last executing test programs: 7m50.444760107s ago: executing program 2 (id=452): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x80c1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300)="989f", &(0x7f00000005c0)=""/104}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 7m50.132278285s ago: executing program 2 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0xd, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x61, 0x2e, 0x61]}}, &(0x7f0000000500)=""/87, 0x2a, 0x57, 0x0, 0x80, 0x10000, @value=r0}, 0x28) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7m49.965323955s ago: executing program 2 (id=456): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(r0) 7m49.424694407s ago: executing program 2 (id=461): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bfc68ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1, 0x0, 0x140}, 0xff0f000020000080) 7m48.964705744s ago: executing program 2 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb0800000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x9}, 0x50) 7m48.811819382s ago: executing program 2 (id=466): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x3, 0x0, @private2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="80", 0x1}], 0x1, &(0x7f00000002c0)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x20, '\x00', r4, @sk_lookup, r3, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xfffffffb, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000ffff0f00000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000000000006d0000fa85000000d00000009500000000000000f09f2a0b380777d38e2c9e25a7b98055e6"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) 7m33.391119911s ago: executing program 32 (id=466): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x3, 0x0, @private2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="80", 0x1}], 0x1, &(0x7f00000002c0)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x20, '\x00', r4, @sk_lookup, r3, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xfffffffb, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000ffff0f00000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000000000006d0000fa85000000d00000009500000000000000f09f2a0b380777d38e2c9e25a7b98055e6"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) 3m51.065158081s ago: executing program 3 (id=1407): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000006926b6ca", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x18852, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="bfb57c2646143982171b5e8eda4fa69be1c7d959472674995803217356ff45a94d146cf7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x6000000, [{0x3, 0x3}, {0xb, 0x1}]}]}}, &(0x7f0000000f40)=""/4096, 0x36, 0x1000, 0x9}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000200)=r8, 0x21) r9 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000e40)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m50.652568175s ago: executing program 3 (id=1411): close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x200}) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18ed175560c37d4001b7c48801") r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3m50.093038768s ago: executing program 3 (id=1413): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @volatile={0x9}, @var={0x5, 0x0, 0x0, 0xe, 0x2}, @struct={0x1, 0x7, 0x0, 0x4, 0x1, 0x1, [{0x1, 0x4, 0x5}, {0x4, 0x3, 0xffffffff}, {0x10, 0x4, 0xf41}, {0x9, 0x0, 0x22bc017}, {0xd, 0x5}, {0x4, 0x5, 0x94}, {0x4, 0x1, 0x10000}]}, @float={0x9, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x30, 0x5f, 0x0]}}, &(0x7f0000000300)=""/73, 0xb2, 0x49, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x25, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) socketpair(0x21, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 3m49.785181806s ago: executing program 3 (id=1415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 3m49.332557052s ago: executing program 3 (id=1417): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x1b, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0xcf3}, {0x5, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x100b100}]}) 3m47.835005829s ago: executing program 3 (id=1418): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x3, 0x0, @private2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="80", 0x1}], 0x1, &(0x7f00000002c0)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query, @map_fd={0x18, 0xa}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x20, '\x00', r3, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xfffffffb, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000ffff0f00000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000000000006d0000fa85000000d00000009500000000000000f09f2a0b380777d38e2c9e25a7b98055e6"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) 3m32.71950457s ago: executing program 33 (id=1418): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x3, 0x0, @private2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="80", 0x1}], 0x1, &(0x7f00000002c0)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query, @map_fd={0x18, 0xa}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x20, '\x00', r3, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xfffffffb, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000ffff0f00000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000000000006d0000fa85000000d00000009500000000000000f09f2a0b380777d38e2c9e25a7b98055e6"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) 6.965029754s ago: executing program 0 (id=2194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xfffffffffffffea4, &(0x7f0000000380)="1000110ec1a900049b0046b30000", 0x0, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 67) 6.429892225s ago: executing program 0 (id=2197): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0x100000000000ca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x53f, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 2.966584247s ago: executing program 1 (id=2205): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x9a2a178d5a9f5051}, 0x5, 0x0, 0x0, 0x3, 0x4, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 2.866704743s ago: executing program 5 (id=2206): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) 2.820679365s ago: executing program 0 (id=2207): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x3, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x20, '\x00', r4, @sk_lookup, r3, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xfffffffb, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000ffff0f00000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000000000006d0000fa85000000d00000009500000000000000f09f2a0b380777d38e2c9e25a7b98055e6"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) 2.801287476s ago: executing program 4 (id=2208): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f00000071fa7f00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) 2.674679174s ago: executing program 4 (id=2209): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="d1117051b31e109e03"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa) 2.576671599s ago: executing program 5 (id=2210): socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x340b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)=')[*$\x00') socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc0189436, 0x2000141a) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xc, 0x7, 0x1, 0xf}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) 2.576027649s ago: executing program 1 (id=2211): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8=0xffffffffffffffff], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x20de, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x648b3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x47a1bd76, 0x5, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5d31, 0x90092, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x10025b, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, 0x0, 0x200ce0c0) write$cgroup_devices(r7, 0x0, 0x97ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000240), 0x0}, 0x20) write$cgroup_type(r7, &(0x7f0000000480), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r10, @ANYRES32=r0, @ANYBLOB="00000000595298f52c10d928cc16f4a80000000000008000000400"/39, @ANYRES8=r8], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="c10675636362af40a0b8c81d080b2500000000215538c811fa542cda93519be5", 0x20}], 0x1}, 0x80) r11 = openat$cgroup_pressure(r9, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000100)='./file0\x00', r2, 0x4000, r11}, 0x18) 2.508042094s ago: executing program 4 (id=2212): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f00000fff04c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.412784027s ago: executing program 4 (id=2213): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.292769424s ago: executing program 4 (id=2214): r0 = socket$kcm(0x22, 0x2, 0x21) write$cgroup_subtree(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000)={'geneve0', 0x32, 0x30}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@snprintf]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 1.144035173s ago: executing program 5 (id=2215): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0x100000000000ca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x53f, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1.073855197s ago: executing program 1 (id=2216): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xe, 0x0, 0x0, 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000f0decc1057", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0xe80, 0xdd86, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e832f0", 0x0, 0x10804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r6) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'batadv0\x00', 0x8000}) 938.897515ms ago: executing program 0 (id=2217): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000000000000000000300000000030000000200000000000000000000000000000105000000100000000100000000000008000000000a5f"], 0x0, 0x4f}, 0x20) 680.69547ms ago: executing program 0 (id=2218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bb1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 572.078616ms ago: executing program 1 (id=2219): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000005a421000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 547.341998ms ago: executing program 5 (id=2220): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="d1117051b31e109e03"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa) 360.873109ms ago: executing program 5 (id=2221): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 304.443672ms ago: executing program 4 (id=2222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200007aeddddb020a2f663164ceb251462d0767b40000000000000000000000000010000000000000000000"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x4, 0x1, 0x8001, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800008acef92310ad80000095933b2c035e00ed8cdf184787cf1dc57f65da3376b8379d512d89110c115a7312320747e253731e4ec35a5f013c8dc9dbd2514f9ae7a6ee538fe88129e1572547465c99240a4ba2e06d8058ff3ed6059edfc7a736ae935be918df9a609517d15ec79170d65d23d00dacadcd956314a82e91992a4a209ab6709d50eb077f"], &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000032"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="1400000036000b63717abc0d0ed8980009000000", 0x14}], 0x1}, 0x20040010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x445b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xfffffffffffffeff, 0x101}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xb}, {0x10000002, 0x4, 0x0, 0xc}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x100) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) 304.020262ms ago: executing program 1 (id=2223): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c000000000000000000000202000000000000000400000d000000000600"/78], &(0x7f0000000640)=""/204, 0x5c, 0xcc, 0x1}, 0x28) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000cb00000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 173.861249ms ago: executing program 0 (id=2224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xfffffffffffffea4, &(0x7f0000000380)="1000110ec1a900049b0046b30000", 0x0, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 68) 55.618516ms ago: executing program 5 (id=2225): socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'macsec0\x00', 0x202}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x250002, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40010001) 0s ago: executing program 1 (id=2226): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x3, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x20, '\x00', r4, @sk_lookup, r3, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xfffffffb, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000ffff0f00000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000000000006d0000fa85000000d00000009500000000000000f09f2a0b380777d38e2c9e25a7b98055e6"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) kernel console output (not intermixed with test programs): _skb+0x138/0x2c0 [ 493.263965][T10759] ? rcu_is_watching+0x15/0xb0 [ 493.268797][T10759] ip_generic_getfrag+0x163/0x2f0 [ 493.273887][T10759] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 493.278815][T10759] ? skb_put+0x11b/0x210 [ 493.283142][T10759] __ip6_append_data+0x2f1b/0x3c50 [ 493.288317][T10759] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 493.293251][T10759] ? ip6_setup_cork+0xfe0/0xfe0 [ 493.298248][T10759] ip6_append_data+0x1b0/0x350 [ 493.303155][T10759] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 493.308051][T10759] l2tp_ip6_sendmsg+0x1237/0x1690 [ 493.313145][T10759] ? __might_sleep+0xe0/0xe0 [ 493.317789][T10759] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 493.323157][T10759] ? aa_af_perm+0x330/0x330 [ 493.327709][T10759] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 493.334170][T10759] ? sock_rps_record_flow+0x19/0x3f0 [ 493.339520][T10759] ? inet_sendmsg+0x7c/0x2f0 [ 493.344161][T10759] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.349498][T10759] ? security_socket_sendmsg+0x80/0xa0 [ 493.354994][T10759] ? inet_send_prepare+0x260/0x260 [ 493.360139][T10759] ____sys_sendmsg+0x5ba/0x960 [ 493.364942][T10759] ? __lock_acquire+0x7d40/0x7d40 [ 493.370033][T10759] ? __sys_sendmsg_sock+0x30/0x30 [ 493.375114][T10759] ? __import_iovec+0x3fa/0x850 [ 493.380465][T10759] ? import_iovec+0x73/0xa0 [ 493.385036][T10759] ___sys_sendmsg+0x2a6/0x360 [ 493.389798][T10759] ? get_pid_task+0x20/0x1e0 [ 493.394492][T10759] ? __sys_sendmsg+0x2a0/0x2a0 [ 493.399336][T10759] ? __lock_acquire+0x7d40/0x7d40 [ 493.404434][T10759] __se_sys_sendmsg+0x1c2/0x2b0 [ 493.409412][T10759] ? __x64_sys_sendmsg+0x80/0x80 [ 493.414425][T10759] ? lockdep_hardirqs_on+0x98/0x150 [ 493.419683][T10759] do_syscall_64+0x55/0xa0 [ 493.424173][T10759] ? clear_bhb_loop+0x40/0x90 [ 493.428932][T10759] ? clear_bhb_loop+0x40/0x90 [ 493.433658][T10759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.439640][T10759] RIP: 0033:0x7fc51c99acb9 [ 493.444097][T10759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.463742][T10759] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.472186][T10759] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 493.480193][T10759] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 493.488195][T10759] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 493.496198][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.504197][T10759] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 493.512212][T10759] [ 493.704834][T10765] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.1527'. [ 494.162056][T10784] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1532'. [ 494.234402][T10784] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1532'. [ 494.318283][T10788] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1532'. [ 495.444379][ T5774] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 497.526844][T10812] FAULT_INJECTION: forcing a failure. [ 497.526844][T10812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.549785][T10812] CPU: 0 PID: 10812 Comm: syz.4.1538 Not tainted syzkaller #0 [ 497.557314][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.567418][T10812] Call Trace: [ 497.570732][T10812] [ 497.573711][T10812] dump_stack_lvl+0x18c/0x250 [ 497.578454][T10812] ? show_regs_print_info+0x20/0x20 [ 497.583694][T10812] ? load_image+0x400/0x400 [ 497.588237][T10812] ? __lock_acquire+0x7d40/0x7d40 [ 497.593292][T10812] ? perf_trace_lock+0xfc/0x3b0 [ 497.598194][T10812] should_fail_ex+0x39d/0x4d0 [ 497.602920][T10812] prepare_alloc_pages+0x1e2/0x5f0 [ 497.608092][T10812] __alloc_pages+0x134/0x460 [ 497.612741][T10812] ? zone_statistics+0x170/0x170 [ 497.617727][T10812] ? alloc_pages+0x4dc/0x740 [ 497.622350][T10812] ? do_raw_spin_unlock+0x121/0x230 [ 497.627602][T10812] __get_free_pages+0xc/0x30 [ 497.632223][T10812] kasan_populate_vmalloc_pte+0x35/0x100 [ 497.637903][T10812] __apply_to_page_range+0x860/0xdd0 [ 497.643245][T10812] ? kasan_populate_vmalloc+0x70/0x70 [ 497.648837][T10812] ? apply_to_page_range+0x50/0x50 [ 497.653996][T10812] ? do_raw_spin_unlock+0x121/0x230 [ 497.659245][T10812] alloc_vmap_area+0x1d0c/0x1e30 [ 497.664256][T10812] ? vm_map_ram+0xcb0/0xcb0 [ 497.668794][T10812] ? rcu_is_watching+0x15/0xb0 [ 497.673619][T10812] __get_vm_area_node+0x162/0x370 [ 497.678705][T10812] __vmalloc_node_range+0x36e/0x1330 [ 497.684057][T10812] ? sock_map_alloc+0x1af/0x2c0 [ 497.688987][T10812] ? free_vm_area+0x50/0x50 [ 497.693533][T10812] ? bpf_map_area_alloc+0x5e/0x110 [ 497.698688][T10812] ? rcu_is_watching+0x15/0xb0 [ 497.703513][T10812] ? bpf_map_area_alloc+0x5e/0x110 [ 497.708769][T10812] bpf_map_area_alloc+0xf1/0x110 [ 497.713745][T10812] ? sock_map_alloc+0x1af/0x2c0 [ 497.718752][T10812] sock_map_alloc+0x1af/0x2c0 [ 497.723559][T10812] map_create+0x877/0x12f0 [ 497.728033][T10812] ? bpf_lsm_bpf+0x9/0x10 [ 497.732428][T10812] __sys_bpf+0x651/0x890 [ 497.736823][T10812] ? bpf_link_show_fdinfo+0x390/0x390 [ 497.742258][T10812] ? lock_chain_count+0x20/0x20 [ 497.747159][T10812] __x64_sys_bpf+0x7c/0x90 [ 497.751614][T10812] do_syscall_64+0x55/0xa0 [ 497.756067][T10812] ? clear_bhb_loop+0x40/0x90 [ 497.760778][T10812] ? clear_bhb_loop+0x40/0x90 [ 497.765861][T10812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.771789][T10812] RIP: 0033:0x7fa6a6b9acb9 [ 497.776412][T10812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.796053][T10812] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.804509][T10812] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 497.812514][T10812] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0600000000000000 [ 497.820687][T10812] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 497.828688][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.836951][T10812] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 497.844972][T10812] [ 498.123129][T10822] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1540'. [ 499.423655][T10851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1545'. [ 500.105825][ T5774] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 501.839680][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.864419][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.853648][T10881] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1552'. [ 503.048308][T10876] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 503.447668][T10876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.613414][T10876] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 504.227086][T10914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'. [ 504.474631][ T5774] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 507.313724][T10939] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1562'. [ 508.461342][ T5774] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 511.829016][T10981] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1575'. [ 512.232580][T10984] netlink: 'syz.5.1576': attribute type 10 has an invalid length. [ 512.300892][T10999] FAULT_INJECTION: forcing a failure. [ 512.300892][T10999] name failslab, interval 1, probability 0, space 0, times 0 [ 512.325332][T10984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.347447][T10999] CPU: 1 PID: 10999 Comm: syz.1.1580 Not tainted syzkaller #0 [ 512.354998][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.365113][T10999] Call Trace: [ 512.368430][T10999] [ 512.371438][T10999] dump_stack_lvl+0x18c/0x250 [ 512.376191][T10999] ? show_regs_print_info+0x20/0x20 [ 512.381571][T10999] ? load_image+0x400/0x400 [ 512.386180][T10999] ? __lock_acquire+0x7d40/0x7d40 [ 512.391283][T10999] should_fail_ex+0x39d/0x4d0 [ 512.396026][T10999] should_failslab+0x9/0x20 [ 512.400596][T10999] slab_pre_alloc_hook+0x59/0x310 [ 512.405693][T10999] ? sctp_stream_init_ext+0x57/0x170 [ 512.411210][T10999] __kmem_cache_alloc_node+0x53/0x250 [ 512.416629][T10999] ? sctp_stream_init_ext+0x57/0x170 [ 512.421952][T10999] kmalloc_trace+0x2a/0xe0 [ 512.426411][T10999] sctp_stream_init_ext+0x57/0x170 [ 512.431567][T10999] sctp_sendmsg_to_asoc+0x1324/0x1830 [ 512.436969][T10999] ? __asan_memcpy+0x40/0x70 [ 512.441607][T10999] ? sctp_assoc_set_primary+0x249/0x340 [ 512.447188][T10999] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 512.452605][T10999] ? sctp_connect_new_asoc+0x404/0x6a0 [ 512.458125][T10999] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 512.463963][T10999] ? __sctp_connect+0xd80/0xd80 [ 512.468921][T10999] ? __local_bh_enable_ip+0x13a/0x1c0 [ 512.474326][T10999] ? _local_bh_enable+0xa0/0xa0 [ 512.479210][T10999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 512.485046][T10999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 512.490886][T10999] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 512.496468][T10999] ? security_sctp_bind_connect+0x89/0xb0 [ 512.502221][T10999] sctp_sendmsg+0x1b83/0x28c0 [ 512.506943][T10999] ? sctp_getsockopt+0xb60/0xb60 [ 512.511910][T10999] ? aa_sk_perm+0x83c/0x970 [ 512.516466][T10999] ? aa_af_perm+0x330/0x330 [ 512.521088][T10999] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 512.527554][T10999] ? sock_rps_record_flow+0x19/0x3f0 [ 512.532892][T10999] ? inet_sendmsg+0x7c/0x2f0 [ 512.537520][T10999] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 512.542857][T10999] ? security_socket_sendmsg+0x80/0xa0 [ 512.548364][T10999] ? inet_send_prepare+0x260/0x260 [ 512.553710][T10999] ____sys_sendmsg+0x5ba/0x960 [ 512.558526][T10999] ? __lock_acquire+0x7d40/0x7d40 [ 512.563616][T10999] ? __asan_memset+0x22/0x40 [ 512.568296][T10999] ? __sys_sendmsg_sock+0x30/0x30 [ 512.573370][T10999] ? __import_iovec+0x5f2/0x850 [ 512.578284][T10999] ? import_iovec+0x73/0xa0 [ 512.582839][T10999] ___sys_sendmsg+0x2a6/0x360 [ 512.587611][T10999] ? get_pid_task+0x20/0x1e0 [ 512.592276][T10999] ? __sys_sendmsg+0x2a0/0x2a0 [ 512.597103][T10999] ? __lock_acquire+0x7d40/0x7d40 [ 512.602176][T10999] __se_sys_sendmsg+0x1c2/0x2b0 [ 512.607069][T10999] ? __x64_sys_sendmsg+0x80/0x80 [ 512.612065][T10999] ? lockdep_hardirqs_on+0x98/0x150 [ 512.617301][T10999] do_syscall_64+0x55/0xa0 [ 512.621748][T10999] ? clear_bhb_loop+0x40/0x90 [ 512.626455][T10999] ? clear_bhb_loop+0x40/0x90 [ 512.631170][T10999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.637102][T10999] RIP: 0033:0x7fdc3df9acb9 [ 512.641544][T10999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.661182][T10999] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.669631][T10999] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 512.677644][T10999] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 512.685667][T10999] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 512.693702][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.701707][T10999] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 512.709734][T10999] [ 512.742954][T10984] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 513.418748][ T5774] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 513.470323][T11028] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1587'. [ 514.779240][T11056] syz.5.1589[11056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.779394][T11056] syz.5.1589[11056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.935085][T11059] netlink: 'syz.5.1589': attribute type 21 has an invalid length. [ 516.448534][T11085] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1590'. [ 516.505337][T11085] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1590'. [ 516.918768][T11106] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1597'. [ 517.171916][T11106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.307229][T11118] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1598'. [ 517.415269][T11106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.675270][T11106] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 517.793247][T11106] bond0 (unregistering): Released all slaves [ 517.924317][T11115] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 518.022533][T11115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.092577][T11115] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 518.659635][ T5774] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 519.508002][T11164] netlink: 'syz.4.1606': attribute type 17 has an invalid length. [ 519.546484][T11164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1606'. [ 519.583803][T11164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.696856][T11169] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1608'. [ 520.147986][T11187] FAULT_INJECTION: forcing a failure. [ 520.147986][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 520.182148][T11187] CPU: 1 PID: 11187 Comm: syz.5.1610 Not tainted syzkaller #0 [ 520.189702][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.199811][T11187] Call Trace: [ 520.203133][T11187] [ 520.206115][T11187] dump_stack_lvl+0x18c/0x250 [ 520.210876][T11187] ? show_regs_print_info+0x20/0x20 [ 520.216143][T11187] ? load_image+0x400/0x400 [ 520.220704][T11187] ? __might_sleep+0xe0/0xe0 [ 520.225361][T11187] ? __lock_acquire+0x7d40/0x7d40 [ 520.230438][T11187] should_fail_ex+0x39d/0x4d0 [ 520.235190][T11187] should_failslab+0x9/0x20 [ 520.239837][T11187] slab_pre_alloc_hook+0x59/0x310 [ 520.244934][T11187] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.250724][T11187] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.256496][T11187] __kmem_cache_alloc_node+0x53/0x250 [ 520.261949][T11187] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.267725][T11187] __kmalloc+0xa4/0x230 [ 520.271991][T11187] tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.277609][T11187] tomoyo_path_number_perm+0x248/0x620 [ 520.283228][T11187] ? tomoyo_path_number_perm+0x217/0x620 [ 520.288926][T11187] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 520.294460][T11187] ? ksys_write+0x1c4/0x260 [ 520.299062][T11187] ? __fget_files+0x28/0x4b0 [ 520.303707][T11187] ? __fget_files+0x28/0x4b0 [ 520.308455][T11187] security_file_ioctl+0x70/0xa0 [ 520.313468][T11187] __se_sys_ioctl+0x48/0x170 [ 520.318128][T11187] do_syscall_64+0x55/0xa0 [ 520.322609][T11187] ? clear_bhb_loop+0x40/0x90 [ 520.327347][T11187] ? clear_bhb_loop+0x40/0x90 [ 520.332085][T11187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.338032][T11187] RIP: 0033:0x7fa4d3f9acb9 [ 520.342499][T11187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.362160][T11187] RSP: 002b:00007fa4d4db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.370644][T11187] RAX: ffffffffffffffda RBX: 00007fa4d4216180 RCX: 00007fa4d3f9acb9 [ 520.378677][T11187] RDX: 0000000000000205 RSI: 00000000400454cd RDI: 0000000000000003 [ 520.386786][T11187] RBP: 00007fa4d4db8090 R08: 0000000000000000 R09: 0000000000000000 [ 520.394809][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.402843][T11187] R13: 00007fa4d4216218 R14: 00007fa4d4216180 R15: 00007ffdca1d9468 [ 520.410885][T11187] [ 520.493328][T11187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 520.513169][T11185] netlink: 'syz.0.1611': attribute type 3 has an invalid length. [ 520.527232][T11184] netlink: 'syz.0.1611': attribute type 3 has an invalid length. [ 520.537872][T11184] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 520.604954][T11185] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 520.612866][T11185] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1611'. [ 520.654456][T11184] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1611'. [ 520.703409][T11193] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1613'. [ 520.742919][T11193] openvswitch: netlink: Duplicate key (type 0). [ 520.827747][ T5774] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 521.691776][T11225] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1620'. [ 521.766658][T11227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1620'. [ 522.113091][T11237] netlink: 'syz.4.1624': attribute type 39 has an invalid length. [ 522.778829][ T5774] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 523.245803][T11258] C: renamed from team_slave_0 (while UP) [ 523.351093][T11258] netlink: 'syz.5.1630': attribute type 3 has an invalid length. [ 523.365276][T11258] netlink: 'syz.5.1630': attribute type 1 has an invalid length. [ 523.383214][T11258] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1630'. [ 523.549690][T11265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 523.698126][T11265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 523.755998][T11264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 523.901517][T11273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 524.818913][T11289] pim6reg: tun_chr_ioctl cmd 1074025676 [ 524.826130][T11289] pim6reg: owner set to 0 [ 524.848752][T11289] pim6reg: tun_chr_ioctl cmd 2147767507 [ 525.570392][ T5770] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 525.996933][T11304] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1644'. [ 526.109735][T11300] syzkaller0: entered promiscuous mode [ 526.132891][T11300] syzkaller0: entered allmulticast mode [ 526.221392][T11309] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 527.419150][T11335] FAULT_INJECTION: forcing a failure. [ 527.419150][T11335] name failslab, interval 1, probability 0, space 0, times 0 [ 527.438436][T11335] CPU: 1 PID: 11335 Comm: syz.4.1653 Not tainted syzkaller #0 [ 527.445998][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.456128][T11335] Call Trace: [ 527.459490][T11335] [ 527.462475][T11335] dump_stack_lvl+0x18c/0x250 [ 527.467269][T11335] ? show_regs_print_info+0x20/0x20 [ 527.472586][T11335] ? load_image+0x400/0x400 [ 527.477127][T11335] ? __might_sleep+0xe0/0xe0 [ 527.481743][T11335] ? __lock_acquire+0x7d40/0x7d40 [ 527.486839][T11335] should_fail_ex+0x39d/0x4d0 [ 527.491575][T11335] should_failslab+0x9/0x20 [ 527.496122][T11335] slab_pre_alloc_hook+0x59/0x310 [ 527.501242][T11335] ? tomoyo_encode+0x28b/0x540 [ 527.506070][T11335] ? tomoyo_encode+0x28b/0x540 [ 527.510915][T11335] __kmem_cache_alloc_node+0x53/0x250 [ 527.516353][T11335] ? tomoyo_encode+0x28b/0x540 [ 527.521135][T11335] __kmalloc+0xa4/0x230 [ 527.525849][T11335] tomoyo_encode+0x28b/0x540 [ 527.530472][T11335] tomoyo_realpath_from_path+0x592/0x5d0 [ 527.536149][T11335] tomoyo_path_number_perm+0x248/0x620 [ 527.541646][T11335] ? tomoyo_path_number_perm+0x217/0x620 [ 527.547329][T11335] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 527.552860][T11335] ? ksys_write+0x1c4/0x260 [ 527.557501][T11335] ? __fget_files+0x28/0x4b0 [ 527.562173][T11335] ? __fget_files+0x28/0x4b0 [ 527.566910][T11335] security_file_ioctl+0x70/0xa0 [ 527.571881][T11335] __se_sys_ioctl+0x48/0x170 [ 527.576506][T11335] do_syscall_64+0x55/0xa0 [ 527.580950][T11335] ? clear_bhb_loop+0x40/0x90 [ 527.585683][T11335] ? clear_bhb_loop+0x40/0x90 [ 527.590384][T11335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.596310][T11335] RIP: 0033:0x7fa6a6b9acb9 [ 527.600783][T11335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.620531][T11335] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.629160][T11335] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 527.637171][T11335] RDX: 0000000000000205 RSI: 00000000400454cd RDI: 0000000000000003 [ 527.645176][T11335] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 527.653205][T11335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.661223][T11335] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 527.669247][T11335] [ 527.676653][T11335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 527.924936][ T5770] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 528.271699][T11342] FAULT_INJECTION: forcing a failure. [ 528.271699][T11342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.291918][T11342] CPU: 0 PID: 11342 Comm: syz.4.1655 Not tainted syzkaller #0 [ 528.299415][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.309493][T11342] Call Trace: [ 528.312793][T11342] [ 528.315736][T11342] dump_stack_lvl+0x18c/0x250 [ 528.320444][T11342] ? show_regs_print_info+0x20/0x20 [ 528.325735][T11342] ? load_image+0x400/0x400 [ 528.330300][T11342] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 528.336320][T11342] should_fail_ex+0x39d/0x4d0 [ 528.341056][T11342] strncpy_from_user+0x36/0x2d0 [ 528.345937][T11342] ? __local_bh_disable_ip+0x108/0x1a0 [ 528.351469][T11342] strncpy_from_user_nofault+0x71/0x140 [ 528.357059][T11342] bpf_probe_read_user_str+0x2a/0x70 [ 528.362443][T11342] bpf_prog_a91b00db09d76834+0x45/0x47 [ 528.367972][T11342] bpf_test_run+0x2df/0x870 [ 528.372534][T11342] ? bpf_test_run+0x174/0x870 [ 528.377237][T11342] ? convert___skb_to_skb+0x590/0x590 [ 528.382632][T11342] ? eth_get_headlen+0x210/0x210 [ 528.387600][T11342] ? slab_build_skb+0x25f/0x3f0 [ 528.392473][T11342] ? convert___skb_to_skb+0x3d/0x590 [ 528.397781][T11342] bpf_prog_test_run_skb+0xad2/0x12b0 [ 528.403185][T11342] ? cpu_online+0x60/0x60 [ 528.407737][T11342] bpf_prog_test_run+0x321/0x390 [ 528.412701][T11342] __sys_bpf+0x49d/0x890 [ 528.416996][T11342] ? bpf_link_show_fdinfo+0x390/0x390 [ 528.422499][T11342] ? lock_chain_count+0x20/0x20 [ 528.427471][T11342] __x64_sys_bpf+0x7c/0x90 [ 528.431908][T11342] do_syscall_64+0x55/0xa0 [ 528.436344][T11342] ? clear_bhb_loop+0x40/0x90 [ 528.441048][T11342] ? clear_bhb_loop+0x40/0x90 [ 528.445776][T11342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.451706][T11342] RIP: 0033:0x7fa6a6b9acb9 [ 528.456164][T11342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.475807][T11342] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.484278][T11342] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 528.492323][T11342] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 528.500356][T11342] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 528.508465][T11342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.516491][T11342] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 528.524499][T11342] [ 528.625726][T11344] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1656'. [ 529.979523][T11309] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 530.035655][T11349] netlink: 'syz.4.1658': attribute type 21 has an invalid length. [ 530.064598][T11349] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1658'. [ 530.085419][T11349] netlink: 'syz.4.1658': attribute type 4 has an invalid length. [ 530.107639][T11349] netlink: 'syz.4.1658': attribute type 5 has an invalid length. [ 530.151766][T11349] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1658'. [ 530.583961][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 534.492436][T11397] netlink: 'syz.0.1673': attribute type 39 has an invalid length. [ 535.056012][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 535.958268][T11422] netlink: 'syz.1.1681': attribute type 39 has an invalid length. [ 536.773614][T11444] FAULT_INJECTION: forcing a failure. [ 536.773614][T11444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.786836][T11444] CPU: 0 PID: 11444 Comm: syz.5.1688 Not tainted syzkaller #0 [ 536.794349][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.804458][T11444] Call Trace: [ 536.807773][T11444] [ 536.810758][T11444] dump_stack_lvl+0x18c/0x250 [ 536.815484][T11444] ? show_regs_print_info+0x20/0x20 [ 536.820839][T11444] ? load_image+0x400/0x400 [ 536.825429][T11444] ? perf_trace_preemptirq_template+0xac/0x330 [ 536.831660][T11444] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 536.837715][T11444] should_fail_ex+0x39d/0x4d0 [ 536.842469][T11444] strncpy_from_user+0x36/0x2d0 [ 536.847421][T11444] ? __local_bh_disable_ip+0x108/0x1a0 [ 536.852953][T11444] strncpy_from_user_nofault+0x71/0x140 [ 536.858625][T11444] bpf_probe_read_user_str+0x2a/0x70 [ 536.864092][T11444] bpf_prog_a91b00db09d76834+0x45/0x47 [ 536.869615][T11444] bpf_test_run+0x2df/0x870 [ 536.874188][T11444] ? bpf_test_run+0x174/0x870 [ 536.878928][T11444] ? convert___skb_to_skb+0x590/0x590 [ 536.884354][T11444] ? eth_get_headlen+0x210/0x210 [ 536.889382][T11444] ? slab_build_skb+0x25f/0x3f0 [ 536.894296][T11444] ? convert___skb_to_skb+0x3d/0x590 [ 536.899639][T11444] bpf_prog_test_run_skb+0xad2/0x12b0 [ 536.905091][T11444] ? cpu_online+0x60/0x60 [ 536.909474][T11444] bpf_prog_test_run+0x321/0x390 [ 536.914479][T11444] __sys_bpf+0x49d/0x890 [ 536.918827][T11444] ? bpf_link_show_fdinfo+0x390/0x390 [ 536.924278][T11444] ? lock_chain_count+0x20/0x20 [ 536.929275][T11444] __x64_sys_bpf+0x7c/0x90 [ 536.933741][T11444] do_syscall_64+0x55/0xa0 [ 536.938221][T11444] ? clear_bhb_loop+0x40/0x90 [ 536.943041][T11444] ? clear_bhb_loop+0x40/0x90 [ 536.947870][T11444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.953905][T11444] RIP: 0033:0x7fa4d3f9acb9 [ 536.958566][T11444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.978231][T11444] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.986798][T11444] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 536.994825][T11444] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 537.002935][T11444] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 537.010958][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.019004][T11444] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 537.027317][T11444] [ 537.308925][T11455] FAULT_INJECTION: forcing a failure. [ 537.308925][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 537.337245][T11455] CPU: 1 PID: 11455 Comm: syz.5.1690 Not tainted syzkaller #0 [ 537.345027][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.355199][T11455] Call Trace: [ 537.358602][T11455] [ 537.361607][T11455] dump_stack_lvl+0x18c/0x250 [ 537.366387][T11455] ? show_regs_print_info+0x20/0x20 [ 537.371687][T11455] ? load_image+0x400/0x400 [ 537.376306][T11455] ? slab_post_alloc_hook+0x8a/0x4b0 [ 537.381823][T11455] should_fail_ex+0x39d/0x4d0 [ 537.386629][T11455] should_failslab+0x9/0x20 [ 537.391233][T11455] slab_pre_alloc_hook+0x59/0x310 [ 537.396371][T11455] ? __build_skb_around+0x255/0x3d0 [ 537.401692][T11455] kmem_cache_alloc+0x5a/0x2d0 [ 537.407095][T11455] ? _sctp_make_chunk+0x14e/0x420 [ 537.412245][T11455] _sctp_make_chunk+0x14e/0x420 [ 537.417214][T11455] sctp_make_init+0x5f3/0xfc0 [ 537.422035][T11455] ? sctp_addto_chunk+0x230/0x230 [ 537.427170][T11455] ? kernel_text_address+0xa0/0xd0 [ 537.432489][T11455] ? __kernel_text_address+0xd/0x30 [ 537.437793][T11455] ? stack_trace_save+0x100/0x100 [ 537.442915][T11455] ? arch_stack_walk+0x160/0x190 [ 537.448066][T11455] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 537.453217][T11455] sctp_do_sm+0x23a/0x5a60 [ 537.457739][T11455] ? sctp_cname+0x110/0x110 [ 537.462359][T11455] ? __stack_depot_save+0x1f/0x630 [ 537.467698][T11455] ? kasan_set_track+0x4e/0x70 [ 537.472552][T11455] ? __kasan_kmalloc+0x8f/0xa0 [ 537.477411][T11455] ? sctp_stream_init_ext+0x57/0x170 [ 537.482898][T11455] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 537.488635][T11455] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 537.494706][T11455] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 537.499826][T11455] ? do_syscall_64+0x55/0xa0 [ 537.504503][T11455] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.510849][T11455] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 537.516764][T11455] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 537.522219][T11455] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 537.527672][T11455] ? __asan_memcpy+0x40/0x70 [ 537.532379][T11455] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 537.537867][T11455] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 537.543753][T11455] ? __sctp_connect+0xd80/0xd80 [ 537.548718][T11455] ? __local_bh_enable_ip+0x13a/0x1c0 [ 537.554185][T11455] ? _local_bh_enable+0xa0/0xa0 [ 537.559200][T11455] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 537.565076][T11455] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 537.570950][T11455] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 537.576567][T11455] ? security_sctp_bind_connect+0x89/0xb0 [ 537.582365][T11455] sctp_sendmsg+0x1b83/0x28c0 [ 537.587150][T11455] ? sctp_getsockopt+0xb60/0xb60 [ 537.592250][T11455] ? aa_sk_perm+0x83c/0x970 [ 537.596876][T11455] ? aa_af_perm+0x330/0x330 [ 537.601447][T11455] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 537.607929][T11455] ? sock_rps_record_flow+0x19/0x3f0 [ 537.613284][T11455] ? inet_sendmsg+0x7c/0x2f0 [ 537.617929][T11455] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 537.623273][T11455] ? security_socket_sendmsg+0x80/0xa0 [ 537.628875][T11455] ? inet_send_prepare+0x260/0x260 [ 537.634065][T11455] ____sys_sendmsg+0x5ba/0x960 [ 537.638917][T11455] ? __lock_acquire+0x7d40/0x7d40 [ 537.644019][T11455] ? __asan_memset+0x22/0x40 [ 537.648674][T11455] ? __sys_sendmsg_sock+0x30/0x30 [ 537.653770][T11455] ? __import_iovec+0x5f2/0x850 [ 537.658714][T11455] ? import_iovec+0x73/0xa0 [ 537.663295][T11455] ___sys_sendmsg+0x2a6/0x360 [ 537.668056][T11455] ? __sys_sendmsg+0x2a0/0x2a0 [ 537.672949][T11455] ? __lock_acquire+0x7d40/0x7d40 [ 537.678111][T11455] __se_sys_sendmsg+0x1c2/0x2b0 [ 537.683049][T11455] ? __x64_sys_sendmsg+0x80/0x80 [ 537.688288][T11455] ? lockdep_hardirqs_on+0x98/0x150 [ 537.693667][T11455] do_syscall_64+0x55/0xa0 [ 537.698181][T11455] ? clear_bhb_loop+0x40/0x90 [ 537.702913][T11455] ? clear_bhb_loop+0x40/0x90 [ 537.707664][T11455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.713702][T11455] RIP: 0033:0x7fa4d3f9acb9 [ 537.718187][T11455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.737851][T11455] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.746533][T11455] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 537.754653][T11455] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 537.762688][T11455] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 537.770717][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.778817][T11455] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 537.786978][T11455] [ 539.644998][T11488] netlink: 'syz.4.1700': attribute type 39 has an invalid length. [ 539.832405][T11500] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1704'. [ 540.163660][T11506] netlink: 'syz.5.1707': attribute type 10 has an invalid length. [ 540.200370][T11506] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1707'. [ 540.230260][T11506] batman_adv: batadv0: Adding interface: virt_wifi0 [ 540.237219][T11506] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.263337][T11506] batman_adv: batadv0: Interface activated: virt_wifi0 [ 540.405058][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 541.531847][T11516] FAULT_INJECTION: forcing a failure. [ 541.531847][T11516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.613738][T11516] CPU: 0 PID: 11516 Comm: syz.1.1712 Not tainted syzkaller #0 [ 541.621393][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.631588][T11516] Call Trace: [ 541.634915][T11516] [ 541.637919][T11516] dump_stack_lvl+0x18c/0x250 [ 541.642677][T11516] ? show_regs_print_info+0x20/0x20 [ 541.647932][T11516] ? load_image+0x400/0x400 [ 541.652487][T11516] ? __might_fault+0xaa/0x120 [ 541.657213][T11516] ? __lock_acquire+0x7d40/0x7d40 [ 541.662322][T11516] should_fail_ex+0x39d/0x4d0 [ 541.667077][T11516] _copy_from_user+0x2f/0xe0 [ 541.671741][T11516] csum_and_copy_from_iter+0x476/0x14a0 [ 541.677376][T11516] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 541.683081][T11516] ? __kmem_cache_alloc_node+0x13a/0x250 [ 541.688781][T11516] ? __alloc_skb+0x138/0x2c0 [ 541.693439][T11516] ? rcu_is_watching+0x15/0xb0 [ 541.698265][T11516] ip_generic_getfrag+0x163/0x2f0 [ 541.703447][T11516] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 541.708388][T11516] ? skb_put+0x11b/0x210 [ 541.712706][T11516] __ip6_append_data+0x2f1b/0x3c50 [ 541.718020][T11516] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 541.722955][T11516] ? ip6_setup_cork+0xfe0/0xfe0 [ 541.727879][T11516] ip6_append_data+0x1b0/0x350 [ 541.732713][T11516] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 541.737640][T11516] l2tp_ip6_sendmsg+0x1237/0x1690 [ 541.742735][T11516] ? __might_sleep+0xe0/0xe0 [ 541.747393][T11516] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 541.752902][T11516] ? aa_af_perm+0x330/0x330 [ 541.757478][T11516] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 541.764041][T11516] ? sock_rps_record_flow+0x19/0x3f0 [ 541.769380][T11516] ? inet_sendmsg+0x7c/0x2f0 [ 541.774026][T11516] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.779547][T11516] ? security_socket_sendmsg+0x80/0xa0 [ 541.785062][T11516] ? inet_send_prepare+0x260/0x260 [ 541.790231][T11516] ____sys_sendmsg+0x5ba/0x960 [ 541.795062][T11516] ? __lock_acquire+0x7d40/0x7d40 [ 541.800154][T11516] ? __sys_sendmsg_sock+0x30/0x30 [ 541.805409][T11516] ? __import_iovec+0x3fa/0x850 [ 541.810327][T11516] ? import_iovec+0x73/0xa0 [ 541.814900][T11516] ___sys_sendmsg+0x2a6/0x360 [ 541.819822][T11516] ? get_pid_task+0x20/0x1e0 [ 541.824472][T11516] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.829323][T11516] ? __lock_acquire+0x7d40/0x7d40 [ 541.834440][T11516] __se_sys_sendmsg+0x1c2/0x2b0 [ 541.839362][T11516] ? __x64_sys_sendmsg+0x80/0x80 [ 541.844393][T11516] ? lockdep_hardirqs_on+0x98/0x150 [ 541.849650][T11516] do_syscall_64+0x55/0xa0 [ 541.854124][T11516] ? clear_bhb_loop+0x40/0x90 [ 541.858861][T11516] ? clear_bhb_loop+0x40/0x90 [ 541.863589][T11516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.869537][T11516] RIP: 0033:0x7fdc3df9acb9 [ 541.874009][T11516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.893674][T11516] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.902150][T11516] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 541.910182][T11516] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 541.918249][T11516] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 541.926270][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.934292][T11516] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 541.942347][T11516] [ 542.126093][T11519] FAULT_INJECTION: forcing a failure. [ 542.126093][T11519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.186555][T11519] CPU: 1 PID: 11519 Comm: syz.5.1711 Not tainted syzkaller #0 [ 542.194111][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.204227][T11519] Call Trace: [ 542.207558][T11519] [ 542.210628][T11519] dump_stack_lvl+0x18c/0x250 [ 542.215385][T11519] ? show_regs_print_info+0x20/0x20 [ 542.220650][T11519] ? load_image+0x400/0x400 [ 542.225223][T11519] ? __might_fault+0xaa/0x120 [ 542.230059][T11519] ? __lock_acquire+0x7d40/0x7d40 [ 542.235271][T11519] ? __phys_addr_symbol+0xd/0x70 [ 542.240275][T11519] should_fail_ex+0x39d/0x4d0 [ 542.245114][T11519] _copy_from_user+0x2f/0xe0 [ 542.249931][T11519] bpf_prog_test_run_skb+0x266/0x12b0 [ 542.255362][T11519] ? lockdep_hardirqs_on+0x98/0x150 [ 542.260658][T11519] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.266898][T11519] ? cpu_online+0x60/0x60 [ 542.271278][T11519] bpf_prog_test_run+0x321/0x390 [ 542.276282][T11519] __sys_bpf+0x49d/0x890 [ 542.280581][T11519] ? bpf_link_show_fdinfo+0x390/0x390 [ 542.286024][T11519] ? lock_chain_count+0x20/0x20 [ 542.290939][T11519] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 542.296994][T11519] __x64_sys_bpf+0x7c/0x90 [ 542.301556][T11519] do_syscall_64+0x55/0xa0 [ 542.306036][T11519] ? clear_bhb_loop+0x40/0x90 [ 542.310902][T11519] ? clear_bhb_loop+0x40/0x90 [ 542.315638][T11519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.321584][T11519] RIP: 0033:0x7fa4d3f9acb9 [ 542.326051][T11519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.345991][T11519] RSP: 002b:00007fa4d4dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.354469][T11519] RAX: ffffffffffffffda RBX: 00007fa4d4216090 RCX: 00007fa4d3f9acb9 [ 542.362582][T11519] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 542.370616][T11519] RBP: 00007fa4d4dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 542.378639][T11519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.386745][T11519] R13: 00007fa4d4216128 R14: 00007fa4d4216090 R15: 00007ffdca1d9468 [ 542.394823][T11519] [ 545.521197][T11536] netlink: 'syz.0.1718': attribute type 2 has an invalid length. [ 545.532640][T11537] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.1718'. [ 546.542944][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 546.616678][T11550] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1722'. [ 547.518083][T11554] syzkaller0: entered promiscuous mode [ 547.525806][T11554] syzkaller0: entered allmulticast mode [ 547.591155][T11564] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1725'. [ 551.333626][T11584] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1732'. [ 551.356599][T11581] netlink: 'syz.0.1731': attribute type 9 has an invalid length. [ 551.374652][T11581] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1731'. [ 551.701872][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 552.518580][T11589] netlink: 'syz.0.1734': attribute type 39 has an invalid length. [ 552.961748][T11597] netlink: 'syz.4.1738': attribute type 9 has an invalid length. [ 552.970229][T11597] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1738'. [ 553.112156][T11597] netlink: 'syz.4.1738': attribute type 9 has an invalid length. [ 553.144791][T11597] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1738'. [ 553.185587][T11605] FAULT_INJECTION: forcing a failure. [ 553.185587][T11605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.198753][T11605] CPU: 0 PID: 11605 Comm: syz.5.1740 Not tainted syzkaller #0 [ 553.206266][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.216365][T11605] Call Trace: [ 553.219702][T11605] [ 553.222766][T11605] dump_stack_lvl+0x18c/0x250 [ 553.227510][T11605] ? show_regs_print_info+0x20/0x20 [ 553.232811][T11605] ? load_image+0x400/0x400 [ 553.237375][T11605] ? perf_trace_preemptirq_template+0xac/0x330 [ 553.244030][T11605] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 553.250246][T11605] should_fail_ex+0x39d/0x4d0 [ 553.255014][T11605] strncpy_from_user+0x36/0x2d0 [ 553.260006][T11605] ? __local_bh_disable_ip+0x108/0x1a0 [ 553.265525][T11605] strncpy_from_user_nofault+0x71/0x140 [ 553.271147][T11605] bpf_probe_read_user_str+0x2a/0x70 [ 553.276502][T11605] bpf_prog_a91b00db09d76834+0x45/0x47 [ 553.282013][T11605] bpf_test_run+0x2df/0x870 [ 553.286581][T11605] ? bpf_test_run+0x174/0x870 [ 553.291350][T11605] ? convert___skb_to_skb+0x590/0x590 [ 553.296872][T11605] ? eth_get_headlen+0x210/0x210 [ 553.301883][T11605] ? slab_build_skb+0x25f/0x3f0 [ 553.306799][T11605] ? convert___skb_to_skb+0x3d/0x590 [ 553.312220][T11605] bpf_prog_test_run_skb+0xad2/0x12b0 [ 553.317690][T11605] ? cpu_online+0x60/0x60 [ 553.322081][T11605] bpf_prog_test_run+0x321/0x390 [ 553.327121][T11605] __sys_bpf+0x49d/0x890 [ 553.331433][T11605] ? bpf_link_show_fdinfo+0x390/0x390 [ 553.336885][T11605] ? lock_chain_count+0x20/0x20 [ 553.342031][T11605] __x64_sys_bpf+0x7c/0x90 [ 553.346520][T11605] do_syscall_64+0x55/0xa0 [ 553.351003][T11605] ? clear_bhb_loop+0x40/0x90 [ 553.355734][T11605] ? clear_bhb_loop+0x40/0x90 [ 553.360505][T11605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.366471][T11605] RIP: 0033:0x7fa4d3f9acb9 [ 553.370941][T11605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.390866][T11605] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.399341][T11605] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 553.407370][T11605] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 553.415398][T11605] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 553.423425][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.431544][T11605] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 553.439601][T11605] [ 553.670823][T11611] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1741'. [ 553.841507][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 554.901971][T11635] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1749'. [ 555.116499][T11639] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1751'. [ 555.516315][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 556.369551][T11653] macsec0: entered allmulticast mode [ 556.475284][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 556.563802][T11653] veth1_macvtap: entered allmulticast mode [ 556.597496][T11653] macsec0: entered promiscuous mode [ 556.617280][T11659] netlink: 'syz.5.1757': attribute type 39 has an invalid length. [ 557.004152][T11663] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1758'. [ 557.259631][T11675] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1762'. [ 557.573163][T11683] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 557.684900][T11683] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1763'. [ 558.649883][T11705] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1773'. [ 558.680959][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 559.211338][T11711] syz.1.1776[11711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.221893][T11711] syz.1.1776[11711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.476274][T11719] netlink: 'syz.4.1779': attribute type 21 has an invalid length. [ 559.895373][T11730] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1784'. [ 560.334963][T11736] raw_sendmsg: syz.5.1785 forgot to set AF_INET. Fix it! [ 560.421256][ T5770] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 560.570493][T11736] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1785'. [ 561.304369][T11754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1793'. [ 561.343055][T11756] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1794'. [ 561.376767][T11754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1793'. [ 561.642025][T11764] FAULT_INJECTION: forcing a failure. [ 561.642025][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 561.665188][T11764] CPU: 0 PID: 11764 Comm: syz.1.1796 Not tainted syzkaller #0 [ 561.672754][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.682865][T11764] Call Trace: [ 561.686190][T11764] [ 561.689175][T11764] dump_stack_lvl+0x18c/0x250 [ 561.694011][T11764] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 561.699098][T11764] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.705214][T11764] ? show_regs_print_info+0x20/0x20 [ 561.710501][T11764] ? load_image+0x400/0x400 [ 561.715078][T11764] should_fail_ex+0x39d/0x4d0 [ 561.719832][T11764] should_failslab+0x9/0x20 [ 561.724391][T11764] slab_pre_alloc_hook+0x59/0x310 [ 561.729481][T11764] ? nf_ct_ext_add+0x1ab/0x440 [ 561.734313][T11764] ? nf_ct_ext_add+0x1ab/0x440 [ 561.739129][T11764] __kmem_cache_alloc_node+0x53/0x250 [ 561.744570][T11764] ? nf_ct_ext_add+0x1ab/0x440 [ 561.749387][T11764] __kmalloc_node_track_caller+0xa2/0x230 [ 561.755175][T11764] krealloc+0x86/0x120 [ 561.759313][T11764] nf_ct_ext_add+0x1ab/0x440 [ 561.763966][T11764] init_conntrack+0x69c/0xf10 [ 561.768704][T11764] ? early_drop+0x7f0/0x7f0 [ 561.773258][T11764] ? nf_conntrack_find_get+0x650/0x650 [ 561.778797][T11764] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.784226][T11764] ? __siphash_unaligned+0x22e/0x3a0 [ 561.789664][T11764] nf_conntrack_in+0xc06/0x15c0 [ 561.794599][T11764] ? nf_ct_pernet+0x270/0x270 [ 561.799336][T11764] ? ipt_do_table+0x2c1/0x15e0 [ 561.804161][T11764] ? sctp_packet_singleton+0x235/0x340 [ 561.809711][T11764] ? sctp_outq_flush+0x50e/0x3120 [ 561.814799][T11764] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 561.820309][T11764] ? do_syscall_64+0x55/0xa0 [ 561.824950][T11764] ? ipv4_conntrack_local+0x123/0x200 [ 561.830382][T11764] ? ipv4_conntrack_in+0x20/0x20 [ 561.835376][T11764] nf_hook_slow+0xbd/0x200 [ 561.839844][T11764] ? nf_hook+0x390/0x390 [ 561.844135][T11764] nf_hook+0x228/0x390 [ 561.848269][T11764] ? nf_hook+0xa2/0x390 [ 561.852470][T11764] ? __ip_local_out+0x5f0/0x5f0 [ 561.857383][T11764] ? nf_hook+0x390/0x390 [ 561.861677][T11764] ? __lock_acquire+0x7d40/0x7d40 [ 561.866757][T11764] ? ip_fast_csum+0x1ee/0x2b0 [ 561.871486][T11764] __ip_local_out+0x4db/0x5f0 [ 561.876219][T11764] ? nf_hook+0x390/0x390 [ 561.880530][T11764] ? __ip_queue_xmit+0x5d/0x1950 [ 561.885527][T11764] __ip_queue_xmit+0xf7c/0x1950 [ 561.890467][T11764] ? __ip_queue_xmit+0x5d/0x1950 [ 561.895468][T11764] sctp_packet_transmit+0x247d/0x2a30 [ 561.900963][T11764] sctp_packet_singleton+0x235/0x340 [ 561.906313][T11764] ? sctp_outq_select_transport+0x570/0x570 [ 561.912281][T11764] ? sctp_outq_select_transport+0x45d/0x570 [ 561.918241][T11764] ? sctp_transport_burst_limited+0x197/0x280 [ 561.924372][T11764] sctp_outq_flush+0x50e/0x3120 [ 561.929294][T11764] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 561.935258][T11764] ? _raw_spin_unlock+0x40/0x40 [ 561.940159][T11764] ? rcu_is_watching+0x15/0xb0 [ 561.944982][T11764] ? enqueue_timer+0x23d/0x550 [ 561.949794][T11764] ? sctp_outq_tail+0x8a0/0x8a0 [ 561.954715][T11764] ? sctp_outq_tail+0x604/0x8a0 [ 561.959627][T11764] ? sctp_outq_uncork+0x4d/0xa0 [ 561.964536][T11764] sctp_do_sm+0x533b/0x5a60 [ 561.969114][T11764] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 561.975064][T11764] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 561.980287][T11764] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 561.986164][T11764] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 561.991606][T11764] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 561.997041][T11764] ? __asan_memcpy+0x40/0x70 [ 562.001804][T11764] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 562.007254][T11764] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 562.013124][T11764] ? __sctp_connect+0xd80/0xd80 [ 562.018044][T11764] ? __local_bh_enable_ip+0x13a/0x1c0 [ 562.023470][T11764] ? _local_bh_enable+0xa0/0xa0 [ 562.028372][T11764] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.034230][T11764] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.040099][T11764] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 562.045707][T11764] ? security_sctp_bind_connect+0x89/0xb0 [ 562.051494][T11764] sctp_sendmsg+0x1b83/0x28c0 [ 562.056250][T11764] ? sctp_getsockopt+0xb60/0xb60 [ 562.061249][T11764] ? aa_sk_perm+0x83c/0x970 [ 562.065827][T11764] ? aa_af_perm+0x330/0x330 [ 562.070389][T11764] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 562.076860][T11764] ? sock_rps_record_flow+0x19/0x3f0 [ 562.082207][T11764] ? inet_sendmsg+0x7c/0x2f0 [ 562.086868][T11764] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 562.092217][T11764] ? security_socket_sendmsg+0x80/0xa0 [ 562.097744][T11764] ? inet_send_prepare+0x260/0x260 [ 562.102927][T11764] ____sys_sendmsg+0x5ba/0x960 [ 562.107776][T11764] ? __lock_acquire+0x7d40/0x7d40 [ 562.112898][T11764] ? __asan_memset+0x22/0x40 [ 562.117543][T11764] ? __sys_sendmsg_sock+0x30/0x30 [ 562.122638][T11764] ? __import_iovec+0x5f2/0x850 [ 562.127563][T11764] ? import_iovec+0x73/0xa0 [ 562.132226][T11764] ___sys_sendmsg+0x2a6/0x360 [ 562.137058][T11764] ? get_pid_task+0x20/0x1e0 [ 562.141720][T11764] ? __sys_sendmsg+0x2a0/0x2a0 [ 562.146590][T11764] ? __lock_acquire+0x7d40/0x7d40 [ 562.151704][T11764] __se_sys_sendmsg+0x1c2/0x2b0 [ 562.156629][T11764] ? __x64_sys_sendmsg+0x80/0x80 [ 562.161649][T11764] ? lockdep_hardirqs_on+0x98/0x150 [ 562.166905][T11764] do_syscall_64+0x55/0xa0 [ 562.171382][T11764] ? clear_bhb_loop+0x40/0x90 [ 562.176118][T11764] ? clear_bhb_loop+0x40/0x90 [ 562.180852][T11764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.186794][T11764] RIP: 0033:0x7fdc3df9acb9 [ 562.191269][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.211650][T11764] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.220126][T11764] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 562.228153][T11764] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 562.236180][T11764] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 562.244211][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.252233][T11764] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 562.260279][T11764] [ 562.419759][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 563.279360][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.296531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.415383][T11785] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1800'. [ 564.691305][T11797] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1804'. [ 565.748441][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 565.857912][T11816] FAULT_INJECTION: forcing a failure. [ 565.857912][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 565.914963][T11816] CPU: 1 PID: 11816 Comm: syz.4.1812 Not tainted syzkaller #0 [ 565.922537][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.932875][T11816] Call Trace: [ 565.936228][T11816] [ 565.939228][T11816] dump_stack_lvl+0x18c/0x250 [ 565.944026][T11816] ? show_regs_print_info+0x20/0x20 [ 565.949321][T11816] ? load_image+0x400/0x400 [ 565.953941][T11816] ? __might_sleep+0xe0/0xe0 [ 565.958616][T11816] ? __lock_acquire+0x7d40/0x7d40 [ 565.963713][T11816] ? sctp_outq_tail+0x604/0x8a0 [ 565.968711][T11816] should_fail_ex+0x39d/0x4d0 [ 565.973495][T11816] should_failslab+0x9/0x20 [ 565.978107][T11816] slab_pre_alloc_hook+0x59/0x310 [ 565.983252][T11816] kmem_cache_alloc_node+0x60/0x320 [ 565.988539][T11816] ? __alloc_skb+0x103/0x2c0 [ 565.993239][T11816] __alloc_skb+0x103/0x2c0 [ 565.997760][T11816] _sctp_make_chunk+0x5e/0x420 [ 566.002615][T11816] sctp_make_datafrag_empty+0x12b/0x240 [ 566.008294][T11816] ? sctp_make_ecne+0x340/0x340 [ 566.013234][T11816] ? sctp_auth_send_cid+0x69/0x250 [ 566.018451][T11816] sctp_datamsg_from_user+0x722/0xee0 [ 566.023984][T11816] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 566.029443][T11816] ? __asan_memcpy+0x40/0x70 [ 566.034135][T11816] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 566.039591][T11816] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 566.045453][T11816] ? __sctp_connect+0xd80/0xd80 [ 566.050343][T11816] ? __local_bh_enable_ip+0x13a/0x1c0 [ 566.055768][T11816] ? _local_bh_enable+0xa0/0xa0 [ 566.060671][T11816] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.066523][T11816] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.072472][T11816] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 566.078082][T11816] ? security_sctp_bind_connect+0x89/0xb0 [ 566.083910][T11816] sctp_sendmsg+0x1b83/0x28c0 [ 566.088673][T11816] ? sctp_getsockopt+0xb60/0xb60 [ 566.093867][T11816] ? aa_sk_perm+0x83c/0x970 [ 566.098717][T11816] ? aa_af_perm+0x330/0x330 [ 566.103266][T11816] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 566.109757][T11816] ? sock_rps_record_flow+0x19/0x3f0 [ 566.115100][T11816] ? inet_sendmsg+0x7c/0x2f0 [ 566.119731][T11816] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 566.125067][T11816] ? security_socket_sendmsg+0x80/0xa0 [ 566.130566][T11816] ? inet_send_prepare+0x260/0x260 [ 566.135742][T11816] ____sys_sendmsg+0x5ba/0x960 [ 566.140569][T11816] ? __lock_acquire+0x7d40/0x7d40 [ 566.145660][T11816] ? __asan_memset+0x22/0x40 [ 566.150306][T11816] ? __sys_sendmsg_sock+0x30/0x30 [ 566.155408][T11816] ? __import_iovec+0x5f2/0x850 [ 566.160342][T11816] ? import_iovec+0x73/0xa0 [ 566.164923][T11816] ___sys_sendmsg+0x2a6/0x360 [ 566.169654][T11816] ? get_pid_task+0x20/0x1e0 [ 566.174401][T11816] ? __sys_sendmsg+0x2a0/0x2a0 [ 566.179298][T11816] ? __lock_acquire+0x7d40/0x7d40 [ 566.184448][T11816] __se_sys_sendmsg+0x1c2/0x2b0 [ 566.189362][T11816] ? __x64_sys_sendmsg+0x80/0x80 [ 566.194395][T11816] ? lockdep_hardirqs_on+0x98/0x150 [ 566.199655][T11816] do_syscall_64+0x55/0xa0 [ 566.204131][T11816] ? clear_bhb_loop+0x40/0x90 [ 566.208859][T11816] ? clear_bhb_loop+0x40/0x90 [ 566.213596][T11816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.219542][T11816] RIP: 0033:0x7fa6a6b9acb9 [ 566.224005][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.243922][T11816] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.252386][T11816] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 566.260399][T11816] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 566.268410][T11816] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 566.276420][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.284435][T11816] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 566.292490][T11816] [ 566.789164][T11830] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1816'. [ 566.836847][T11828] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1815'. [ 567.048599][T11837] netlink: 'syz.5.1818': attribute type 33 has an invalid length. [ 567.070223][T11837] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1818'. [ 567.085374][T11837] `: renamed from team0 (while UP) [ 567.205592][T11844] FAULT_INJECTION: forcing a failure. [ 567.205592][T11844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.218794][T11844] CPU: 1 PID: 11844 Comm: syz.1.1821 Not tainted syzkaller #0 [ 567.226308][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.236498][T11844] Call Trace: [ 567.239822][T11844] [ 567.242798][T11844] dump_stack_lvl+0x18c/0x250 [ 567.247541][T11844] ? show_regs_print_info+0x20/0x20 [ 567.252821][T11844] ? load_image+0x400/0x400 [ 567.257362][T11844] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 567.263405][T11844] should_fail_ex+0x39d/0x4d0 [ 567.268143][T11844] strncpy_from_user+0x36/0x2d0 [ 567.273020][T11844] ? __local_bh_disable_ip+0x108/0x1a0 [ 567.278511][T11844] strncpy_from_user_nofault+0x71/0x140 [ 567.284106][T11844] bpf_probe_read_user_str+0x2a/0x70 [ 567.289440][T11844] bpf_prog_a91b00db09d76834+0x45/0x47 [ 567.295101][T11844] bpf_test_run+0x2df/0x870 [ 567.299638][T11844] ? bpf_test_run+0x174/0x870 [ 567.304357][T11844] ? convert___skb_to_skb+0x590/0x590 [ 567.309790][T11844] ? eth_get_headlen+0x210/0x210 [ 567.314852][T11844] ? slab_build_skb+0x25f/0x3f0 [ 567.319742][T11844] ? convert___skb_to_skb+0x3d/0x590 [ 567.325054][T11844] bpf_prog_test_run_skb+0xad2/0x12b0 [ 567.330464][T11844] ? cpu_online+0x60/0x60 [ 567.334822][T11844] bpf_prog_test_run+0x321/0x390 [ 567.339796][T11844] __sys_bpf+0x49d/0x890 [ 567.344078][T11844] ? bpf_link_show_fdinfo+0x390/0x390 [ 567.349495][T11844] ? lock_chain_count+0x20/0x20 [ 567.354395][T11844] __x64_sys_bpf+0x7c/0x90 [ 567.358853][T11844] do_syscall_64+0x55/0xa0 [ 567.363311][T11844] ? clear_bhb_loop+0x40/0x90 [ 567.368076][T11844] ? clear_bhb_loop+0x40/0x90 [ 567.372808][T11844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.378744][T11844] RIP: 0033:0x7fdc3df9acb9 [ 567.383203][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.403026][T11844] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.411470][T11844] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 567.419470][T11844] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 567.427550][T11844] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 567.435594][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.443596][T11844] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 567.451785][T11844] [ 567.624370][ T5774] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 568.141439][T11859] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1826'. [ 568.390287][T11867] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1837'. [ 568.636578][T11874] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1839'. [ 568.715640][T11876] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1829'. [ 568.830384][T11880] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1832'. [ 568.884386][T11880] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 568.892837][T11880] openvswitch: netlink: Message has 1 unknown bytes. [ 569.275435][ T5770] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 570.065421][T11907] __nla_validate_parse: 1 callbacks suppressed [ 570.065445][T11907] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1844'. [ 570.175968][T11909] FAULT_INJECTION: forcing a failure. [ 570.175968][T11909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.218074][T11909] CPU: 1 PID: 11909 Comm: syz.1.1845 Not tainted syzkaller #0 [ 570.225626][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.235729][T11909] Call Trace: [ 570.239027][T11909] [ 570.242061][T11909] dump_stack_lvl+0x18c/0x250 [ 570.247048][T11909] ? show_regs_print_info+0x20/0x20 [ 570.252360][T11909] ? load_image+0x400/0x400 [ 570.256883][T11909] ? __might_fault+0xaa/0x120 [ 570.261578][T11909] ? __lock_acquire+0x7d40/0x7d40 [ 570.266628][T11909] should_fail_ex+0x39d/0x4d0 [ 570.271336][T11909] _copy_from_iter+0x1d9/0x12e0 [ 570.276206][T11909] ? __virt_addr_valid+0x18c/0x540 [ 570.281343][T11909] ? __lock_acquire+0x7d40/0x7d40 [ 570.286412][T11909] ? __asan_memcpy+0x40/0x70 [ 570.291098][T11909] ? copyout_mc+0x70/0x70 [ 570.295488][T11909] ? __virt_addr_valid+0x18c/0x540 [ 570.300735][T11909] ? __virt_addr_valid+0x18c/0x540 [ 570.305931][T11909] ? __virt_addr_valid+0x469/0x540 [ 570.311071][T11909] ? __phys_addr_symbol+0x2f/0x70 [ 570.316149][T11909] ? __check_object_size+0x506/0xa20 [ 570.321557][T11909] sctp_user_addto_chunk+0x8f/0x220 [ 570.326803][T11909] sctp_datamsg_from_user+0x741/0xee0 [ 570.332261][T11909] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 570.337694][T11909] ? __asan_memcpy+0x40/0x70 [ 570.342360][T11909] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 570.347802][T11909] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 570.353704][T11909] ? __sctp_connect+0xd80/0xd80 [ 570.358614][T11909] ? __local_bh_enable_ip+0x13a/0x1c0 [ 570.364188][T11909] ? _local_bh_enable+0xa0/0xa0 [ 570.369102][T11909] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 570.374968][T11909] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 570.380825][T11909] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 570.386440][T11909] ? security_sctp_bind_connect+0x89/0xb0 [ 570.392221][T11909] sctp_sendmsg+0x1b83/0x28c0 [ 570.396961][T11909] ? sctp_getsockopt+0xb60/0xb60 [ 570.401954][T11909] ? aa_sk_perm+0x83c/0x970 [ 570.406525][T11909] ? aa_af_perm+0x330/0x330 [ 570.411092][T11909] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 570.417582][T11909] ? sock_rps_record_flow+0x19/0x3f0 [ 570.422930][T11909] ? inet_sendmsg+0x7c/0x2f0 [ 570.427572][T11909] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 570.432908][T11909] ? security_socket_sendmsg+0x80/0xa0 [ 570.438414][T11909] ? inet_send_prepare+0x260/0x260 [ 570.443575][T11909] ____sys_sendmsg+0x5ba/0x960 [ 570.448453][T11909] ? __lock_acquire+0x7d40/0x7d40 [ 570.453535][T11909] ? __asan_memset+0x22/0x40 [ 570.458182][T11909] ? __sys_sendmsg_sock+0x30/0x30 [ 570.463264][T11909] ? __import_iovec+0x5f2/0x850 [ 570.468184][T11909] ? import_iovec+0x73/0xa0 [ 570.472766][T11909] ___sys_sendmsg+0x2a6/0x360 [ 570.477521][T11909] ? __sys_sendmsg+0x2a0/0x2a0 [ 570.482387][T11909] ? __lock_acquire+0x7d40/0x7d40 [ 570.487494][T11909] __se_sys_sendmsg+0x1c2/0x2b0 [ 570.492383][T11909] ? __x64_sys_sendmsg+0x80/0x80 [ 570.497389][T11909] ? lockdep_hardirqs_on+0x98/0x150 [ 570.502646][T11909] do_syscall_64+0x55/0xa0 [ 570.507130][T11909] ? clear_bhb_loop+0x40/0x90 [ 570.511861][T11909] ? clear_bhb_loop+0x40/0x90 [ 570.516596][T11909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.522550][T11909] RIP: 0033:0x7fdc3df9acb9 [ 570.527016][T11909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.546767][T11909] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.555243][T11909] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 570.563271][T11909] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 570.571299][T11909] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 570.579342][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.587372][T11909] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 570.595424][T11909] [ 570.685109][T11915] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1847'. [ 571.312154][ T5770] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 571.451006][T11935] FAULT_INJECTION: forcing a failure. [ 571.451006][T11935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.471452][T11935] CPU: 0 PID: 11935 Comm: syz.4.1853 Not tainted syzkaller #0 [ 571.478997][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.489139][T11935] Call Trace: [ 571.492496][T11935] [ 571.495505][T11935] dump_stack_lvl+0x18c/0x250 [ 571.500290][T11935] ? show_regs_print_info+0x20/0x20 [ 571.505590][T11935] ? load_image+0x400/0x400 [ 571.510222][T11935] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 571.516309][T11935] should_fail_ex+0x39d/0x4d0 [ 571.521162][T11935] strncpy_from_user+0x36/0x2d0 [ 571.526094][T11935] ? __local_bh_disable_ip+0x108/0x1a0 [ 571.531685][T11935] strncpy_from_user_nofault+0x71/0x140 [ 571.537339][T11935] bpf_probe_read_user_str+0x2a/0x70 [ 571.542756][T11935] bpf_prog_a91b00db09d76834+0x45/0x47 [ 571.548328][T11935] bpf_test_run+0x2df/0x870 [ 571.553013][T11935] ? bpf_test_run+0x174/0x870 [ 571.557799][T11935] ? convert___skb_to_skb+0x590/0x590 [ 571.563280][T11935] ? eth_get_headlen+0x210/0x210 [ 571.568340][T11935] ? slab_build_skb+0x25f/0x3f0 [ 571.573289][T11935] ? convert___skb_to_skb+0x3d/0x590 [ 571.578681][T11935] bpf_prog_test_run_skb+0xad2/0x12b0 [ 571.584198][T11935] ? cpu_online+0x60/0x60 [ 571.588624][T11935] bpf_prog_test_run+0x321/0x390 [ 571.593769][T11935] __sys_bpf+0x49d/0x890 [ 571.598111][T11935] ? bpf_link_show_fdinfo+0x390/0x390 [ 571.603643][T11935] ? lock_chain_count+0x20/0x20 [ 571.608641][T11935] __x64_sys_bpf+0x7c/0x90 [ 571.613150][T11935] do_syscall_64+0x55/0xa0 [ 571.617656][T11935] ? clear_bhb_loop+0x40/0x90 [ 571.622425][T11935] ? clear_bhb_loop+0x40/0x90 [ 571.627194][T11935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.633162][T11935] RIP: 0033:0x7fa6a6b9acb9 [ 571.637655][T11935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.657448][T11935] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.665972][T11935] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 571.674029][T11935] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 571.682172][T11935] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 571.690447][T11935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.698511][T11935] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 571.706632][T11935] [ 571.914409][T11938] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1854'. [ 572.106484][T11947] netlink: 'syz.4.1856': attribute type 39 has an invalid length. [ 572.438857][T11953] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1859'. [ 572.631121][T11953] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 573.178636][T11971] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1864'. [ 573.188827][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 573.511516][T11976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1866'. [ 573.715995][T11986] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1869'. [ 573.873971][T11986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.916444][T11986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.990737][T11986] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 574.062058][T11986] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 574.080735][T11986] bond0 (unregistering): Released all slaves [ 574.353111][T12001] netlink: 'syz.5.1874': attribute type 39 has an invalid length. [ 574.361801][ T5770] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 577.859292][T12028] FAULT_INJECTION: forcing a failure. [ 577.859292][T12028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.879634][T12028] CPU: 1 PID: 12028 Comm: syz.0.1883 Not tainted syzkaller #0 [ 577.887143][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.897257][T12028] Call Trace: [ 577.900584][T12028] [ 577.903563][T12028] dump_stack_lvl+0x18c/0x250 [ 577.908303][T12028] ? show_regs_print_info+0x20/0x20 [ 577.913562][T12028] ? load_image+0x400/0x400 [ 577.918112][T12028] ? perf_trace_preemptirq_template+0xac/0x330 [ 577.924330][T12028] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 577.930374][T12028] should_fail_ex+0x39d/0x4d0 [ 577.935119][T12028] strncpy_from_user+0x36/0x2d0 [ 577.940022][T12028] ? __local_bh_disable_ip+0x108/0x1a0 [ 577.945536][T12028] strncpy_from_user_nofault+0x71/0x140 [ 577.951151][T12028] ? bpf_test_run+0x174/0x870 [ 577.955879][T12028] bpf_probe_read_user_str+0x2a/0x70 [ 577.961231][T12028] ? bpf_test_run+0x174/0x870 [ 577.965991][T12028] bpf_prog_a91b00db09d76834+0x45/0x47 [ 577.971502][T12028] bpf_test_run+0x4fa/0x870 [ 577.976067][T12028] ? bpf_test_run+0x174/0x870 [ 577.980786][T12028] ? convert___skb_to_skb+0x590/0x590 [ 577.986213][T12028] ? eth_get_headlen+0x210/0x210 [ 577.991419][T12028] ? slab_build_skb+0x25f/0x3f0 [ 577.996318][T12028] ? convert___skb_to_skb+0x3d/0x590 [ 578.001635][T12028] bpf_prog_test_run_skb+0xad2/0x12b0 [ 578.007060][T12028] ? cpu_online+0x60/0x60 [ 578.011440][T12028] bpf_prog_test_run+0x321/0x390 [ 578.016414][T12028] __sys_bpf+0x49d/0x890 [ 578.020688][T12028] ? bpf_link_show_fdinfo+0x390/0x390 [ 578.026098][T12028] ? lock_chain_count+0x20/0x20 [ 578.030983][T12028] __x64_sys_bpf+0x7c/0x90 [ 578.035432][T12028] do_syscall_64+0x55/0xa0 [ 578.040226][T12028] ? clear_bhb_loop+0x40/0x90 [ 578.045149][T12028] ? clear_bhb_loop+0x40/0x90 [ 578.049859][T12028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.055780][T12028] RIP: 0033:0x7fc51c99acb9 [ 578.060219][T12028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.079857][T12028] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.088323][T12028] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 578.096327][T12028] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 578.104323][T12028] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 578.112322][T12028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.120323][T12028] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 578.128421][T12028] [ 578.150951][T12026] netlink: 'syz.4.1882': attribute type 3 has an invalid length. [ 578.172315][T12026] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 578.194306][T12026] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1882'. [ 578.640156][T12038] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 578.663649][T12038] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1886'. [ 579.267001][T12041] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 580.291326][T12064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1893'. [ 580.724782][T12041] Bluetooth: hci1: command 0x0406 tx timeout [ 580.918142][ T5770] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 582.435206][T12111] FAULT_INJECTION: forcing a failure. [ 582.435206][T12111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.448390][T12111] CPU: 0 PID: 12111 Comm: syz.4.1908 Not tainted syzkaller #0 [ 582.455905][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.466006][T12111] Call Trace: [ 582.469323][T12111] [ 582.472300][T12111] dump_stack_lvl+0x18c/0x250 [ 582.477043][T12111] ? show_regs_print_info+0x20/0x20 [ 582.482301][T12111] ? load_image+0x400/0x400 [ 582.486864][T12111] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 582.492907][T12111] should_fail_ex+0x39d/0x4d0 [ 582.497653][T12111] strncpy_from_user+0x36/0x2d0 [ 582.502553][T12111] ? __local_bh_disable_ip+0x108/0x1a0 [ 582.508062][T12111] strncpy_from_user_nofault+0x71/0x140 [ 582.513680][T12111] bpf_probe_read_user_str+0x2a/0x70 [ 582.519030][T12111] bpf_prog_a91b00db09d76834+0x45/0x47 [ 582.524544][T12111] bpf_test_run+0x2df/0x870 [ 582.529111][T12111] ? bpf_test_run+0x174/0x870 [ 582.533847][T12111] ? convert___skb_to_skb+0x590/0x590 [ 582.539285][T12111] ? eth_get_headlen+0x210/0x210 [ 582.544302][T12111] ? slab_build_skb+0x25f/0x3f0 [ 582.549216][T12111] ? convert___skb_to_skb+0x3d/0x590 [ 582.554570][T12111] bpf_prog_test_run_skb+0xad2/0x12b0 [ 582.560017][T12111] ? cpu_online+0x60/0x60 [ 582.564398][T12111] bpf_prog_test_run+0x321/0x390 [ 582.569400][T12111] __sys_bpf+0x49d/0x890 [ 582.573709][T12111] ? bpf_link_show_fdinfo+0x390/0x390 [ 582.579154][T12111] ? lock_chain_count+0x20/0x20 [ 582.584075][T12111] __x64_sys_bpf+0x7c/0x90 [ 582.588540][T12111] do_syscall_64+0x55/0xa0 [ 582.593016][T12111] ? clear_bhb_loop+0x40/0x90 [ 582.597739][T12111] ? clear_bhb_loop+0x40/0x90 [ 582.602486][T12111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.608444][T12111] RIP: 0033:0x7fa6a6b9acb9 [ 582.612912][T12111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.632960][T12111] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.641451][T12111] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 582.649480][T12111] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 582.657544][T12111] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 582.665596][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.673615][T12111] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 582.681649][T12111] [ 582.885256][T12113] netlink: 159532 bytes leftover after parsing attributes in process `syz.5.1909'. [ 582.907178][T12113] netlink: zone id is out of range [ 582.956560][T12113] netlink: zone id is out of range [ 582.974498][T12113] netlink: zone id is out of range [ 582.990030][T12113] netlink: zone id is out of range [ 583.013411][T12113] netlink: zone id is out of range [ 583.028850][T12113] netlink: zone id is out of range [ 583.050886][T12113] netlink: zone id is out of range [ 583.066907][T12113] netlink: zone id is out of range [ 583.072465][T12113] netlink: zone id is out of range [ 583.104297][T12113] netlink: zone id is out of range [ 583.132290][T12125] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1912'. [ 583.252162][T12129] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 583.274269][T12129] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1914'. [ 583.355831][ T5770] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 584.915222][ T5770] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 585.161769][T12172] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1929'. [ 585.541574][T12183] netlink: 'syz.4.1933': attribute type 19 has an invalid length. [ 588.847522][T12196] FAULT_INJECTION: forcing a failure. [ 588.847522][T12196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.860714][T12196] CPU: 1 PID: 12196 Comm: syz.0.1937 Not tainted syzkaller #0 [ 588.868236][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.878338][T12196] Call Trace: [ 588.881651][T12196] [ 588.884616][T12196] dump_stack_lvl+0x18c/0x250 [ 588.889362][T12196] ? show_regs_print_info+0x20/0x20 [ 588.894603][T12196] ? load_image+0x400/0x400 [ 588.899160][T12196] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 588.905190][T12196] should_fail_ex+0x39d/0x4d0 [ 588.909923][T12196] strncpy_from_user+0x36/0x2d0 [ 588.914808][T12196] ? __local_bh_disable_ip+0x108/0x1a0 [ 588.920321][T12196] strncpy_from_user_nofault+0x71/0x140 [ 588.925924][T12196] bpf_probe_read_user_str+0x2a/0x70 [ 588.931272][T12196] bpf_prog_a91b00db09d76834+0x45/0x47 [ 588.936779][T12196] bpf_test_run+0x2df/0x870 [ 588.941344][T12196] ? bpf_test_run+0x174/0x870 [ 588.946060][T12196] ? convert___skb_to_skb+0x590/0x590 [ 588.951475][T12196] ? eth_get_headlen+0x210/0x210 [ 588.956464][T12196] ? slab_build_skb+0x25f/0x3f0 [ 588.961367][T12196] ? convert___skb_to_skb+0x3d/0x590 [ 588.966702][T12196] bpf_prog_test_run_skb+0xad2/0x12b0 [ 588.972137][T12196] ? cpu_online+0x60/0x60 [ 588.976511][T12196] bpf_prog_test_run+0x321/0x390 [ 588.981498][T12196] __sys_bpf+0x49d/0x890 [ 588.985789][T12196] ? bpf_link_show_fdinfo+0x390/0x390 [ 588.991232][T12196] ? lock_chain_count+0x20/0x20 [ 588.996145][T12196] __x64_sys_bpf+0x7c/0x90 [ 589.000617][T12196] do_syscall_64+0x55/0xa0 [ 589.005080][T12196] ? clear_bhb_loop+0x40/0x90 [ 589.009803][T12196] ? clear_bhb_loop+0x40/0x90 [ 589.014523][T12196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.020457][T12196] RIP: 0033:0x7fc51c99acb9 [ 589.024913][T12196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.044564][T12196] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.053029][T12196] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 589.061037][T12196] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 589.069046][T12196] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 589.077058][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.085075][T12196] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 589.093103][T12196] [ 589.487685][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 589.662807][T12212] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1943'. [ 590.006911][T12221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1947'. [ 590.853724][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 591.451494][T12259] FAULT_INJECTION: forcing a failure. [ 591.451494][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 591.513340][T12259] CPU: 0 PID: 12259 Comm: syz.0.1960 Not tainted syzkaller #0 [ 591.520979][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.531093][T12259] Call Trace: [ 591.534417][T12259] [ 591.537387][T12259] dump_stack_lvl+0x18c/0x250 [ 591.542134][T12259] ? show_regs_print_info+0x20/0x20 [ 591.547394][T12259] ? load_image+0x400/0x400 [ 591.551956][T12259] ? __might_sleep+0xe0/0xe0 [ 591.556606][T12259] ? __lock_acquire+0x7d40/0x7d40 [ 591.561698][T12259] should_fail_ex+0x39d/0x4d0 [ 591.566438][T12259] should_failslab+0x9/0x20 [ 591.570999][T12259] slab_pre_alloc_hook+0x59/0x310 [ 591.576100][T12259] kmem_cache_alloc_node+0x60/0x320 [ 591.581449][T12259] ? __alloc_skb+0x103/0x2c0 [ 591.586197][T12259] __alloc_skb+0x103/0x2c0 [ 591.590775][T12259] _sctp_make_chunk+0x5e/0x420 [ 591.595611][T12259] sctp_make_datafrag_empty+0x12b/0x240 [ 591.601228][T12259] ? sctp_make_ecne+0x340/0x340 [ 591.606144][T12259] ? sctp_user_addto_chunk+0xb0/0x220 [ 591.611606][T12259] sctp_datamsg_from_user+0x722/0xee0 [ 591.617066][T12259] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 591.622509][T12259] ? __asan_memcpy+0x40/0x70 [ 591.627169][T12259] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 591.632619][T12259] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 591.638497][T12259] ? __sctp_connect+0xd80/0xd80 [ 591.643489][T12259] ? __local_bh_enable_ip+0x13a/0x1c0 [ 591.648923][T12259] ? _local_bh_enable+0xa0/0xa0 [ 591.653918][T12259] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 591.659909][T12259] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 591.665862][T12259] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 591.671476][T12259] ? security_sctp_bind_connect+0x89/0xb0 [ 591.677261][T12259] sctp_sendmsg+0x1b83/0x28c0 [ 591.682019][T12259] ? sctp_getsockopt+0xb60/0xb60 [ 591.687022][T12259] ? aa_sk_perm+0x83c/0x970 [ 591.691599][T12259] ? aa_af_perm+0x330/0x330 [ 591.696337][T12259] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 591.702818][T12259] ? sock_rps_record_flow+0x19/0x3f0 [ 591.708169][T12259] ? inet_sendmsg+0x7c/0x2f0 [ 591.712814][T12259] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 591.718160][T12259] ? security_socket_sendmsg+0x80/0xa0 [ 591.723671][T12259] ? inet_send_prepare+0x260/0x260 [ 591.728841][T12259] ____sys_sendmsg+0x5ba/0x960 [ 591.733673][T12259] ? __lock_acquire+0x7d40/0x7d40 [ 591.738805][T12259] ? __asan_memset+0x22/0x40 [ 591.743456][T12259] ? __sys_sendmsg_sock+0x30/0x30 [ 591.748534][T12259] ? __import_iovec+0x5f2/0x850 [ 591.753455][T12259] ? import_iovec+0x73/0xa0 [ 591.758026][T12259] ___sys_sendmsg+0x2a6/0x360 [ 591.762800][T12259] ? get_pid_task+0x20/0x1e0 [ 591.767453][T12259] ? __sys_sendmsg+0x2a0/0x2a0 [ 591.772298][T12259] ? __lock_acquire+0x7d40/0x7d40 [ 591.777409][T12259] __se_sys_sendmsg+0x1c2/0x2b0 [ 591.782323][T12259] ? __x64_sys_sendmsg+0x80/0x80 [ 591.787349][T12259] ? lockdep_hardirqs_on+0x98/0x150 [ 591.792606][T12259] do_syscall_64+0x55/0xa0 [ 591.797091][T12259] ? clear_bhb_loop+0x40/0x90 [ 591.801821][T12259] ? clear_bhb_loop+0x40/0x90 [ 591.806546][T12259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.812485][T12259] RIP: 0033:0x7fc51c99acb9 [ 591.816950][T12259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.836619][T12259] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.845090][T12259] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 591.853119][T12259] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 591.861137][T12259] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 591.869156][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.877173][T12259] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 591.885296][T12259] [ 592.300734][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 595.771701][T12285] FAULT_INJECTION: forcing a failure. [ 595.771701][T12285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.792004][T12285] CPU: 0 PID: 12285 Comm: syz.1.1970 Not tainted syzkaller #0 [ 595.799513][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.809619][T12285] Call Trace: [ 595.812942][T12285] [ 595.815915][T12285] dump_stack_lvl+0x18c/0x250 [ 595.820657][T12285] ? show_regs_print_info+0x20/0x20 [ 595.825919][T12285] ? load_image+0x400/0x400 [ 595.830475][T12285] ? perf_trace_preemptirq_template+0xac/0x330 [ 595.836689][T12285] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 595.842854][T12285] should_fail_ex+0x39d/0x4d0 [ 595.847607][T12285] strncpy_from_user+0x36/0x2d0 [ 595.852508][T12285] ? __local_bh_disable_ip+0x108/0x1a0 [ 595.858021][T12285] strncpy_from_user_nofault+0x71/0x140 [ 595.863628][T12285] bpf_probe_read_user_str+0x2a/0x70 [ 595.868983][T12285] bpf_prog_a91b00db09d76834+0x45/0x47 [ 595.874479][T12285] bpf_test_run+0x2df/0x870 [ 595.879078][T12285] ? bpf_test_run+0x174/0x870 [ 595.883812][T12285] ? convert___skb_to_skb+0x590/0x590 [ 595.889260][T12285] ? eth_get_headlen+0x210/0x210 [ 595.894262][T12285] ? slab_build_skb+0x25f/0x3f0 [ 595.899173][T12285] ? convert___skb_to_skb+0x3d/0x590 [ 595.904568][T12285] bpf_prog_test_run_skb+0xad2/0x12b0 [ 595.910025][T12285] ? cpu_online+0x60/0x60 [ 595.914423][T12285] bpf_prog_test_run+0x321/0x390 [ 595.919432][T12285] __sys_bpf+0x49d/0x890 [ 595.923744][T12285] ? bpf_link_show_fdinfo+0x390/0x390 [ 595.929213][T12285] ? lock_chain_count+0x20/0x20 [ 595.934149][T12285] __x64_sys_bpf+0x7c/0x90 [ 595.938631][T12285] do_syscall_64+0x55/0xa0 [ 595.943303][T12285] ? clear_bhb_loop+0x40/0x90 [ 595.948073][T12285] ? clear_bhb_loop+0x40/0x90 [ 595.952810][T12285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.958772][T12285] RIP: 0033:0x7fdc3df9acb9 [ 595.963269][T12285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.983378][T12285] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 595.991885][T12285] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 595.999916][T12285] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 596.008031][T12285] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 596.016064][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.024090][T12285] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 596.032255][T12285] [ 596.440592][T12296] syzkaller0: entered promiscuous mode [ 596.454404][T12296] syzkaller0: entered allmulticast mode [ 596.471831][T12301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1974'. [ 596.591601][T12303] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 596.613872][T12303] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1976'. [ 597.162523][T12323] netlink: 'syz.4.1982': attribute type 39 has an invalid length. [ 597.225216][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 600.197760][ T5770] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 602.573739][T12372] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1997'. [ 602.702088][T12373] netlink: 'syz.0.1997': attribute type 4 has an invalid length. [ 602.723558][T12373] netlink: 'syz.0.1997': attribute type 16 has an invalid length. [ 602.744341][T12373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1997'. [ 603.006192][T12384] FAULT_INJECTION: forcing a failure. [ 603.006192][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 603.019357][T12384] CPU: 0 PID: 12384 Comm: syz.5.2001 Not tainted syzkaller #0 [ 603.026871][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.036973][T12384] Call Trace: [ 603.040297][T12384] [ 603.043266][T12384] dump_stack_lvl+0x18c/0x250 [ 603.047998][T12384] ? show_regs_print_info+0x20/0x20 [ 603.053254][T12384] ? load_image+0x400/0x400 [ 603.057809][T12384] ? __might_sleep+0xe0/0xe0 [ 603.062446][T12384] ? __lock_acquire+0x7d40/0x7d40 [ 603.067522][T12384] should_fail_ex+0x39d/0x4d0 [ 603.072258][T12384] should_failslab+0x9/0x20 [ 603.076811][T12384] slab_pre_alloc_hook+0x59/0x310 [ 603.081911][T12384] kmem_cache_alloc_node+0x60/0x320 [ 603.087166][T12384] ? __alloc_skb+0x103/0x2c0 [ 603.091848][T12384] __alloc_skb+0x103/0x2c0 [ 603.096327][T12384] _sctp_make_chunk+0x5e/0x420 [ 603.101147][T12384] sctp_make_datafrag_empty+0x12b/0x240 [ 603.106733][T12384] ? sctp_make_ecne+0x340/0x340 [ 603.111617][T12384] ? sctp_user_addto_chunk+0xb0/0x220 [ 603.117023][T12384] sctp_datamsg_from_user+0x722/0xee0 [ 603.122456][T12384] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 603.127968][T12384] ? __asan_memcpy+0x40/0x70 [ 603.132611][T12384] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 603.138054][T12384] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 603.143912][T12384] ? __sctp_connect+0xd80/0xd80 [ 603.148804][T12384] ? __local_bh_enable_ip+0x13a/0x1c0 [ 603.154209][T12384] ? _local_bh_enable+0xa0/0xa0 [ 603.159096][T12384] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 603.164930][T12384] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 603.170779][T12384] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 603.176372][T12384] ? security_sctp_bind_connect+0x89/0xb0 [ 603.182144][T12384] sctp_sendmsg+0x1b83/0x28c0 [ 603.186986][T12384] ? sctp_getsockopt+0xb60/0xb60 [ 603.191984][T12384] ? aa_sk_perm+0x83c/0x970 [ 603.196542][T12384] ? aa_af_perm+0x330/0x330 [ 603.201092][T12384] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 603.207564][T12384] ? sock_rps_record_flow+0x19/0x3f0 [ 603.212886][T12384] ? inet_sendmsg+0x7c/0x2f0 [ 603.217506][T12384] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 603.222825][T12384] ? security_socket_sendmsg+0x80/0xa0 [ 603.228312][T12384] ? inet_send_prepare+0x260/0x260 [ 603.233454][T12384] ____sys_sendmsg+0x5ba/0x960 [ 603.238258][T12384] ? __lock_acquire+0x7d40/0x7d40 [ 603.243322][T12384] ? __asan_memset+0x22/0x40 [ 603.247944][T12384] ? __sys_sendmsg_sock+0x30/0x30 [ 603.253011][T12384] ? __import_iovec+0x5f2/0x850 [ 603.257908][T12384] ? import_iovec+0x73/0xa0 [ 603.262532][T12384] ___sys_sendmsg+0x2a6/0x360 [ 603.267244][T12384] ? get_pid_task+0x20/0x1e0 [ 603.271875][T12384] ? __sys_sendmsg+0x2a0/0x2a0 [ 603.276697][T12384] ? __lock_acquire+0x7d40/0x7d40 [ 603.281787][T12384] __se_sys_sendmsg+0x1c2/0x2b0 [ 603.286682][T12384] ? __x64_sys_sendmsg+0x80/0x80 [ 603.291666][T12384] ? lockdep_hardirqs_on+0x98/0x150 [ 603.296898][T12384] do_syscall_64+0x55/0xa0 [ 603.301351][T12384] ? clear_bhb_loop+0x40/0x90 [ 603.306059][T12384] ? clear_bhb_loop+0x40/0x90 [ 603.310968][T12384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.316893][T12384] RIP: 0033:0x7fa4d3f9acb9 [ 603.321355][T12384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.341042][T12384] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.349490][T12384] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 603.357495][T12384] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 603.365491][T12384] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 603.373491][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.381489][T12384] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 603.389502][T12384] [ 603.947200][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 608.548837][T12402] FAULT_INJECTION: forcing a failure. [ 608.548837][T12402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.562209][T12402] CPU: 0 PID: 12402 Comm: syz.5.2009 Not tainted syzkaller #0 [ 608.569816][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.579938][T12402] Call Trace: [ 608.583251][T12402] [ 608.586192][T12402] dump_stack_lvl+0x18c/0x250 [ 608.590894][T12402] ? show_regs_print_info+0x20/0x20 [ 608.596113][T12402] ? load_image+0x400/0x400 [ 608.600650][T12402] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 608.606745][T12402] should_fail_ex+0x39d/0x4d0 [ 608.611561][T12402] strncpy_from_user+0x36/0x2d0 [ 608.616438][T12402] ? __local_bh_disable_ip+0x108/0x1a0 [ 608.622001][T12402] strncpy_from_user_nofault+0x71/0x140 [ 608.627681][T12402] bpf_probe_read_user_str+0x2a/0x70 [ 608.633027][T12402] bpf_prog_a91b00db09d76834+0x45/0x47 [ 608.638504][T12402] bpf_test_run+0x2df/0x870 [ 608.643054][T12402] ? bpf_test_run+0x174/0x870 [ 608.647764][T12402] ? convert___skb_to_skb+0x590/0x590 [ 608.653173][T12402] ? eth_get_headlen+0x210/0x210 [ 608.658135][T12402] ? slab_build_skb+0x25f/0x3f0 [ 608.663020][T12402] ? convert___skb_to_skb+0x3d/0x590 [ 608.668344][T12402] bpf_prog_test_run_skb+0xad2/0x12b0 [ 608.673774][T12402] ? cpu_online+0x60/0x60 [ 608.678163][T12402] bpf_prog_test_run+0x321/0x390 [ 608.683138][T12402] __sys_bpf+0x49d/0x890 [ 608.687426][T12402] ? bpf_link_show_fdinfo+0x390/0x390 [ 608.692922][T12402] ? lock_chain_count+0x20/0x20 [ 608.697803][T12402] __x64_sys_bpf+0x7c/0x90 [ 608.702254][T12402] do_syscall_64+0x55/0xa0 [ 608.706690][T12402] ? clear_bhb_loop+0x40/0x90 [ 608.711404][T12402] ? clear_bhb_loop+0x40/0x90 [ 608.716128][T12402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.722061][T12402] RIP: 0033:0x7fa4d3f9acb9 [ 608.726544][T12402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.746217][T12402] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 608.754776][T12402] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 608.762788][T12402] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 608.770881][T12402] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 608.778905][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 608.786893][T12402] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 608.794894][T12402] [ 609.896482][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 610.401196][T12388] netlink: 'syz.1.2003': attribute type 10 has an invalid length. [ 610.417568][T12388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2003'. [ 610.459154][T12388] team0: Port device geneve0 added [ 610.484280][T12426] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2019'. [ 610.712049][T12431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2020'. [ 610.771122][T12434] netlink: 'syz.0.2021': attribute type 6 has an invalid length. [ 611.082609][ T5770] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 612.651669][T12473] netlink: 'syz.1.2034': attribute type 39 has an invalid length. [ 613.484286][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 615.762221][T12496] FAULT_INJECTION: forcing a failure. [ 615.762221][T12496] name failslab, interval 1, probability 0, space 0, times 0 [ 615.808658][T12496] CPU: 0 PID: 12496 Comm: syz.4.2041 Not tainted syzkaller #0 [ 615.816231][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.827114][T12496] Call Trace: [ 615.830461][T12496] [ 615.833434][T12496] dump_stack_lvl+0x18c/0x250 [ 615.838179][T12496] ? show_regs_print_info+0x20/0x20 [ 615.843435][T12496] ? load_image+0x400/0x400 [ 615.848004][T12496] ? __lock_acquire+0x7d40/0x7d40 [ 615.853182][T12496] ? slab_post_alloc_hook+0x8a/0x4b0 [ 615.858527][T12496] should_fail_ex+0x39d/0x4d0 [ 615.863258][T12496] should_failslab+0x9/0x20 [ 615.867820][T12496] slab_pre_alloc_hook+0x59/0x310 [ 615.872897][T12496] ? __build_skb_around+0x255/0x3d0 [ 615.878150][T12496] kmem_cache_alloc+0x5a/0x2d0 [ 615.882960][T12496] ? _sctp_make_chunk+0x14e/0x420 [ 615.888221][T12496] _sctp_make_chunk+0x14e/0x420 [ 615.893131][T12496] sctp_make_datafrag_empty+0x12b/0x240 [ 615.898731][T12496] ? sctp_make_ecne+0x340/0x340 [ 615.903684][T12496] ? sctp_user_addto_chunk+0xb0/0x220 [ 615.909213][T12496] sctp_datamsg_from_user+0x722/0xee0 [ 615.914660][T12496] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 615.914778][T12498] netlink: 'syz.0.2042': attribute type 5 has an invalid length. [ 615.920065][T12496] ? __asan_memcpy+0x40/0x70 [ 615.920111][T12496] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 615.937850][T12496] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 615.943692][T12496] ? __sctp_connect+0xd80/0xd80 [ 615.948576][T12496] ? __local_bh_enable_ip+0x13a/0x1c0 [ 615.953984][T12496] ? _local_bh_enable+0xa0/0xa0 [ 615.958870][T12496] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 615.964706][T12496] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 615.970544][T12496] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 615.976125][T12496] ? security_sctp_bind_connect+0x89/0xb0 [ 615.981874][T12496] sctp_sendmsg+0x1b83/0x28c0 [ 615.986590][T12496] ? sctp_getsockopt+0xb60/0xb60 [ 615.991548][T12496] ? aa_sk_perm+0x83c/0x970 [ 615.996099][T12496] ? aa_af_perm+0x330/0x330 [ 616.000636][T12496] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 616.007088][T12496] ? sock_rps_record_flow+0x19/0x3f0 [ 616.012409][T12496] ? inet_sendmsg+0x7c/0x2f0 [ 616.017026][T12496] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 616.022429][T12496] ? security_socket_sendmsg+0x80/0xa0 [ 616.028175][T12496] ? inet_send_prepare+0x260/0x260 [ 616.033405][T12496] ____sys_sendmsg+0x5ba/0x960 [ 616.038208][T12496] ? __lock_acquire+0x7d40/0x7d40 [ 616.043264][T12496] ? __asan_memset+0x22/0x40 [ 616.047886][T12496] ? __sys_sendmsg_sock+0x30/0x30 [ 616.052945][T12496] ? __import_iovec+0x5f2/0x850 [ 616.057841][T12496] ? import_iovec+0x73/0xa0 [ 616.062388][T12496] ___sys_sendmsg+0x2a6/0x360 [ 616.067101][T12496] ? get_pid_task+0x20/0x1e0 [ 616.071726][T12496] ? __sys_sendmsg+0x2a0/0x2a0 [ 616.076551][T12496] ? __lock_acquire+0x7d40/0x7d40 [ 616.081622][T12496] __se_sys_sendmsg+0x1c2/0x2b0 [ 616.086512][T12496] ? __x64_sys_sendmsg+0x80/0x80 [ 616.091495][T12496] ? lockdep_hardirqs_on+0x98/0x150 [ 616.096722][T12496] do_syscall_64+0x55/0xa0 [ 616.101184][T12496] ? clear_bhb_loop+0x40/0x90 [ 616.105891][T12496] ? clear_bhb_loop+0x40/0x90 [ 616.110624][T12496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.116596][T12496] RIP: 0033:0x7fa6a6b9acb9 [ 616.121042][T12496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.140675][T12496] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.149210][T12496] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 616.157473][T12496] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 616.165467][T12496] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 616.173460][T12496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.181454][T12496] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 616.189485][T12496] [ 616.821757][T12508] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.2046'. [ 616.865677][T12508] net_ratelimit: 274 callbacks suppressed [ 616.865697][T12508] openvswitch: netlink: IP tunnel dst address not specified [ 619.427044][T12510] netlink: 'syz.5.2047': attribute type 39 has an invalid length. [ 619.767205][T12525] FAULT_INJECTION: forcing a failure. [ 619.767205][T12525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.780394][T12525] CPU: 0 PID: 12525 Comm: syz.0.2048 Not tainted syzkaller #0 [ 619.787913][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.798115][T12525] Call Trace: [ 619.801441][T12525] [ 619.804424][T12525] dump_stack_lvl+0x18c/0x250 [ 619.809169][T12525] ? show_regs_print_info+0x20/0x20 [ 619.814430][T12525] ? load_image+0x400/0x400 [ 619.818994][T12525] ? perf_trace_preemptirq_template+0xac/0x330 [ 619.825210][T12525] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 619.831249][T12525] should_fail_ex+0x39d/0x4d0 [ 619.836034][T12525] strncpy_from_user+0x36/0x2d0 [ 619.840936][T12525] ? __local_bh_disable_ip+0x108/0x1a0 [ 619.846539][T12525] strncpy_from_user_nofault+0x71/0x140 [ 619.852232][T12525] bpf_probe_read_user_str+0x2a/0x70 [ 619.857588][T12525] bpf_prog_a91b00db09d76834+0x45/0x47 [ 619.863104][T12525] bpf_test_run+0x2df/0x870 [ 619.867677][T12525] ? bpf_test_run+0x174/0x870 [ 619.872403][T12525] ? convert___skb_to_skb+0x590/0x590 [ 619.877821][T12525] ? eth_get_headlen+0x210/0x210 [ 619.882816][T12525] ? slab_build_skb+0x25f/0x3f0 [ 619.887731][T12525] ? convert___skb_to_skb+0x3d/0x590 [ 619.893082][T12525] bpf_prog_test_run_skb+0xad2/0x12b0 [ 619.898521][T12525] ? cpu_online+0x60/0x60 [ 619.902915][T12525] bpf_prog_test_run+0x321/0x390 [ 619.907913][T12525] __sys_bpf+0x49d/0x890 [ 619.912215][T12525] ? bpf_link_show_fdinfo+0x390/0x390 [ 619.917665][T12525] ? lock_chain_count+0x20/0x20 [ 619.922612][T12525] __x64_sys_bpf+0x7c/0x90 [ 619.927115][T12525] do_syscall_64+0x55/0xa0 [ 619.931600][T12525] ? clear_bhb_loop+0x40/0x90 [ 619.936339][T12525] ? clear_bhb_loop+0x40/0x90 [ 619.941109][T12525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.947095][T12525] RIP: 0033:0x7fc51c99acb9 [ 619.951554][T12525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.971470][T12525] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.979950][T12525] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 619.988001][T12525] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 619.996141][T12525] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 620.004180][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.012306][T12525] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 620.020391][T12525] [ 620.231159][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 620.310463][T12523] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 620.345338][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2050'. [ 620.375621][T12523] team0: entered promiscuous mode [ 620.384274][T12523] C: entered promiscuous mode [ 620.399794][T12523] team_slave_1: entered promiscuous mode [ 620.424549][T12523] geneve0: entered promiscuous mode [ 620.430315][T12523] team0: entered allmulticast mode [ 620.454135][T12523] C: entered allmulticast mode [ 620.459078][T12523] team_slave_1: entered allmulticast mode [ 620.465351][T12523] geneve0: entered allmulticast mode [ 620.471962][T12523] bridge0: port 3(team0) entered blocking state [ 620.483626][T12523] bridge0: port 3(team0) entered disabled state [ 620.963637][T12553] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2059'. [ 621.586531][T12556] wg2: entered allmulticast mode [ 621.768469][T12557] wg2: entered promiscuous mode [ 621.835166][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 623.018865][T12586] netlink: 'syz.1.2072': attribute type 39 has an invalid length. [ 624.724781][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.731353][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.983132][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 627.402133][T12615] FAULT_INJECTION: forcing a failure. [ 627.402133][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.428094][T12615] CPU: 1 PID: 12615 Comm: syz.4.2079 Not tainted syzkaller #0 [ 627.435647][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.445751][T12615] Call Trace: [ 627.449175][T12615] [ 627.452146][T12615] dump_stack_lvl+0x18c/0x250 [ 627.456919][T12615] ? show_regs_print_info+0x20/0x20 [ 627.462186][T12615] ? load_image+0x400/0x400 [ 627.466752][T12615] ? __might_fault+0xaa/0x120 [ 627.471489][T12615] ? __lock_acquire+0x7d40/0x7d40 [ 627.476586][T12615] should_fail_ex+0x39d/0x4d0 [ 627.481347][T12615] _copy_from_iter+0x1d9/0x12e0 [ 627.486335][T12615] ? __virt_addr_valid+0x18c/0x540 [ 627.491484][T12615] ? __lock_acquire+0x7d40/0x7d40 [ 627.496557][T12615] ? __asan_memcpy+0x40/0x70 [ 627.501192][T12615] ? copyout_mc+0x70/0x70 [ 627.505613][T12615] ? __virt_addr_valid+0x18c/0x540 [ 627.510838][T12615] ? __virt_addr_valid+0x18c/0x540 [ 627.516103][T12615] ? __virt_addr_valid+0x469/0x540 [ 627.521261][T12615] ? __phys_addr_symbol+0x2f/0x70 [ 627.526326][T12615] ? __check_object_size+0x506/0xa20 [ 627.531658][T12615] sctp_user_addto_chunk+0x8f/0x220 [ 627.536903][T12615] sctp_datamsg_from_user+0x741/0xee0 [ 627.542319][T12615] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 627.547725][T12615] ? __asan_memcpy+0x40/0x70 [ 627.552385][T12615] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 627.557850][T12615] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 627.563690][T12615] ? __sctp_connect+0xd80/0xd80 [ 627.568566][T12615] ? __local_bh_enable_ip+0x13a/0x1c0 [ 627.573969][T12615] ? _local_bh_enable+0xa0/0xa0 [ 627.578854][T12615] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 627.584694][T12615] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 627.590531][T12615] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 627.596288][T12615] ? security_sctp_bind_connect+0x89/0xb0 [ 627.602044][T12615] sctp_sendmsg+0x1b83/0x28c0 [ 627.606756][T12615] ? sctp_getsockopt+0xb60/0xb60 [ 627.611724][T12615] ? aa_sk_perm+0x83c/0x970 [ 627.616268][T12615] ? aa_af_perm+0x330/0x330 [ 627.620799][T12615] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 627.627252][T12615] ? sock_rps_record_flow+0x19/0x3f0 [ 627.632660][T12615] ? inet_sendmsg+0x7c/0x2f0 [ 627.637279][T12615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 627.642596][T12615] ? security_socket_sendmsg+0x80/0xa0 [ 627.648082][T12615] ? inet_send_prepare+0x260/0x260 [ 627.653224][T12615] ____sys_sendmsg+0x5ba/0x960 [ 627.658035][T12615] ? __lock_acquire+0x7d40/0x7d40 [ 627.663098][T12615] ? __asan_memset+0x22/0x40 [ 627.667843][T12615] ? __sys_sendmsg_sock+0x30/0x30 [ 627.672897][T12615] ? __import_iovec+0x5f2/0x850 [ 627.677796][T12615] ? import_iovec+0x73/0xa0 [ 627.682339][T12615] ___sys_sendmsg+0x2a6/0x360 [ 627.687056][T12615] ? get_pid_task+0x20/0x1e0 [ 627.691702][T12615] ? __sys_sendmsg+0x2a0/0x2a0 [ 627.696522][T12615] ? __lock_acquire+0x7d40/0x7d40 [ 627.701690][T12615] __se_sys_sendmsg+0x1c2/0x2b0 [ 627.706581][T12615] ? __x64_sys_sendmsg+0x80/0x80 [ 627.711655][T12615] ? lockdep_hardirqs_on+0x98/0x150 [ 627.716884][T12615] do_syscall_64+0x55/0xa0 [ 627.721333][T12615] ? clear_bhb_loop+0x40/0x90 [ 627.726042][T12615] ? clear_bhb_loop+0x40/0x90 [ 627.730745][T12615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.736663][T12615] RIP: 0033:0x7fa6a6b9acb9 [ 627.741115][T12615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.760841][T12615] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.769290][T12615] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 627.777294][T12615] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 627.785308][T12615] RBP: 00007fa6a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 627.793302][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.801295][T12615] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 627.809392][T12615] [ 632.265579][T12643] FAULT_INJECTION: forcing a failure. [ 632.265579][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.278788][T12643] CPU: 1 PID: 12643 Comm: syz.5.2087 Not tainted syzkaller #0 [ 632.286296][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.296402][T12643] Call Trace: [ 632.299732][T12643] [ 632.302709][T12643] dump_stack_lvl+0x18c/0x250 [ 632.307634][T12643] ? show_regs_print_info+0x20/0x20 [ 632.312909][T12643] ? load_image+0x400/0x400 [ 632.317478][T12643] ? perf_trace_preemptirq_template+0xac/0x330 [ 632.323801][T12643] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 632.329849][T12643] should_fail_ex+0x39d/0x4d0 [ 632.334599][T12643] strncpy_from_user+0x36/0x2d0 [ 632.339502][T12643] ? __local_bh_disable_ip+0x108/0x1a0 [ 632.345079][T12643] strncpy_from_user_nofault+0x71/0x140 [ 632.350697][T12643] bpf_probe_read_user_str+0x2a/0x70 [ 632.356062][T12643] bpf_prog_a91b00db09d76834+0x45/0x47 [ 632.361616][T12643] bpf_test_run+0x2df/0x870 [ 632.366273][T12643] ? bpf_test_run+0x174/0x870 [ 632.371011][T12643] ? convert___skb_to_skb+0x590/0x590 [ 632.376440][T12643] ? eth_get_headlen+0x210/0x210 [ 632.381460][T12643] ? slab_build_skb+0x25f/0x3f0 [ 632.386383][T12643] ? convert___skb_to_skb+0x3d/0x590 [ 632.391722][T12643] bpf_prog_test_run_skb+0xad2/0x12b0 [ 632.397174][T12643] ? cpu_online+0x60/0x60 [ 632.401575][T12643] bpf_prog_test_run+0x321/0x390 [ 632.406721][T12643] __sys_bpf+0x49d/0x890 [ 632.411025][T12643] ? bpf_link_show_fdinfo+0x390/0x390 [ 632.416558][T12643] ? lock_chain_count+0x20/0x20 [ 632.421484][T12643] __x64_sys_bpf+0x7c/0x90 [ 632.425961][T12643] do_syscall_64+0x55/0xa0 [ 632.430437][T12643] ? clear_bhb_loop+0x40/0x90 [ 632.435165][T12643] ? clear_bhb_loop+0x40/0x90 [ 632.439898][T12643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.445845][T12643] RIP: 0033:0x7fa4d3f9acb9 [ 632.450302][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.469966][T12643] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.478434][T12643] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 632.486458][T12643] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 632.494476][T12643] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 632.502579][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.510605][T12643] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 632.518649][T12643] [ 632.605409][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 633.666310][T12673] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2097'. [ 633.763361][T12670] netlink: 'syz.4.2095': attribute type 29 has an invalid length. [ 633.793973][T12670] netlink: 'syz.4.2095': attribute type 29 has an invalid length. [ 633.864260][T12674] netlink: 'syz.4.2095': attribute type 29 has an invalid length. [ 633.962794][ T5770] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 634.198235][T12684] netlink: 'syz.4.2101': attribute type 39 has an invalid length. [ 635.746335][T12711] tap0: tun_chr_ioctl cmd 2148553947 [ 636.385886][ T5770] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 636.696113][T12728] FAULT_INJECTION: forcing a failure. [ 636.696113][T12728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.766291][T12728] CPU: 1 PID: 12728 Comm: syz.1.2114 Not tainted syzkaller #0 [ 636.773879][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.784014][T12728] Call Trace: [ 636.787372][T12728] [ 636.790385][T12728] dump_stack_lvl+0x18c/0x250 [ 636.795166][T12728] ? show_regs_print_info+0x20/0x20 [ 636.800466][T12728] ? load_image+0x400/0x400 [ 636.805076][T12728] ? __might_fault+0xaa/0x120 [ 636.809841][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 636.814975][T12728] should_fail_ex+0x39d/0x4d0 [ 636.819777][T12728] _copy_from_iter+0x1d9/0x12e0 [ 636.824732][T12728] ? __virt_addr_valid+0x18c/0x540 [ 636.829940][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 636.835150][T12728] ? __asan_memcpy+0x40/0x70 [ 636.839836][T12728] ? copyout_mc+0x70/0x70 [ 636.844245][T12728] ? __virt_addr_valid+0x18c/0x540 [ 636.849439][T12728] ? __virt_addr_valid+0x18c/0x540 [ 636.854640][T12728] ? __virt_addr_valid+0x469/0x540 [ 636.859836][T12728] ? __phys_addr_symbol+0x2f/0x70 [ 636.864939][T12728] ? __check_object_size+0x506/0xa20 [ 636.870421][T12728] sctp_user_addto_chunk+0x8f/0x220 [ 636.875714][T12728] sctp_datamsg_from_user+0x741/0xee0 [ 636.881337][T12728] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 636.886794][T12728] ? __asan_memcpy+0x40/0x70 [ 636.891502][T12728] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 636.897076][T12728] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 636.902942][T12728] ? __sctp_connect+0xd80/0xd80 [ 636.907838][T12728] ? __local_bh_enable_ip+0x13a/0x1c0 [ 636.913258][T12728] ? _local_bh_enable+0xa0/0xa0 [ 636.918155][T12728] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 636.924017][T12728] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 636.929890][T12728] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 636.935488][T12728] ? security_sctp_bind_connect+0x89/0xb0 [ 636.941271][T12728] sctp_sendmsg+0x1b83/0x28c0 [ 636.946035][T12728] ? sctp_getsockopt+0xb60/0xb60 [ 636.951035][T12728] ? aa_sk_perm+0x83c/0x970 [ 636.955628][T12728] ? aa_af_perm+0x330/0x330 [ 636.960177][T12728] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 636.966757][T12728] ? sock_rps_record_flow+0x19/0x3f0 [ 636.972100][T12728] ? inet_sendmsg+0x7c/0x2f0 [ 636.976753][T12728] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.982093][T12728] ? security_socket_sendmsg+0x80/0xa0 [ 636.987600][T12728] ? inet_send_prepare+0x260/0x260 [ 636.992790][T12728] ____sys_sendmsg+0x5ba/0x960 [ 636.997618][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 637.002707][T12728] ? __asan_memset+0x22/0x40 [ 637.007374][T12728] ? __sys_sendmsg_sock+0x30/0x30 [ 637.012447][T12728] ? __import_iovec+0x5f2/0x850 [ 637.017393][T12728] ? import_iovec+0x73/0xa0 [ 637.021964][T12728] ___sys_sendmsg+0x2a6/0x360 [ 637.026695][T12728] ? get_pid_task+0x20/0x1e0 [ 637.031352][T12728] ? __sys_sendmsg+0x2a0/0x2a0 [ 637.036231][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 637.041411][T12728] __se_sys_sendmsg+0x1c2/0x2b0 [ 637.046326][T12728] ? __x64_sys_sendmsg+0x80/0x80 [ 637.051369][T12728] ? lockdep_hardirqs_on+0x98/0x150 [ 637.056629][T12728] do_syscall_64+0x55/0xa0 [ 637.061098][T12728] ? clear_bhb_loop+0x40/0x90 [ 637.065832][T12728] ? clear_bhb_loop+0x40/0x90 [ 637.070563][T12728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.076505][T12728] RIP: 0033:0x7fdc3df9acb9 [ 637.080963][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.100630][T12728] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.109170][T12728] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 637.117341][T12728] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 637.125456][T12728] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 637.133475][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.141506][T12728] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 637.149569][T12728] [ 638.006331][T12744] netlink: 'syz.1.2119': attribute type 39 has an invalid length. [ 638.695215][T12761] FAULT_INJECTION: forcing a failure. [ 638.695215][T12761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.708409][T12761] CPU: 1 PID: 12761 Comm: syz.5.2124 Not tainted syzkaller #0 [ 638.715926][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.726027][T12761] Call Trace: [ 638.729363][T12761] [ 638.732341][T12761] dump_stack_lvl+0x18c/0x250 [ 638.737177][T12761] ? show_regs_print_info+0x20/0x20 [ 638.742432][T12761] ? load_image+0x400/0x400 [ 638.746995][T12761] ? perf_trace_preemptirq_template+0xac/0x330 [ 638.753208][T12761] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 638.759254][T12761] should_fail_ex+0x39d/0x4d0 [ 638.763999][T12761] strncpy_from_user+0x36/0x2d0 [ 638.768912][T12761] ? __local_bh_disable_ip+0x108/0x1a0 [ 638.774618][T12761] strncpy_from_user_nofault+0x71/0x140 [ 638.780235][T12761] bpf_probe_read_user_str+0x2a/0x70 [ 638.785583][T12761] bpf_prog_a91b00db09d76834+0x45/0x47 [ 638.791103][T12761] bpf_test_run+0x2df/0x870 [ 638.795686][T12761] ? bpf_test_run+0x174/0x870 [ 638.800506][T12761] ? convert___skb_to_skb+0x590/0x590 [ 638.805942][T12761] ? eth_get_headlen+0x210/0x210 [ 638.810952][T12761] ? slab_build_skb+0x25f/0x3f0 [ 638.815874][T12761] ? convert___skb_to_skb+0x3d/0x590 [ 638.821216][T12761] bpf_prog_test_run_skb+0xad2/0x12b0 [ 638.826658][T12761] ? cpu_online+0x60/0x60 [ 638.831043][T12761] bpf_prog_test_run+0x321/0x390 [ 638.836043][T12761] __sys_bpf+0x49d/0x890 [ 638.840513][T12761] ? bpf_link_show_fdinfo+0x390/0x390 [ 638.846040][T12761] ? lock_chain_count+0x20/0x20 [ 638.850962][T12761] __x64_sys_bpf+0x7c/0x90 [ 638.855418][T12761] do_syscall_64+0x55/0xa0 [ 638.859879][T12761] ? clear_bhb_loop+0x40/0x90 [ 638.864589][T12761] ? clear_bhb_loop+0x40/0x90 [ 638.869295][T12761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.875225][T12761] RIP: 0033:0x7fa4d3f9acb9 [ 638.879673][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.899493][T12761] RSP: 002b:00007fa4d4dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.907957][T12761] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9acb9 [ 638.915964][T12761] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 638.923961][T12761] RBP: 00007fa4d4dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 638.931957][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 638.940095][T12761] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007ffdca1d9468 [ 638.948122][T12761] [ 639.593525][T12041] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 642.134558][T12775] netlink: 'syz.5.2131': attribute type 3 has an invalid length. [ 642.155403][T12775] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 642.374458][T12780] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2133'. [ 642.512599][T12784] sit0: entered allmulticast mode [ 642.710953][T12787] sit0: entered promiscuous mode [ 643.317733][T12799] netlink: 'syz.5.2137': attribute type 9 has an invalid length. [ 643.334184][T12799] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2137'. [ 643.513782][T12800] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2137'. [ 643.629233][T12798] netlink: 'syz.5.2137': attribute type 6 has an invalid length. [ 643.687764][T12800] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2137'. [ 643.712112][T12041] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 643.777413][T12803] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2137'. [ 643.826082][T12803] netlink: set zone limit has 8 unknown bytes [ 643.911368][T12798] netlink: 'syz.5.2137': attribute type 9 has an invalid length. [ 643.923656][T12798] netlink: 201948 bytes leftover after parsing attributes in process `syz.5.2137'. [ 645.141210][T12041] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 645.365893][T12832] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2150'. [ 646.176844][T12844] netlink: 'syz.5.2154': attribute type 39 has an invalid length. [ 646.970742][T12864] FAULT_INJECTION: forcing a failure. [ 646.970742][T12864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.984070][T12864] CPU: 0 PID: 12864 Comm: syz.1.2158 Not tainted syzkaller #0 [ 646.991596][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.001718][T12864] Call Trace: [ 647.005046][T12864] [ 647.008110][T12864] dump_stack_lvl+0x18c/0x250 [ 647.012875][T12864] ? show_regs_print_info+0x20/0x20 [ 647.018156][T12864] ? load_image+0x400/0x400 [ 647.022741][T12864] ? perf_trace_preemptirq_template+0xac/0x330 [ 647.028974][T12864] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 647.035020][T12864] should_fail_ex+0x39d/0x4d0 [ 647.039872][T12864] strncpy_from_user+0x36/0x2d0 [ 647.044791][T12864] ? __local_bh_disable_ip+0x108/0x1a0 [ 647.050316][T12864] strncpy_from_user_nofault+0x71/0x140 [ 647.055936][T12864] bpf_probe_read_user_str+0x2a/0x70 [ 647.061287][T12864] bpf_prog_a91b00db09d76834+0x45/0x47 [ 647.066807][T12864] bpf_test_run+0x2df/0x870 [ 647.071379][T12864] ? bpf_test_run+0x174/0x870 [ 647.076117][T12864] ? convert___skb_to_skb+0x590/0x590 [ 647.081638][T12864] ? eth_get_headlen+0x210/0x210 [ 647.086643][T12864] ? slab_build_skb+0x25f/0x3f0 [ 647.091556][T12864] ? convert___skb_to_skb+0x3d/0x590 [ 647.096899][T12864] bpf_prog_test_run_skb+0xad2/0x12b0 [ 647.102369][T12864] ? cpu_online+0x60/0x60 [ 647.106754][T12864] bpf_prog_test_run+0x321/0x390 [ 647.111746][T12864] __sys_bpf+0x49d/0x890 [ 647.116040][T12864] ? bpf_link_show_fdinfo+0x390/0x390 [ 647.121479][T12864] ? lock_chain_count+0x20/0x20 [ 647.126394][T12864] __x64_sys_bpf+0x7c/0x90 [ 647.130858][T12864] do_syscall_64+0x55/0xa0 [ 647.135330][T12864] ? clear_bhb_loop+0x40/0x90 [ 647.140053][T12864] ? clear_bhb_loop+0x40/0x90 [ 647.144787][T12864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.150727][T12864] RIP: 0033:0x7fdc3df9acb9 [ 647.155213][T12864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.174884][T12864] RSP: 002b:00007fdc3ed79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.183363][T12864] RAX: ffffffffffffffda RBX: 00007fdc3e215fa0 RCX: 00007fdc3df9acb9 [ 647.191402][T12864] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 647.199443][T12864] RBP: 00007fdc3ed79090 R08: 0000000000000000 R09: 0000000000000000 [ 647.207585][T12864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 647.215616][T12864] R13: 00007fdc3e216038 R14: 00007fdc3e215fa0 R15: 00007fffe3f46168 [ 647.223670][T12864] [ 647.522866][T12041] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 652.580101][T12041] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 653.035473][T12913] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.2173'. [ 653.172281][T12922] netlink: 14098 bytes leftover after parsing attributes in process `syz.1.2176'. [ 653.233504][T12924] netlink: 'syz.4.2177': attribute type 39 has an invalid length. [ 654.132718][T12944] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2184'. [ 654.159955][T12944] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2184'. [ 654.328646][T12041] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 655.697992][T12975] FAULT_INJECTION: forcing a failure. [ 655.697992][T12975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.718195][T12975] CPU: 1 PID: 12975 Comm: syz.0.2194 Not tainted syzkaller #0 [ 655.725745][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.735845][T12975] Call Trace: [ 655.739156][T12975] [ 655.742116][T12975] dump_stack_lvl+0x18c/0x250 [ 655.746837][T12975] ? show_regs_print_info+0x20/0x20 [ 655.752076][T12975] ? load_image+0x400/0x400 [ 655.756606][T12975] ? perf_trace_preemptirq_template+0xac/0x330 [ 655.762798][T12975] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 655.768808][T12975] should_fail_ex+0x39d/0x4d0 [ 655.773533][T12975] strncpy_from_user+0x36/0x2d0 [ 655.778415][T12975] ? __local_bh_disable_ip+0x108/0x1a0 [ 655.783909][T12975] strncpy_from_user_nofault+0x71/0x140 [ 655.789490][T12975] bpf_probe_read_user_str+0x2a/0x70 [ 655.794822][T12975] bpf_prog_a91b00db09d76834+0x45/0x47 [ 655.800307][T12975] bpf_test_run+0x2df/0x870 [ 655.804879][T12975] ? bpf_test_run+0x174/0x870 [ 655.809589][T12975] ? convert___skb_to_skb+0x590/0x590 [ 655.815039][T12975] ? eth_get_headlen+0x210/0x210 [ 655.820011][T12975] ? slab_build_skb+0x25f/0x3f0 [ 655.824907][T12975] ? convert___skb_to_skb+0x3d/0x590 [ 655.830221][T12975] bpf_prog_test_run_skb+0xad2/0x12b0 [ 655.835634][T12975] ? cpu_online+0x60/0x60 [ 655.839997][T12975] bpf_prog_test_run+0x321/0x390 [ 655.844966][T12975] __sys_bpf+0x49d/0x890 [ 655.849237][T12975] ? bpf_link_show_fdinfo+0x390/0x390 [ 655.854652][T12975] ? lock_chain_count+0x20/0x20 [ 655.859625][T12975] __x64_sys_bpf+0x7c/0x90 [ 655.864073][T12975] do_syscall_64+0x55/0xa0 [ 655.868629][T12975] ? clear_bhb_loop+0x40/0x90 [ 655.873342][T12975] ? clear_bhb_loop+0x40/0x90 [ 655.878075][T12975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.884031][T12975] RIP: 0033:0x7fc51c99acb9 [ 655.888495][T12975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.908150][T12975] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.916870][T12975] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 655.924874][T12975] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 655.932888][T12975] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 655.941152][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.949162][T12975] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 655.957176][T12975] [ 656.273518][T12041] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 657.265094][T12997] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2202'. [ 659.780677][T13006] netlink: 'syz.5.2206': attribute type 9 has an invalid length. [ 659.819105][T13009] netlink: 'syz.0.2207': attribute type 39 has an invalid length. [ 660.215403][T13021] netlink: 'syz.1.2211': attribute type 10 has an invalid length. [ 660.278306][T13021] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2211'. [ 661.727646][T12041] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 662.105021][T13031] delete_channel: no stack [ 662.497372][T13053] ================================================================== [ 662.505524][T13053] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 662.513401][T13053] Write of size 32 at addr ffff88805f9734a8 by task syz.4.2222/13053 [ 662.521515][T13053] [ 662.523886][T13053] CPU: 1 PID: 13053 Comm: syz.4.2222 Not tainted syzkaller #0 [ 662.531391][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 662.541588][T13053] Call Trace: [ 662.544922][T13053] [ 662.547898][T13053] dump_stack_lvl+0x18c/0x250 [ 662.552637][T13053] ? read_lock_is_recursive+0x20/0x20 [ 662.558038][T13053] ? show_regs_print_info+0x20/0x20 [ 662.563271][T13053] ? load_image+0x400/0x400 [ 662.567809][T13053] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 662.573298][T13053] ? __virt_addr_valid+0x18c/0x540 [ 662.578445][T13053] ? __virt_addr_valid+0x469/0x540 [ 662.583681][T13053] print_report+0xa8/0x210 [ 662.588141][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 662.593285][T13053] kasan_report+0x117/0x150 [ 662.597832][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 662.602977][T13053] kasan_check_range+0x241/0x290 [ 662.607986][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 662.613139][T13053] __asan_memcpy+0x40/0x70 [ 662.617593][T13053] __bpf_get_stackid+0x6bf/0x900 [ 662.622556][T13053] ? bpf_prog_b724608cae728045+0x26/0x2a [ 662.628235][T13053] bpf_get_stackid_raw_tp+0x196/0x200 [ 662.633643][T13053] bpf_prog_b724608cae728045+0x26/0x2a [ 662.639134][T13053] __bpf_prog_test_run_raw_tp+0x1f9/0x440 [ 662.644898][T13053] ? __bpf_prog_test_run_raw_tp+0xd3/0x440 [ 662.650735][T13053] ? bpf_prog_test_run_raw_tp+0x660/0x660 [ 662.656594][T13053] ? __lock_acquire+0x7d40/0x7d40 [ 662.661649][T13053] bpf_prog_test_run_raw_tp+0x3f9/0x660 [ 662.667225][T13053] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 662.672891][T13053] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 662.678926][T13053] bpf_prog_test_run+0x321/0x390 [ 662.683904][T13053] __sys_bpf+0x49d/0x890 [ 662.688172][T13053] ? bpf_link_show_fdinfo+0x390/0x390 [ 662.693574][T13053] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 662.699758][T13053] __x64_sys_bpf+0x7c/0x90 [ 662.704201][T13053] do_syscall_64+0x55/0xa0 [ 662.708660][T13053] ? clear_bhb_loop+0x40/0x90 [ 662.713360][T13053] ? clear_bhb_loop+0x40/0x90 [ 662.718069][T13053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.723989][T13053] RIP: 0033:0x7fa6a6b9acb9 [ 662.728435][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.748096][T13053] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.756629][T13053] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 662.764627][T13053] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 662.772618][T13053] RBP: 00007fa6a6c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 662.780699][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.788690][T13053] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 662.796695][T13053] [ 662.799736][T13053] [ 662.802183][T13053] Allocated by task 13053: [ 662.806614][T13053] kasan_set_track+0x4e/0x70 [ 662.811229][T13053] __kasan_kmalloc+0x8f/0xa0 [ 662.815846][T13053] __kmalloc_node+0xb4/0x230 [ 662.820475][T13053] bpf_map_area_alloc+0x5e/0x110 [ 662.825438][T13053] prealloc_elems_and_freelist+0x86/0x1c0 [ 662.831193][T13053] stack_map_alloc+0x33a/0x4c0 [ 662.835984][T13053] map_create+0x877/0x12f0 [ 662.840422][T13053] __sys_bpf+0x651/0x890 [ 662.844683][T13053] __x64_sys_bpf+0x7c/0x90 [ 662.849212][T13053] do_syscall_64+0x55/0xa0 [ 662.853655][T13053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.859681][T13053] [ 662.862036][T13053] Last potentially related work creation: [ 662.867784][T13053] kasan_save_stack+0x3e/0x60 [ 662.872582][T13053] __kasan_record_aux_stack+0xaf/0xc0 [ 662.877994][T13053] call_rcu+0x153/0x950 [ 662.882191][T13053] addrconf_ifdown+0x163f/0x18c0 [ 662.887164][T13053] addrconf_notify+0x6c6/0x1010 [ 662.892085][T13053] notifier_call_chain+0x197/0x380 [ 662.897241][T13053] unregister_netdevice_many_notify+0x100d/0x1900 [ 662.903693][T13053] ip_tunnel_delete_nets+0x324/0x370 [ 662.909020][T13053] setup_net+0x85c/0xa30 [ 662.913294][T13053] copy_net_ns+0x36d/0x5e0 [ 662.917740][T13053] create_new_namespaces+0x3d3/0x6f0 [ 662.923075][T13053] copy_namespaces+0x430/0x4a0 [ 662.927888][T13053] copy_process+0x1724/0x3d80 [ 662.932610][T13053] kernel_clone+0x24b/0x8a0 [ 662.937159][T13053] __x64_sys_clone+0x1b7/0x230 [ 662.941962][T13053] do_syscall_64+0x55/0xa0 [ 662.946415][T13053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.952338][T13053] [ 662.954684][T13053] Second to last potentially related work creation: [ 662.961283][T13053] kasan_save_stack+0x3e/0x60 [ 662.965993][T13053] __kasan_record_aux_stack+0xaf/0xc0 [ 662.971404][T13053] kvfree_call_rcu+0xee/0x790 [ 662.976119][T13053] drop_sysctl_table+0x394/0x540 [ 662.981083][T13053] unregister_sysctl_table+0x41/0x60 [ 662.986565][T13053] nf_conntrack_pernet_exit+0xb5/0x110 [ 662.992062][T13053] setup_net+0x85c/0xa30 [ 662.996340][T13053] copy_net_ns+0x36d/0x5e0 [ 663.000784][T13053] create_new_namespaces+0x3d3/0x6f0 [ 663.006105][T13053] copy_namespaces+0x430/0x4a0 [ 663.011100][T13053] copy_process+0x1724/0x3d80 [ 663.016070][T13053] kernel_clone+0x24b/0x8a0 [ 663.020604][T13053] __x64_sys_clone+0x1b7/0x230 [ 663.025486][T13053] do_syscall_64+0x55/0xa0 [ 663.029953][T13053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.035915][T13053] [ 663.038262][T13053] The buggy address belongs to the object at ffff88805f973000 [ 663.038262][T13053] which belongs to the cache kmalloc-cg-2k of size 2048 [ 663.052612][T13053] The buggy address is located 1192 bytes inside of [ 663.052612][T13053] allocated 1200-byte region [ffff88805f973000, ffff88805f9734b0) [ 663.067045][T13053] [ 663.069411][T13053] The buggy address belongs to the physical page: [ 663.075855][T13053] page:ffffea00017e5c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f970 [ 663.086029][T13053] head:ffffea00017e5c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 663.094979][T13053] memcg:ffff88803147e301 [ 663.099239][T13053] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 663.107250][T13053] page_type: 0xffffffff() [ 663.111617][T13053] raw: 00fff00000000840 ffff888017c4f3c0 ffffea00019c6000 dead000000000002 [ 663.120226][T13053] raw: 0000000000000000 0000000000080008 00000001ffffffff ffff88803147e301 [ 663.128825][T13053] page dumped because: kasan: bad access detected [ 663.135260][T13053] page_owner tracks the page as allocated [ 663.140997][T13053] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5775, tgid 5775 (syz-executor), ts 84425975019, free_ts 28851805755 [ 663.162387][T13053] post_alloc_hook+0x1c1/0x200 [ 663.167189][T13053] get_page_from_freelist+0x1951/0x19e0 [ 663.172758][T13053] __alloc_pages+0x1f0/0x460 [ 663.177394][T13053] alloc_slab_page+0x5d/0x160 [ 663.182098][T13053] new_slab+0x87/0x2d0 [ 663.186201][T13053] ___slab_alloc+0xc5d/0x12f0 [ 663.190910][T13053] __kmem_cache_alloc_node+0x19e/0x250 [ 663.196483][T13053] __kmalloc+0xa4/0x230 [ 663.200664][T13053] __register_sysctl_table+0x6e/0x1240 [ 663.206144][T13053] __addrconf_sysctl_register+0x27a/0x3f0 [ 663.211897][T13053] addrconf_sysctl_register+0x15c/0x1b0 [ 663.217481][T13053] ipv6_add_dev+0xc42/0x11e0 [ 663.222100][T13053] addrconf_notify+0x67b/0x1010 [ 663.226986][T13053] notifier_call_chain+0x197/0x380 [ 663.232124][T13053] register_netdevice+0x16a6/0x1b90 [ 663.237349][T13053] ipcaif_newlink+0x1ed/0x4d0 [ 663.242046][T13053] page last free stack trace: [ 663.246729][T13053] free_unref_page_prepare+0x7b2/0x8c0 [ 663.252217][T13053] free_unref_page+0x32/0x2e0 [ 663.256933][T13053] free_contig_range+0xa1/0x150 [ 663.261895][T13053] destroy_args+0x80/0x850 [ 663.266338][T13053] debug_vm_pgtable+0x411/0x440 [ 663.271302][T13053] do_one_initcall+0x242/0x790 [ 663.276101][T13053] do_initcall_level+0x137/0x1f0 [ 663.281074][T13053] do_initcalls+0x69/0xd0 [ 663.285428][T13053] kernel_init_freeable+0x3ed/0x580 [ 663.290653][T13053] kernel_init+0x1d/0x1c0 [ 663.295029][T13053] ret_from_fork+0x48/0x80 [ 663.299484][T13053] ret_from_fork_asm+0x11/0x20 [ 663.304286][T13053] [ 663.306633][T13053] Memory state around the buggy address: [ 663.312281][T13053] ffff88805f973380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.320365][T13053] ffff88805f973400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.328545][T13053] >ffff88805f973480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 663.336636][T13053] ^ [ 663.342386][T13053] ffff88805f973500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 663.350644][T13053] ffff88805f973580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 663.358822][T13053] ================================================================== [ 663.381906][T13053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 663.389181][T13053] CPU: 1 PID: 13053 Comm: syz.4.2222 Not tainted syzkaller #0 [ 663.396687][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.406816][T13053] Call Trace: [ 663.410163][T13053] [ 663.413139][T13053] dump_stack_lvl+0x18c/0x250 [ 663.417652][T13057] FAULT_INJECTION: forcing a failure. [ 663.417652][T13057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.430892][T13053] ? show_regs_print_info+0x20/0x20 [ 663.436142][T13053] ? load_image+0x400/0x400 [ 663.440687][T13053] panic+0x2dc/0x730 [ 663.444613][T13053] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.450894][T13053] ? bpf_jit_dump+0xd0/0xd0 [ 663.455430][T13053] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 663.461352][T13053] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 663.467272][T13053] ? _raw_spin_unlock+0x40/0x40 [ 663.472326][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 663.477468][T13053] check_panic_on_warn+0x84/0xa0 [ 663.482436][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 663.487576][T13053] end_report+0x6f/0x130 [ 663.491848][T13053] kasan_report+0x128/0x150 [ 663.496379][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 663.501529][T13053] kasan_check_range+0x241/0x290 [ 663.506500][T13053] ? __bpf_get_stackid+0x6bf/0x900 [ 663.511639][T13053] __asan_memcpy+0x40/0x70 [ 663.516087][T13053] __bpf_get_stackid+0x6bf/0x900 [ 663.521075][T13053] ? bpf_prog_b724608cae728045+0x26/0x2a [ 663.526759][T13053] bpf_get_stackid_raw_tp+0x196/0x200 [ 663.532155][T13053] bpf_prog_b724608cae728045+0x26/0x2a [ 663.537641][T13053] __bpf_prog_test_run_raw_tp+0x1f9/0x440 [ 663.543389][T13053] ? __bpf_prog_test_run_raw_tp+0xd3/0x440 [ 663.549244][T13053] ? bpf_prog_test_run_raw_tp+0x660/0x660 [ 663.555035][T13053] ? __lock_acquire+0x7d40/0x7d40 [ 663.560121][T13053] bpf_prog_test_run_raw_tp+0x3f9/0x660 [ 663.565728][T13053] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 663.571401][T13053] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 663.576910][T13053] bpf_prog_test_run+0x321/0x390 [ 663.581890][T13053] __sys_bpf+0x49d/0x890 [ 663.586162][T13053] ? bpf_link_show_fdinfo+0x390/0x390 [ 663.591577][T13053] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.597768][T13053] __x64_sys_bpf+0x7c/0x90 [ 663.602246][T13053] do_syscall_64+0x55/0xa0 [ 663.606716][T13053] ? clear_bhb_loop+0x40/0x90 [ 663.611436][T13053] ? clear_bhb_loop+0x40/0x90 [ 663.616149][T13053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.622076][T13053] RIP: 0033:0x7fa6a6b9acb9 [ 663.626517][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.646151][T13053] RSP: 002b:00007fa6a7aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.654598][T13053] RAX: ffffffffffffffda RBX: 00007fa6a6e15fa0 RCX: 00007fa6a6b9acb9 [ 663.662600][T13053] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 663.670599][T13053] RBP: 00007fa6a6c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 663.678611][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.686617][T13053] R13: 00007fa6a6e16038 R14: 00007fa6a6e15fa0 R15: 00007ffda31bd3b8 [ 663.694621][T13053] [ 663.697657][T13057] CPU: 0 PID: 13057 Comm: syz.0.2224 Not tainted syzkaller #0 [ 663.697679][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.697690][T13057] Call Trace: [ 663.697698][T13057] [ 663.697706][T13057] dump_stack_lvl+0x18c/0x250 [ 663.697739][T13057] ? show_regs_print_info+0x20/0x20 [ 663.697764][T13057] ? load_image+0x400/0x400 [ 663.697786][T13057] ? perf_trace_preemptirq_template+0xac/0x330 [ 663.697817][T13057] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 663.697843][T13057] should_fail_ex+0x39d/0x4d0 [ 663.697873][T13057] strncpy_from_user+0x36/0x2d0 [ 663.697890][T13057] ? __local_bh_disable_ip+0x108/0x1a0 [ 663.697913][T13057] strncpy_from_user_nofault+0x71/0x140 [ 663.697941][T13057] bpf_probe_read_user_str+0x2a/0x70 [ 663.697971][T13057] bpf_prog_a91b00db09d76834+0x45/0x47 [ 663.697989][T13057] bpf_test_run+0x2df/0x870 [ 663.698020][T13057] ? bpf_test_run+0x174/0x870 [ 663.698040][T13057] ? convert___skb_to_skb+0x590/0x590 [ 663.698061][T13057] ? eth_get_headlen+0x210/0x210 [ 663.698096][T13057] ? slab_build_skb+0x25f/0x3f0 [ 663.698121][T13057] ? convert___skb_to_skb+0x3d/0x590 [ 663.698142][T13057] bpf_prog_test_run_skb+0xad2/0x12b0 [ 663.698175][T13057] ? cpu_online+0x60/0x60 [ 663.698192][T13057] bpf_prog_test_run+0x321/0x390 [ 663.698215][T13057] __sys_bpf+0x49d/0x890 [ 663.698236][T13057] ? bpf_link_show_fdinfo+0x390/0x390 [ 663.698269][T13057] ? lock_chain_count+0x20/0x20 [ 663.698296][T13057] __x64_sys_bpf+0x7c/0x90 [ 663.698315][T13057] do_syscall_64+0x55/0xa0 [ 663.698338][T13057] ? clear_bhb_loop+0x40/0x90 [ 663.698356][T13057] ? clear_bhb_loop+0x40/0x90 [ 663.698376][T13057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.698394][T13057] RIP: 0033:0x7fc51c99acb9 [ 663.698410][T13057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.698425][T13057] RSP: 002b:00007fc51d80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.698442][T13057] RAX: ffffffffffffffda RBX: 00007fc51cc15fa0 RCX: 00007fc51c99acb9 [ 663.698454][T13057] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 663.698465][T13057] RBP: 00007fc51d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 663.698476][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 663.698486][T13057] R13: 00007fc51cc16038 R14: 00007fc51cc15fa0 R15: 00007ffcf5cd7018 [ 663.698513][T13057] [ 663.699082][T13053] Kernel Offset: disabled [ 663.943302][T13053] Rebooting in 86400 seconds..