ T9292] __x64_sys_bpf+0x78/0x90 [ 1755.611177][ T9292] do_syscall_64+0x4c/0xa0 [ 1755.615644][ T9292] ? clear_bhb_loop+0x60/0xb0 [ 1755.620354][ T9292] ? clear_bhb_loop+0x60/0xb0 [ 1755.625074][ T9292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1755.631004][ T9292] RIP: 0033:0x7f774b59de99 [ 1755.635458][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.655100][ T9292] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1755.663552][ T9292] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1755.671556][ T9292] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000022 [ 1755.679552][ T9292] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.687558][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.695553][ T9292] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1755.703569][ T9292] [ 1756.055925][ T9303] netlink: 'syz.1.12814': attribute type 3 has an invalid length. [ 1756.080636][ T9303] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12814'. [ 1756.492279][ T9325] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12821'. [ 1756.777396][ T9336] netlink: 'syz.0.12825': attribute type 3 has an invalid length. [ 1756.785653][ T9336] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12825'. [ 1757.008872][ T9341] netlink: 'syz.1.12826': attribute type 1 has an invalid length. [ 1757.023640][ T9341] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12826'. [ 1757.135957][ T9344] FAULT_INJECTION: forcing a failure. [ 1757.135957][ T9344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1757.157955][ T9344] CPU: 0 PID: 9344 Comm: syz.0.12827 Not tainted syzkaller #0 [ 1757.165500][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1757.175620][ T9344] Call Trace: [ 1757.178938][ T9344] [ 1757.181907][ T9344] dump_stack_lvl+0x188/0x24e [ 1757.186650][ T9344] ? show_regs_print_info+0x12/0x12 [ 1757.191901][ T9344] ? load_image+0x410/0x410 [ 1757.196459][ T9344] ? __lock_acquire+0x7c40/0x7c40 [ 1757.201550][ T9344] ? lockdep_hardirqs_on+0x94/0x140 [ 1757.206811][ T9344] should_fail_ex+0x390/0x4c0 [ 1757.211546][ T9344] _copy_from_user+0x2c/0x170 [ 1757.216273][ T9344] __sys_bpf+0x2ea/0x780 [ 1757.220574][ T9344] ? bpf_link_show_fdinfo+0x380/0x380 [ 1757.226023][ T9344] ? lock_chain_count+0x20/0x20 [ 1757.230941][ T9344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1757.236994][ T9344] __x64_sys_bpf+0x78/0x90 [ 1757.241457][ T9344] do_syscall_64+0x4c/0xa0 [ 1757.245928][ T9344] ? clear_bhb_loop+0x60/0xb0 [ 1757.250693][ T9344] ? clear_bhb_loop+0x60/0xb0 [ 1757.255431][ T9344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.261369][ T9344] RIP: 0033:0x7f3f15b9de99 [ 1757.265821][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.285476][ T9344] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1757.293942][ T9344] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1757.301957][ T9344] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1757.309978][ T9344] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.317998][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.326020][ T9344] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1757.334056][ T9344] [ 1757.916734][ T9366] netlink: 'syz.3.12836': attribute type 3 has an invalid length. [ 1757.957975][ T9366] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12836'. [ 1757.994688][ T9376] netlink: 'syz.0.12840': attribute type 29 has an invalid length. [ 1758.567087][ T9393] validate_nla: 3 callbacks suppressed [ 1758.567126][ T9393] netlink: 'syz.4.12843': attribute type 1 has an invalid length. [ 1758.759603][ T9398] FAULT_INJECTION: forcing a failure. [ 1758.759603][ T9398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.783145][ T9398] CPU: 0 PID: 9398 Comm: syz.4.12846 Not tainted syzkaller #0 [ 1758.790727][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1758.800822][ T9398] Call Trace: [ 1758.804142][ T9398] [ 1758.807135][ T9398] dump_stack_lvl+0x188/0x24e [ 1758.811915][ T9398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1758.818289][ T9398] ? show_regs_print_info+0x12/0x12 [ 1758.823545][ T9398] ? load_image+0x410/0x410 [ 1758.828106][ T9398] should_fail_ex+0x390/0x4c0 [ 1758.832852][ T9398] _copy_to_user+0x2c/0x130 [ 1758.837404][ T9398] simple_read_from_buffer+0xe3/0x150 [ 1758.842968][ T9398] proc_fail_nth_read+0x1a6/0x220 [ 1758.848118][ T9398] ? proc_fault_inject_write+0x310/0x310 [ 1758.853807][ T9398] ? fsnotify_perm+0x248/0x550 [ 1758.858622][ T9398] ? proc_fault_inject_write+0x310/0x310 [ 1758.864324][ T9398] vfs_read+0x2db/0x960 [ 1758.868544][ T9398] ? kernel_read+0x1e0/0x1e0 [ 1758.873198][ T9398] ? __fget_files+0x28/0x460 [ 1758.877837][ T9398] ? __fget_files+0x3fc/0x460 [ 1758.882575][ T9398] ? __fdget_pos+0x2ae/0x360 [ 1758.887216][ T9398] ? ksys_read+0x70/0x260 [ 1758.891619][ T9398] ksys_read+0x14d/0x260 [ 1758.895916][ T9398] ? vfs_write+0x9a0/0x9a0 [ 1758.900419][ T9398] do_syscall_64+0x4c/0xa0 [ 1758.904934][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 1758.909657][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 1758.914386][ T9398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1758.920326][ T9398] RIP: 0033:0x7f774b55e6ce [ 1758.924787][ T9398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1758.944477][ T9398] RSP: 002b:00007f774c3fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1758.952945][ T9398] RAX: ffffffffffffffda RBX: 00007f774c3fc6c0 RCX: 00007f774b55e6ce [ 1758.960967][ T9398] RDX: 000000000000000f RSI: 00007f774c3fc0a0 RDI: 0000000000000008 [ 1758.968990][ T9398] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.977007][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.985022][ T9398] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1758.993079][ T9398] [ 1759.398776][ T9410] netlink: 'syz.4.12852': attribute type 3 has an invalid length. [ 1759.460291][ T9410] __nla_validate_parse: 3 callbacks suppressed [ 1759.460327][ T9410] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12852'. [ 1759.480466][ T9415] netlink: 'syz.3.12853': attribute type 3 has an invalid length. [ 1759.488605][ T9415] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12853'. [ 1760.071415][ T9427] netlink: 'syz.0.12856': attribute type 1 has an invalid length. [ 1760.079325][ T9427] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12856'. [ 1763.078825][ T9454] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12863'. [ 1763.186953][ T9456] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12866'. [ 1763.198960][T26880] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1763.329901][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 1763.366173][ T9460] netlink: 'syz.1.12868': attribute type 3 has an invalid length. [ 1763.380943][ T9460] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12868'. [ 1763.577986][ T9464] netlink: 'syz.2.12869': attribute type 1 has an invalid length. [ 1763.615569][ T9464] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12869'. [ 1763.638047][ T9470] netlink: 'syz.0.12871': attribute type 3 has an invalid length. [ 1763.674002][ T9470] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12871'. [ 1764.309079][ T9480] FAULT_INJECTION: forcing a failure. [ 1764.309079][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.349892][ T9480] CPU: 1 PID: 9480 Comm: syz.3.12873 Not tainted syzkaller #0 [ 1764.357433][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1764.367518][ T9480] Call Trace: [ 1764.370829][ T9480] [ 1764.373790][ T9480] dump_stack_lvl+0x188/0x24e [ 1764.378510][ T9480] ? show_regs_print_info+0x12/0x12 [ 1764.383742][ T9480] ? load_image+0x410/0x410 [ 1764.388274][ T9480] ? __might_sleep+0xd0/0xd0 [ 1764.392888][ T9480] ? __lock_acquire+0x7c40/0x7c40 [ 1764.397981][ T9480] should_fail_ex+0x390/0x4c0 [ 1764.402740][ T9480] should_failslab+0x5/0x20 [ 1764.407297][ T9480] slab_pre_alloc_hook+0x59/0x300 [ 1764.412373][ T9480] ? tomoyo_encode+0x28a/0x550 [ 1764.417188][ T9480] __kmem_cache_alloc_node+0x4f/0x270 [ 1764.422625][ T9480] ? tomoyo_encode+0x28a/0x550 [ 1764.427442][ T9480] __kmalloc+0xa3/0x240 [ 1764.431661][ T9480] tomoyo_encode+0x28a/0x550 [ 1764.436303][ T9480] tomoyo_realpath_from_path+0x578/0x5c0 [ 1764.441984][ T9480] ? tomoyo_domain+0xd2/0x120 [ 1764.446717][ T9480] ? tomoyo_path_number_perm+0x205/0x650 [ 1764.452396][ T9480] tomoyo_path_number_perm+0x22f/0x650 [ 1764.457904][ T9480] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1764.463413][ T9480] ? common_file_perm+0x171/0x1c0 [ 1764.468535][ T9480] ? __fget_files+0x28/0x460 [ 1764.473191][ T9480] security_file_ioctl+0x6c/0xa0 [ 1764.478189][ T9480] __se_sys_ioctl+0x48/0x170 [ 1764.482840][ T9480] do_syscall_64+0x4c/0xa0 [ 1764.487310][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 1764.492033][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 1764.496760][ T9480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1764.502694][ T9480] RIP: 0033:0x7f4c3299de99 [ 1764.507144][ T9480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.526793][ T9480] RSP: 002b:00007f4c338a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.535252][ T9480] RAX: ffffffffffffffda RBX: 00007f4c32c25fa0 RCX: 00007f4c3299de99 [ 1764.543261][ T9480] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000009 [ 1764.551274][ T9480] RBP: 00007f4c338a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.559283][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.567283][ T9480] R13: 00007f4c32c26038 R14: 00007f4c32c25fa0 R15: 00007fffab9c0c58 [ 1764.575323][ T9480] [ 1764.715580][ T9480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1765.035830][ T9493] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12878'. [ 1765.272077][ T9505] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1765.372747][ T9506] netlink: 'syz.0.12882': attribute type 1 has an invalid length. [ 1765.396980][ T9509] netlink: 'syz.3.12884': attribute type 3 has an invalid length. [ 1765.406235][ T9509] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12884'. [ 1765.408034][ T9506] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12882'. [ 1765.887278][ T9515] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12887'. [ 1766.082603][ T9519] netlink: 'syz.3.12888': attribute type 3 has an invalid length. [ 1766.103906][ T9519] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12888'. [ 1766.216395][ T9524] FAULT_INJECTION: forcing a failure. [ 1766.216395][ T9524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1766.300281][ T9524] CPU: 0 PID: 9524 Comm: syz.0.12889 Not tainted syzkaller #0 [ 1766.307836][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1766.317947][ T9524] Call Trace: [ 1766.321295][ T9524] [ 1766.324279][ T9524] dump_stack_lvl+0x188/0x24e [ 1766.329015][ T9524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1766.335234][ T9524] ? show_regs_print_info+0x12/0x12 [ 1766.340487][ T9524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1766.346731][ T9524] should_fail_ex+0x390/0x4c0 [ 1766.351479][ T9524] copyin+0x1b/0x120 [ 1766.355435][ T9524] _copy_from_iter+0x447/0x1130 [ 1766.360358][ T9524] ? copyout_mc+0x110/0x110 [ 1766.364914][ T9524] ? __virt_addr_valid+0x188/0x540 [ 1766.370072][ T9524] ? __virt_addr_valid+0x188/0x540 [ 1766.375241][ T9524] ? __virt_addr_valid+0x467/0x540 [ 1766.380441][ T9524] ? __phys_addr_symbol+0x2b/0x70 [ 1766.385520][ T9524] ? __check_object_size+0x4f6/0xa70 [ 1766.390893][ T9524] netlink_sendmsg+0x755/0xbd0 [ 1766.395746][ T9524] ? netlink_getsockopt+0x550/0x550 [ 1766.401007][ T9524] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1766.406619][ T9524] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1766.411948][ T9524] ? security_socket_sendmsg+0x7c/0xa0 [ 1766.417464][ T9524] ? netlink_getsockopt+0x550/0x550 [ 1766.422736][ T9524] ____sys_sendmsg+0x5ed/0x9a0 [ 1766.427583][ T9524] ? __sys_sendmsg_sock+0x30/0x30 [ 1766.432669][ T9524] ? __import_iovec+0x306/0x510 [ 1766.437602][ T9524] ? import_iovec+0x6f/0xa0 [ 1766.442201][ T9524] ___sys_sendmsg+0x2a2/0x360 [ 1766.446950][ T9524] ? __sys_sendmsg+0x2a0/0x2a0 [ 1766.451806][ T9524] ? ktime_get+0x7b/0x270 [ 1766.456242][ T9524] __se_sys_sendmsg+0x1c3/0x2b0 [ 1766.461153][ T9524] ? ct_nmi_exit+0x145/0x1c0 [ 1766.465796][ T9524] ? __x64_sys_sendmsg+0x80/0x80 [ 1766.470824][ T9524] ? lockdep_hardirqs_on+0x94/0x140 [ 1766.476115][ T9524] do_syscall_64+0x4c/0xa0 [ 1766.480606][ T9524] ? clear_bhb_loop+0x60/0xb0 [ 1766.485368][ T9524] ? clear_bhb_loop+0x60/0xb0 [ 1766.490109][ T9524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1766.496052][ T9524] RIP: 0033:0x7f3f15b9de99 [ 1766.500513][ T9524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.520174][ T9524] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1766.528640][ T9524] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1766.536660][ T9524] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 1766.544671][ T9524] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.552678][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.560708][ T9524] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1766.568759][ T9524] [ 1766.846610][ T9536] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12894'. [ 1766.936794][ T9540] netlink: 'syz.4.12895': attribute type 1 has an invalid length. [ 1766.973910][ T9540] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12895'. [ 1767.177147][ T9547] netlink: 'syz.3.12898': attribute type 3 has an invalid length. [ 1767.218228][ T9547] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12898'. [ 1767.725778][ T9561] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12902'. [ 1768.287121][ T9568] netlink: 'syz.3.12905': attribute type 3 has an invalid length. [ 1768.357377][ T9576] netlink: 'syz.2.12908': attribute type 3 has an invalid length. [ 1768.695381][ T9581] netlink: 'syz.4.12910': attribute type 1 has an invalid length. [ 1768.968369][ T9589] Ÿë: port 1(gretap0) entered blocking state [ 1768.979500][ T9589] Ÿë: port 1(gretap0) entered disabled state [ 1768.986986][ T9589] device gretap0 entered promiscuous mode [ 1769.009071][ T9590] Ÿë: port 2(veth0_to_team) entered blocking state [ 1769.035250][ T9590] Ÿë: port 2(veth0_to_team) entered disabled state [ 1769.137792][ T9590] device veth0_to_team entered promiscuous mode [ 1769.151931][ T9594] netlink: 'syz.0.12914': attribute type 3 has an invalid length. [ 1770.418109][ T9618] __nla_validate_parse: 5 callbacks suppressed [ 1770.418162][ T9618] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12919'. [ 1770.614754][ T9629] netlink: 'syz.1.12925': attribute type 3 has an invalid length. [ 1770.637244][ T9629] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12925'. [ 1770.696831][ T9633] netlink: 'syz.3.12927': attribute type 1 has an invalid length. [ 1770.776298][ T9633] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12927'. [ 1773.933895][ T9660] netlink: 'syz.2.12932': attribute type 3 has an invalid length. [ 1773.942476][ T9660] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1774.173812][ T9669] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12936'. [ 1774.618858][ T9686] netlink: 'syz.2.12941': attribute type 1 has an invalid length. [ 1774.635054][ T9686] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12941'. [ 1774.933831][ T9694] FAULT_INJECTION: forcing a failure. [ 1774.933831][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.949455][ T9694] CPU: 1 PID: 9694 Comm: syz.2.12944 Not tainted syzkaller #0 [ 1774.956981][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1774.967079][ T9694] Call Trace: [ 1774.970412][ T9694] [ 1774.973382][ T9694] dump_stack_lvl+0x188/0x24e [ 1774.978128][ T9694] ? show_regs_print_info+0x12/0x12 [ 1774.983379][ T9694] ? load_image+0x410/0x410 [ 1774.987923][ T9694] ? __lock_acquire+0x7c40/0x7c40 [ 1774.993012][ T9694] should_fail_ex+0x390/0x4c0 [ 1774.997743][ T9694] _copy_to_user+0x2c/0x130 [ 1775.002309][ T9694] bpf_verifier_vlog+0x172/0x3a0 [ 1775.007310][ T9694] __btf_verifier_log+0xdf/0x130 [ 1775.012309][ T9694] ? btf_check_sec_info+0x350/0x350 [ 1775.017565][ T9694] ? btf_parse_hdr+0x1dd/0x7d0 [ 1775.022402][ T9694] btf_parse_hdr+0x42b/0x7d0 [ 1775.027087][ T9694] btf_new_fd+0x367/0x760 [ 1775.031473][ T9694] __sys_bpf+0x612/0x780 [ 1775.035763][ T9694] ? bpf_link_show_fdinfo+0x380/0x380 [ 1775.041191][ T9694] ? lock_chain_count+0x20/0x20 [ 1775.046079][ T9694] __x64_sys_bpf+0x78/0x90 [ 1775.050547][ T9694] do_syscall_64+0x4c/0xa0 [ 1775.055022][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 1775.059726][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 1775.064614][ T9694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.070551][ T9694] RIP: 0033:0x7f8a04b9de99 [ 1775.075121][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.094760][ T9694] RSP: 002b:00007f8a05a6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1775.103204][ T9694] RAX: ffffffffffffffda RBX: 00007f8a04e25fa0 RCX: 00007f8a04b9de99 [ 1775.111215][ T9694] RDX: 0000000000000028 RSI: 0000200000001280 RDI: 0000000000000012 [ 1775.119241][ T9694] RBP: 00007f8a05a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.127245][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.135240][ T9694] R13: 00007f8a04e26038 R14: 00007f8a04e25fa0 R15: 00007ffcb0427bd8 [ 1775.143330][ T9694] [ 1775.254693][ T9696] netlink: 'syz.3.12945': attribute type 3 has an invalid length. [ 1775.285024][ T9696] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12945'. [ 1775.464320][ T9702] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12948'. [ 1775.505838][ T9706] netlink: 'syz.0.12949': attribute type 3 has an invalid length. [ 1775.553647][ T9706] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12949'. [ 1775.643606][ T9708] FAULT_INJECTION: forcing a failure. [ 1775.643606][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.663417][ T9708] CPU: 0 PID: 9708 Comm: syz.1.12950 Not tainted syzkaller #0 [ 1775.670959][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1775.681064][ T9708] Call Trace: [ 1775.684390][ T9708] [ 1775.687365][ T9708] dump_stack_lvl+0x188/0x24e [ 1775.692135][ T9708] ? show_regs_print_info+0x12/0x12 [ 1775.697388][ T9708] ? load_image+0x410/0x410 [ 1775.701941][ T9708] ? __lock_acquire+0x7c40/0x7c40 [ 1775.707039][ T9708] should_fail_ex+0x390/0x4c0 [ 1775.711771][ T9708] _copy_to_user+0x2c/0x130 [ 1775.716388][ T9708] bpf_test_finish+0x4a2/0x600 [ 1775.721192][ T9708] ? convert_skb_to___skb+0x420/0x420 [ 1775.726594][ T9708] ? __build_skb+0x24b/0x3b0 [ 1775.731217][ T9708] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1775.736747][ T9708] ? cpu_online+0xa0/0xa0 [ 1775.741129][ T9708] bpf_prog_test_run+0x31c/0x390 [ 1775.746110][ T9708] __sys_bpf+0x62b/0x780 [ 1775.750385][ T9708] ? bpf_link_show_fdinfo+0x380/0x380 [ 1775.755807][ T9708] ? lock_chain_count+0x20/0x20 [ 1775.760696][ T9708] __x64_sys_bpf+0x78/0x90 [ 1775.765151][ T9708] do_syscall_64+0x4c/0xa0 [ 1775.769595][ T9708] ? clear_bhb_loop+0x60/0xb0 [ 1775.774314][ T9708] ? clear_bhb_loop+0x60/0xb0 [ 1775.779028][ T9708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.784957][ T9708] RIP: 0033:0x7ff2c259de99 [ 1775.789399][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.809052][ T9708] RSP: 002b:00007ff2c3403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1775.817494][ T9708] RAX: ffffffffffffffda RBX: 00007ff2c2825fa0 RCX: 00007ff2c259de99 [ 1775.825503][ T9708] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1775.833498][ T9708] RBP: 00007ff2c3403090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.841495][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.849493][ T9708] R13: 00007ff2c2826038 R14: 00007ff2c2825fa0 R15: 00007ffc803becb8 [ 1775.857536][ T9708] [ 1776.414358][ T9720] netlink: 'syz.3.12953': attribute type 1 has an invalid length. [ 1776.422631][ T9720] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12953'. [ 1776.583796][ T9732] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12957'. [ 1776.646675][ T9734] netlink: 56815 bytes leftover after parsing attributes in process `syz.0.12958'. [ 1776.962400][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12962'. [ 1776.973292][ T9748] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12962'. [ 1777.092289][ T9750] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12963'. [ 1777.124855][ T9753] netlink: 'syz.0.12964': attribute type 3 has an invalid length. [ 1777.133347][ T9753] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12964'. [ 1777.584649][ T9764] netlink: 'syz.0.12969': attribute type 3 has an invalid length. [ 1777.625258][ T9764] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12969'. [ 1777.825022][ T9772] netlink: 'syz.4.12971': attribute type 1 has an invalid length. [ 1778.499267][ T9794] netlink: 'syz.0.12979': attribute type 3 has an invalid length. [ 1778.872029][ T9808] FAULT_INJECTION: forcing a failure. [ 1778.872029][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.890500][ T9808] CPU: 0 PID: 9808 Comm: syz.4.12984 Not tainted syzkaller #0 [ 1778.898062][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1778.908164][ T9808] Call Trace: [ 1778.911557][ T9808] [ 1778.914525][ T9808] dump_stack_lvl+0x188/0x24e [ 1778.919267][ T9808] ? show_regs_print_info+0x12/0x12 [ 1778.924527][ T9808] ? load_image+0x410/0x410 [ 1778.929075][ T9808] ? __might_sleep+0xd0/0xd0 [ 1778.933713][ T9808] ? __lock_acquire+0x7c40/0x7c40 [ 1778.938788][ T9808] ? verify_lock_unused+0x140/0x140 [ 1778.944127][ T9808] should_fail_ex+0x390/0x4c0 [ 1778.948863][ T9808] should_failslab+0x5/0x20 [ 1778.953409][ T9808] slab_pre_alloc_hook+0x59/0x300 [ 1778.958497][ T9808] ? __get_vm_area_node+0x122/0x330 [ 1778.963743][ T9808] __kmem_cache_alloc_node+0x4f/0x270 [ 1778.969187][ T9808] ? __get_vm_area_node+0x122/0x330 [ 1778.974443][ T9808] kmalloc_node_trace+0x22/0xe0 [ 1778.979369][ T9808] __get_vm_area_node+0x122/0x330 [ 1778.984559][ T9808] ? __local_bh_enable_ip+0x136/0x1c0 [ 1778.989988][ T9808] __vmalloc_node_range+0x357/0x1380 [ 1778.995331][ T9808] ? netlink_sendmsg+0x5ec/0xbd0 [ 1779.000335][ T9808] ? netlink_insert+0x28d/0x13b0 [ 1779.005337][ T9808] ? free_vm_area+0x50/0x50 [ 1779.009895][ T9808] ? netlink_sendmsg+0x5ec/0xbd0 [ 1779.014880][ T9808] vmalloc+0x75/0x80 [ 1779.018819][ T9808] ? netlink_sendmsg+0x5ec/0xbd0 [ 1779.023818][ T9808] netlink_sendmsg+0x5ec/0xbd0 [ 1779.028645][ T9808] ? netlink_getsockopt+0x550/0x550 [ 1779.033896][ T9808] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1779.039492][ T9808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1779.044826][ T9808] ? security_socket_sendmsg+0x7c/0xa0 [ 1779.050340][ T9808] sock_write_iter+0x2d5/0x3e0 [ 1779.055160][ T9808] ? sock_read_iter+0x3a0/0x3a0 [ 1779.060081][ T9808] ? common_file_perm+0x171/0x1c0 [ 1779.065144][ T9808] vfs_write+0x482/0x9a0 [ 1779.069438][ T9808] ? file_end_write+0x250/0x250 [ 1779.074339][ T9808] ? __fget_files+0x3fc/0x460 [ 1779.079071][ T9808] ? __fdget_pos+0x1d4/0x360 [ 1779.083700][ T9808] ? ksys_write+0x70/0x260 [ 1779.088147][ T9808] ksys_write+0x14d/0x260 [ 1779.092514][ T9808] ? __ia32_sys_read+0x80/0x80 [ 1779.097332][ T9808] ? lockdep_hardirqs_on+0x94/0x140 [ 1779.102567][ T9808] do_syscall_64+0x4c/0xa0 [ 1779.107037][ T9808] ? clear_bhb_loop+0x60/0xb0 [ 1779.111737][ T9808] ? clear_bhb_loop+0x60/0xb0 [ 1779.116447][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1779.122372][ T9808] RIP: 0033:0x7f774b59de99 [ 1779.126817][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.146458][ T9808] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1779.154923][ T9808] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1779.162914][ T9808] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 1779.170929][ T9808] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.178925][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.186931][ T9808] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1779.194942][ T9808] [ 1779.214738][ T9808] syz.4.12984: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1779.236757][ T9808] CPU: 1 PID: 9808 Comm: syz.4.12984 Not tainted syzkaller #0 [ 1779.244311][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1779.254409][ T9808] Call Trace: [ 1779.257732][ T9808] [ 1779.260704][ T9808] dump_stack_lvl+0x188/0x24e [ 1779.265429][ T9808] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1779.271893][ T9808] ? show_regs_print_info+0x12/0x12 [ 1779.277157][ T9808] ? load_image+0x410/0x410 [ 1779.281712][ T9808] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1779.288179][ T9808] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1779.294732][ T9808] warn_alloc+0x242/0x330 [ 1779.299110][ T9808] ? __get_vm_area_node+0x122/0x330 [ 1779.304381][ T9808] ? zone_watermark_ok_safe+0x270/0x270 [ 1779.309988][ T9808] ? rcu_is_watching+0x11/0xa0 [ 1779.314820][ T9808] ? __get_vm_area_node+0x318/0x330 [ 1779.320082][ T9808] ? __local_bh_enable_ip+0x136/0x1c0 [ 1779.325511][ T9808] __vmalloc_node_range+0x37c/0x1380 [ 1779.330861][ T9808] ? netlink_insert+0x28d/0x13b0 [ 1779.335858][ T9808] ? free_vm_area+0x50/0x50 [ 1779.340415][ T9808] ? netlink_sendmsg+0x5ec/0xbd0 [ 1779.345405][ T9808] vmalloc+0x75/0x80 [ 1779.349345][ T9808] ? netlink_sendmsg+0x5ec/0xbd0 [ 1779.354337][ T9808] netlink_sendmsg+0x5ec/0xbd0 [ 1779.359198][ T9808] ? netlink_getsockopt+0x550/0x550 [ 1779.364460][ T9808] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1779.370105][ T9808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1779.375443][ T9808] ? security_socket_sendmsg+0x7c/0xa0 [ 1779.380963][ T9808] sock_write_iter+0x2d5/0x3e0 [ 1779.385775][ T9808] ? sock_read_iter+0x3a0/0x3a0 [ 1779.390720][ T9808] ? common_file_perm+0x171/0x1c0 [ 1779.395799][ T9808] vfs_write+0x482/0x9a0 [ 1779.400096][ T9808] ? file_end_write+0x250/0x250 [ 1779.405038][ T9808] ? __fget_files+0x3fc/0x460 [ 1779.409774][ T9808] ? __fdget_pos+0x1d4/0x360 [ 1779.414420][ T9808] ? ksys_write+0x70/0x260 [ 1779.418889][ T9808] ksys_write+0x14d/0x260 [ 1779.423277][ T9808] ? __ia32_sys_read+0x80/0x80 [ 1779.428094][ T9808] ? lockdep_hardirqs_on+0x94/0x140 [ 1779.433345][ T9808] do_syscall_64+0x4c/0xa0 [ 1779.437824][ T9808] ? clear_bhb_loop+0x60/0xb0 [ 1779.442570][ T9808] ? clear_bhb_loop+0x60/0xb0 [ 1779.447319][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1779.453266][ T9808] RIP: 0033:0x7f774b59de99 [ 1779.457723][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.477384][ T9808] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1779.485849][ T9808] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1779.493873][ T9808] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 1779.501898][ T9808] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.509927][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.517945][ T9808] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1779.525991][ T9808] [ 1779.549909][ T9808] Mem-Info: [ 1779.557759][ T9808] active_anon:6559 inactive_anon:0 isolated_anon:0 [ 1779.557759][ T9808] active_file:23256 inactive_file:40659 isolated_file:0 [ 1779.557759][ T9808] unevictable:768 dirty:48 writeback:0 [ 1779.557759][ T9808] slab_reclaimable:21779 slab_unreclaimable:96347 [ 1779.557759][ T9808] mapped:32033 shmem:1361 pagetables:578 [ 1779.557759][ T9808] sec_pagetables:0 bounce:0 [ 1779.557759][ T9808] kernel_misc_reclaimable:0 [ 1779.557759][ T9808] free:1320180 free_pcp:5551 free_cma:0 [ 1779.614435][ T9808] Node 0 active_anon:26236kB inactive_anon:0kB active_file:93024kB inactive_file:162436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128032kB dirty:192kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9932kB pagetables:2312kB sec_pagetables:0kB all_unreclaimable? no [ 1779.654287][ T9808] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1779.706332][ T9808] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.789496][ T9808] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1779.801785][ T9808] Node 0 DMA32 free:1355440kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:26236kB inactive_anon:0kB active_file:93024kB inactive_file:162436kB unevictable:1536kB writepending:192kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:16056kB local_pcp:12768kB free_cma:0kB [ 1779.859039][ T9808] lowmem_reserve[]: 0 0 1 1 1 [ 1779.870705][ T9808] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1779.904190][ T9819] netlink: 'syz.0.12989': attribute type 3 has an invalid length. [ 1779.936972][ T9820] netlink: 'syz.1.12986': attribute type 1 has an invalid length. [ 1779.964323][ T9808] lowmem_reserve[]: 0 0 0 0 0 [ 1779.973652][ T9808] Node 1 Normal free:3908980kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6948kB local_pcp:6948kB free_cma:0kB [ 1780.013348][ T9808] lowmem_reserve[]: 0 0 0 0 0 [ 1780.018299][ T9808] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1780.043219][ T9808] Node 0 DMA32: 2104*4kB (UME) 1788*8kB (UME) 1951*16kB (UME) 948*32kB (UME) 275*64kB (UME) 116*128kB (UME) 174*256kB (UME) 76*512kB (UME) 33*1024kB (UM) 7*2048kB (UM) 270*4096kB (UM) = 1354224kB [ 1780.089381][ T9808] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1780.109709][ T9808] Node 1 Normal: 231*4kB (UME) 49*8kB (UME) 33*16kB (UME) 196*32kB (UE) 73*64kB (UME) 25*128kB (UME) 9*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3908980kB [ 1780.138816][ T9808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.151045][ T9808] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1780.165870][ T9808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.175771][ T9808] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1780.197231][ T9808] 65276 total pagecache pages [ 1780.230079][ T9808] 0 pages in swap cache [ 1780.265318][ T9808] Free swap = 124996kB [ 1780.278771][ T9808] Total swap = 124996kB [ 1780.283321][ T9808] 2097051 pages RAM [ 1780.287254][ T9808] 0 pages HighMem/MovableOnly [ 1780.298023][ T9808] 415222 pages reserved [ 1780.302614][ T9808] 0 pages cma reserved [ 1780.548802][ T9839] netlink: 'syz.4.12995': attribute type 3 has an invalid length. [ 1780.592628][ T9839] __nla_validate_parse: 10 callbacks suppressed [ 1780.592667][ T9839] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12995'. [ 1780.640112][ T9847] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12996'. [ 1781.383229][ T9861] netlink: 'syz.4.13003': attribute type 3 has an invalid length. [ 1781.394700][ T9861] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13003'. [ 1781.805475][ T9869] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13006'. [ 1782.227530][ T9883] netlink: 'syz.1.13011': attribute type 3 has an invalid length. [ 1782.281597][ T9881] netlink: 'syz.4.13009': attribute type 1 has an invalid length. [ 1782.326473][ T9883] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13011'. [ 1782.341841][ T9881] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13009'. [ 1782.395712][ T9890] netlink: 'syz.2.13012': attribute type 10 has an invalid length. [ 1782.475381][ T9890] device wg1 entered promiscuous mode [ 1782.498975][ T9890] team0: Device wg1 is of different type [ 1782.739893][ T9905] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13015'. [ 1783.102018][ T9914] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13020'. [ 1783.276381][ T9918] netlink: 'syz.4.13022': attribute type 3 has an invalid length. [ 1783.286099][ T9918] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13022'. [ 1783.458061][ T9922] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13024'. [ 1783.711342][ T9931] netlink: 'syz.0.13027': attribute type 21 has an invalid length. [ 1783.845213][ T4277] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 1783.987449][ T9940] netlink: 'syz.4.13029': attribute type 1 has an invalid length. [ 1784.239254][ T9944] device wg1 entered promiscuous mode [ 1784.253026][ T9944] team0: Device wg1 is of different type [ 1784.928955][ T9964] FAULT_INJECTION: forcing a failure. [ 1784.928955][ T9964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.952963][ T9964] CPU: 0 PID: 9964 Comm: syz.4.13037 Not tainted syzkaller #0 [ 1784.960520][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1784.970609][ T9964] Call Trace: [ 1784.973924][ T9964] [ 1784.976889][ T9964] dump_stack_lvl+0x188/0x24e [ 1784.981619][ T9964] ? show_regs_print_info+0x12/0x12 [ 1784.986898][ T9964] ? load_image+0x410/0x410 [ 1784.991448][ T9964] ? __lock_acquire+0x7c40/0x7c40 [ 1784.996532][ T9964] should_fail_ex+0x390/0x4c0 [ 1785.001262][ T9964] _copy_from_user+0x2c/0x170 [ 1785.005994][ T9964] __sys_bpf+0x2ea/0x780 [ 1785.010281][ T9964] ? bpf_link_show_fdinfo+0x380/0x380 [ 1785.015721][ T9964] ? lock_chain_count+0x20/0x20 [ 1785.020631][ T9964] __x64_sys_bpf+0x78/0x90 [ 1785.025092][ T9964] do_syscall_64+0x4c/0xa0 [ 1785.029549][ T9964] ? clear_bhb_loop+0x60/0xb0 [ 1785.034274][ T9964] ? clear_bhb_loop+0x60/0xb0 [ 1785.039005][ T9964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.044944][ T9964] RIP: 0033:0x7f774b59de99 [ 1785.049407][ T9964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.069069][ T9964] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.077512][ T9964] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1785.085520][ T9964] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1785.093521][ T9964] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.101515][ T9964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.109508][ T9964] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1785.117513][ T9964] [ 1785.148499][ T9968] validate_nla: 2 callbacks suppressed [ 1785.148518][ T9968] netlink: 'syz.3.13036': attribute type 29 has an invalid length. [ 1785.184511][ T9968] netlink: 'syz.3.13036': attribute type 29 has an invalid length. [ 1785.252201][ T9973] netlink: 'syz.1.13039': attribute type 3 has an invalid length. [ 1786.179122][ T9995] netlink: 'syz.0.13045': attribute type 1 has an invalid length. [ 1786.218704][ T9995] __nla_validate_parse: 5 callbacks suppressed [ 1786.218756][ T9995] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13045'. [ 1786.418208][T10004] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13046'. [ 1786.634091][T10008] netlink: 'syz.3.13049': attribute type 3 has an invalid length. [ 1786.653955][T10008] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13049'. [ 1787.056465][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13050'. [ 1787.100131][T10013] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13050'. [ 1787.295036][T10021] netlink: 'syz.4.13055': attribute type 21 has an invalid length. [ 1787.322799][T10021] netlink: 'syz.4.13055': attribute type 1 has an invalid length. [ 1787.344210][T10021] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.13055'. [ 1787.412549][T10030] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13054'. [ 1787.767918][T10038] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13061'. [ 1787.815283][T10039] netlink: 'syz.3.13060': attribute type 3 has an invalid length. [ 1787.837217][T10039] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13060'. [ 1788.419602][T10051] netlink: 172 bytes leftover after parsing attributes in process `syz.1.13066'. [ 1788.437156][T10050] netlink: 'syz.4.13064': attribute type 1 has an invalid length. [ 1788.673947][T10064] netlink: 'syz.2.13069': attribute type 3 has an invalid length. [ 1788.709297][T10066] FAULT_INJECTION: forcing a failure. [ 1788.709297][T10066] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.829663][T10066] CPU: 0 PID: 10066 Comm: syz.3.13071 Not tainted syzkaller #0 [ 1788.837296][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1788.847386][T10066] Call Trace: [ 1788.850698][T10066] [ 1788.853657][T10066] dump_stack_lvl+0x188/0x24e [ 1788.858372][T10066] ? show_regs_print_info+0x12/0x12 [ 1788.863611][T10066] ? load_image+0x410/0x410 [ 1788.868143][T10066] ? __might_sleep+0xd0/0xd0 [ 1788.872762][T10066] ? __lock_acquire+0x7c40/0x7c40 [ 1788.877819][T10066] should_fail_ex+0x390/0x4c0 [ 1788.882526][T10066] should_failslab+0x5/0x20 [ 1788.887047][T10066] slab_pre_alloc_hook+0x59/0x300 [ 1788.892092][T10066] ? kobject_set_name_vargs+0x5d/0x110 [ 1788.897570][T10066] __kmem_cache_alloc_node+0x4f/0x270 [ 1788.902970][T10066] ? kobject_set_name_vargs+0x5d/0x110 [ 1788.908460][T10066] __kmalloc_node_track_caller+0xa0/0x240 [ 1788.914228][T10066] kstrdup_const+0x56/0x90 [ 1788.918672][T10066] kobject_set_name_vargs+0x5d/0x110 [ 1788.923998][T10066] dev_set_name+0xdf/0x130 [ 1788.928528][T10066] ? get_device+0x30/0x30 [ 1788.932887][T10066] ? __init_waitqueue_head+0xa4/0x140 [ 1788.938289][T10066] ? device_initialize+0x247/0x450 [ 1788.943468][T10066] netdev_register_kobject+0xaf/0x320 [ 1788.948914][T10066] register_netdevice+0x133a/0x1b80 [ 1788.954164][T10066] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1788.960624][T10066] ? memset+0x1e/0x40 [ 1788.964645][T10066] ? alloc_netdev_mqs+0xad6/0xf10 [ 1788.969711][T10066] ? memcpy+0x3c/0x60 [ 1788.973745][T10066] ? ip6gre_tunnel_locate+0x21b/0x5d0 [ 1788.979148][T10066] ip6gre_tunnel_locate+0x2cd/0x5d0 [ 1788.984375][T10066] ? ip6gre_tnl_change+0x910/0x910 [ 1788.989504][T10066] ? ip6gre_tnl_parm_from_user+0x30c/0x520 [ 1788.995420][T10066] ? memcpy+0x3c/0x60 [ 1788.999430][T10066] ? ip6gre_tnl_parm_from_user+0x30c/0x520 [ 1789.005257][T10066] ip6gre_tunnel_siocdevprivate+0x5bc/0x730 [ 1789.011174][T10066] ? ip6gre_tunnel_init+0x140/0x140 [ 1789.016410][T10066] ? trace_contention_end+0x5f/0x170 [ 1789.021719][T10066] ? full_name_hash+0x8e/0xe0 [ 1789.026424][T10066] dev_ifsioc+0xa4a/0xd50 [ 1789.030811][T10066] ? dev_ioctl+0xe80/0xe80 [ 1789.035274][T10066] ? __lock_acquire+0x7c40/0x7c40 [ 1789.040324][T10066] ? full_name_hash+0x8e/0xe0 [ 1789.045024][T10066] ? dev_load+0x1d/0x1e0 [ 1789.049290][T10066] ? dev_load+0x1d/0x1e0 [ 1789.053560][T10066] dev_ioctl+0x5f8/0xe80 [ 1789.057826][T10066] ? get_user_ifreq+0xc7/0x170 [ 1789.062649][T10066] sock_ioctl+0x679/0x700 [ 1789.067007][T10066] ? sock_poll+0x420/0x420 [ 1789.071456][T10066] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1789.076438][T10066] ? security_file_ioctl+0x7c/0xa0 [ 1789.081574][T10066] ? sock_poll+0x420/0x420 [ 1789.086038][T10066] __se_sys_ioctl+0xfa/0x170 [ 1789.090659][T10066] do_syscall_64+0x4c/0xa0 [ 1789.095115][T10066] ? clear_bhb_loop+0x60/0xb0 [ 1789.099817][T10066] ? clear_bhb_loop+0x60/0xb0 [ 1789.104602][T10066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.110529][T10066] RIP: 0033:0x7f4c3299de99 [ 1789.114966][T10066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.134584][T10066] RSP: 002b:00007f4c338a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.143100][T10066] RAX: ffffffffffffffda RBX: 00007f4c32c25fa0 RCX: 00007f4c3299de99 [ 1789.151091][T10066] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1789.159106][T10066] RBP: 00007f4c338a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.167102][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.175092][T10066] R13: 00007f4c32c26038 R14: 00007f4c32c25fa0 R15: 00007fffab9c0c58 [ 1789.183095][T10066] [ 1789.197984][T20590] Bluetooth: hci1: command 0x0406 tx timeout [ 1790.052708][T10092] FAULT_INJECTION: forcing a failure. [ 1790.052708][T10092] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.066072][T10092] CPU: 1 PID: 10092 Comm: syz.0.13079 Not tainted syzkaller #0 [ 1790.073682][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1790.083770][T10092] Call Trace: [ 1790.087074][T10092] [ 1790.090032][T10092] dump_stack_lvl+0x188/0x24e [ 1790.094760][T10092] ? show_regs_print_info+0x12/0x12 [ 1790.099996][T10092] ? load_image+0x410/0x410 [ 1790.104554][T10092] ? __might_sleep+0xd0/0xd0 [ 1790.109184][T10092] ? __lock_acquire+0x7c40/0x7c40 [ 1790.114251][T10092] should_fail_ex+0x390/0x4c0 [ 1790.118981][T10092] should_failslab+0x5/0x20 [ 1790.123510][T10092] slab_pre_alloc_hook+0x59/0x300 [ 1790.128568][T10092] kmem_cache_alloc_node+0x5a/0x310 [ 1790.133795][T10092] ? __alloc_skb+0xf9/0x7d0 [ 1790.138340][T10092] __alloc_skb+0xf9/0x7d0 [ 1790.142708][T10092] netlink_sendmsg+0x654/0xbd0 [ 1790.147519][T10092] ? netlink_getsockopt+0x550/0x550 [ 1790.152761][T10092] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1790.158434][T10092] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1790.163765][T10092] ? security_socket_sendmsg+0x7c/0xa0 [ 1790.169342][T10092] ? netlink_getsockopt+0x550/0x550 [ 1790.174574][T10092] ____sys_sendmsg+0x5ed/0x9a0 [ 1790.179381][T10092] ? __sys_sendmsg_sock+0x30/0x30 [ 1790.184446][T10092] ? __import_iovec+0x306/0x510 [ 1790.189342][T10092] ? import_iovec+0x6f/0xa0 [ 1790.193891][T10092] ___sys_sendmsg+0x2a2/0x360 [ 1790.198610][T10092] ? __sys_sendmsg+0x2a0/0x2a0 [ 1790.203445][T10092] ? __lock_acquire+0x7c40/0x7c40 [ 1790.208539][T10092] __se_sys_sendmsg+0x1c3/0x2b0 [ 1790.213421][T10092] ? ct_nmi_exit+0x145/0x1c0 [ 1790.218047][T10092] ? __x64_sys_sendmsg+0x80/0x80 [ 1790.223037][T10092] ? lockdep_hardirqs_on+0x94/0x140 [ 1790.228273][T10092] do_syscall_64+0x4c/0xa0 [ 1790.232772][T10092] ? clear_bhb_loop+0x60/0xb0 [ 1790.237487][T10092] ? clear_bhb_loop+0x60/0xb0 [ 1790.242205][T10092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.248219][T10092] RIP: 0033:0x7f3f15b9de99 [ 1790.252667][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.272468][T10092] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.280911][T10092] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1790.288931][T10092] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1790.296934][T10092] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.304932][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.312938][T10092] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1790.320955][T10092] [ 1790.876090][T10110] netlink: 'syz.3.13085': attribute type 1 has an invalid length. [ 1790.991973][T10117] netlink: 'syz.1.13089': attribute type 3 has an invalid length. [ 1791.040559][T10115] netlink: 'syz.4.13088': attribute type 3 has an invalid length. [ 1791.298561][T10128] FAULT_INJECTION: forcing a failure. [ 1791.298561][T10128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.339982][T10128] CPU: 0 PID: 10128 Comm: syz.0.13091 Not tainted syzkaller #0 [ 1791.347593][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1791.357704][T10128] Call Trace: [ 1791.361017][T10128] [ 1791.363985][T10128] dump_stack_lvl+0x188/0x24e [ 1791.368711][T10128] ? show_regs_print_info+0x12/0x12 [ 1791.373954][T10128] ? load_image+0x410/0x410 [ 1791.378497][T10128] ? __lock_acquire+0x7c40/0x7c40 [ 1791.383578][T10128] should_fail_ex+0x390/0x4c0 [ 1791.388304][T10128] _copy_from_user+0x2c/0x170 [ 1791.393007][T10128] __sys_bpf+0x2ea/0x780 [ 1791.397297][T10128] ? bpf_link_show_fdinfo+0x380/0x380 [ 1791.402730][T10128] ? lock_chain_count+0x20/0x20 [ 1791.407617][T10128] __x64_sys_bpf+0x78/0x90 [ 1791.412096][T10128] do_syscall_64+0x4c/0xa0 [ 1791.416536][T10128] ? clear_bhb_loop+0x60/0xb0 [ 1791.421238][T10128] ? clear_bhb_loop+0x60/0xb0 [ 1791.425941][T10128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.431884][T10128] RIP: 0033:0x7f3f15b9de99 [ 1791.436334][T10128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.456060][T10128] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1791.464508][T10128] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1791.472500][T10128] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1791.480500][T10128] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.488495][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.496487][T10128] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1791.504493][T10128] [ 1792.247129][T10151] __nla_validate_parse: 9 callbacks suppressed [ 1792.247154][T10151] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13100'. [ 1792.672904][T10158] netlink: 'syz.4.13102': attribute type 3 has an invalid length. [ 1792.721982][T10158] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13102'. [ 1793.115572][T10166] netlink: 'syz.0.13105': attribute type 1 has an invalid length. [ 1793.185977][T10166] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13105'. [ 1793.476333][T10185] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13109'. [ 1793.498375][T10180] netlink: 'syz.4.13108': attribute type 3 has an invalid length. [ 1793.517220][T10180] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13108'. [ 1793.658714][T10188] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13112'. [ 1793.980872][T10202] netlink: 'syz.4.13116': attribute type 2 has an invalid length. [ 1793.989027][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13116'. [ 1794.090721][T10208] netlink: 'syz.4.13118': attribute type 3 has an invalid length. [ 1794.099046][T10208] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13118'. [ 1794.120929][T10205] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13117'. [ 1794.224101][ T8557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1794.886209][T10230] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13126'. [ 1794.928347][T10231] netlink: 'syz.1.13125': attribute type 1 has an invalid length. [ 1795.014402][T10236] netlink: 'syz.0.13128': attribute type 3 has an invalid length. [ 1796.602479][T10279] validate_nla: 1 callbacks suppressed [ 1796.602671][T10279] netlink: 'syz.4.13144': attribute type 3 has an invalid length. [ 1796.777970][T10286] netlink: 'syz.0.13143': attribute type 2 has an invalid length. [ 1796.793579][T10286] netlink: 'syz.0.13143': attribute type 8 has an invalid length. [ 1796.879400][T10290] netlink: 'syz.3.13147': attribute type 3 has an invalid length. [ 1796.971148][T10292] netlink: 'syz.4.13148': attribute type 1 has an invalid length. [ 1797.105469][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.112024][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.215150][T10301] openvswitch: netlink: Flow actions attr not present in new flow. [ 1797.269270][T10301] netlink: 'syz.3.13151': attribute type 2 has an invalid length. [ 1797.293904][T10301] __nla_validate_parse: 11 callbacks suppressed [ 1797.293925][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13151'. [ 1797.676259][T10312] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13155'. [ 1797.988141][T10320] netlink: 'syz.3.13158': attribute type 3 has an invalid length. [ 1798.010427][T10320] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13158'. [ 1798.323220][T10328] netlink: 'syz.4.13160': attribute type 1 has an invalid length. [ 1798.346950][T10331] netlink: 'syz.2.13161': attribute type 3 has an invalid length. [ 1798.359862][T10328] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13160'. [ 1798.379438][T10331] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13161'. [ 1798.545471][T10336] netlink: 'syz.3.13162': attribute type 27 has an invalid length. [ 1798.577681][T10336] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13162'. [ 1799.064480][T10348] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13168'. [ 1799.083937][T10354] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13169'. [ 1799.197705][T10358] FAULT_INJECTION: forcing a failure. [ 1799.197705][T10358] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.218689][T10358] CPU: 1 PID: 10358 Comm: syz.0.13173 Not tainted syzkaller #0 [ 1799.226314][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1799.236443][T10358] Call Trace: [ 1799.239777][T10358] [ 1799.242759][T10358] dump_stack_lvl+0x188/0x24e [ 1799.247495][T10358] ? sctp_sendmsg+0x1686/0x2940 [ 1799.252398][T10358] ? ___sys_sendmsg+0x2a2/0x360 [ 1799.257305][T10358] ? show_regs_print_info+0x12/0x12 [ 1799.262590][T10358] ? load_image+0x410/0x410 [ 1799.267148][T10358] should_fail_ex+0x390/0x4c0 [ 1799.271883][T10358] should_failslab+0x5/0x20 [ 1799.276433][T10358] slab_pre_alloc_hook+0x59/0x300 [ 1799.281504][T10358] ? sctp_add_bind_addr+0x89/0x350 [ 1799.286664][T10358] __kmem_cache_alloc_node+0x4f/0x270 [ 1799.292080][T10358] ? sctp_add_bind_addr+0x89/0x350 [ 1799.297395][T10358] kmalloc_trace+0x26/0xe0 [ 1799.301867][T10358] sctp_add_bind_addr+0x89/0x350 [ 1799.306851][T10358] sctp_copy_local_addr_list+0x317/0x4d0 [ 1799.312530][T10358] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1799.318301][T10358] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1799.324515][T10358] ? sctp_v4_is_any+0x31/0x50 [ 1799.329241][T10358] ? sctp_copy_one_addr+0x93/0x660 [ 1799.334399][T10358] sctp_bind_addr_copy+0xaf/0x3c0 [ 1799.339477][T10358] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1799.345891][T10358] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1799.351249][T10358] ? __sctp_connect+0xd80/0xd80 [ 1799.356149][T10358] ? __local_bh_enable_ip+0x136/0x1c0 [ 1799.361678][T10358] ? _local_bh_enable+0xa0/0xa0 [ 1799.365924][T10355] FAULT_INJECTION: forcing a failure. [ 1799.365924][T10355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.366550][T10358] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1799.366587][T10358] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1799.366620][T10358] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1799.366644][T10358] ? security_sctp_bind_connect+0x85/0xb0 [ 1799.366679][T10358] sctp_sendmsg+0x1686/0x2940 [ 1799.384920][T10362] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13172'. [ 1799.385542][T10358] ? sctp_getsockopt+0x8a0/0x8a0 [ 1799.421740][T10358] ? __might_fault+0xa6/0x120 [ 1799.426472][T10358] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1799.432942][T10358] ? aa_sock_msg_perm+0x94/0x150 [ 1799.437948][T10358] ? inet_sendmsg+0x7a/0x2a0 [ 1799.442642][T10358] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1799.447982][T10358] ? inet_send_prepare+0x250/0x250 [ 1799.453152][T10358] ____sys_sendmsg+0x5ed/0x9a0 [ 1799.457987][T10358] ? __sys_sendmsg_sock+0x30/0x30 [ 1799.463053][T10358] ? __import_iovec+0x306/0x510 [ 1799.467961][T10358] ? import_iovec+0x6f/0xa0 [ 1799.472524][T10358] ___sys_sendmsg+0x2a2/0x360 [ 1799.477255][T10358] ? __sys_sendmsg+0x2a0/0x2a0 [ 1799.482121][T10358] ? __lock_acquire+0x7c40/0x7c40 [ 1799.487216][T10358] __se_sys_sendmsg+0x1c3/0x2b0 [ 1799.492139][T10358] ? ct_nmi_exit+0x145/0x1c0 [ 1799.496800][T10358] ? __x64_sys_sendmsg+0x80/0x80 [ 1799.501811][T10358] ? lockdep_hardirqs_on+0x94/0x140 [ 1799.507054][T10358] do_syscall_64+0x4c/0xa0 [ 1799.511524][T10358] ? clear_bhb_loop+0x60/0xb0 [ 1799.516247][T10358] ? clear_bhb_loop+0x60/0xb0 [ 1799.520979][T10358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1799.526911][T10358] RIP: 0033:0x7f3f15b9de99 [ 1799.531375][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.551018][T10358] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.559484][T10358] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1799.567576][T10358] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003 [ 1799.575591][T10358] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.583602][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1799.591612][T10358] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1799.599643][T10358] [ 1799.605203][T10355] CPU: 0 PID: 10355 Comm: syz.1.13171 Not tainted syzkaller #0 [ 1799.612809][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1799.622928][T10355] Call Trace: [ 1799.626225][T10355] [ 1799.629178][T10355] dump_stack_lvl+0x188/0x24e [ 1799.633889][T10355] ? show_regs_print_info+0x12/0x12 [ 1799.639120][T10355] ? load_image+0x410/0x410 [ 1799.643681][T10355] ? __lock_acquire+0x7c40/0x7c40 [ 1799.648747][T10355] should_fail_ex+0x390/0x4c0 [ 1799.653475][T10355] _copy_from_user+0x2c/0x170 [ 1799.658171][T10355] iovec_from_user+0x143/0x360 [ 1799.662965][T10355] __import_iovec+0x6c/0x510 [ 1799.667613][T10355] import_iovec+0x6f/0xa0 [ 1799.671975][T10355] ___sys_sendmsg+0x252/0x360 [ 1799.676682][T10355] ? __sys_sendmsg+0x2a0/0x2a0 [ 1799.681498][T10355] ? __lock_acquire+0x7c40/0x7c40 [ 1799.686565][T10355] __se_sys_sendmsg+0x1c3/0x2b0 [ 1799.691445][T10355] ? ct_nmi_exit+0x145/0x1c0 [ 1799.696056][T10355] ? __x64_sys_sendmsg+0x80/0x80 [ 1799.701044][T10355] ? lockdep_hardirqs_on+0x94/0x140 [ 1799.706262][T10355] do_syscall_64+0x4c/0xa0 [ 1799.710702][T10355] ? clear_bhb_loop+0x60/0xb0 [ 1799.715498][T10355] ? clear_bhb_loop+0x60/0xb0 [ 1799.720203][T10355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1799.726159][T10355] RIP: 0033:0x7ff2c259de99 [ 1799.730607][T10355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.750244][T10355] RSP: 002b:00007ff2c3403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.758678][T10355] RAX: ffffffffffffffda RBX: 00007ff2c2825fa0 RCX: 00007ff2c259de99 [ 1799.766693][T10355] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 000000000000000e [ 1799.774855][T10355] RBP: 00007ff2c3403090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.782844][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.790862][T10355] R13: 00007ff2c2826038 R14: 00007ff2c2825fa0 R15: 00007ffc803becb8 [ 1799.798866][T10355] [ 1800.000938][T10369] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13176'. [ 1800.343537][T10380] FAULT_INJECTION: forcing a failure. [ 1800.343537][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.438464][T10380] CPU: 0 PID: 10380 Comm: syz.0.13179 Not tainted syzkaller #0 [ 1800.446106][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1800.456212][T10380] Call Trace: [ 1800.459535][T10380] [ 1800.462524][T10380] dump_stack_lvl+0x188/0x24e [ 1800.467261][T10380] ? show_regs_print_info+0x12/0x12 [ 1800.472545][T10380] ? load_image+0x410/0x410 [ 1800.477110][T10380] ? __might_sleep+0xd0/0xd0 [ 1800.481758][T10380] ? __lock_acquire+0x7c40/0x7c40 [ 1800.486860][T10380] should_fail_ex+0x390/0x4c0 [ 1800.491614][T10380] should_failslab+0x5/0x20 [ 1800.496166][T10380] slab_pre_alloc_hook+0x59/0x300 [ 1800.501244][T10380] ? __lock_acquire+0x138a/0x7c40 [ 1800.506327][T10380] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1800.512114][T10380] __kmem_cache_alloc_node+0x4f/0x270 [ 1800.517563][T10380] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1800.523338][T10380] __kmalloc+0xa3/0x240 [ 1800.527587][T10380] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1800.533280][T10380] ? tomoyo_domain+0xd2/0x120 [ 1800.538032][T10380] ? tomoyo_path_number_perm+0x205/0x650 [ 1800.543720][T10380] tomoyo_path_number_perm+0x22f/0x650 [ 1800.549236][T10380] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1800.555898][T10380] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1800.561415][T10380] ? ksys_write+0x1ce/0x260 [ 1800.565973][T10380] ? common_file_perm+0x171/0x1c0 [ 1800.571121][T10380] ? __fget_files+0x28/0x460 [ 1800.575790][T10380] security_file_ioctl+0x6c/0xa0 [ 1800.580839][T10380] __se_sys_ioctl+0x48/0x170 [ 1800.585521][T10380] do_syscall_64+0x4c/0xa0 [ 1800.590010][T10380] ? clear_bhb_loop+0x60/0xb0 [ 1800.594759][T10380] ? clear_bhb_loop+0x60/0xb0 [ 1800.599523][T10380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1800.605470][T10380] RIP: 0033:0x7f3f15b9de99 [ 1800.609935][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.629596][T10380] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1800.638071][T10380] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1800.646094][T10380] RDX: ffffffffffffffff RSI: 0000000000002405 RDI: 0000000000000003 [ 1800.654115][T10380] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.662127][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.670154][T10380] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1800.678219][T10380] [ 1800.847723][T10380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1802.455304][T10444] __nla_validate_parse: 6 callbacks suppressed [ 1802.455345][T10444] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1802.561447][T10450] validate_nla: 7 callbacks suppressed [ 1802.561485][T10450] netlink: 'syz.2.13203': attribute type 3 has an invalid length. [ 1802.635114][T10450] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13203'. [ 1802.678214][T10458] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13205'. [ 1802.971075][T10467] netlink: 'syz.3.13208': attribute type 1 has an invalid length. [ 1802.983755][T10467] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13208'. [ 1803.157327][T10474] netlink: 'syz.2.13211': attribute type 3 has an invalid length. [ 1803.193480][T10474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13211'. [ 1803.655638][T10489] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13217'. [ 1803.923366][T10503] netlink: 'syz.0.13221': attribute type 3 has an invalid length. [ 1803.931905][T10503] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13221'. [ 1803.966988][T10498] netlink: 'syz.4.13222': attribute type 1 has an invalid length. [ 1803.994481][T10498] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13222'. [ 1804.233044][T10508] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13226'. [ 1804.552203][T10523] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13228'. [ 1804.638081][T10524] netlink: 'syz.2.13230': attribute type 3 has an invalid length. [ 1804.823466][T10531] netlink: 'syz.1.13233': attribute type 3 has an invalid length. [ 1805.033949][T10536] netlink: 'syz.3.13235': attribute type 1 has an invalid length. [ 1805.284323][T10548] FAULT_INJECTION: forcing a failure. [ 1805.284323][T10548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1805.321557][T10548] CPU: 0 PID: 10548 Comm: syz.0.13238 Not tainted syzkaller #0 [ 1805.329225][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1805.339419][T10548] Call Trace: [ 1805.342773][T10548] [ 1805.345770][T10548] dump_stack_lvl+0x188/0x24e [ 1805.350561][T10548] ? show_regs_print_info+0x12/0x12 [ 1805.355862][T10548] ? load_image+0x410/0x410 [ 1805.360471][T10548] ? __might_fault+0xa6/0x120 [ 1805.365938][T10548] should_fail_ex+0x390/0x4c0 [ 1805.370716][T10548] copyin+0x1b/0x120 [ 1805.374705][T10548] _copy_from_iter+0x447/0x1130 [ 1805.379669][T10548] ? copyout_mc+0x110/0x110 [ 1805.384258][T10548] ? __virt_addr_valid+0x188/0x540 [ 1805.389477][T10548] ? __virt_addr_valid+0x188/0x540 [ 1805.394685][T10548] ? __virt_addr_valid+0x467/0x540 [ 1805.399887][T10548] ? __phys_addr_symbol+0x2b/0x70 [ 1805.405004][T10548] ? __check_object_size+0x4f6/0xa70 [ 1805.410375][T10548] netlink_sendmsg+0x755/0xbd0 [ 1805.415259][T10548] ? netlink_getsockopt+0x550/0x550 [ 1805.420551][T10548] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1805.426206][T10548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1805.431560][T10548] ? security_socket_sendmsg+0x7c/0xa0 [ 1805.437095][T10548] ? netlink_getsockopt+0x550/0x550 [ 1805.442389][T10548] ____sys_sendmsg+0x5ed/0x9a0 [ 1805.447273][T10548] ? __sys_sendmsg_sock+0x30/0x30 [ 1805.452384][T10548] ? __import_iovec+0x306/0x510 [ 1805.457365][T10548] ? import_iovec+0x6f/0xa0 [ 1805.462008][T10548] ___sys_sendmsg+0x2a2/0x360 [ 1805.466793][T10548] ? __sys_sendmsg+0x2a0/0x2a0 [ 1805.471718][T10548] ? __lock_acquire+0x7c40/0x7c40 [ 1805.476909][T10548] __se_sys_sendmsg+0x1c3/0x2b0 [ 1805.481848][T10548] ? __x64_sys_sendmsg+0x80/0x80 [ 1805.486933][T10548] ? lockdep_hardirqs_on+0x94/0x140 [ 1805.492237][T10548] do_syscall_64+0x4c/0xa0 [ 1805.496728][T10548] ? clear_bhb_loop+0x60/0xb0 [ 1805.501482][T10548] ? clear_bhb_loop+0x60/0xb0 [ 1805.506246][T10548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1805.512218][T10548] RIP: 0033:0x7f3f15b9de99 [ 1805.516702][T10548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.536463][T10548] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1805.544967][T10548] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1805.553013][T10548] RDX: 0000000000044004 RSI: 0000200000000600 RDI: 0000000000000008 [ 1805.561067][T10548] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1805.569101][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1805.577144][T10548] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1805.585251][T10548] [ 1806.289687][T10556] netlink: 'syz.2.13239': attribute type 3 has an invalid length. [ 1806.422107][T10563] netlink: 'syz.4.13243': attribute type 3 has an invalid length. [ 1807.697258][T10608] validate_nla: 3 callbacks suppressed [ 1807.697296][T10608] netlink: 'syz.1.13260': attribute type 3 has an invalid length. [ 1807.721001][T10608] __nla_validate_parse: 12 callbacks suppressed [ 1807.721038][T10608] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13260'. [ 1807.838404][T10613] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13262'. [ 1808.028796][T10617] netlink: 'syz.0.13263': attribute type 1 has an invalid length. [ 1808.039363][T10617] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13263'. [ 1808.245731][T10627] netlink: 'syz.2.13267': attribute type 3 has an invalid length. [ 1808.275385][T10627] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13267'. [ 1808.808549][T10647] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13273'. [ 1809.409780][T20590] Bluetooth: hci4: command 0x0406 tx timeout [ 1810.954156][T10657] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13276'. [ 1811.193251][T10667] netlink: 'syz.4.13281': attribute type 1 has an invalid length. [ 1811.202066][T10667] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13281'. [ 1811.279168][T10671] netlink: 'syz.1.13282': attribute type 3 has an invalid length. [ 1811.291681][T10671] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13282'. [ 1811.322400][T10676] FAULT_INJECTION: forcing a failure. [ 1811.322400][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.349308][T10675] netlink: 'syz.2.13283': attribute type 3 has an invalid length. [ 1811.360110][T10676] CPU: 1 PID: 10676 Comm: syz.4.13285 Not tainted syzkaller #0 [ 1811.367756][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1811.377890][T10676] Call Trace: [ 1811.381206][T10676] [ 1811.384168][T10676] dump_stack_lvl+0x188/0x24e [ 1811.388905][T10676] ? show_regs_print_info+0x12/0x12 [ 1811.394148][T10676] ? load_image+0x410/0x410 [ 1811.398696][T10676] ? __lock_acquire+0x7c40/0x7c40 [ 1811.403782][T10676] should_fail_ex+0x390/0x4c0 [ 1811.408530][T10676] _copy_from_user+0x2c/0x170 [ 1811.413253][T10676] sk_setsockopt+0x2d9/0x29a0 [ 1811.417977][T10676] ? sockopt_capable+0x60/0x60 [ 1811.422785][T10676] ? aa_sk_perm+0x81f/0x950 [ 1811.427366][T10676] ? aa_af_perm+0x340/0x340 [ 1811.432246][T10676] ? __fget_files+0x3fc/0x460 [ 1811.436955][T10676] ? aa_sock_opt_perm+0x74/0x100 [ 1811.441948][T10676] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1811.447518][T10676] ? security_socket_setsockopt+0x7a/0xa0 [ 1811.453286][T10676] __sys_setsockopt+0x2f6/0x3d0 [ 1811.458184][T10676] __x64_sys_setsockopt+0xb1/0xc0 [ 1811.463249][T10676] do_syscall_64+0x4c/0xa0 [ 1811.467700][T10676] ? clear_bhb_loop+0x60/0xb0 [ 1811.472406][T10676] ? clear_bhb_loop+0x60/0xb0 [ 1811.477110][T10676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1811.483029][T10676] RIP: 0033:0x7f774b59de99 [ 1811.487900][T10676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.507526][T10676] RSP: 002b:00007f774c3db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1811.515960][T10676] RAX: ffffffffffffffda RBX: 00007f774b826090 RCX: 00007f774b59de99 [ 1811.523952][T10676] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 1811.531955][T10676] RBP: 00007f774c3db090 R08: 000000000000fd31 R09: 0000000000000000 [ 1811.539945][T10676] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1811.547931][T10676] R13: 00007f774b826128 R14: 00007f774b826090 R15: 00007ffeb18215b8 [ 1811.555942][T10676] [ 1811.571956][T10675] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1811.727386][T10684] netlink: 'syz.0.13286': attribute type 29 has an invalid length. [ 1811.736709][T10684] netlink: 'syz.0.13286': attribute type 29 has an invalid length. [ 1811.745823][T10683] netlink: 'syz.0.13286': attribute type 29 has an invalid length. [ 1811.762992][T10684] netlink: 'syz.0.13286': attribute type 29 has an invalid length. [ 1812.335627][T10697] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13289'. [ 1812.864689][T10717] validate_nla: 1 callbacks suppressed [ 1812.864728][T10717] netlink: 'syz.3.13298': attribute type 3 has an invalid length. [ 1812.878852][T10717] __nla_validate_parse: 2 callbacks suppressed [ 1812.878878][T10717] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13298'. [ 1813.114477][T10720] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13299'. [ 1813.139718][T10720] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1813.175894][T10720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1813.246726][T10723] netlink: 'syz.2.13300': attribute type 13 has an invalid length. [ 1813.264529][T10720] FAULT_INJECTION: forcing a failure. [ 1813.264529][T10720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.283210][T10723] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.13300'. [ 1813.308628][T10726] netlink: 'syz.1.13301': attribute type 3 has an invalid length. [ 1813.323442][T10726] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13301'. [ 1813.355037][T10720] CPU: 0 PID: 10720 Comm: syz.0.13299 Not tainted syzkaller #0 [ 1813.362663][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1813.372756][T10720] Call Trace: [ 1813.376077][T10720] [ 1813.379072][T10720] dump_stack_lvl+0x188/0x24e [ 1813.383855][T10720] ? show_regs_print_info+0x12/0x12 [ 1813.389107][T10720] ? load_image+0x410/0x410 [ 1813.393756][T10720] ? __lock_acquire+0x7c40/0x7c40 [ 1813.398847][T10720] should_fail_ex+0x390/0x4c0 [ 1813.403672][T10720] _copy_from_user+0x2c/0x170 [ 1813.408395][T10720] iovec_from_user+0x143/0x360 [ 1813.413253][T10720] __import_iovec+0x6c/0x510 [ 1813.417914][T10720] import_iovec+0x6f/0xa0 [ 1813.422299][T10720] ___sys_sendmsg+0x252/0x360 [ 1813.427026][T10720] ? __sys_sendmsg+0x2a0/0x2a0 [ 1813.431855][T10720] ? __lock_acquire+0x7c40/0x7c40 [ 1813.437016][T10720] __se_sys_sendmsg+0x1c3/0x2b0 [ 1813.441937][T10720] ? ct_nmi_exit+0x145/0x1c0 [ 1813.446575][T10720] ? __x64_sys_sendmsg+0x80/0x80 [ 1813.451579][T10720] ? lockdep_hardirqs_on+0x94/0x140 [ 1813.456824][T10720] do_syscall_64+0x4c/0xa0 [ 1813.461292][T10720] ? clear_bhb_loop+0x60/0xb0 [ 1813.466019][T10720] ? clear_bhb_loop+0x60/0xb0 [ 1813.470767][T10720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1813.476708][T10720] RIP: 0033:0x7f3f15b9de99 [ 1813.481167][T10720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.500920][T10720] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1813.509380][T10720] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1813.517401][T10720] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000004 [ 1813.525401][T10720] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.533397][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.541388][T10720] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1813.549403][T10720] [ 1813.894699][T10742] netlink: 'syz.0.13306': attribute type 1 has an invalid length. [ 1813.918461][T10749] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13309'. [ 1813.931264][T10742] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13306'. [ 1813.945411][T10749] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1813.976566][T10749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1814.007074][T10745] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13307'. [ 1814.104892][T10753] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13310'. [ 1814.116004][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1814.148219][T10753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1814.212144][T10753] netlink: 'syz.4.13310': attribute type 25 has an invalid length. [ 1814.262100][T10753] netlink: 'syz.4.13310': attribute type 29 has an invalid length. [ 1814.307753][T10759] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13312'. [ 1814.364934][T10762] netlink: 'syz.3.13313': attribute type 3 has an invalid length. [ 1814.383610][T10762] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13313'. [ 1815.002358][T10788] netlink: 'syz.1.13322': attribute type 1 has an invalid length. [ 1815.254426][T10802] netlink: 'syz.1.13325': attribute type 3 has an invalid length. [ 1815.901398][T10816] netlink: 'syz.2.13332': attribute type 3 has an invalid length. [ 1817.418598][T10861] FAULT_INJECTION: forcing a failure. [ 1817.418598][T10861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1817.432849][T10861] CPU: 1 PID: 10861 Comm: syz.0.13348 Not tainted syzkaller #0 [ 1817.440455][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1817.450577][T10861] Call Trace: [ 1817.453889][T10861] [ 1817.456866][T10861] dump_stack_lvl+0x188/0x24e [ 1817.461592][T10861] ? show_regs_print_info+0x12/0x12 [ 1817.466836][T10861] ? load_image+0x410/0x410 [ 1817.471377][T10861] ? __lock_acquire+0x7c40/0x7c40 [ 1817.476445][T10861] ? tomoyo_path_number_perm+0x205/0x650 [ 1817.482115][T10861] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1817.487795][T10861] should_fail_ex+0x390/0x4c0 [ 1817.492525][T10861] _copy_from_user+0x2c/0x170 [ 1817.497242][T10861] wext_handle_ioctl+0xc4/0x1d0 [ 1817.502153][T10861] ? call_commit_handler+0xf0/0xf0 [ 1817.507323][T10861] sock_ioctl+0x143/0x700 [ 1817.511685][T10861] ? sock_poll+0x420/0x420 [ 1817.516143][T10861] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1817.521108][T10861] ? security_file_ioctl+0x7c/0xa0 [ 1817.526238][T10861] ? sock_poll+0x420/0x420 [ 1817.530718][T10861] __se_sys_ioctl+0xfa/0x170 [ 1817.535334][T10861] do_syscall_64+0x4c/0xa0 [ 1817.539785][T10861] ? clear_bhb_loop+0x60/0xb0 [ 1817.544523][T10861] ? clear_bhb_loop+0x60/0xb0 [ 1817.549230][T10861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1817.555147][T10861] RIP: 0033:0x7f3f15b9de99 [ 1817.559606][T10861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.579245][T10861] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.587686][T10861] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1817.595687][T10861] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 1817.603679][T10861] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.611676][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.619670][T10861] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1817.627676][T10861] [ 1818.100435][T10871] __nla_validate_parse: 9 callbacks suppressed [ 1818.100476][T10871] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13350'. [ 1818.422395][T10886] FAULT_INJECTION: forcing a failure. [ 1818.422395][T10886] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.438336][T10887] validate_nla: 3 callbacks suppressed [ 1818.438366][T10887] netlink: 'syz.3.13356': attribute type 2 has an invalid length. [ 1818.473165][T10886] CPU: 0 PID: 10886 Comm: syz.1.13357 Not tainted syzkaller #0 [ 1818.480977][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1818.491210][T10886] Call Trace: [ 1818.494542][T10886] [ 1818.497522][T10886] dump_stack_lvl+0x188/0x24e [ 1818.502278][T10886] ? show_regs_print_info+0x12/0x12 [ 1818.507544][T10886] ? load_image+0x410/0x410 [ 1818.512111][T10886] ? __might_sleep+0xd0/0xd0 [ 1818.516759][T10886] ? __lock_acquire+0x7c40/0x7c40 [ 1818.521863][T10886] should_fail_ex+0x390/0x4c0 [ 1818.526608][T10886] should_failslab+0x5/0x20 [ 1818.531222][T10886] slab_pre_alloc_hook+0x59/0x300 [ 1818.536343][T10886] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1818.542124][T10886] ? rtnl_newlink+0x10f/0x1f90 [ 1818.546990][T10886] __kmem_cache_alloc_node+0x4f/0x270 [ 1818.552421][T10886] ? rtnl_newlink+0x10f/0x1f90 [ 1818.557269][T10886] kmalloc_trace+0x26/0xe0 [ 1818.561776][T10886] rtnl_newlink+0x10f/0x1f90 [ 1818.566483][T10886] ? __mutex_trylock_common+0x15c/0x260 [ 1818.572096][T10886] ? rtnl_setlink+0x510/0x510 [ 1818.576840][T10886] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1818.583060][T10886] ? rcu_is_watching+0x11/0xa0 [ 1818.587912][T10886] ? trace_contention_end+0x5f/0x170 [ 1818.593271][T10886] ? __mutex_lock+0x1ab/0xae0 [ 1818.598139][T10886] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 1818.603315][T10886] ? rcu_read_unlock+0x8c/0xa0 [ 1818.608147][T10886] ? mutex_lock_nested+0x10/0x10 [ 1818.613161][T10886] ? rtnl_setlink+0x510/0x510 [ 1818.617883][T10886] rtnetlink_rcv_msg+0x863/0xfb0 [ 1818.622902][T10886] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1818.628122][T10886] ? rtnetlink_bind+0x80/0x80 [ 1818.632871][T10886] ? mark_lock+0x94/0x320 [ 1818.637280][T10886] ? __lock_acquire+0x138a/0x7c40 [ 1818.642396][T10886] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1818.648223][T10886] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1818.654050][T10886] ? verify_lock_unused+0x140/0x140 [ 1818.659314][T10886] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1818.665031][T10886] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1818.671724][T10886] netlink_rcv_skb+0x1ef/0x440 [ 1818.676560][T10886] ? rtnetlink_bind+0x80/0x80 [ 1818.681307][T10886] ? netlink_ack+0x1160/0x1160 [ 1818.686196][T10886] ? netlink_deliver_tap+0x2e/0x1b0 [ 1818.691473][T10886] netlink_unicast+0x7ad/0x920 [ 1818.696323][T10886] netlink_sendmsg+0x8ad/0xbd0 [ 1818.701180][T10886] ? netlink_getsockopt+0x550/0x550 [ 1818.706444][T10886] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1818.712078][T10886] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1818.717429][T10886] ? security_socket_sendmsg+0x7c/0xa0 [ 1818.722953][T10886] ? netlink_getsockopt+0x550/0x550 [ 1818.728229][T10886] ____sys_sendmsg+0x5ed/0x9a0 [ 1818.733082][T10886] ? __sys_sendmsg_sock+0x30/0x30 [ 1818.738166][T10886] ? __import_iovec+0x306/0x510 [ 1818.743129][T10886] ? import_iovec+0x6f/0xa0 [ 1818.747698][T10886] ___sys_sendmsg+0x2a2/0x360 [ 1818.752459][T10886] ? __sys_sendmsg+0x2a0/0x2a0 [ 1818.757344][T10886] ? __lock_acquire+0x7c40/0x7c40 [ 1818.762485][T10886] __se_sys_sendmsg+0x1c3/0x2b0 [ 1818.767417][T10886] ? __x64_sys_sendmsg+0x80/0x80 [ 1818.772464][T10886] ? lockdep_hardirqs_on+0x94/0x140 [ 1818.777775][T10886] do_syscall_64+0x4c/0xa0 [ 1818.782286][T10886] ? clear_bhb_loop+0x60/0xb0 [ 1818.787020][T10886] ? clear_bhb_loop+0x60/0xb0 [ 1818.791753][T10886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.797699][T10886] RIP: 0033:0x7ff2c259de99 [ 1818.802209][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.821868][T10886] RSP: 002b:00007ff2c3403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1818.830341][T10886] RAX: ffffffffffffffda RBX: 00007ff2c2825fa0 RCX: 00007ff2c259de99 [ 1818.838369][T10886] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1818.846400][T10886] RBP: 00007ff2c3403090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.854428][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.862500][T10886] R13: 00007ff2c2826038 R14: 00007ff2c2825fa0 R15: 00007ffc803becb8 [ 1818.870558][T10886] [ 1819.242087][T10907] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13362'. [ 1819.490726][T10909] netlink: 'syz.3.13364': attribute type 1 has an invalid length. [ 1819.499239][T10909] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13364'. [ 1819.549109][T10912] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13365'. [ 1819.638585][T10914] netlink: 'syz.3.13366': attribute type 3 has an invalid length. [ 1819.647948][T10914] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13366'. [ 1819.816503][T10916] netlink: 'syz.2.13367': attribute type 3 has an invalid length. [ 1819.856508][T10916] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13367'. [ 1820.175619][T10925] delete_channel: no stack [ 1820.200656][T10928] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13373'. [ 1820.498307][T10946] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.13378'. [ 1820.511722][T10943] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13377'. [ 1820.551704][T10946] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1820.709145][T10953] FAULT_INJECTION: forcing a failure. [ 1820.709145][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.723954][T10953] CPU: 0 PID: 10953 Comm: syz.4.13381 Not tainted syzkaller #0 [ 1820.731567][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1820.741658][T10953] Call Trace: [ 1820.744981][T10953] [ 1820.747961][T10953] dump_stack_lvl+0x188/0x24e [ 1820.752686][T10953] ? show_regs_print_info+0x12/0x12 [ 1820.757932][T10953] ? load_image+0x410/0x410 [ 1820.762490][T10953] ? __might_sleep+0xd0/0xd0 [ 1820.767118][T10953] ? __lock_acquire+0x7c40/0x7c40 [ 1820.772197][T10953] should_fail_ex+0x390/0x4c0 [ 1820.776977][T10953] should_failslab+0x5/0x20 [ 1820.781522][T10953] slab_pre_alloc_hook+0x59/0x300 [ 1820.786582][T10953] ? apparmor_sk_alloc_security+0x74/0x100 [ 1820.792426][T10953] __kmem_cache_alloc_node+0x4f/0x270 [ 1820.797837][T10953] ? apparmor_sk_alloc_security+0x74/0x100 [ 1820.803698][T10953] kmalloc_trace+0x26/0xe0 [ 1820.808173][T10953] apparmor_sk_alloc_security+0x74/0x100 [ 1820.813856][T10953] security_sk_alloc+0x6a/0xa0 [ 1820.818672][T10953] sk_prot_alloc+0x101/0x210 [ 1820.823307][T10953] ? sk_alloc+0x20/0x330 [ 1820.827592][T10953] sk_alloc+0x36/0x330 [ 1820.831718][T10953] mISDN_sock_create+0x2ae/0x5c0 [ 1820.836712][T10953] __sock_create+0x49a/0x940 [ 1820.841365][T10953] __sys_socket+0xc4/0x190 [ 1820.845840][T10953] __x64_sys_socket+0x76/0x80 [ 1820.850566][T10953] do_syscall_64+0x4c/0xa0 [ 1820.855082][T10953] ? clear_bhb_loop+0x60/0xb0 [ 1820.859804][T10953] ? clear_bhb_loop+0x60/0xb0 [ 1820.864540][T10953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.870479][T10953] RIP: 0033:0x7f774b59de99 [ 1820.874940][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.894614][T10953] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1820.903125][T10953] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1820.911135][T10953] RDX: 0000000000000021 RSI: 0000000000000002 RDI: 0000000000000022 [ 1820.919138][T10953] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.927144][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.935176][T10953] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1820.943210][T10953] [ 1821.044267][T10958] netlink: 'syz.3.13383': attribute type 3 has an invalid length. [ 1821.045754][T10959] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13382'. [ 1821.171134][T10964] netlink: 'syz.2.13384': attribute type 3 has an invalid length. [ 1821.239551][T10967] FAULT_INJECTION: forcing a failure. [ 1821.239551][T10967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1821.329912][T10967] CPU: 0 PID: 10967 Comm: syz.4.13386 Not tainted syzkaller #0 [ 1821.337556][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1821.347664][T10967] Call Trace: [ 1821.350995][T10967] [ 1821.353971][T10967] dump_stack_lvl+0x188/0x24e [ 1821.358721][T10967] ? show_regs_print_info+0x12/0x12 [ 1821.363972][T10967] ? load_image+0x410/0x410 [ 1821.368527][T10967] ? __lock_acquire+0x7c40/0x7c40 [ 1821.373613][T10967] should_fail_ex+0x390/0x4c0 [ 1821.378377][T10967] _copy_from_user+0x2c/0x170 [ 1821.383109][T10967] do_tcp_setsockopt+0x59f/0x1b50 [ 1821.388189][T10967] ? tcp_set_window_clamp+0x5a0/0x5a0 [ 1821.393609][T10967] ? lockdep_hardirqs_on+0x94/0x140 [ 1821.398850][T10967] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1821.405068][T10967] ? sock_common_recvmsg+0x190/0x190 [ 1821.410396][T10967] ? __sys_setsockopt+0x2a8/0x3d0 [ 1821.415471][T10967] ? sock_common_setsockopt+0x32/0xb0 [ 1821.420889][T10967] ? tcp_setsockopt+0x39/0xe0 [ 1821.425614][T10967] ? tcp_enable_tx_delay+0x70/0x70 [ 1821.430796][T10967] ? sock_common_recvmsg+0x190/0x190 [ 1821.436134][T10967] __sys_setsockopt+0x2bf/0x3d0 [ 1821.441044][T10967] __x64_sys_setsockopt+0xb1/0xc0 [ 1821.446121][T10967] do_syscall_64+0x4c/0xa0 [ 1821.450582][T10967] ? clear_bhb_loop+0x60/0xb0 [ 1821.455299][T10967] ? clear_bhb_loop+0x60/0xb0 [ 1821.460026][T10967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.465983][T10967] RIP: 0033:0x7f774b59de99 [ 1821.470436][T10967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.490091][T10967] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1821.498571][T10967] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1821.506588][T10967] RDX: 0000000000000011 RSI: 0000000000000006 RDI: 0000000000000006 [ 1821.514602][T10967] RBP: 00007f774c3fc090 R08: 0000000000000004 R09: 0000000000000000 [ 1821.522612][T10967] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1821.530628][T10967] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1821.538652][T10967] [ 1822.434434][T11003] netlink: 'syz.3.13399': attribute type 3 has an invalid length. [ 1822.446542][T11007] netlink: 'syz.1.13400': attribute type 3 has an invalid length. [ 1823.314310][T11038] __nla_validate_parse: 6 callbacks suppressed [ 1823.314328][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1823.363943][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1823.378148][T11039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1823.393791][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1823.567373][T11041] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13409'. [ 1824.120777][T11045] netlink: 'syz.4.13411': attribute type 2 has an invalid length. [ 1824.210670][T11045] netlink: 'syz.4.13411': attribute type 1 has an invalid length. [ 1824.262337][T11045] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.13411'. [ 1824.665859][T11058] netlink: 'syz.1.13415': attribute type 3 has an invalid length. [ 1824.695202][T11058] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13415'. [ 1824.771912][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1824.899187][T11071] netlink: 'syz.0.13419': attribute type 3 has an invalid length. [ 1824.969232][T11071] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13419'. [ 1825.150320][T17015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1825.536933][T11088] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13424'. [ 1825.690827][T11090] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13425'. [ 1825.905149][T11099] FAULT_INJECTION: forcing a failure. [ 1825.905149][T11099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.928607][T11099] CPU: 0 PID: 11099 Comm: syz.0.13427 Not tainted syzkaller #0 [ 1825.936240][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1825.946389][T11099] Call Trace: [ 1825.949703][T11099] [ 1825.952669][T11099] dump_stack_lvl+0x188/0x24e [ 1825.957443][T11099] ? show_regs_print_info+0x12/0x12 [ 1825.962698][T11099] ? load_image+0x410/0x410 [ 1825.967258][T11099] ? __might_fault+0xa6/0x120 [ 1825.971992][T11099] ? lockdep_hardirqs_on+0x94/0x140 [ 1825.977240][T11099] should_fail_ex+0x390/0x4c0 [ 1825.981983][T11099] copyin+0x1b/0x120 [ 1825.985939][T11099] _copy_from_iter+0x447/0x1130 [ 1825.990854][T11099] ? copyout_mc+0x110/0x110 [ 1825.995400][T11099] ? __virt_addr_valid+0x188/0x540 [ 1826.000559][T11099] ? __virt_addr_valid+0x188/0x540 [ 1826.005702][T11099] ? __virt_addr_valid+0x467/0x540 [ 1826.010848][T11099] ? __phys_addr_symbol+0x2b/0x70 [ 1826.015898][T11099] ? __check_object_size+0x4f6/0xa70 [ 1826.021207][T11099] netlink_sendmsg+0x755/0xbd0 [ 1826.026022][T11099] ? netlink_getsockopt+0x550/0x550 [ 1826.031268][T11099] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1826.036870][T11099] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1826.042206][T11099] ? security_socket_sendmsg+0x7c/0xa0 [ 1826.047702][T11099] ? netlink_getsockopt+0x550/0x550 [ 1826.052942][T11099] ____sys_sendmsg+0x5ed/0x9a0 [ 1826.057751][T11099] ? __sys_sendmsg_sock+0x30/0x30 [ 1826.062810][T11099] ? __import_iovec+0x306/0x510 [ 1826.067721][T11099] ? import_iovec+0x6f/0xa0 [ 1826.072282][T11099] ___sys_sendmsg+0x2a2/0x360 [ 1826.076993][T11099] ? __sys_sendmsg+0x2a0/0x2a0 [ 1826.081829][T11099] __se_sys_sendmsg+0x1c3/0x2b0 [ 1826.086723][T11099] ? ct_nmi_exit+0x145/0x1c0 [ 1826.091352][T11099] ? __x64_sys_sendmsg+0x80/0x80 [ 1826.096328][T11099] ? lockdep_hardirqs_on+0x94/0x140 [ 1826.101551][T11099] do_syscall_64+0x4c/0xa0 [ 1826.105994][T11099] ? clear_bhb_loop+0x60/0xb0 [ 1826.110700][T11099] ? clear_bhb_loop+0x60/0xb0 [ 1826.115410][T11099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1826.121337][T11099] RIP: 0033:0x7f3f15b9de99 [ 1826.125777][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.145406][T11099] RSP: 002b:00007f3f16a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1826.153845][T11099] RAX: ffffffffffffffda RBX: 00007f3f15e25fa0 RCX: 00007f3f15b9de99 [ 1826.161838][T11099] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1826.169828][T11099] RBP: 00007f3f16a35090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.177827][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.185825][T11099] R13: 00007f3f15e26038 R14: 00007f3f15e25fa0 R15: 00007fff75fe4108 [ 1826.193848][T11099] [ 1826.311721][T11108] FAULT_INJECTION: forcing a failure. [ 1826.311721][T11108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1826.335502][T11108] CPU: 1 PID: 11108 Comm: syz.2.13432 Not tainted syzkaller #0 [ 1826.343186][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1826.353324][T11108] Call Trace: [ 1826.356650][T11108] [ 1826.359633][T11108] dump_stack_lvl+0x188/0x24e [ 1826.364385][T11108] ? show_regs_print_info+0x12/0x12 [ 1826.369672][T11108] ? load_image+0x410/0x410 [ 1826.374251][T11108] ? __lock_acquire+0x7c40/0x7c40 [ 1826.379362][T11108] should_fail_ex+0x390/0x4c0 [ 1826.384120][T11108] _copy_from_user+0x2c/0x170 [ 1826.388869][T11108] iovec_from_user+0x143/0x360 [ 1826.393715][T11108] __import_iovec+0x6c/0x510 [ 1826.398424][T11108] import_iovec+0x6f/0xa0 [ 1826.402841][T11108] ___sys_sendmsg+0x252/0x360 [ 1826.407596][T11108] ? __sys_sendmsg+0x2a0/0x2a0 [ 1826.412494][T11108] ? __lock_acquire+0x7c40/0x7c40 [ 1826.417657][T11108] __se_sys_sendmsg+0x1c3/0x2b0 [ 1826.422578][T11108] ? ct_nmi_exit+0x145/0x1c0 [ 1826.427326][T11108] ? __x64_sys_sendmsg+0x80/0x80 [ 1826.432371][T11108] ? lockdep_hardirqs_on+0x94/0x140 [ 1826.437636][T11108] do_syscall_64+0x4c/0xa0 [ 1826.442119][T11108] ? clear_bhb_loop+0x60/0xb0 [ 1826.446956][T11108] ? clear_bhb_loop+0x60/0xb0 [ 1826.451702][T11108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1826.457659][T11108] RIP: 0033:0x7f8a04b9de99 [ 1826.462136][T11108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.481811][T11108] RSP: 002b:00007f8a05a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1826.490295][T11108] RAX: ffffffffffffffda RBX: 00007f8a04e25fa0 RCX: 00007f8a04b9de99 [ 1826.498331][T11108] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1826.506404][T11108] RBP: 00007f8a05a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.514461][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.522490][T11108] R13: 00007f8a04e26038 R14: 00007f8a04e25fa0 R15: 00007ffcb0427bd8 [ 1826.530565][T11108] [ 1826.706958][T11117] netlink: 'syz.1.13435': attribute type 3 has an invalid length. [ 1826.843280][T11123] netlink: 'syz.2.13437': attribute type 3 has an invalid length. [ 1827.433694][T11138] FAULT_INJECTION: forcing a failure. [ 1827.433694][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1827.448149][T11138] CPU: 0 PID: 11138 Comm: syz.4.13441 Not tainted syzkaller #0 [ 1827.455756][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1827.465857][T11138] Call Trace: [ 1827.469181][T11138] [ 1827.472150][T11138] dump_stack_lvl+0x188/0x24e [ 1827.476881][T11138] ? show_regs_print_info+0x12/0x12 [ 1827.482562][T11138] ? load_image+0x410/0x410 [ 1827.487117][T11138] ? __lock_acquire+0x7c40/0x7c40 [ 1827.492208][T11138] should_fail_ex+0x390/0x4c0 [ 1827.496967][T11138] _copy_from_user+0x2c/0x170 [ 1827.501694][T11138] dev_ifsioc+0x1e3/0xd50 [ 1827.506086][T11138] ? dev_ioctl+0xe80/0xe80 [ 1827.510555][T11138] ? apparmor_capable+0x12c/0x190 [ 1827.515623][T11138] ? full_name_hash+0x8e/0xe0 [ 1827.520381][T11138] ? dev_load+0x1d/0x1e0 [ 1827.524690][T11138] ? dev_load+0x1d/0x1e0 [ 1827.529030][T11138] dev_ioctl+0x55e/0xe80 [ 1827.533360][T11138] sock_do_ioctl+0x245/0x320 [ 1827.538000][T11138] ? sock_show_fdinfo+0xb0/0xb0 [ 1827.542923][T11138] sock_ioctl+0x48a/0x700 [ 1827.547289][T11138] ? sock_poll+0x420/0x420 [ 1827.551744][T11138] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1827.556708][T11138] ? security_file_ioctl+0x7c/0xa0 [ 1827.561840][T11138] ? sock_poll+0x420/0x420 [ 1827.566289][T11138] __se_sys_ioctl+0xfa/0x170 [ 1827.570930][T11138] do_syscall_64+0x4c/0xa0 [ 1827.575404][T11138] ? clear_bhb_loop+0x60/0xb0 [ 1827.580121][T11138] ? clear_bhb_loop+0x60/0xb0 [ 1827.584835][T11138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1827.590757][T11138] RIP: 0033:0x7f774b59de99 [ 1827.595222][T11138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.614886][T11138] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.623331][T11138] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1827.631333][T11138] RDX: 0000200000000540 RSI: 00000000000089b0 RDI: 0000000000000003 [ 1827.639327][T11138] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.647321][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.655311][T11138] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1827.663324][T11138] [ 1828.348469][T11161] netlink: 'syz.0.13451': attribute type 16 has an invalid length. [ 1828.358932][T11161] __nla_validate_parse: 4 callbacks suppressed [ 1828.358947][T11161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13451'. [ 1828.375157][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1828.473047][T11164] netlink: 'syz.1.13452': attribute type 3 has an invalid length. [ 1828.488450][T11164] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13452'. [ 1828.748118][T11176] netlink: 'syz.4.13456': attribute type 3 has an invalid length. [ 1828.756831][T11176] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13456'. [ 1829.268566][T11187] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13460'. [ 1829.805181][T11205] netlink: 'syz.0.13467': attribute type 21 has an invalid length. [ 1829.828935][T11205] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13467'. [ 1833.044323][T11222] netlink: 'syz.1.13473': attribute type 3 has an invalid length. [ 1833.066537][T11222] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13473'. [ 1833.088379][T11226] netlink: 'syz.3.13475': attribute type 3 has an invalid length. [ 1833.111148][T11226] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13475'. [ 1833.515375][T11242] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13479'. [ 1833.924974][T11250] netlink: 'syz.3.13482': attribute type 21 has an invalid length. [ 1833.942885][T11250] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13482'. [ 1834.003461][T11253] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13483'. [ 1834.467167][T11276] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13491'. [ 1834.524513][T11278] netlink: 'syz.1.13492': attribute type 3 has an invalid length. [ 1834.534912][T11278] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13492'. [ 1835.497863][T11290] netlink: 'syz.4.13498': attribute type 3 has an invalid length. [ 1835.508340][T11290] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13498'. [ 1835.932263][T11301] netlink: 'syz.1.13499': attribute type 21 has an invalid length. [ 1835.945605][T11301] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13499'. [ 1838.784218][T11311] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13501'. [ 1839.023256][T11324] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13507'. [ 1839.283338][T11334] netlink: 'syz.3.13513': attribute type 3 has an invalid length. [ 1839.299772][T11334] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13513'. [ 1839.357972][T11330] netlink: 'syz.4.13509': attribute type 1 has an invalid length. [ 1839.407355][T11330] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13509'. [ 1839.624105][T11341] netlink: 'syz.0.13514': attribute type 3 has an invalid length. [ 1839.655054][T11341] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1842.988498][T11372] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13524'. [ 1843.096419][T11378] netlink: 'syz.2.13527': attribute type 3 has an invalid length. [ 1843.105680][T11378] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13527'. [ 1843.336587][T11386] netlink: 'syz.0.13530': attribute type 3 has an invalid length. [ 1843.360998][T11386] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13530'. [ 1843.707197][T11392] netlink: 'syz.1.13531': attribute type 1 has an invalid length. [ 1843.716587][T11392] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1843.939361][T11401] netlink: 463 bytes leftover after parsing attributes in process `syz.2.13534'. [ 1844.018236][T11402] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13533'. [ 1844.154188][T11407] netlink: 463 bytes leftover after parsing attributes in process `syz.3.13546'. [ 1845.192389][T11420] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13539'. [ 1848.302618][T11426] netlink: 'syz.0.13543': attribute type 3 has an invalid length. [ 1848.318483][T11426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13543'. [ 1848.343287][T11431] netlink: 'syz.4.13542': attribute type 3 has an invalid length. [ 1848.400606][T11431] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13542'. [ 1848.801086][T11450] netlink: 463 bytes leftover after parsing attributes in process `syz.3.13551'. [ 1848.931124][T11451] netlink: 'syz.2.13550': attribute type 10 has an invalid length. [ 1848.939422][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13550'. [ 1848.975546][T11451] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1849.125464][T11458] netlink: 'syz.0.13552': attribute type 1 has an invalid length. [ 1849.140466][T11458] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13552'. [ 1849.221944][T11464] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13555'. [ 1852.512857][T11484] netlink: 'syz.1.13563': attribute type 3 has an invalid length. [ 1852.543596][T11488] netlink: 463 bytes leftover after parsing attributes in process `syz.4.13565'. [ 1852.564450][T11487] netlink: 'syz.2.13564': attribute type 3 has an invalid length. [ 1852.581524][T11484] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13563'. [ 1852.604690][T11487] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13564'. [ 1852.752135][T11495] netlink: 'syz.0.13567': attribute type 3 has an invalid length. [ 1852.790554][T11495] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13567'. [ 1853.085339][T11501] netlink: 'syz.4.13569': attribute type 10 has an invalid length. [ 1853.131609][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13569'. [ 1853.216383][T11501] batman_adv: batadv0: Adding interface: vlan1 [ 1853.271512][T11501] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1853.304466][T11501] batman_adv: batadv0: Interface activated: vlan1 [ 1853.424180][T11514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13570'. [ 1853.578487][T11520] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13573'. [ 1853.853823][T11535] netlink: 463 bytes leftover after parsing attributes in process `syz.0.13579'. [ 1853.904599][T11539] netlink: 'syz.2.13580': attribute type 3 has an invalid length. [ 1854.169334][T11548] netlink: 'syz.3.13584': attribute type 3 has an invalid length. [ 1854.181775][T11548] __nla_validate_parse: 1 callbacks suppressed [ 1854.181815][T11548] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13584'. [ 1854.671055][T11561] netlink: 'syz.1.13586': attribute type 10 has an invalid length. [ 1854.684088][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13586'. [ 1854.726901][T11561] batman_adv: batadv0: Adding interface: vlan1 [ 1854.733862][T11561] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.784831][T11561] batman_adv: batadv0: Interface activated: vlan1 [ 1854.837454][T11570] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13589'. [ 1854.942906][T11574] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13590'. [ 1855.093039][T11581] netlink: 463 bytes leftover after parsing attributes in process `syz.1.13593'. [ 1855.287912][T11587] netlink: 'syz.1.13596': attribute type 3 has an invalid length. [ 1855.297070][T11587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13596'. [ 1855.370054][T11593] netlink: 'syz.0.13600': attribute type 3 has an invalid length. [ 1855.391153][T11593] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13600'. [ 1855.964851][T11611] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13605'. [ 1856.276081][T26880] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1856.367066][T11623] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13608'. [ 1856.455302][T11627] netlink: 'syz.0.13607': attribute type 10 has an invalid length. [ 1856.476500][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13607'. [ 1856.511458][T11627] batman_adv: batadv0: Adding interface: vlan1 [ 1856.517902][T11627] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.607935][T11627] batman_adv: batadv0: Interface activated: vlan1 [ 1856.670298][T11637] netlink: 'syz.2.13615': attribute type 3 has an invalid length. [ 1856.973859][T11652] netlink: 'syz.1.13620': attribute type 3 has an invalid length. [ 1857.071652][T11657] netlink: 'syz.2.13621': attribute type 3 has an invalid length. [ 1857.427865][T11667] netlink: 'syz.2.13624': attribute type 3 has an invalid length. [ 1858.555907][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.563494][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.043679][T11709] validate_nla: 3 callbacks suppressed [ 1859.043722][T11709] netlink: 'syz.1.13640': attribute type 3 has an invalid length. [ 1859.791088][T11720] __nla_validate_parse: 11 callbacks suppressed [ 1859.791135][T11720] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13643'. [ 1860.176486][T11731] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13648'. [ 1860.220512][T11734] netlink: 'syz.4.13649': attribute type 3 has an invalid length. [ 1860.256042][T11734] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1860.319135][T11729] netlink: 'syz.2.13647': attribute type 1 has an invalid length. [ 1860.390252][T11729] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13647'. [ 1860.422920][T11742] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13651'. [ 1860.701010][T11752] netlink: 'syz.3.13654': attribute type 3 has an invalid length. [ 1860.730999][T11752] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13654'. [ 1860.993331][T11761] netlink: 'syz.4.13658': attribute type 3 has an invalid length. [ 1861.005668][T11761] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13658'. [ 1861.466318][T11772] netlink: 'syz.3.13660': attribute type 10 has an invalid length. [ 1861.499569][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13660'. [ 1861.512842][T11770] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13661'. [ 1861.611619][T11775] netlink: 'syz.1.13662': attribute type 3 has an invalid length. [ 1861.620553][T11775] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13662'. [ 1861.997546][T11790] netlink: 'syz.3.13667': attribute type 3 has an invalid length. [ 1862.176890][T11797] netlink: 'syz.0.13671': attribute type 3 has an invalid length. [ 1862.657832][T11808] netlink: 'syz.1.13673': attribute type 3 has an invalid length. [ 1863.992132][T11845] FAULT_INJECTION: forcing a failure. [ 1863.992132][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.046110][T11845] CPU: 0 PID: 11845 Comm: syz.2.13686 Not tainted syzkaller #0 [ 1864.053745][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1864.063846][T11845] Call Trace: [ 1864.067176][T11845] [ 1864.070157][T11845] dump_stack_lvl+0x188/0x24e [ 1864.074906][T11845] ? show_regs_print_info+0x12/0x12 [ 1864.080149][T11845] ? load_image+0x410/0x410 [ 1864.084912][T11845] should_fail_ex+0x390/0x4c0 [ 1864.089675][T11845] should_failslab+0x5/0x20 [ 1864.094225][T11845] slab_pre_alloc_hook+0x59/0x300 [ 1864.099299][T11845] kmem_cache_alloc+0x56/0x2f0 [ 1864.104109][T11845] ? skb_clone+0x1e7/0x370 [ 1864.108574][T11845] skb_clone+0x1e7/0x370 [ 1864.112890][T11845] __netlink_deliver_tap+0x3e4/0x7e0 [ 1864.118240][T11845] ? netlink_deliver_tap+0x2e/0x1b0 [ 1864.123494][T11845] netlink_deliver_tap+0x19c/0x1b0 [ 1864.128655][T11845] netlink_dump+0x80f/0xcd0 [ 1864.133214][T11845] ? netlink_lookup+0x200/0x200 [ 1864.138120][T11845] ? netlink_recvmsg+0x5e3/0xe00 [ 1864.143118][T11845] ? kmem_cache_free+0xf7/0x2a0 [ 1864.148020][T11845] netlink_recvmsg+0x68f/0xe00 [ 1864.152855][T11845] ? netlink_sendmsg+0xbd0/0xbd0 [ 1864.157848][T11845] ? aa_af_perm+0x340/0x340 [ 1864.162421][T11845] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1864.167768][T11845] ? security_socket_recvmsg+0x85/0xb0 [ 1864.173287][T11845] ? netlink_sendmsg+0xbd0/0xbd0 [ 1864.178277][T11845] ____sys_recvmsg+0x2c8/0x5b0 [ 1864.183109][T11845] ? __sys_recvmsg_sock+0x40/0x40 [ 1864.188221][T11845] ? import_iovec+0x6f/0xa0 [ 1864.192822][T11845] ___sys_recvmsg+0x210/0x590 [ 1864.197577][T11845] ? __sys_recvmsg+0x2a0/0x2a0 [ 1864.202405][T11845] ? common_file_perm+0x171/0x1c0 [ 1864.207496][T11845] ? __fget_files+0x3fc/0x460 [ 1864.212254][T11845] __x64_sys_recvmsg+0x20d/0x2e0 [ 1864.217246][T11845] ? ct_nmi_exit+0x145/0x1c0 [ 1864.221887][T11845] ? ___sys_recvmsg+0x590/0x590 [ 1864.226812][T11845] ? lockdep_hardirqs_on+0x94/0x140 [ 1864.232058][T11845] do_syscall_64+0x4c/0xa0 [ 1864.236506][T11845] ? clear_bhb_loop+0x60/0xb0 [ 1864.241223][T11845] ? clear_bhb_loop+0x60/0xb0 [ 1864.245932][T11845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1864.251855][T11845] RIP: 0033:0x7f8a04b9de99 [ 1864.256300][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.275934][T11845] RSP: 002b:00007f8a05a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1864.284378][T11845] RAX: ffffffffffffffda RBX: 00007f8a04e25fa0 RCX: 00007f8a04b9de99 [ 1864.292398][T11845] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 1864.300398][T11845] RBP: 00007f8a05a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1864.308397][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.316400][T11845] R13: 00007f8a04e26038 R14: 00007f8a04e25fa0 R15: 00007ffcb0427bd8 [ 1864.324417][T11845] [ 1864.616201][T11857] validate_nla: 3 callbacks suppressed [ 1864.616241][T11857] netlink: 'syz.0.13690': attribute type 3 has an invalid length. [ 1864.987974][T11864] netlink: 'syz.3.13692': attribute type 10 has an invalid length. [ 1865.008807][T11864] __nla_validate_parse: 14 callbacks suppressed [ 1865.008824][T11864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13692'. [ 1865.222349][T11874] FAULT_INJECTION: forcing a failure. [ 1865.222349][T11874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1865.246531][T11875] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13697'. [ 1865.278983][T11874] CPU: 0 PID: 11874 Comm: syz.4.13696 Not tainted syzkaller #0 [ 1865.286623][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1865.296718][T11874] Call Trace: [ 1865.300035][T11874] [ 1865.302994][T11874] dump_stack_lvl+0x188/0x24e [ 1865.307732][T11874] ? show_regs_print_info+0x12/0x12 [ 1865.312997][T11874] ? load_image+0x410/0x410 [ 1865.317549][T11874] ? __lock_acquire+0x7c40/0x7c40 [ 1865.322637][T11874] should_fail_ex+0x390/0x4c0 [ 1865.327378][T11874] _copy_from_user+0x2c/0x170 [ 1865.332097][T11874] iovec_from_user+0x143/0x360 [ 1865.336954][T11874] __import_iovec+0x6c/0x510 [ 1865.341608][T11874] import_iovec+0x6f/0xa0 [ 1865.345999][T11874] ___sys_sendmsg+0x252/0x360 [ 1865.350729][T11874] ? __sys_sendmsg+0x2a0/0x2a0 [ 1865.355580][T11874] __se_sys_sendmsg+0x1c3/0x2b0 [ 1865.360475][T11874] ? __x64_sys_sendmsg+0x80/0x80 [ 1865.365474][T11874] do_syscall_64+0x4c/0xa0 [ 1865.369932][T11874] ? clear_bhb_loop+0x60/0xb0 [ 1865.374657][T11874] ? clear_bhb_loop+0x60/0xb0 [ 1865.379383][T11874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.385319][T11874] RIP: 0033:0x7f774b59de99 [ 1865.389768][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.409402][T11874] RSP: 002b:00007f774c3fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1865.417834][T11874] RAX: ffffffffffffffda RBX: 00007f774b825fa0 RCX: 00007f774b59de99 [ 1865.425829][T11874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1865.433831][T11874] RBP: 00007f774c3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.441822][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1865.449814][T11874] R13: 00007f774b826038 R14: 00007f774b825fa0 R15: 00007ffeb18215b8 [ 1865.457815][T11874] [ 1865.634706][T11885] netlink: 'syz.0.13701': attribute type 3 has an invalid length. [ 1865.645917][T11885] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13701'. [ 1866.000560][T11899] netlink: 'syz.1.13704': attribute type 3 has an invalid length. [ 1866.029096][T11899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13704'. [ 1866.190582][T11898] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13705'. [ 1866.312019][T11904] netlink: 'syz.0.13707': attribute type 3 has an invalid length. [ 1866.321050][T11904] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13707'. [ 1866.631987][T11914] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13711'. [ 1866.675690][T11920] netlink: 'syz.1.13712': attribute type 10 has an invalid length. [ 1866.704082][T11920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13712'. [ 1866.886002][T11926] netlink: 'syz.0.13714': attribute type 3 has an invalid length. [ 1866.896685][T11926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13714'. [ 1867.152290][T11936] netlink: 'syz.1.13717': attribute type 3 has an invalid length. [ 1867.178967][T11936] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13717'. [ 1867.519463][T11930] netlink: 'syz.3.13715': attribute type 1 has an invalid length. [ 1870.325829][T11956] netlink: 'syz.3.13724': attribute type 3 has an invalid length. [ 1870.356851][T11956] __nla_validate_parse: 1 callbacks suppressed [ 1870.356891][T11956] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13724'. [ 1870.540670][T11968] netlink: 'syz.1.13728': attribute type 10 has an invalid length. [ 1870.549098][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13728'. [ 1870.574210][T11963] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13726'. [ 1873.965352][T11981] netlink: 'syz.4.13733': attribute type 3 has an invalid length. [ 1873.985503][T11981] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13733'. [ 1874.469276][T11998] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13740'. [ 1874.665616][T12005] netlink: 'syz.1.13742': attribute type 10 has an invalid length. [ 1874.705096][T12005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13742'. [ 1874.726739][T12007] netlink: 'syz.4.13741': attribute type 3 has an invalid length. [ 1874.741758][T12007] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13741'. [ 1874.761872][T12009] netlink: 'syz.2.13743': attribute type 3 has an invalid length. [ 1874.776044][T12009] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13743'. [ 1875.303884][T12024] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13747'. [ 1875.476610][T12033] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13751'. [ 1875.567056][T12037] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13753'. [ 1875.762960][T12041] netlink: 'syz.1.13754': attribute type 3 has an invalid length. [ 1875.801158][T12041] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13754'. [ 1878.854799][T12054] netlink: 'syz.3.13758': attribute type 10 has an invalid length. [ 1878.874230][T12054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13758'. [ 1879.004058][T12057] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13769'. [ 1879.456679][T12069] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1879.502447][T12072] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13763'. [ 1879.640091][T12077] netlink: 'syz.1.13766': attribute type 3 has an invalid length. [ 1879.655485][T12077] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13766'. [ 1879.747663][T12079] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13765'. [ 1879.885887][T12089] netlink: 'syz.3.13770': attribute type 3 has an invalid length. [ 1879.896389][T12089] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13770'. [ 1883.322304][T12099] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13773'. [ 1883.585585][T12106] netlink: 'syz.1.13777': attribute type 10 has an invalid length. [ 1883.607071][T12106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13777'. [ 1883.796020][T12112] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13779'. [ 1883.939775][T12118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13781'. [ 1883.963257][T12118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13781'. [ 1884.057632][T12120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13781'. [ 1884.342296][T12123] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13782'. [ 1887.405968][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1887.847276][T12144] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13788'. [ 1887.923303][T12149] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13794'. [ 1888.170453][T12157] netlink: 'syz.0.13797': attribute type 10 has an invalid length. [ 1888.199534][T12157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13797'. [ 1888.304866][T12161] netlink: 'syz.1.13798': attribute type 2 has an invalid length. [ 1888.380981][T12161] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13798'. [ 1915.530749][ T6123] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2666 jiffies s: 163897 root: 0x1/. [ 1915.566355][ T6123] rcu: blocking rcu_node structures (internal RCU debug): [ 1915.589602][ T6123] Sending NMI from CPU 1 to CPUs 0: [ 1915.594906][ C0] NMI backtrace for cpu 0 [ 1915.594916][ C0] CPU: 0 PID: 12162 Comm: syz.3.13795 Not tainted syzkaller #0 [ 1915.594934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1915.594944][ C0] RIP: 0010:rcu_is_watching+0xc/0xa0 [ 1915.594976][ C0] Code: 46 b3 8c 4c 89 f6 e8 b3 e3 d0 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 53 65 ff 05 8c 4c 96 7e 0f 3c c4 08 89 c3 83 f8 08 73 60 49 bf 00 00 00 00 00 fc ff df [ 1915.594998][ C0] RSP: 0018:ffffc9000f31eda0 EFLAGS: 00000002 [ 1915.595013][ C0] RAX: ffffffff8139f0fc RBX: 0000000000000001 RCX: 0000000000000000 [ 1915.595025][ C0] RDX: ffff88802d015a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1915.595037][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 1915.595049][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: dffffc0000000000 [ 1915.595063][ C0] R13: 0000000000000008 R14: ffffffff8139eec8 R15: ffff88813fff92e0 [ 1915.595076][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1915.595090][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1915.595102][ C0] CR2: 0000001b2ff10ff8 CR3: 00000000791c1000 CR4: 00000000003506f0 [ 1915.595119][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1915.595130][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1915.595140][ C0] Call Trace: [ 1915.595146][ C0] [ 1915.595153][ C0] ? __virt_addr_valid+0x188/0x540 [ 1915.595179][ C0] __virt_addr_valid+0x3c5/0x540 [ 1915.595206][ C0] kasan_addr_to_slab+0x9/0xc0 [ 1915.595230][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 1915.595248][ C0] irq_work_queue_on+0x10f/0x260 [ 1915.595277][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 1915.595300][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1915.595328][ C0] __rcu_read_unlock+0x78/0xd0 [ 1915.595343][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1915.595368][ C0] trace_call_bpf+0x5bb/0x6b0 [ 1915.595392][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1915.595420][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1915.595444][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1915.595467][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 1915.595491][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1915.595519][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1915.595550][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 1915.595577][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1915.595601][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1915.595625][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1915.595653][ C0] ? lock_chain_count+0x20/0x20 [ 1915.595680][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1915.595702][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 1915.595729][ C0] trace_hardirqs_on+0x24/0x40 [ 1915.595751][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1915.595774][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1915.595791][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1915.595805][ C0] RSP: 0018:ffffc9000f31f2c0 EFLAGS: 00000206 [ 1915.595818][ C0] RAX: af90e025d8144c00 RBX: 1ffff92001e63e60 RCX: af90e025d8144c00 [ 1915.595831][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1915.595844][ C0] RBP: ffffc9000f31f3b0 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 1915.595856][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 0000000000000246 [ 1915.595868][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1915.595898][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1915.595916][ C0] ? folio_memcg_lock+0xf2/0x320 [ 1915.596035][ C0] ? folio_memcg_lock+0x7d/0x320 [ 1915.596056][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 1915.596081][ C0] __rcu_read_unlock+0x78/0xd0 [ 1915.596100][ C0] __folio_memcg_unlock+0xea/0x110 [ 1915.596123][ C0] page_remove_rmap+0x7f5/0xef0 [ 1915.596146][ C0] unmap_page_range+0x10db/0x25b0 [ 1915.596196][ C0] unmap_vmas+0x260/0x390 [ 1915.596221][ C0] ? unmap_vmas+0x1bd/0x390 [ 1915.596248][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 1915.596277][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1915.596315][ C0] exit_mmap+0x20d/0x970 [ 1915.596341][ C0] ? vm_brk+0x20/0x20 [ 1915.596361][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1915.596397][ C0] ? exit_mm+0x23d/0x350 [ 1915.596429][ C0] ? uprobe_clear_state+0x274/0x290 [ 1915.596459][ C0] __mmput+0x118/0x3a0 [ 1915.596477][ C0] exit_mm+0x24d/0x350 [ 1915.596504][ C0] ? do_exit+0x2570/0x2570 [ 1915.596529][ C0] ? taskstats_exit+0x355/0x9e0 [ 1915.596560][ C0] do_exit+0x958/0x2570 [ 1915.596593][ C0] ? put_task_struct+0x80/0x80 [ 1915.596617][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 1915.596638][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1915.596665][ C0] ? lock_chain_count+0x20/0x20 [ 1915.596693][ C0] do_group_exit+0x229/0x2e0 [ 1915.596718][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1915.596737][ C0] get_signal+0x1259/0x1340 [ 1915.596797][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1915.596828][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 1915.596878][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1915.596906][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1915.596934][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1915.596963][ C0] ? get_sigframe_size+0x10/0x10 [ 1915.596984][ C0] ? perf_trace_preemptirq_template+0x268/0x320 [ 1915.597031][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1915.597060][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1915.597087][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1915.597114][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1915.597132][ C0] do_syscall_64+0x58/0xa0 [ 1915.597155][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1915.597177][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1915.597201][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1915.597223][ C0] RIP: 0033:0x7f4c3299de99 [ 1915.597237][ C0] Code: Unable to access opcode bytes at 0x7f4c3299de6f. [ 1915.597245][ C0] RSP: 002b:00007f4c338820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1915.597261][ C0] RAX: fffffffffffffe00 RBX: 00007f4c32c26098 RCX: 00007f4c3299de99 [ 1915.597274][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4c32c26098 [ 1915.597285][ C0] RBP: 00007f4c32c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.597296][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1915.597306][ C0] R13: 00007f4c32c26128 R14: 00007fffab9c0b70 R15: 00007fffab9c0c58 [ 1915.597331][ C0] [ 1919.337197][T26876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)