last executing test programs: 2m41.552332333s ago: executing program 2 (id=1223): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="b88a000000000000000000008100", 0xe}], 0x1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x27) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={&(0x7f00000011c0)="a88dce", &(0x7f0000001200)=""/127, &(0x7f0000001280), &(0x7f00000012c0), 0x4, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x22, 0x5, 0x1, &(0x7f0000000440)={0xffffffffffffffff}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r4, 0x58, &(0x7f0000000bc0)}, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000700)=r7, 0x4) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x6, &(0x7f0000000800)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000840)='GPL\x00', 0x4, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r4, &(0x7f0000000a80)="e716ae31c61194", 0x0}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x3, 0x5, &(0x7f0000001340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000001440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m41.222286931s ago: executing program 2 (id=1228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000102540)={0x3, 0xc, 0x0, &(0x7f0000102680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00001026c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000102740)="d2df03c3ff4f84e5fbb1cb4688a8", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m40.978151817s ago: executing program 2 (id=1239): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000cc0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d00)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m40.775611893s ago: executing program 2 (id=1233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r6) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) 2m34.259992154s ago: executing program 2 (id=1255): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa0000003ff41689d2000080000000711051000000006d95000000f90014f75f41f5ed8a9a3bcd69b243000020d90c164cd8b17603bed18ab48e77fcfdec7c2455265183c53e38646aad15e6390d1ce4d9958a2493b8b2e8ddb3b97105a1e18b614e79143a89c3bd7a12e5980823d64358a1fd1b9184fb1250e1b8a8136fa1b4b05f63ead068"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) close(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000940), 0x4) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0xf00, @mcast1, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000b00)={'wlan1\x00', @random="02000000000a"}) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x611, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x4a9ad633f96cb892, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000002800000004000000020000000000001103ffffff000000000000000200d9f911ee1e8f2f54841c000000020000000000000000005ddc6cf1a380302b1b96912d120f9f290b170e9784bf1fa1eeb1dc401583709d19aeafa724501465461e2641078b4f8ce3ee6b3ac1181aca23ca93212fd8138de9218fda2f6799c3c12bc500738af6f20f68ddbdc775"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) getpid() 2m33.884140833s ago: executing program 2 (id=1251): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x22, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x7402, 0x0, 0x8, 0x4, 0x0, 0x1, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x1, @perf_config_ext={0x5, 0x6}, 0x100114, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1, 0x0}, 0x50) (fail_nth: 3) 2m18.610979722s ago: executing program 32 (id=1251): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x22, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x7402, 0x0, 0x8, 0x4, 0x0, 0x1, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x1, @perf_config_ext={0x5, 0x6}, 0x100114, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1, 0x0}, 0x50) (fail_nth: 3) 4.440737919s ago: executing program 1 (id=2151): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800}, 0x8100, 0x0, 0x0, 0x0, 0x200, 0xd531}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x69, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/4077, 0xfed}, {0x0}, {&(0x7f0000001a00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/176, 0xb0}, {&(0x7f0000001bc0)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002ac0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x5) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1, 0x10, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x14, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002180)={{r4}, &(0x7f00000021c0), &(0x7f0000002200)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002240)={r5, r4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0xd, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002800), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) 2.976447146s ago: executing program 1 (id=2158): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.901538947s ago: executing program 5 (id=2159): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa0000003ff41689d2000080000000711051000000006d95000000f90014f75f41f5ed8a9a3bcd69b243000020d90c164cd8b17603bed18ab48e77fcfdec7c2455265183c53e38646aad15e6390d1ce4d9958a2493b8b2e8ddb3b97105a1e18b614e79143a89c3bd7a12e5980823d64358a1fd1b9184fb1250e1b8a8136fa1b4b05f63ead068"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) close(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000940), 0x4) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0xf00, @mcast1, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000b00)={'wlan1\x00', @random="02000000000a"}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x611, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x4a9ad633f96cb892, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000002800000004000000020000000000001103ffffff000000000000000200d9f911ee1e8f2f54841c000000020000000000000000005ddc6cf1a380302b1b96912d120f9f290b170e9784bf1fa1eeb1dc401583709d19aeafa724501465461e2641078b4f8ce3ee6b3ac1181aca23ca93212fd8138de9218fda2f6799c3c12bc500738af6f20f68ddbdc775"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) getpid() 2.829247059s ago: executing program 4 (id=2160): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="b88a0000", 0x4}], 0x1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x27) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x22, 0x5, 0x1, &(0x7f0000000440)={0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r5, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0], 0x0, 0xd5, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d00), &(0x7f0000000e40), 0x8, 0x8000005f, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x6, &(0x7f0000000800)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000840)='GPL\x00', 0x4, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r3, &(0x7f0000000a80)="e716ae31c61194", 0x0}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x3, 0x5, &(0x7f0000001340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000001440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.758838781s ago: executing program 1 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) mkdir(&(0x7f0000000780)='./cgroup/../file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r2, 0x58, &(0x7f00000006c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x8242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x2}, 0x906, 0x0, 0x0, 0x0, 0x0, 0x658f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x102, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000008c0)={&(0x7f0000000bc0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x24048001) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001f00)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 2.540401456s ago: executing program 4 (id=2164): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000b80)}, 0x20) r3 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00', 0x5, 0x252, &(0x7f0000001380)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r2, &(0x7f0000000c00), 0x0}, 0x20) 2.521024047s ago: executing program 1 (id=2165): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000001cc0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000, 0xb, 0x80000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64], 0x48) r3 = socket$kcm(0x2, 0xf2c060ee2cf18ff4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000015c0)={&(0x7f0000001600)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f00000016c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)="5a93cff13dced1769890980dd590b5975ef187fb0bec9ab280fa5d73b0cf", 0x1e}, {&(0x7f0000001780)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000013c0)={&(0x7f0000001400)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)="9c", 0x1}], 0x1}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/167, 0xcc, 0xa7, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000cd0e000000000000", @ANYRES32=r2, @ANYBLOB="09000002001000"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000050000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) 2.4050356s ago: executing program 5 (id=2166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="1802000000e2ffffff000000000000008500000017000000950000000000000013803f7defaab3dfa34c2d2fc30c265cc652da9e5bf239a61d368e939a134793d19a10d9cd3d9a9b17d2ea54d9c3bb80c6ff59a5266ba5a7c40dce41ec000350f0eb442d5a84d0023a429c9a0661f25fd70a6266019407d6ea0796f8aab093be246f270a77e53692fa689b56aad18c5a6d5daf15e5951e142b32762db23598f23ba659c2293fdcf1646d07f2268cda3f7a5793c1dcaa7ddc916b0c18650ba8"], 0x0, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xc9, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x4800, 0x8, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x26}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x73) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001300)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000001340)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000001380)=r4, 0x4) perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001440)={r7}) sendmsg$kcm(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56}, 0x20) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001a80)="600000001e007f109e", 0x2a}, {&(0x7f0000001ac0)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r1, 0x0, 0x77, 0x0, &(0x7f00000015c0)="c0bc0477e35a1cee487b9c245ea4cb532decec7cd21c68dd5a5ce29da4e2edfd49057f30c947494cc158790efb62cc9413d49c3ca023b749dee01e3f440afc56d96dd9dc33047e37af64d3b9cec6b5c7130cb9f41ac09f64548dcf48bdc471e5b843c868ccff3614216915111caadbb3f2260bac42a989", 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x10, 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="620ac4ff00000000711036000000000095000000000000004ed7e32903090000000000000038b9383b4decc71d6dc46608400d74e7b5c3a704b2ed9eeb0bd57e5b796771265da7d13c6aabe9eaa855c26eef14223934258202"], &(0x7f0000001780)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xb, 0x40101}, 0x50) recvmsg$unix(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000700)=ANY=[@ANYRES8=r10, @ANYBLOB='<'], 0x9a) 2.309794592s ago: executing program 0 (id=2168): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="f4000900", 0x4}], 0x1}, 0x0) (fail_nth: 1) 2.173834896s ago: executing program 4 (id=2169): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800}, 0x8100, 0x0, 0x0, 0x0, 0x200, 0xd531}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x69, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/4077, 0xfed}, {0x0}, {&(0x7f0000001a00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/176, 0xb0}, {&(0x7f0000001bc0)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002ac0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x5) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1, 0x10, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x14, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002180)={{r4}, &(0x7f00000021c0), &(0x7f0000002200)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002240)={r5, r4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0xd, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002800), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) 1.867900593s ago: executing program 3 (id=2170): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000940), 0x4) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0xf00, @mcast1, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000b00)={'wlan1\x00', @random="02000000000a"}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x3a) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x611, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x4a9ad633f96cb892, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000002800000004000000020000000000001103ffffff000000000000000200d9f911ee1e8f2f54841c000000020000000000000000005ddc6cf1a380302b1b96912d120f9f290b170e9784bf1fa1eeb1dc401583709d19aeafa724501465461e2641078b4f8ce3ee6b3ac1181aca23ca93212fd8138de9218fda2f6799c3c12bc500738af6f20f68ddbdc775"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) getpid() 1.747185556s ago: executing program 0 (id=2171): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) 1.487338562s ago: executing program 0 (id=2172): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000a40)={'wlan1\x00', @random="c24f7b36aec9"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x5, 0x84) write$cgroup_devices(r3, 0x0, 0xfffffeff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000840)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0xfe, 0x0, &(0x7f0000000880)="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", &(0x7f00000009c0)}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.486023262s ago: executing program 1 (id=2173): close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000700)='cgroup\x00'}, 0x30) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000001e40), 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=ANY=[], 0x128}, 0x0) recvmsg(r1, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/4096, 0x1000}, 0x40000002) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xd531}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x69, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000001d40)=""/217, 0xd9}, {&(0x7f0000000740)=""/188, 0xff43}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/4077, 0xfed}, {&(0x7f0000001900)=""/211, 0xd3}, {&(0x7f0000001a00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/176, 0xb0}, {&(0x7f0000001bc0)=""/208, 0xd0}], 0xa}, 0x40012100) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000030c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003140)={{r6}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003180)={r6, &(0x7f00000031c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000032c0)=@bloom_filter={0x1e, 0x8001, 0x4, 0x401, 0x840, r6, 0x15, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x9}, 0x50) recvmsg$kcm(r5, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x10002) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.238816878s ago: executing program 3 (id=2174): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="b88a0000", 0x4}], 0x1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x27) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x22, 0x5, 0x1, &(0x7f0000000440)={0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r5, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0], 0x0, 0xd5, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d00), &(0x7f0000000e40), 0x8, 0x8000005f, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x6, &(0x7f0000000800)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000840)='GPL\x00', 0x4, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r3, &(0x7f0000000a80)="e716ae31c61194", 0x0}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x3, 0x5, &(0x7f0000001340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000001440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.18782951s ago: executing program 0 (id=2175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) mkdir(&(0x7f0000000780)='./cgroup/../file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r2, 0x58, &(0x7f00000006c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x8242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x2}, 0x906, 0x0, 0x0, 0x0, 0x0, 0x658f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x102, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000008c0)={&(0x7f0000000bc0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x24048001) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001f00)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 1.117869761s ago: executing program 5 (id=2176): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa0000003ff41689d2000080000000711051000000006d95000000f90014f75f41f5ed8a9a3bcd69b243000020d90c164cd8b17603bed18ab48e77fcfdec7c2455265183c53e38646aad15e6390d1ce4d9958a2493b8b2e8ddb3b97105a1e18b614e79143a89c3bd7a12e5980823d64358a1fd1b9184fb1250e1b8a8136fa1b4b05f63ead068"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) close(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000940), 0x4) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0xf00, @mcast1, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000b00)={'wlan1\x00', @random="02000000000a"}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x611, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x4a9ad633f96cb892, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000002800000004000000020000000000001103ffffff000000000000000200d9f911ee1e8f2f54841c000000020000000000000000005ddc6cf1a380302b1b96912d120f9f290b170e9784bf1fa1eeb1dc401583709d19aeafa724501465461e2641078b4f8ce3ee6b3ac1181aca23ca93212fd8138de9218fda2f6799c3c12bc500738af6f20f68ddbdc775"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) getpid() 1.008100484s ago: executing program 4 (id=2177): getpid() socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x6, 0x3, 0x6, 0x7, 0x0, 0x1, 0x40048, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1, 0x4150}, 0x18, 0x1, 0x95, 0x7, 0x2, 0x7, 0x527e, 0x0, 0x0, 0x0, 0x100000000}, r1, 0xd, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='[-#]-\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, &(0x7f0000000040), 0x12b) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x21, 0x2, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) r7 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x80184947, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 853.183578ms ago: executing program 0 (id=2178): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x5db5f93bae0d2e78, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x2400, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2e"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac0040002", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 835.854719ms ago: executing program 3 (id=2179): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000b80)}, 0x20) r3 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00', 0x5, 0x252, &(0x7f0000001380)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r2, &(0x7f0000000c00), 0x0}, 0x20) 700.314482ms ago: executing program 5 (id=2180): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d00)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 647.622263ms ago: executing program 4 (id=2181): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0xeb3}, 0xc081, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 569.644085ms ago: executing program 3 (id=2182): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) 568.162835ms ago: executing program 0 (id=2183): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000001cc0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000, 0xb, 0x80000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64], 0x48) r3 = socket$kcm(0x2, 0xf2c060ee2cf18ff4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000015c0)={&(0x7f0000001600)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f00000016c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)="5a93cff13dced1769890980dd590b5975ef187fb0bec9ab280fa5d73b0cf", 0x1e}, {&(0x7f0000001780)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000013c0)={&(0x7f0000001400)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)="9c", 0x1}], 0x1}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/167, 0xcc, 0xa7, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000cd0e000000000000", @ANYRES32=r2, @ANYBLOB="09000002001000"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000050000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) 433.870498ms ago: executing program 3 (id=2184): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) close(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000940), 0x4) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0xf00, @mcast1, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000b00)={'wlan1\x00', @random="02000000000a"}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x3a) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x611, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x4a9ad633f96cb892, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000002800000004000000020000000000001103ffffff000000000000000200d9f911ee1e8f2f54841c000000020000000000000000005ddc6cf1a380302b1b96912d120f9f290b170e9784bf1fa1eeb1dc401583709d19aeafa724501465461e2641078b4f8ce3ee6b3ac1181aca23ca93212fd8138de9218fda2f6799c3c12bc500738af6f20f68ddbdc775"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) getpid() 381.14167ms ago: executing program 5 (id=2185): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000a40)={'wlan1\x00', @random="c24f7b36aec9"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x5, 0x84) write$cgroup_devices(r3, 0x0, 0xfffffeff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000840)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0xfd, 0x0, &(0x7f0000000880)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691", &(0x7f00000009c0)}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 326.070311ms ago: executing program 1 (id=2186): socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000500), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000540), 0x9) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x95, 0x8, 0x0, 0x0, 0x0, 0x29a, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) r6 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='GPL\x00', 0x5, 0x252, &(0x7f00000010c0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000001300)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x8, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x5, 0xb, &(0x7f0000001500)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r9) recvmsg$unix(r8, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x0, 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r11}, 0x94) write$cgroup_subtree(r11, &(0x7f0000001740)=ANY=[@ANYRES8=r9, @ANYRES8=r10], 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001200)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240), 0x200002, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000001280), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f00000012c0)={[{0x2b, 'cpu'}]}, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2, r0}, 0xc) 237.807453ms ago: executing program 4 (id=2187): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800}, 0x8100, 0x0, 0x0, 0x0, 0x200, 0xd531}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x69, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/4077, 0xfed}, {0x0}, {&(0x7f0000001a00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/176, 0xb0}, {&(0x7f0000001bc0)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002ac0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x5) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1, 0x10, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x14, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002180)={{r4}, &(0x7f00000021c0), &(0x7f0000002200)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002240)={r5, r4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0xd, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002800), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) 179.958525ms ago: executing program 3 (id=2188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) mkdir(&(0x7f0000000780)='./cgroup/../file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r2, 0x58, &(0x7f00000006c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x8242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x2}, 0x906, 0x0, 0x0, 0x0, 0x0, 0x658f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x102, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000008c0)={&(0x7f0000000bc0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x24048001) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001f00)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 0s ago: executing program 5 (id=2189): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="b88a0000", 0x4}], 0x1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x27) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x22, 0x5, 0x1, &(0x7f0000000440)={0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r5, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0], 0x0, 0xd5, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d00), &(0x7f0000000e40), 0x8, 0x8000005f, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x6, &(0x7f0000000800)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000840)='GPL\x00', 0x4, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r3, &(0x7f0000000a80)="e716ae31c61194", 0x0}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x3, 0x5, &(0x7f0000001340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000001440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): 2048kB [ 713.776467][ T8740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 713.787103][ T8740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 713.796798][ T8740] 55336 total pagecache pages [ 713.806662][ T8740] 0 pages in swap cache [ 713.811288][ T8740] Free swap = 124996kB [ 713.815672][ T8740] Total swap = 124996kB [ 713.819939][ T8740] 2097051 pages RAM [ 713.828872][ T8757] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1288'. [ 713.838304][ T8740] 0 pages HighMem/MovableOnly [ 713.850306][ T8740] 419192 pages reserved [ 713.859494][ T8740] 0 pages cma reserved [ 714.059174][ T8760] device syzkaller0 entered promiscuous mode [ 714.934921][ T8782] validate_nla: 14 callbacks suppressed [ 714.934974][ T8782] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 715.881316][ T8769] tun0: tun_chr_ioctl cmd 21731 [ 715.886554][ T8774] netlink: 'syz.1.1294': attribute type 25 has an invalid length. [ 715.894789][ T8774] netlink: 'syz.1.1294': attribute type 29 has an invalid length. [ 715.912449][ T8782] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 716.559381][ T8808] netlink: 'syz.0.1304': attribute type 29 has an invalid length. [ 716.587741][ T8808] netlink: 'syz.0.1304': attribute type 29 has an invalid length. [ 716.599227][ T8808] netlink: 'syz.0.1304': attribute type 29 has an invalid length. [ 716.616182][ T8808] netlink: 'syz.0.1304': attribute type 29 has an invalid length. [ 716.637742][ T8808] netlink: 'syz.0.1304': attribute type 29 has an invalid length. [ 717.082480][ T8818] device syzkaller0 entered promiscuous mode [ 717.113338][ T8820] netlink: 'syz.1.1309': attribute type 25 has an invalid length. [ 717.235136][ T8822] FAULT_INJECTION: forcing a failure. [ 717.235136][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.249930][ T8822] CPU: 0 PID: 8822 Comm: syz.1.1311 Not tainted syzkaller #0 [ 717.257363][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.267432][ T8822] Call Trace: [ 717.270733][ T8822] [ 717.273706][ T8822] dump_stack_lvl+0x188/0x24e [ 717.278405][ T8822] ? show_regs_print_info+0x12/0x12 [ 717.283634][ T8822] ? load_image+0x410/0x410 [ 717.288183][ T8822] ? __lock_acquire+0x7ea0/0x7ea0 [ 717.293264][ T8822] ? snprintf+0xe5/0x140 [ 717.297560][ T8822] should_fail_ex+0x390/0x4c0 [ 717.302285][ T8822] _copy_to_user+0x2c/0x130 [ 717.306807][ T8822] simple_read_from_buffer+0xe3/0x150 [ 717.312211][ T8822] proc_fail_nth_read+0x1a6/0x220 [ 717.317254][ T8822] ? proc_fault_inject_write+0x310/0x310 [ 717.322913][ T8822] ? fsnotify_perm+0x248/0x550 [ 717.327725][ T8822] ? proc_fault_inject_write+0x310/0x310 [ 717.333396][ T8822] vfs_read+0x2db/0x960 [ 717.337613][ T8822] ? kernel_read+0x1e0/0x1e0 [ 717.342239][ T8822] ? __fget_files+0x28/0x460 [ 717.346870][ T8822] ? __fget_files+0x3fc/0x460 [ 717.351591][ T8822] ? __fdget_pos+0x2ae/0x360 [ 717.356222][ T8822] ? ksys_read+0x70/0x260 [ 717.360594][ T8822] ksys_read+0x14d/0x260 [ 717.364879][ T8822] ? vfs_write+0x9a0/0x9a0 [ 717.369327][ T8822] ? lockdep_hardirqs_on+0x94/0x140 [ 717.374553][ T8822] do_syscall_64+0x4c/0xa0 [ 717.378993][ T8822] ? clear_bhb_loop+0x60/0xb0 [ 717.383698][ T8822] ? clear_bhb_loop+0x60/0xb0 [ 717.388402][ T8822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.394321][ T8822] RIP: 0033:0x7f40fb35ed8e [ 717.398758][ T8822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.418393][ T8822] RSP: 002b:00007f40fc1d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.426833][ T8822] RAX: ffffffffffffffda RBX: 00007f40fc1d76c0 RCX: 00007f40fb35ed8e [ 717.434827][ T8822] RDX: 000000000000000f RSI: 00007f40fc1d70a0 RDI: 0000000000000004 [ 717.442817][ T8822] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 717.450811][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.458805][ T8822] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 717.466809][ T8822] [ 719.245461][ T8840] tun0: tun_chr_ioctl cmd 21731 [ 719.515455][ T8855] FAULT_INJECTION: forcing a failure. [ 719.515455][ T8855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.534625][ T8855] CPU: 1 PID: 8855 Comm: syz.1.1321 Not tainted syzkaller #0 [ 719.542075][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 719.552202][ T8855] Call Trace: [ 719.555517][ T8855] [ 719.558522][ T8855] dump_stack_lvl+0x188/0x24e [ 719.563301][ T8855] ? show_regs_print_info+0x12/0x12 [ 719.568561][ T8855] ? load_image+0x410/0x410 [ 719.573133][ T8855] ? __lock_acquire+0x7ea0/0x7ea0 [ 719.578212][ T8855] ? snprintf+0xe5/0x140 [ 719.582532][ T8855] should_fail_ex+0x390/0x4c0 [ 719.587285][ T8855] _copy_to_user+0x2c/0x130 [ 719.591831][ T8855] simple_read_from_buffer+0xe3/0x150 [ 719.597256][ T8855] proc_fail_nth_read+0x1a6/0x220 [ 719.602328][ T8855] ? proc_fault_inject_write+0x310/0x310 [ 719.608000][ T8855] ? fsnotify_perm+0x248/0x550 [ 719.612797][ T8855] ? proc_fault_inject_write+0x310/0x310 [ 719.618457][ T8855] vfs_read+0x2db/0x960 [ 719.622656][ T8855] ? kernel_read+0x1e0/0x1e0 [ 719.627282][ T8855] ? __fget_files+0x28/0x460 [ 719.631903][ T8855] ? __fget_files+0x3fc/0x460 [ 719.636623][ T8855] ? __fdget_pos+0x2ae/0x360 [ 719.641248][ T8855] ? ksys_read+0x70/0x260 [ 719.645615][ T8855] ksys_read+0x14d/0x260 [ 719.649896][ T8855] ? vfs_write+0x9a0/0x9a0 [ 719.654352][ T8855] ? lockdep_hardirqs_on+0x94/0x140 [ 719.659586][ T8855] do_syscall_64+0x4c/0xa0 [ 719.664038][ T8855] ? clear_bhb_loop+0x60/0xb0 [ 719.668751][ T8855] ? clear_bhb_loop+0x60/0xb0 [ 719.673468][ T8855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.679381][ T8855] RIP: 0033:0x7f40fb35ed8e [ 719.683842][ T8855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.703480][ T8855] RSP: 002b:00007f40fc1d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.711919][ T8855] RAX: ffffffffffffffda RBX: 00007f40fc1d76c0 RCX: 00007f40fb35ed8e [ 719.719915][ T8855] RDX: 000000000000000f RSI: 00007f40fc1d70a0 RDI: 0000000000000006 [ 719.727912][ T8855] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 719.735909][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.743922][ T8855] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 719.751933][ T8855] [ 719.966309][ T8862] validate_nla: 7 callbacks suppressed [ 719.966326][ T8862] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 719.998978][ T8862] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 720.015348][ T8857] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 720.080383][ T8862] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 720.116249][ T8857] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 720.198815][ T8863] netlink: 'syz.4.1323': attribute type 29 has an invalid length. [ 720.415715][ T8863] netlink: 'syz.4.1323': attribute type 29 has an invalid length. [ 720.450911][ T8864] netlink: 'syz.4.1323': attribute type 29 has an invalid length. [ 720.508205][ T8859] netlink: 'syz.4.1323': attribute type 29 has an invalid length. [ 720.674996][ T8863] netlink: 'syz.4.1323': attribute type 29 has an invalid length. [ 720.904566][ T8884] device syzkaller0 entered promiscuous mode [ 722.127237][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 722.153122][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 722.164174][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 722.173406][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 722.188354][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 722.202097][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.386511][ T8895] tun0: tun_chr_ioctl cmd 21731 [ 723.451583][ T8900] rxe_eth0 speed is unknown, defaulting to 1000 [ 723.802875][ T4350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.172736][ T4350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.220499][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 724.366714][ T4350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.649687][ T4350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.675384][ T4322] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 724.766812][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 725.119619][ T8929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1344'. [ 725.151833][ T8929] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 725.213652][ T8929] net_ratelimit: 5 callbacks suppressed [ 725.213736][ T8929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.327135][ T8946] tun0: tun_chr_ioctl cmd 21731 [ 725.517456][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.572145][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.597543][ T8900] device bridge_slave_0 entered promiscuous mode [ 725.722328][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.739040][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.781780][ T8900] device bridge_slave_1 entered promiscuous mode [ 725.853052][ T8941] device syzkaller0 entered promiscuous mode [ 726.303997][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 727.661704][ T8960] validate_nla: 13 callbacks suppressed [ 727.661721][ T8960] netlink: 'syz.1.1349': attribute type 10 has an invalid length. [ 727.679103][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1349'. [ 727.726373][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.842371][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.984456][ T8900] team0: Port device team_slave_0 added [ 728.161983][ T8900] team0: Port device team_slave_1 added [ 728.321084][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.328113][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.380347][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 728.434189][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.491073][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.503981][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.589332][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.757747][ T8900] device hsr_slave_0 entered promiscuous mode [ 728.821107][ T8900] device hsr_slave_1 entered promiscuous mode [ 728.956546][ T8999] netlink: 'syz.3.1357': attribute type 29 has an invalid length. [ 729.033242][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1359'. [ 729.074255][ T8999] netlink: 'syz.3.1357': attribute type 29 has an invalid length. [ 729.168307][ T9000] netlink: 'syz.3.1357': attribute type 29 has an invalid length. [ 729.428814][ T9005] netlink: 'syz.3.1357': attribute type 29 has an invalid length. [ 729.473545][ T9010] netlink: 'syz.4.1361': attribute type 10 has an invalid length. [ 729.512370][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1361'. [ 729.568378][ T9011] netlink: 'syz.3.1357': attribute type 29 has an invalid length. [ 730.121235][ T9025] tun0: tun_chr_ioctl cmd 21731 [ 730.460568][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 730.498136][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.515456][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.525467][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.533590][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.543911][ T4350] bridge0: port 3(dummy0) entered disabled state [ 730.553958][ T4350] device bridge_slave_1 left promiscuous mode [ 730.583089][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.603130][ T4350] device bridge_slave_0 left promiscuous mode [ 730.611312][ T9033] FAULT_INJECTION: forcing a failure. [ 730.611312][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.625520][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.640575][ T9033] CPU: 0 PID: 9033 Comm: syz.0.1366 Not tainted syzkaller #0 [ 730.648028][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.658125][ T9033] Call Trace: [ 730.661434][ T9033] [ 730.664404][ T9033] dump_stack_lvl+0x188/0x24e [ 730.669140][ T9033] ? show_regs_print_info+0x12/0x12 [ 730.674389][ T9033] ? load_image+0x410/0x410 [ 730.678941][ T9033] ? __lock_acquire+0x7ea0/0x7ea0 [ 730.684039][ T9033] should_fail_ex+0x390/0x4c0 [ 730.688777][ T9033] _copy_from_user+0x2c/0x170 [ 730.693509][ T9033] ____sys_sendmsg+0x31a/0x9a0 [ 730.698329][ T9033] ? __lock_acquire+0x7ea0/0x7ea0 [ 730.703454][ T9033] ? __sys_sendmsg_sock+0x30/0x30 [ 730.708528][ T9033] ? __import_iovec+0x306/0x510 [ 730.713455][ T9033] ? import_iovec+0x6f/0xa0 [ 730.718012][ T9033] ___sys_sendmsg+0x2a2/0x360 [ 730.722755][ T9033] ? __sys_sendmsg+0x2a0/0x2a0 [ 730.727589][ T9033] ? __lock_acquire+0x7ea0/0x7ea0 [ 730.732692][ T9033] __se_sys_sendmsg+0x1c3/0x2b0 [ 730.737599][ T9033] ? __x64_sys_sendmsg+0x80/0x80 [ 730.742605][ T9033] ? lockdep_hardirqs_on+0x94/0x140 [ 730.747888][ T9033] do_syscall_64+0x4c/0xa0 [ 730.752343][ T9033] ? clear_bhb_loop+0x60/0xb0 [ 730.757048][ T9033] ? clear_bhb_loop+0x60/0xb0 [ 730.761756][ T9033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.767676][ T9033] RIP: 0033:0x7f08cb19e559 [ 730.772149][ T9033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.791785][ T9033] RSP: 002b:00007f08cc04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.800244][ T9033] RAX: ffffffffffffffda RBX: 00007f08cb425fa0 RCX: 00007f08cb19e559 [ 730.808247][ T9033] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 730.816246][ T9033] RBP: 00007f08cc04c090 R08: 0000000000000000 R09: 0000000000000000 [ 730.824249][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.832287][ T9033] R13: 00007f08cb426038 R14: 00007f08cb425fa0 R15: 00007ffd4290ada8 [ 730.840290][ T9033] [ 730.924380][ T4350] device veth1_macvtap left promiscuous mode [ 730.952256][ T4350] device veth0_macvtap left promiscuous mode [ 730.958512][ T4350] device veth1_vlan left promiscuous mode [ 730.980628][ T4350] device veth0_vlan left promiscuous mode [ 731.566893][ T4350] team0 (unregistering): Port device geneve1 removed [ 732.459661][ T9055] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1374'. [ 732.644010][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 732.687626][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 732.727824][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.773933][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.043987][ T4350] bond0 (unregistering): Released all slaves [ 733.120257][ T9050] netlink: 'syz.3.1373': attribute type 10 has an invalid length. [ 733.128223][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1373'. [ 733.175868][ T8900] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 733.215074][ T8900] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 733.255855][ T8900] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 733.305087][ T8900] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 733.697577][ T9071] device syzkaller0 entered promiscuous mode [ 733.789062][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.810516][ T9072] tun0: tun_chr_ioctl cmd 21731 [ 733.845861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 733.854663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 733.874046][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.801682][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 736.817062][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 736.865536][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.872774][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.888467][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 736.936063][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 736.978479][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.985728][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.038289][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 737.078302][ T9098] netlink: 'syz.1.1393': attribute type 29 has an invalid length. [ 737.113500][ T9098] netlink: 'syz.1.1393': attribute type 29 has an invalid length. [ 737.147917][ T9104] netlink: 'syz.1.1393': attribute type 29 has an invalid length. [ 737.194203][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 737.212639][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 737.237134][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 737.255021][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 737.269420][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 737.315080][ T9098] netlink: 'syz.1.1393': attribute type 29 has an invalid length. [ 737.357004][ T9104] netlink: 'syz.1.1393': attribute type 29 has an invalid length. [ 737.384276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 737.405393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 737.431882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 737.454598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 737.464197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 737.474046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 737.491577][ T8900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 738.757113][ T9144] netlink: 'syz.1.1395': attribute type 29 has an invalid length. [ 738.809080][ T9144] netlink: 'syz.1.1395': attribute type 29 has an invalid length. [ 738.833558][ T9148] netlink: 'syz.1.1395': attribute type 29 has an invalid length. [ 738.859666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.885652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.923945][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.944202][ T9153] tun0: tun_chr_ioctl cmd 21731 [ 738.969748][ T9144] netlink: 'syz.1.1395': attribute type 29 has an invalid length. [ 739.086869][ T9144] netlink: 'syz.1.1395': attribute type 29 has an invalid length. [ 739.706383][ T9167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1399'. [ 740.207818][ T9179] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 740.269669][ T9179] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 740.285733][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 740.305394][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 740.325235][ T9182] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 740.359484][ T9178] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 740.415341][ T9179] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 740.426234][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 740.441689][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 740.455133][ T8900] device veth0_vlan entered promiscuous mode [ 740.472962][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 740.491136][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 740.520845][ T8900] device veth1_vlan entered promiscuous mode [ 740.626779][ T8900] device veth0_macvtap entered promiscuous mode [ 740.644353][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 740.661018][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 740.674111][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 740.683523][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 740.695291][ T8900] device veth1_macvtap entered promiscuous mode [ 740.708689][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 740.720936][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 740.737860][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.752874][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.792472][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.810317][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.823339][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.834168][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.845400][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.863392][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.866174][ T9193] FAULT_INJECTION: forcing a failure. [ 740.866174][ T9193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.899205][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.917271][ T9193] CPU: 0 PID: 9193 Comm: syz.3.1405 Not tainted syzkaller #0 [ 740.924721][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.934823][ T9193] Call Trace: [ 740.938153][ T9193] [ 740.939566][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.941106][ T9193] dump_stack_lvl+0x188/0x24e [ 740.941143][ T9193] ? show_regs_print_info+0x12/0x12 [ 740.961547][ T9193] ? load_image+0x410/0x410 [ 740.966108][ T9193] ? __lock_acquire+0x7ea0/0x7ea0 [ 740.971212][ T9193] should_fail_ex+0x390/0x4c0 [ 740.975960][ T9193] _copy_from_user+0x2c/0x170 [ 740.980701][ T9193] iovec_from_user+0x143/0x360 [ 740.985538][ T9193] __import_iovec+0x6c/0x510 [ 740.990206][ T9193] import_iovec+0x6f/0xa0 [ 740.994609][ T9193] ___sys_sendmsg+0x252/0x360 [ 740.999346][ T9193] ? __sys_sendmsg+0x2a0/0x2a0 [ 741.004180][ T9193] ? __lock_acquire+0x7ea0/0x7ea0 [ 741.009299][ T9193] __se_sys_sendmsg+0x1c3/0x2b0 [ 741.014201][ T9193] ? __x64_sys_sendmsg+0x80/0x80 [ 741.017979][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.019197][ T9193] ? lockdep_hardirqs_on+0x94/0x140 [ 741.034313][ T9193] do_syscall_64+0x4c/0xa0 [ 741.038788][ T9193] ? clear_bhb_loop+0x60/0xb0 [ 741.043514][ T9193] ? clear_bhb_loop+0x60/0xb0 [ 741.048256][ T9193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.054200][ T9193] RIP: 0033:0x7fc89319e559 [ 741.058665][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.060961][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.078296][ T9193] RSP: 002b:00007fc89402f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.078327][ T9193] RAX: ffffffffffffffda RBX: 00007fc893426090 RCX: 00007fc89319e559 [ 741.078344][ T9193] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 741.078358][ T9193] RBP: 00007fc89402f090 R08: 0000000000000000 R09: 0000000000000000 [ 741.078372][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.078386][ T9193] R13: 00007fc893426128 R14: 00007fc893426090 R15: 00007fffeb2e15e8 [ 741.078423][ T9193] [ 741.183615][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.205264][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.222922][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.239638][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.263251][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.294743][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.308381][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 741.325405][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 741.362772][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 741.384545][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 741.408710][ T8900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.455981][ T8900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.468079][ T9204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 741.480467][ T8900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.489522][ T8900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.706664][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.739499][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.845256][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 741.893496][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.902241][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.912796][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 742.010665][ T9216] tun0: tun_chr_ioctl cmd 21731 [ 743.968403][ T9280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1430'. [ 744.900328][ T9283] tun0: tun_chr_ioctl cmd 21731 [ 745.219035][ T9303] validate_nla: 6 callbacks suppressed [ 745.219084][ T9303] netlink: 'syz.1.1439': attribute type 25 has an invalid length. [ 745.288721][ T9303] netlink: 'syz.1.1439': attribute type 29 has an invalid length. [ 745.300683][ T9308] netlink: 'syz.0.1443': attribute type 10 has an invalid length. [ 745.456125][ T9309] netlink: 'syz.3.1442': attribute type 29 has an invalid length. [ 745.572812][ T9313] netlink: 'syz.0.1443': attribute type 10 has an invalid length. [ 745.642424][ T9313] bridge0: port 3(dummy0) entered disabled state [ 745.721276][ T9313] device dummy0 left promiscuous mode [ 745.757427][ T9313] bridge0: port 3(dummy0) entered disabled state [ 745.850333][ T9313] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 745.859894][ T9309] netlink: 'syz.3.1442': attribute type 29 has an invalid length. [ 746.098947][ T9312] netlink: 'syz.3.1442': attribute type 29 has an invalid length. [ 746.128024][ T9314] netlink: 'syz.3.1442': attribute type 29 has an invalid length. [ 746.226689][ T9337] FAULT_INJECTION: forcing a failure. [ 746.226689][ T9337] name failslab, interval 1, probability 0, space 0, times 0 [ 746.272774][ T9337] CPU: 1 PID: 9337 Comm: syz.1.1450 Not tainted syzkaller #0 [ 746.280242][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.290350][ T9337] Call Trace: [ 746.293676][ T9337] [ 746.296647][ T9337] dump_stack_lvl+0x188/0x24e [ 746.301381][ T9337] ? show_regs_print_info+0x12/0x12 [ 746.306639][ T9337] ? load_image+0x410/0x410 [ 746.311187][ T9337] ? __might_sleep+0xd0/0xd0 [ 746.315847][ T9337] ? __lock_acquire+0x7ea0/0x7ea0 [ 746.320941][ T9337] should_fail_ex+0x390/0x4c0 [ 746.325681][ T9337] should_failslab+0x5/0x20 [ 746.330233][ T9337] slab_pre_alloc_hook+0x59/0x300 [ 746.335304][ T9337] ? tomoyo_encode+0x28a/0x550 [ 746.340118][ T9337] __kmem_cache_alloc_node+0x4f/0x270 [ 746.345540][ T9337] ? tomoyo_encode+0x28a/0x550 [ 746.350350][ T9337] __kmalloc+0xa3/0x240 [ 746.354554][ T9337] tomoyo_encode+0x28a/0x550 [ 746.359196][ T9337] tomoyo_realpath_from_path+0x578/0x5c0 [ 746.364879][ T9337] ? tomoyo_domain+0xd2/0x120 [ 746.369596][ T9337] ? tomoyo_path_number_perm+0x205/0x650 [ 746.375262][ T9337] tomoyo_path_number_perm+0x22f/0x650 [ 746.380752][ T9337] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 746.386276][ T9337] ? __fget_files+0x28/0x460 [ 746.390915][ T9337] security_file_ioctl+0x6c/0xa0 [ 746.395888][ T9337] __se_sys_ioctl+0x48/0x170 [ 746.400514][ T9337] do_syscall_64+0x4c/0xa0 [ 746.404960][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 746.409678][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 746.414385][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.420334][ T9337] RIP: 0033:0x7f40fb39e559 [ 746.424792][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.444444][ T9337] RSP: 002b:00007f40fc1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.452900][ T9337] RAX: ffffffffffffffda RBX: 00007f40fb625fa0 RCX: 00007f40fb39e559 [ 746.460914][ T9337] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 746.468916][ T9337] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 746.476931][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.484948][ T9337] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 746.492983][ T9337] [ 746.644710][ T9337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 746.766422][ T9347] tun0: tun_chr_ioctl cmd 21731 [ 746.992421][ T9356] netlink: 'syz.1.1456': attribute type 25 has an invalid length. [ 747.020606][ T9356] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 747.183167][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.189605][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.664894][ T9405] tun0: tun_chr_ioctl cmd 21731 [ 749.212113][ T9425] netlink: 126632 bytes leftover after parsing attributes in process `syz.5.1479'. [ 750.224830][ T9462] tun0: tun_chr_ioctl cmd 21731 [ 750.342780][ T9461] validate_nla: 20 callbacks suppressed [ 750.342800][ T9461] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 750.437233][ T9461] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 750.491447][ T9464] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 750.672104][ T9461] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 750.719687][ T9461] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 750.826213][ T9474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1493'. [ 751.832986][ T9495] device syzkaller0 entered promiscuous mode [ 752.194026][ T9505] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 752.270514][ T9505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1500'. [ 752.338450][ T9505] device dummy0 entered promiscuous mode [ 752.378567][ T9505] bond0: (slave dummy0): Releasing backup interface [ 752.437178][ T9505] bridge0: port 3(dummy0) entered blocking state [ 752.465858][ T9515] netlink: 'syz.1.1505': attribute type 29 has an invalid length. [ 752.484605][ T9505] bridge0: port 3(dummy0) entered disabled state [ 752.610479][ T9515] netlink: 'syz.1.1505': attribute type 29 has an invalid length. [ 752.663357][ T9514] netlink: 'syz.1.1505': attribute type 29 has an invalid length. [ 753.066847][ T9530] netlink: 'syz.3.1508': attribute type 29 has an invalid length. [ 754.823304][ T9515] tun0: tun_chr_ioctl cmd 21731 [ 755.134945][ T9542] FAULT_INJECTION: forcing a failure. [ 755.134945][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.174806][ T9542] CPU: 1 PID: 9542 Comm: syz.5.1510 Not tainted syzkaller #0 [ 755.182270][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.192378][ T9542] Call Trace: [ 755.195709][ T9542] [ 755.198682][ T9542] dump_stack_lvl+0x188/0x24e [ 755.203417][ T9542] ? show_regs_print_info+0x12/0x12 [ 755.208683][ T9542] ? load_image+0x410/0x410 [ 755.213238][ T9542] ? __lock_acquire+0x7ea0/0x7ea0 [ 755.218320][ T9542] should_fail_ex+0x390/0x4c0 [ 755.223055][ T9542] _copy_from_user+0x2c/0x170 [ 755.227784][ T9542] __tun_chr_ioctl+0x222/0x1ed0 [ 755.232702][ T9542] ? tun_flow_create+0x310/0x310 [ 755.237699][ T9542] ? bpf_lsm_file_ioctl+0x5/0x10 [ 755.242703][ T9542] ? security_file_ioctl+0x7c/0xa0 [ 755.247889][ T9542] ? tun_chr_poll+0x630/0x630 [ 755.252653][ T9542] __se_sys_ioctl+0xfa/0x170 [ 755.257297][ T9542] do_syscall_64+0x4c/0xa0 [ 755.261755][ T9542] ? clear_bhb_loop+0x60/0xb0 [ 755.266475][ T9542] ? clear_bhb_loop+0x60/0xb0 [ 755.271197][ T9542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.277141][ T9542] RIP: 0033:0x7ff423b9e559 [ 755.281605][ T9542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.301264][ T9542] RSP: 002b:00007ff424b30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.309737][ T9542] RAX: ffffffffffffffda RBX: 00007ff423e25fa0 RCX: 00007ff423b9e559 [ 755.317762][ T9542] RDX: 0000200000000780 RSI: 00000000400454d9 RDI: 0000000000000006 [ 755.325783][ T9542] RBP: 00007ff424b30090 R08: 0000000000000000 R09: 0000000000000000 [ 755.333801][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.341832][ T9542] R13: 00007ff423e26038 R14: 00007ff423e25fa0 R15: 00007ffe6b46feb8 [ 755.349867][ T9542] [ 755.725017][ T9561] validate_nla: 1 callbacks suppressed [ 755.725056][ T9561] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 755.757951][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1516'. [ 756.189545][ T9579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1519'. [ 756.837161][ T9587] netlink: 'syz.4.1523': attribute type 29 has an invalid length. [ 756.931832][ T9587] netlink: 'syz.4.1523': attribute type 29 has an invalid length. [ 757.032810][ T9589] netlink: 'syz.4.1523': attribute type 29 has an invalid length. [ 757.054670][ T9588] netlink: 'syz.5.1524': attribute type 29 has an invalid length. [ 757.125889][ T9593] netlink: 'syz.4.1523': attribute type 29 has an invalid length. [ 757.192760][ T9588] netlink: 'syz.5.1524': attribute type 29 has an invalid length. [ 757.338475][ T9599] tun0: tun_chr_ioctl cmd 21731 [ 757.381570][ T9597] netlink: 'syz.4.1523': attribute type 29 has an invalid length. [ 757.442690][ T9594] netlink: 'syz.5.1524': attribute type 29 has an invalid length. [ 757.521145][ T9595] netlink: 'syz.5.1524': attribute type 29 has an invalid length. [ 757.786113][ T9609] FAULT_INJECTION: forcing a failure. [ 757.786113][ T9609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.886915][ T9609] CPU: 1 PID: 9609 Comm: syz.0.1528 Not tainted syzkaller #0 [ 757.894375][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.904475][ T9609] Call Trace: [ 757.907789][ T9609] [ 757.910748][ T9609] dump_stack_lvl+0x188/0x24e [ 757.915468][ T9609] ? show_regs_print_info+0x12/0x12 [ 757.920706][ T9609] ? load_image+0x410/0x410 [ 757.925285][ T9609] ? __lock_acquire+0x7ea0/0x7ea0 [ 757.930366][ T9609] ? lockdep_hardirqs_on+0x94/0x140 [ 757.935614][ T9609] should_fail_ex+0x390/0x4c0 [ 757.940364][ T9609] _copy_from_user+0x2c/0x170 [ 757.945090][ T9609] ___sys_sendmsg+0x1c3/0x360 [ 757.949823][ T9609] ? lockdep_hardirqs_on+0x94/0x140 [ 757.955079][ T9609] ? __sys_sendmsg+0x2a0/0x2a0 [ 757.959906][ T9609] ? __lock_acquire+0x7ea0/0x7ea0 [ 757.965007][ T9609] __se_sys_sendmsg+0x1c3/0x2b0 [ 757.969899][ T9609] ? __x64_sys_sendmsg+0x80/0x80 [ 757.974893][ T9609] ? syscall_enter_from_user_mode+0x2a/0x80 [ 757.980848][ T9609] do_syscall_64+0x4c/0xa0 [ 757.985310][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 757.990050][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 757.994764][ T9609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.000715][ T9609] RIP: 0033:0x7f08cb19e559 [ 758.005167][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.024826][ T9609] RSP: 002b:00007f08cc04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.033287][ T9609] RAX: ffffffffffffffda RBX: 00007f08cb425fa0 RCX: 00007f08cb19e559 [ 758.041297][ T9609] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000008 [ 758.049305][ T9609] RBP: 00007f08cc04c090 R08: 0000000000000000 R09: 0000000000000000 [ 758.057311][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.065316][ T9609] R13: 00007f08cb426038 R14: 00007f08cb425fa0 R15: 00007ffd4290ada8 [ 758.073362][ T9609] [ 758.116930][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1529'. [ 758.386782][ T9621] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1530'. [ 759.384770][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1542'. [ 759.417983][ T9657] device dummy0 entered promiscuous mode [ 759.491556][ T9657] bridge0: port 3(dummy0) entered blocking state [ 759.526269][ T9657] bridge0: port 3(dummy0) entered disabled state [ 759.603228][ T9657] bridge0: port 3(dummy0) entered blocking state [ 759.610886][ T9657] bridge0: port 3(dummy0) entered forwarding state [ 760.748627][ T9709] FAULT_INJECTION: forcing a failure. [ 760.748627][ T9709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.820859][ T9709] CPU: 0 PID: 9709 Comm: syz.1.1556 Not tainted syzkaller #0 [ 760.828352][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.838464][ T9709] Call Trace: [ 760.841808][ T9709] [ 760.844779][ T9709] dump_stack_lvl+0x188/0x24e [ 760.849516][ T9709] ? show_regs_print_info+0x12/0x12 [ 760.854762][ T9709] ? load_image+0x410/0x410 [ 760.859311][ T9709] ? __lock_acquire+0x7ea0/0x7ea0 [ 760.864382][ T9709] ? unix_ioctl+0x255/0x6a0 [ 760.868943][ T9709] should_fail_ex+0x390/0x4c0 [ 760.873677][ T9709] _copy_from_user+0x2c/0x170 [ 760.878395][ T9709] sock_do_ioctl+0x18c/0x320 [ 760.883050][ T9709] ? sock_show_fdinfo+0xb0/0xb0 [ 760.887962][ T9709] sock_ioctl+0x48a/0x700 [ 760.892340][ T9709] ? sock_poll+0x420/0x420 [ 760.896814][ T9709] ? bpf_lsm_file_ioctl+0x5/0x10 [ 760.901790][ T9709] ? security_file_ioctl+0x7c/0xa0 [ 760.906944][ T9709] ? sock_poll+0x420/0x420 [ 760.911406][ T9709] __se_sys_ioctl+0xfa/0x170 [ 760.916083][ T9709] do_syscall_64+0x4c/0xa0 [ 760.920559][ T9709] ? clear_bhb_loop+0x60/0xb0 [ 760.925292][ T9709] ? clear_bhb_loop+0x60/0xb0 [ 760.930016][ T9709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.935982][ T9709] RIP: 0033:0x7f40fb39e559 [ 760.940438][ T9709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.960096][ T9709] RSP: 002b:00007f40fc1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.968561][ T9709] RAX: ffffffffffffffda RBX: 00007f40fb625fa0 RCX: 00007f40fb39e559 [ 760.976575][ T9709] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000004 [ 760.984589][ T9709] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 760.992625][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.000646][ T9709] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 761.008686][ T9709] [ 761.571903][ T9726] validate_nla: 15 callbacks suppressed [ 761.571943][ T9726] netlink: 'syz.1.1560': attribute type 10 has an invalid length. [ 761.628519][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1560'. [ 761.829191][ T9740] netlink: 'syz.5.1564': attribute type 10 has an invalid length. [ 761.858480][ T9740] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1564'. [ 762.285496][ T9730] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 762.299428][ T9730] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1563'. [ 762.362648][ T9752] netlink: 'syz.4.1567': attribute type 25 has an invalid length. [ 762.394523][ T9752] netlink: 'syz.4.1567': attribute type 29 has an invalid length. [ 763.417618][ T9787] delete_channel: no stack [ 763.482868][ T9790] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 763.524640][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1579'. [ 763.535746][ T9784] netlink: 'syz.3.1576': attribute type 29 has an invalid length. [ 763.617620][ T9784] netlink: 'syz.3.1576': attribute type 29 has an invalid length. [ 763.686035][ T9791] netlink: 'syz.3.1576': attribute type 29 has an invalid length. [ 763.706656][ T9798] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1582'. [ 763.735889][ T9793] netlink: 'syz.3.1576': attribute type 29 has an invalid length. [ 763.815090][ T9800] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1582'. [ 764.020347][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1581'. [ 764.084296][ T9808] bridge0: port 3(dummy0) entered blocking state [ 764.090956][ T9808] bridge0: port 3(dummy0) entered forwarding state [ 765.645432][ T9840] tun0: tun_chr_ioctl cmd 21731 [ 765.744137][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1591'. [ 765.818579][ T9848] delete_channel: no stack [ 766.049883][ T9855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1594'. [ 766.136505][ T9862] device sit0 entered promiscuous mode [ 766.974840][ T9891] validate_nla: 11 callbacks suppressed [ 766.974860][ T9891] netlink: 'syz.4.1605': attribute type 29 has an invalid length. [ 767.009804][ T9890] netlink: 'syz.3.1602': attribute type 29 has an invalid length. [ 767.035994][ T9890] netlink: 'syz.3.1602': attribute type 29 has an invalid length. [ 767.047939][ T9892] netlink: 'syz.3.1602': attribute type 29 has an invalid length. [ 767.064761][ T9890] netlink: 'syz.3.1602': attribute type 29 has an invalid length. [ 767.092760][ T9894] FAULT_INJECTION: forcing a failure. [ 767.092760][ T9894] name failslab, interval 1, probability 0, space 0, times 0 [ 767.115775][ T9891] netlink: 'syz.4.1605': attribute type 29 has an invalid length. [ 767.126112][ T9894] CPU: 1 PID: 9894 Comm: syz.1.1606 Not tainted syzkaller #0 [ 767.133546][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.143647][ T9894] Call Trace: [ 767.146961][ T9894] [ 767.149916][ T9894] dump_stack_lvl+0x188/0x24e [ 767.154632][ T9894] ? show_regs_print_info+0x12/0x12 [ 767.159854][ T9894] ? load_image+0x410/0x410 [ 767.164387][ T9894] ? __might_sleep+0xd0/0xd0 [ 767.169012][ T9894] ? __lock_acquire+0x7ea0/0x7ea0 [ 767.174074][ T9894] should_fail_ex+0x390/0x4c0 [ 767.178788][ T9894] should_failslab+0x5/0x20 [ 767.183310][ T9894] slab_pre_alloc_hook+0x59/0x300 [ 767.188370][ T9894] ? __lock_acquire+0x7ea0/0x7ea0 [ 767.193426][ T9894] ? find_css_set+0x9ec/0x15c0 [ 767.198249][ T9894] __kmem_cache_alloc_node+0x4f/0x270 [ 767.203651][ T9894] ? find_css_set+0x9ec/0x15c0 [ 767.208435][ T9894] kmalloc_trace+0x26/0xe0 [ 767.212874][ T9894] find_css_set+0x9ec/0x15c0 [ 767.217509][ T9894] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 767.223433][ T9894] ? mark_lock+0x94/0x320 [ 767.227797][ T9894] cgroup_migrate_prepare_dst+0x114/0x610 [ 767.233563][ T9894] cgroup_attach_task+0x546/0x870 [ 767.238620][ T9894] ? cgroup_attach_task+0x20f/0x870 [ 767.243844][ T9894] ? cgroup_migrate_execute+0xf20/0xf20 [ 767.249423][ T9894] ? get_task_cred+0x1f/0x370 [ 767.254125][ T9894] ? get_task_cred+0x2f0/0x370 [ 767.258915][ T9894] ? get_task_cred+0x1f/0x370 [ 767.263624][ T9894] __cgroup1_procs_write+0x2f2/0x3f0 [ 767.268960][ T9894] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 767.275233][ T9894] ? cgroup_pidlist_stop+0xf0/0xf0 [ 767.280377][ T9894] cgroup_file_write+0x2c9/0x6a0 [ 767.285355][ T9894] ? kernfs_fop_write_iter+0x1d8/0x520 [ 767.290848][ T9894] ? cgroup_seqfile_stop+0xd0/0xd0 [ 767.295986][ T9894] ? __virt_addr_valid+0x188/0x540 [ 767.301214][ T9894] ? __virt_addr_valid+0x188/0x540 [ 767.306363][ T9894] ? cgroup_seqfile_stop+0xd0/0xd0 [ 767.311496][ T9894] kernfs_fop_write_iter+0x3a0/0x520 [ 767.316817][ T9894] vfs_write+0x482/0x9a0 [ 767.321099][ T9894] ? file_end_write+0x250/0x250 [ 767.325988][ T9894] ? __fget_files+0x3fc/0x460 [ 767.330702][ T9894] ? __fdget_pos+0x2ae/0x360 [ 767.335318][ T9894] ? ksys_write+0x70/0x260 [ 767.339768][ T9894] ksys_write+0x14d/0x260 [ 767.344130][ T9894] ? __ia32_sys_read+0x80/0x80 [ 767.348927][ T9894] ? lockdep_hardirqs_on+0x94/0x140 [ 767.354168][ T9894] do_syscall_64+0x4c/0xa0 [ 767.358607][ T9894] ? clear_bhb_loop+0x60/0xb0 [ 767.363310][ T9894] ? clear_bhb_loop+0x60/0xb0 [ 767.368012][ T9894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.373929][ T9894] RIP: 0033:0x7f40fb39e559 [ 767.378406][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.398043][ T9894] RSP: 002b:00007f40fc1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 767.406491][ T9894] RAX: ffffffffffffffda RBX: 00007f40fb625fa0 RCX: 00007f40fb39e559 [ 767.414486][ T9894] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000007 [ 767.422479][ T9894] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 767.430473][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.438473][ T9894] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 767.446483][ T9894] [ 767.507586][ T9889] netlink: 'syz.4.1605': attribute type 29 has an invalid length. [ 767.637712][ T9892] netlink: 'syz.3.1602': attribute type 29 has an invalid length. [ 767.668286][ T9898] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 767.697696][ T9898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 767.753907][ T9896] netlink: 'syz.4.1605': attribute type 29 has an invalid length. [ 767.773425][ T9901] tun0: tun_chr_ioctl cmd 21731 [ 768.341685][ T9917] FAULT_INJECTION: forcing a failure. [ 768.341685][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 768.398295][ T9917] CPU: 1 PID: 9917 Comm: syz.0.1611 Not tainted syzkaller #0 [ 768.405738][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.415837][ T9917] Call Trace: [ 768.419157][ T9917] [ 768.422125][ T9917] dump_stack_lvl+0x188/0x24e [ 768.426857][ T9917] ? show_regs_print_info+0x12/0x12 [ 768.432102][ T9917] ? load_image+0x410/0x410 [ 768.436648][ T9917] ? __might_sleep+0xd0/0xd0 [ 768.441281][ T9917] ? __lock_acquire+0x7ea0/0x7ea0 [ 768.446377][ T9917] should_fail_ex+0x390/0x4c0 [ 768.451113][ T9917] should_failslab+0x5/0x20 [ 768.455654][ T9917] slab_pre_alloc_hook+0x59/0x300 [ 768.460726][ T9917] kmem_cache_alloc_node+0x5a/0x310 [ 768.465971][ T9917] ? __alloc_skb+0xf9/0x7d0 [ 768.470556][ T9917] __alloc_skb+0xf9/0x7d0 [ 768.474934][ T9917] netlink_sendmsg+0x654/0xbd0 [ 768.479756][ T9917] ? netlink_getsockopt+0x550/0x550 [ 768.485013][ T9917] ? apparmor_socket_sendmsg+0x8a/0x330 [ 768.490613][ T9917] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 768.495939][ T9917] ? security_socket_sendmsg+0x7c/0xa0 [ 768.501451][ T9917] ? netlink_getsockopt+0x550/0x550 [ 768.506701][ T9917] ____sys_sendmsg+0x5ed/0x9a0 [ 768.511527][ T9917] ? __sys_sendmsg_sock+0x30/0x30 [ 768.516607][ T9917] ? __import_iovec+0x306/0x510 [ 768.521523][ T9917] ? import_iovec+0x6f/0xa0 [ 768.526076][ T9917] ___sys_sendmsg+0x2a2/0x360 [ 768.530792][ T9917] ? __sys_sendmsg+0x2a0/0x2a0 [ 768.535608][ T9917] ? __lock_acquire+0x7ea0/0x7ea0 [ 768.540685][ T9917] __se_sys_sendmsg+0x1c3/0x2b0 [ 768.545562][ T9917] ? __x64_sys_sendmsg+0x80/0x80 [ 768.550552][ T9917] ? lockdep_hardirqs_on+0x94/0x140 [ 768.555784][ T9917] do_syscall_64+0x4c/0xa0 [ 768.560232][ T9917] ? clear_bhb_loop+0x60/0xb0 [ 768.564936][ T9917] ? clear_bhb_loop+0x60/0xb0 [ 768.569640][ T9917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.575562][ T9917] RIP: 0033:0x7f08cb19e559 [ 768.580004][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.599632][ T9917] RSP: 002b:00007f08cc04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.608066][ T9917] RAX: ffffffffffffffda RBX: 00007f08cb425fa0 RCX: 00007f08cb19e559 [ 768.616056][ T9917] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 768.624050][ T9917] RBP: 00007f08cc04c090 R08: 0000000000000000 R09: 0000000000000000 [ 768.632039][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.640033][ T9917] R13: 00007f08cb426038 R14: 00007f08cb425fa0 R15: 00007ffd4290ada8 [ 768.648039][ T9917] [ 768.773772][ T9921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 768.858733][ T9918] delete_channel: no stack [ 769.012028][ T9931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1616'. [ 769.495693][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1622'. [ 769.718421][ T9956] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1624'. [ 769.769807][ T9956] bridge0: port 4(veth0_vlan) entered blocking state [ 769.800609][ T9956] bridge0: port 4(veth0_vlan) entered disabled state [ 769.809357][ T9956] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 769.867693][ T9950] tun0: tun_chr_ioctl cmd 21731 [ 769.909377][ T9960] delete_channel: no stack [ 769.950788][ T9952] delete_channel: no stack [ 770.054916][ T9966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1627'. [ 770.181832][ T9971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1629'. [ 771.253877][T10009] FAULT_INJECTION: forcing a failure. [ 771.253877][T10009] name failslab, interval 1, probability 0, space 0, times 0 [ 771.309548][T10009] CPU: 1 PID: 10009 Comm: syz.0.1638 Not tainted syzkaller #0 [ 771.317077][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.327170][T10009] Call Trace: [ 771.330523][T10009] [ 771.333498][T10009] dump_stack_lvl+0x188/0x24e [ 771.338246][T10009] ? show_regs_print_info+0x12/0x12 [ 771.343499][T10009] ? load_image+0x410/0x410 [ 771.348041][T10009] ? __might_sleep+0xd0/0xd0 [ 771.352672][T10009] ? __lock_acquire+0x7ea0/0x7ea0 [ 771.357739][T10009] ? verify_lock_unused+0x140/0x140 [ 771.362976][T10009] should_fail_ex+0x390/0x4c0 [ 771.367708][T10009] should_failslab+0x5/0x20 [ 771.372249][T10009] slab_pre_alloc_hook+0x59/0x300 [ 771.377326][T10009] ? irqentry_enter+0x33/0x50 [ 771.382062][T10009] ? sock_kmalloc+0x92/0xf0 [ 771.386620][T10009] __kmem_cache_alloc_node+0x4f/0x270 [ 771.392039][T10009] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 771.398111][T10009] ? sock_kmalloc+0x92/0xf0 [ 771.402666][T10009] __kmalloc+0xa3/0x240 [ 771.406865][T10009] ? rcu_is_watching+0x11/0xa0 [ 771.411681][T10009] sock_kmalloc+0x92/0xf0 [ 771.416070][T10009] ____sys_sendmsg+0x1bf/0x9a0 [ 771.420877][T10009] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 771.427088][T10009] ? __sys_sendmsg_sock+0x30/0x30 [ 771.432155][T10009] ? __import_iovec+0x306/0x510 [ 771.437079][T10009] ? import_iovec+0x6f/0xa0 [ 771.441654][T10009] ___sys_sendmsg+0x2a2/0x360 [ 771.446380][T10009] ? __sys_sendmsg+0x2a0/0x2a0 [ 771.451216][T10009] ? ktime_get+0x7b/0x270 [ 771.455614][T10009] __se_sys_sendmsg+0x1c3/0x2b0 [ 771.460521][T10009] ? __x64_sys_sendmsg+0x80/0x80 [ 771.465524][T10009] ? lockdep_hardirqs_on+0x94/0x140 [ 771.470783][T10009] do_syscall_64+0x4c/0xa0 [ 771.475252][T10009] ? clear_bhb_loop+0x60/0xb0 [ 771.480001][T10009] ? clear_bhb_loop+0x60/0xb0 [ 771.484727][T10009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.490662][T10009] RIP: 0033:0x7f08cb19e559 [ 771.495120][T10009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.514783][T10009] RSP: 002b:00007f08cc00a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.523249][T10009] RAX: ffffffffffffffda RBX: 00007f08cb426180 RCX: 00007f08cb19e559 [ 771.531303][T10009] RDX: 0000000000000040 RSI: 0000200000001d80 RDI: 0000000000000008 [ 771.539326][T10009] RBP: 00007f08cc00a090 R08: 0000000000000000 R09: 0000000000000000 [ 771.547332][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.555348][T10009] R13: 00007f08cb426218 R14: 00007f08cb426180 R15: 00007ffd4290ada8 [ 771.563381][T10009] [ 771.898215][ T9997] delete_channel: no stack [ 772.832579][T10002] delete_channel: no stack [ 772.838284][T10020] validate_nla: 18 callbacks suppressed [ 772.838300][T10020] netlink: 'syz.4.1641': attribute type 29 has an invalid length. [ 772.862028][T10030] tun0: tun_chr_ioctl cmd 21731 [ 773.031769][T10036] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 773.070544][T10036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1642'. [ 773.204392][T10042] netlink: 'syz.5.1643': attribute type 25 has an invalid length. [ 773.262370][T10042] netlink: 'syz.5.1643': attribute type 29 has an invalid length. [ 773.342491][T10043] netlink: 'syz.1.1644': attribute type 10 has an invalid length. [ 773.361789][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1644'. [ 774.053622][T10073] FAULT_INJECTION: forcing a failure. [ 774.053622][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 774.215643][T10073] CPU: 0 PID: 10073 Comm: syz.0.1654 Not tainted syzkaller #0 [ 774.223196][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.233318][T10073] Call Trace: [ 774.236681][T10073] [ 774.239684][T10073] dump_stack_lvl+0x188/0x24e [ 774.244435][T10073] ? show_regs_print_info+0x12/0x12 [ 774.249711][T10073] ? load_image+0x410/0x410 [ 774.250412][T10078] netlink: 'syz.3.1653': attribute type 29 has an invalid length. [ 774.262098][T10073] ? __might_sleep+0xd0/0xd0 [ 774.266743][T10073] ? __lock_acquire+0x7ea0/0x7ea0 [ 774.271847][T10073] should_fail_ex+0x390/0x4c0 [ 774.276604][T10073] should_failslab+0x5/0x20 [ 774.281190][T10073] slab_pre_alloc_hook+0x59/0x300 [ 774.286268][T10073] kmem_cache_alloc_node+0x5a/0x310 [ 774.286300][T10073] ? __alloc_skb+0xf9/0x7d0 [ 774.296069][T10073] __alloc_skb+0xf9/0x7d0 [ 774.300481][T10073] alloc_skb_with_frags+0xa7/0x710 [ 774.305665][T10073] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 774.311466][T10073] sock_alloc_send_pskb+0x87f/0x9a0 [ 774.316771][T10073] ? sock_kzfree_s+0x50/0x50 [ 774.321433][T10073] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 774.327496][T10073] ? lock_chain_count+0x20/0x20 [ 774.332407][T10073] ? __local_bh_enable_ip+0x136/0x1c0 [ 774.337809][T10073] pn_sendmsg+0x1ec/0x400 [ 774.342168][T10073] ? _local_bh_enable+0xa0/0xa0 [ 774.347065][T10073] ? pn_init+0x40/0x40 [ 774.351164][T10073] ? pn_socket_bind+0x39d/0x4d0 [ 774.356074][T10073] ? pn_socket_bind+0x39d/0x4d0 [ 774.360960][T10073] pn_socket_sendmsg+0x1cd/0x230 [ 774.365949][T10073] ? pn_socket_ioctl+0x350/0x350 [ 774.370926][T10073] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 774.376253][T10073] ? security_socket_sendmsg+0x7c/0xa0 [ 774.381747][T10073] ? pn_socket_ioctl+0x350/0x350 [ 774.386717][T10073] ____sys_sendmsg+0x5ed/0x9a0 [ 774.391512][T10073] ? __lock_acquire+0x7ea0/0x7ea0 [ 774.396585][T10073] ? __sys_sendmsg_sock+0x30/0x30 [ 774.401649][T10073] ? __import_iovec+0x306/0x510 [ 774.406555][T10073] ? import_iovec+0x6f/0xa0 [ 774.411116][T10073] ___sys_sendmsg+0x2a2/0x360 [ 774.415846][T10073] ? __sys_sendmsg+0x2a0/0x2a0 [ 774.420676][T10073] ? __lock_acquire+0x7ea0/0x7ea0 [ 774.425776][T10073] __se_sys_sendmsg+0x1c3/0x2b0 [ 774.430664][T10073] ? __x64_sys_sendmsg+0x80/0x80 [ 774.435658][T10073] ? lockdep_hardirqs_on+0x94/0x140 [ 774.440905][T10073] do_syscall_64+0x4c/0xa0 [ 774.445360][T10073] ? clear_bhb_loop+0x60/0xb0 [ 774.450067][T10073] ? clear_bhb_loop+0x60/0xb0 [ 774.454794][T10073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.460744][T10073] RIP: 0033:0x7f08cb19e559 [ 774.465200][T10073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.484837][T10073] RSP: 002b:00007f08cc04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.493282][T10073] RAX: ffffffffffffffda RBX: 00007f08cb425fa0 RCX: 00007f08cb19e559 [ 774.501281][T10073] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 774.509281][T10073] RBP: 00007f08cc04c090 R08: 0000000000000000 R09: 0000000000000000 [ 774.517285][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.525287][T10073] R13: 00007f08cb426038 R14: 00007f08cb425fa0 R15: 00007ffd4290ada8 [ 774.533315][T10073] [ 774.559100][T10078] netlink: 'syz.3.1653': attribute type 29 has an invalid length. [ 774.597617][T10071] netlink: 'syz.3.1653': attribute type 29 has an invalid length. [ 774.837189][T10083] netlink: 'syz.4.1657': attribute type 10 has an invalid length. [ 774.892546][T10083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1657'. [ 774.994117][T10074] netlink: 'syz.3.1653': attribute type 29 has an invalid length. [ 775.178780][T10094] tun0: tun_chr_ioctl cmd 21731 [ 775.237956][T10098] FAULT_INJECTION: forcing a failure. [ 775.237956][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 775.292769][T10098] CPU: 0 PID: 10098 Comm: syz.4.1660 Not tainted syzkaller #0 [ 775.300287][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.300302][T10098] Call Trace: [ 775.300310][T10098] [ 775.300319][T10098] dump_stack_lvl+0x188/0x24e [ 775.321447][T10098] ? show_regs_print_info+0x12/0x12 [ 775.326706][T10098] ? load_image+0x410/0x410 [ 775.331252][T10098] ? __might_sleep+0xd0/0xd0 [ 775.335882][T10098] ? __lock_acquire+0x7ea0/0x7ea0 [ 775.340954][T10098] ? lock_chain_count+0x20/0x20 [ 775.345855][T10098] should_fail_ex+0x390/0x4c0 [ 775.350676][T10098] should_failslab+0x5/0x20 [ 775.355226][T10098] slab_pre_alloc_hook+0x59/0x300 [ 775.360292][T10098] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 775.366496][T10098] ? sock_kmalloc+0x92/0xf0 [ 775.371045][T10098] __kmem_cache_alloc_node+0x4f/0x270 [ 775.376472][T10098] ? sock_kmalloc+0x92/0xf0 [ 775.381034][T10098] __kmalloc+0xa3/0x240 [ 775.385231][T10098] sock_kmalloc+0x92/0xf0 [ 775.389609][T10098] ____sys_sendmsg+0x1bf/0x9a0 [ 775.394423][T10098] ? __might_fault+0xa6/0x120 [ 775.399171][T10098] ? __sys_sendmsg_sock+0x30/0x30 [ 775.404246][T10098] ? __import_iovec+0x306/0x510 [ 775.409196][T10098] ? import_iovec+0x6f/0xa0 [ 775.413794][T10098] ___sys_sendmsg+0x2a2/0x360 [ 775.418519][T10098] ? __sys_sendmsg+0x2a0/0x2a0 [ 775.423402][T10098] __se_sys_sendmsg+0x1c3/0x2b0 [ 775.428296][T10098] ? __x64_sys_sendmsg+0x80/0x80 [ 775.433301][T10098] do_syscall_64+0x4c/0xa0 [ 775.437776][T10098] ? clear_bhb_loop+0x60/0xb0 [ 775.442500][T10098] ? clear_bhb_loop+0x60/0xb0 [ 775.447220][T10098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.453159][T10098] RIP: 0033:0x7fa22d99e559 [ 775.457614][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.477339][T10098] RSP: 002b:00007fa22e958028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.485809][T10098] RAX: ffffffffffffffda RBX: 00007fa22dc25fa0 RCX: 00007fa22d99e559 [ 775.493804][T10098] RDX: 0000000000000040 RSI: 0000200000001d80 RDI: 0000000000000008 [ 775.501799][T10098] RBP: 00007fa22e958090 R08: 0000000000000000 R09: 0000000000000000 [ 775.509791][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.517779][T10098] R13: 00007fa22dc26038 R14: 00007fa22dc25fa0 R15: 00007fffc1e043f8 [ 775.525787][T10098] [ 775.718656][T10097] delete_channel: no stack [ 775.780506][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1663'. [ 776.317511][T10129] FAULT_INJECTION: forcing a failure. [ 776.317511][T10129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.373684][T10129] CPU: 0 PID: 10129 Comm: syz.5.1669 Not tainted syzkaller #0 [ 776.381241][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.391347][T10129] Call Trace: [ 776.394684][T10129] [ 776.397661][T10129] dump_stack_lvl+0x188/0x24e [ 776.402403][T10129] ? show_regs_print_info+0x12/0x12 [ 776.407675][T10129] ? load_image+0x410/0x410 [ 776.412232][T10129] ? __lock_acquire+0x7ea0/0x7ea0 [ 776.417328][T10129] ? snprintf+0xe5/0x140 [ 776.421648][T10129] should_fail_ex+0x390/0x4c0 [ 776.426409][T10129] _copy_to_user+0x2c/0x130 [ 776.430983][T10129] simple_read_from_buffer+0xe3/0x150 [ 776.436437][T10129] proc_fail_nth_read+0x1a6/0x220 [ 776.441535][T10129] ? proc_fault_inject_write+0x310/0x310 [ 776.447239][T10129] ? fsnotify_perm+0x248/0x550 [ 776.452198][T10129] ? proc_fault_inject_write+0x310/0x310 [ 776.457903][T10129] vfs_read+0x2db/0x960 [ 776.462144][T10129] ? kernel_read+0x1e0/0x1e0 [ 776.466811][T10129] ? __fget_files+0x28/0x460 [ 776.471475][T10129] ? __fget_files+0x3fc/0x460 [ 776.476228][T10129] ? __fdget_pos+0x2ae/0x360 [ 776.480877][T10129] ? ksys_read+0x70/0x260 [ 776.485287][T10129] ksys_read+0x14d/0x260 [ 776.489600][T10129] ? vfs_write+0x9a0/0x9a0 [ 776.494102][T10129] ? lockdep_hardirqs_on+0x94/0x140 [ 776.499381][T10129] do_syscall_64+0x4c/0xa0 [ 776.503915][T10129] ? clear_bhb_loop+0x60/0xb0 [ 776.508662][T10129] ? clear_bhb_loop+0x60/0xb0 [ 776.513407][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.519378][T10129] RIP: 0033:0x7ff423b5ed8e [ 776.523853][T10129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 776.543523][T10129] RSP: 002b:00007ff424b2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 776.552012][T10129] RAX: ffffffffffffffda RBX: 00007ff424b306c0 RCX: 00007ff423b5ed8e [ 776.560062][T10129] RDX: 000000000000000f RSI: 00007ff424b300a0 RDI: 0000000000000005 [ 776.568091][T10129] RBP: 00007ff424b30090 R08: 0000000000000000 R09: 0000000000000000 [ 776.576126][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.584214][T10129] R13: 00007ff423e26038 R14: 00007ff423e25fa0 R15: 00007ffe6b46feb8 [ 776.592273][T10129] [ 776.717329][T10134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1670'. [ 777.341848][T10148] FAULT_INJECTION: forcing a failure. [ 777.341848][T10148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.370627][T10148] CPU: 1 PID: 10148 Comm: syz.3.1675 Not tainted syzkaller #0 [ 777.378174][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.388284][T10148] Call Trace: [ 777.391619][T10148] [ 777.394628][T10148] dump_stack_lvl+0x188/0x24e [ 777.399369][T10148] ? show_regs_print_info+0x12/0x12 [ 777.404625][T10148] ? load_image+0x410/0x410 [ 777.409179][T10148] ? __lock_acquire+0x7ea0/0x7ea0 [ 777.414288][T10148] ? slab_free_freelist_hook+0x133/0x1b0 [ 777.419975][T10148] ? tomoyo_path_number_perm+0x4fb/0x650 [ 777.425664][T10148] ? security_file_ioctl+0x6c/0xa0 [ 777.430851][T10148] ? __se_sys_ioctl+0x48/0x170 [ 777.435670][T10148] should_fail_ex+0x390/0x4c0 [ 777.440409][T10148] _copy_from_user+0x2c/0x170 [ 777.445132][T10148] arp_ioctl+0x155/0x530 [ 777.449430][T10148] ? neigh_release+0x80/0x80 [ 777.454071][T10148] ? do_vfs_ioctl+0x1be3/0x1d40 [ 777.459077][T10148] inet_ioctl+0x378/0x460 [ 777.463477][T10148] ? inet_shutdown+0x370/0x370 [ 777.468412][T10148] ? slab_free_freelist_hook+0x133/0x1b0 [ 777.474080][T10148] ? tomoyo_path_number_perm+0x4fb/0x650 [ 777.479768][T10148] ? __kmem_cache_free+0xb6/0x200 [ 777.484850][T10148] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 777.490372][T10148] sock_do_ioctl+0xfb/0x320 [ 777.494929][T10148] ? sock_show_fdinfo+0xb0/0xb0 [ 777.499850][T10148] sock_ioctl+0x48a/0x700 [ 777.504246][T10148] ? sock_poll+0x420/0x420 [ 777.508722][T10148] ? bpf_lsm_file_ioctl+0x5/0x10 [ 777.513713][T10148] ? security_file_ioctl+0x7c/0xa0 [ 777.518870][T10148] ? sock_poll+0x420/0x420 [ 777.523334][T10148] __se_sys_ioctl+0xfa/0x170 [ 777.527980][T10148] do_syscall_64+0x4c/0xa0 [ 777.532450][T10148] ? clear_bhb_loop+0x60/0xb0 [ 777.537175][T10148] ? clear_bhb_loop+0x60/0xb0 [ 777.541917][T10148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.547862][T10148] RIP: 0033:0x7fc89319e559 [ 777.552317][T10148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.571973][T10148] RSP: 002b:00007fc894050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.580451][T10148] RAX: ffffffffffffffda RBX: 00007fc893425fa0 RCX: 00007fc89319e559 [ 777.588468][T10148] RDX: 0000200000000040 RSI: 0000000000008954 RDI: 0000000000000003 [ 777.596485][T10148] RBP: 00007fc894050090 R08: 0000000000000000 R09: 0000000000000000 [ 777.604493][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.612501][T10148] R13: 00007fc893426038 R14: 00007fc893425fa0 R15: 00007fffeb2e15e8 [ 777.620533][T10148] [ 778.087557][T10154] tun0: tun_chr_ioctl cmd 21731 [ 778.098318][T10163] validate_nla: 18 callbacks suppressed [ 778.098336][T10163] netlink: 'syz.1.1678': attribute type 25 has an invalid length. [ 778.117268][T10163] netlink: 'syz.1.1678': attribute type 29 has an invalid length. [ 778.874676][T10184] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 778.899380][T10184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1686'. [ 779.162056][T10193] tun0: tun_chr_ioctl cmd 21731 [ 779.195822][T10180] netlink: 'syz.5.1685': attribute type 29 has an invalid length. [ 779.286259][T10180] netlink: 'syz.5.1685': attribute type 29 has an invalid length. [ 779.348414][T10190] netlink: 'syz.5.1685': attribute type 29 has an invalid length. [ 779.380550][T10192] netlink: 'syz.5.1685': attribute type 29 has an invalid length. [ 780.496600][T10211] netlink: 'syz.4.1690': attribute type 29 has an invalid length. [ 780.532137][T10211] netlink: 'syz.4.1690': attribute type 29 has an invalid length. [ 780.561203][T10220] netlink: 'syz.4.1690': attribute type 29 has an invalid length. [ 781.448154][T10253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1701'. [ 781.614611][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1702'. [ 781.736549][T10261] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1705'. [ 782.203616][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1711'. [ 782.778764][T10290] tun0: tun_chr_ioctl cmd 21731 [ 782.966321][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1718'. [ 783.783841][T10321] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1722'. [ 783.867632][T10325] validate_nla: 19 callbacks suppressed [ 783.867674][T10325] netlink: 'syz.5.1724': attribute type 25 has an invalid length. [ 783.909867][T10325] netlink: 'syz.5.1724': attribute type 29 has an invalid length. [ 784.261251][T10336] netlink: 'syz.5.1728': attribute type 10 has an invalid length. [ 784.327533][T10336] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1728'. [ 784.743076][T10350] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 784.768645][T10350] syzkaller1: linktype set to 773 [ 784.912538][T10358] netlink: 'syz.3.1734': attribute type 10 has an invalid length. [ 784.972601][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1734'. [ 785.171487][T10361] tun0: tun_chr_ioctl cmd 21731 [ 785.252887][T10352] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 785.320100][T10352] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 785.363372][T10356] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 785.406802][T10365] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1737'. [ 785.435057][T10360] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 785.525857][T10369] netlink: 'syz.4.1739': attribute type 25 has an invalid length. [ 785.549867][T10369] netlink: 'syz.4.1739': attribute type 29 has an invalid length. [ 786.112931][T10380] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1744'. [ 786.490096][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1748'. [ 786.656366][T10401] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1751'. [ 787.460307][T10411] tun0: tun_chr_ioctl cmd 21731 [ 787.874027][T10427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1761'. [ 788.132400][T10442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1765'. [ 788.163471][T10436] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1763'. [ 789.321490][T10471] validate_nla: 9 callbacks suppressed [ 789.321509][T10471] netlink: 'syz.1.1776': attribute type 29 has an invalid length. [ 789.447818][T10471] netlink: 'syz.1.1776': attribute type 29 has an invalid length. [ 789.490702][T10473] netlink: 'syz.1.1776': attribute type 29 has an invalid length. [ 789.537946][T10474] netlink: 'syz.1.1776': attribute type 29 has an invalid length. [ 789.719646][T10479] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1778'. [ 789.846143][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1778'. [ 789.885470][T10470] netlink: 'syz.4.1777': attribute type 10 has an invalid length. [ 789.900758][T10470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1777'. [ 789.910123][T10470] bridge0: port 4(veth0_vlan) entered blocking state [ 789.923878][T10470] bridge0: port 4(veth0_vlan) entered disabled state [ 789.942380][T10470] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 789.959787][T10473] tun0: tun_chr_ioctl cmd 21731 [ 789.966084][T10478] netlink: 'syz.0.1779': attribute type 25 has an invalid length. [ 789.976889][T10478] netlink: 'syz.0.1779': attribute type 29 has an invalid length. [ 789.987550][T10476] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1778'. [ 790.444711][T10496] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1787'. [ 790.581355][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1789'. [ 790.626522][T10504] netlink: 'syz.5.1790': attribute type 25 has an invalid length. [ 790.670730][T10504] netlink: 'syz.5.1790': attribute type 29 has an invalid length. [ 790.727083][T10505] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 791.521050][T10520] tun0: tun_chr_ioctl cmd 21731 [ 791.552000][T10524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1796'. [ 791.662766][T10528] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1796'. [ 791.706426][T10530] FAULT_INJECTION: forcing a failure. [ 791.706426][T10530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.720617][T10530] CPU: 0 PID: 10530 Comm: syz.1.1799 Not tainted syzkaller #0 [ 791.728165][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.738274][T10530] Call Trace: [ 791.741609][T10530] [ 791.744596][T10530] dump_stack_lvl+0x188/0x24e [ 791.749436][T10530] ? show_regs_print_info+0x12/0x12 [ 791.754706][T10530] ? load_image+0x410/0x410 [ 791.759272][T10530] ? __lock_acquire+0x7ea0/0x7ea0 [ 791.764379][T10530] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 791.770174][T10530] should_fail_ex+0x390/0x4c0 [ 791.774935][T10530] _copy_from_user+0x2c/0x170 [ 791.775149][T10528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1796'. [ 791.779659][T10530] ___sys_sendmsg+0x1c3/0x360 [ 791.779705][T10530] ? __sys_sendmsg+0x2a0/0x2a0 [ 791.798342][T10530] ? __lock_acquire+0x7ea0/0x7ea0 [ 791.803488][T10530] __se_sys_sendmsg+0x1c3/0x2b0 [ 791.808404][T10530] ? __x64_sys_sendmsg+0x80/0x80 [ 791.813446][T10530] ? lockdep_hardirqs_on+0x94/0x140 [ 791.818720][T10530] do_syscall_64+0x4c/0xa0 [ 791.823193][T10530] ? clear_bhb_loop+0x60/0xb0 [ 791.827906][T10530] ? clear_bhb_loop+0x60/0xb0 [ 791.832709][T10530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.838637][T10530] RIP: 0033:0x7f40fb39e559 [ 791.843091][T10530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.862749][T10530] RSP: 002b:00007f40fc1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.871221][T10530] RAX: ffffffffffffffda RBX: 00007f40fb625fa0 RCX: 00007f40fb39e559 [ 791.879221][T10530] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 791.887218][T10530] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 791.895219][T10530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.903214][T10530] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 791.911245][T10530] [ 792.112230][T10534] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1801'. [ 796.102334][T10570] __nla_validate_parse: 2 callbacks suppressed [ 796.102353][T10570] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1814'. [ 796.143454][T10568] tun0: tun_chr_ioctl cmd 21731 [ 796.199801][T10563] validate_nla: 15 callbacks suppressed [ 796.199857][T10563] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 796.231591][T10570] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1814'. [ 796.258570][T10563] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 796.330354][T10579] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1814'. [ 796.414244][T10566] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 796.434844][T10581] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1816'. [ 796.471147][T10567] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 796.818538][T10593] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1821'. [ 796.944446][T10595] netlink: 'syz.1.1820': attribute type 29 has an invalid length. [ 797.005208][T10595] netlink: 'syz.1.1820': attribute type 29 has an invalid length. [ 797.078832][T10604] tun0: tun_chr_ioctl cmd 21731 [ 797.106805][T10598] netlink: 'syz.1.1820': attribute type 29 has an invalid length. [ 797.190915][T10589] netlink: 'syz.0.1831': attribute type 29 has an invalid length. [ 797.195607][T10603] netlink: 'syz.1.1820': attribute type 29 has an invalid length. [ 797.264612][T10595] netlink: 'syz.1.1820': attribute type 29 has an invalid length. [ 798.056674][T10628] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1832'. [ 798.162381][T10630] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1833'. [ 798.490699][T10637] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1834'. [ 798.665210][T10638] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.1833'. [ 798.838458][T10640] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1833'. [ 799.927418][T10657] tun0: tun_chr_ioctl cmd 21731 [ 803.266027][T10674] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1847'. [ 803.437809][T10676] device wg2 entered promiscuous mode [ 803.660306][T10684] validate_nla: 12 callbacks suppressed [ 803.660346][T10684] netlink: 'syz.3.1850': attribute type 10 has an invalid length. [ 803.712385][T10684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1850'. [ 804.239768][T10694] netlink: 'syz.1.1852': attribute type 29 has an invalid length. [ 804.253365][T10694] netlink: 'syz.1.1852': attribute type 29 has an invalid length. [ 804.272418][T10702] netlink: 'syz.1.1852': attribute type 29 has an invalid length. [ 804.313053][T10703] netlink: 'syz.1.1852': attribute type 29 has an invalid length. [ 804.360583][T10706] netlink: 'syz.1.1852': attribute type 29 has an invalid length. [ 804.579166][T10708] netlink: 'syz.4.1859': attribute type 10 has an invalid length. [ 804.588448][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1859'. [ 805.189762][T10714] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1861'. [ 805.418739][T10722] netlink: 'syz.4.1865': attribute type 25 has an invalid length. [ 805.459847][T10722] netlink: 'syz.4.1865': attribute type 29 has an invalid length. [ 805.532794][T10728] tun0: tun_chr_ioctl cmd 21731 [ 805.542338][T10717] netlink: 'syz.0.1862': attribute type 29 has an invalid length. [ 805.704168][T10729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1866'. [ 808.559077][T10744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1871'. [ 808.876291][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.882700][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.917669][T10752] FAULT_INJECTION: forcing a failure. [ 808.917669][T10752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.935735][T10748] validate_nla: 5 callbacks suppressed [ 808.935753][T10748] netlink: 'syz.4.1874': attribute type 21 has an invalid length. [ 808.950396][T10748] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 808.951310][T10752] CPU: 1 PID: 10752 Comm: syz.5.1873 Not tainted syzkaller #0 [ 808.965647][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.975746][T10752] Call Trace: [ 808.979057][T10752] [ 808.982040][T10752] dump_stack_lvl+0x188/0x24e [ 808.986779][T10752] ? show_regs_print_info+0x12/0x12 [ 808.992019][T10752] ? load_image+0x410/0x410 [ 808.996576][T10752] ? __lock_acquire+0x7ea0/0x7ea0 [ 809.001655][T10752] ? tomoyo_path_number_perm+0x205/0x650 [ 809.007341][T10752] ? tomoyo_path_number_perm+0x5a4/0x650 [ 809.013032][T10752] should_fail_ex+0x390/0x4c0 [ 809.017798][T10752] _copy_from_user+0x2c/0x170 [ 809.022535][T10752] wext_handle_ioctl+0xc4/0x1d0 [ 809.027419][T10752] ? call_commit_handler+0xf0/0xf0 [ 809.032557][T10752] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 809.038579][T10752] sock_ioctl+0x143/0x700 [ 809.042947][T10752] ? sock_poll+0x420/0x420 [ 809.047389][T10752] ? tomoyo_file_ioctl+0xd/0x30 [ 809.052289][T10752] ? bpf_lsm_file_ioctl+0x5/0x10 [ 809.057257][T10752] ? security_file_ioctl+0x7c/0xa0 [ 809.062402][T10752] ? sock_poll+0x420/0x420 [ 809.066844][T10752] __se_sys_ioctl+0xfa/0x170 [ 809.071465][T10752] do_syscall_64+0x4c/0xa0 [ 809.075908][T10752] ? clear_bhb_loop+0x60/0xb0 [ 809.080642][T10752] ? clear_bhb_loop+0x60/0xb0 [ 809.085354][T10752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.091300][T10752] RIP: 0033:0x7ff423b9e559 [ 809.095734][T10752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.115363][T10752] RSP: 002b:00007ff424b30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.123820][T10752] RAX: ffffffffffffffda RBX: 00007ff423e25fa0 RCX: 00007ff423b9e559 [ 809.131820][T10752] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000005 [ 809.139853][T10752] RBP: 00007ff424b30090 R08: 0000000000000000 R09: 0000000000000000 [ 809.147851][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.155847][T10752] R13: 00007ff423e26038 R14: 00007ff423e25fa0 R15: 00007ffe6b46feb8 [ 809.163864][T10752] [ 809.180447][T10754] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1875'. [ 809.387947][T10765] netlink: 'syz.5.1878': attribute type 25 has an invalid length. [ 809.442102][T10765] netlink: 'syz.5.1878': attribute type 29 has an invalid length. [ 810.095666][T10784] netlink: 'syz.1.1885': attribute type 29 has an invalid length. [ 810.133542][T10784] netlink: 'syz.1.1885': attribute type 29 has an invalid length. [ 810.236443][T10786] netlink: 'syz.1.1885': attribute type 29 has an invalid length. [ 810.250784][T10787] netlink: 'syz.1.1885': attribute type 29 has an invalid length. [ 810.462572][T10793] netlink: 'syz.3.1887': attribute type 10 has an invalid length. [ 810.896528][T10813] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.1890'. [ 810.994899][T10813] netlink: zone id is out of range [ 811.003284][T10813] netlink: zone id is out of range [ 811.009079][T10813] netlink: zone id is out of range [ 811.015923][T10813] netlink: zone id is out of range [ 811.027620][T10813] netlink: get zone limit has 8 unknown bytes [ 811.376930][T10795] device syzkaller0 entered promiscuous mode [ 811.402045][T10804] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1889'. [ 811.519971][T10809] netlink: 'syz.3.1892': attribute type 25 has an invalid length. [ 811.533999][T10822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 813.253314][T10807] device syzkaller0 entered promiscuous mode [ 815.030838][T10826] validate_nla: 2 callbacks suppressed [ 815.030853][T10826] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 815.055828][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1897'. [ 815.190759][T10837] netlink: 'syz.3.1900': attribute type 29 has an invalid length. [ 815.198969][T10837] netlink: 'syz.3.1900': attribute type 29 has an invalid length. [ 815.286130][T10836] netlink: 'syz.3.1900': attribute type 29 has an invalid length. [ 815.329209][T10837] netlink: 'syz.3.1900': attribute type 29 has an invalid length. [ 816.025828][T10856] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1906'. [ 816.051715][T10859] FAULT_INJECTION: forcing a failure. [ 816.051715][T10859] name failslab, interval 1, probability 0, space 0, times 0 [ 816.094738][T10859] CPU: 1 PID: 10859 Comm: syz.5.1907 Not tainted syzkaller #0 [ 816.102286][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.112420][T10859] Call Trace: [ 816.115737][T10859] [ 816.118729][T10859] dump_stack_lvl+0x188/0x24e [ 816.123456][T10859] ? show_regs_print_info+0x12/0x12 [ 816.128700][T10859] ? load_image+0x410/0x410 [ 816.133262][T10859] ? __might_sleep+0xd0/0xd0 [ 816.137892][T10859] ? __lock_acquire+0x7ea0/0x7ea0 [ 816.142972][T10859] should_fail_ex+0x390/0x4c0 [ 816.147704][T10859] should_failslab+0x5/0x20 [ 816.152243][T10859] slab_pre_alloc_hook+0x59/0x300 [ 816.157358][T10859] kmem_cache_alloc_node+0x5a/0x310 [ 816.162602][T10859] ? __alloc_skb+0xf9/0x7d0 [ 816.167170][T10859] __alloc_skb+0xf9/0x7d0 [ 816.171553][T10859] alloc_skb_with_frags+0xa7/0x710 [ 816.176733][T10859] ? aa_label_sk_perm+0x501/0x6b0 [ 816.181823][T10859] sock_alloc_send_pskb+0x87f/0x9a0 [ 816.187103][T10859] ? sock_kzfree_s+0x50/0x50 [ 816.191753][T10859] ? perf_trace_lock+0xf8/0x390 [ 816.196662][T10859] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 816.202906][T10859] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 816.209207][T10859] unix_stream_sendmsg+0x431/0xa70 [ 816.214400][T10859] ? unix_show_fdinfo+0x2c0/0x2c0 [ 816.219488][T10859] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 816.225962][T10859] ? apparmor_socket_sendmsg+0x8a/0x330 [ 816.231605][T10859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 816.236933][T10859] ? security_socket_sendmsg+0x7c/0xa0 [ 816.242460][T10859] ? unix_show_fdinfo+0x2c0/0x2c0 [ 816.247634][T10859] ____sys_sendmsg+0x5ed/0x9a0 [ 816.252450][T10859] ? __sys_sendmsg_sock+0x30/0x30 [ 816.257520][T10859] ? __import_iovec+0x306/0x510 [ 816.262436][T10859] ? import_iovec+0x6f/0xa0 [ 816.267006][T10859] ___sys_sendmsg+0x2a2/0x360 [ 816.271741][T10859] ? __sys_sendmsg+0x2a0/0x2a0 [ 816.276584][T10859] ? __lock_acquire+0x7ea0/0x7ea0 [ 816.281694][T10859] __se_sys_sendmsg+0x1c3/0x2b0 [ 816.286603][T10859] ? __x64_sys_sendmsg+0x80/0x80 [ 816.291604][T10859] ? lockdep_hardirqs_on+0x94/0x140 [ 816.296859][T10859] do_syscall_64+0x4c/0xa0 [ 816.301320][T10859] ? clear_bhb_loop+0x60/0xb0 [ 816.306144][T10859] ? clear_bhb_loop+0x60/0xb0 [ 816.310872][T10859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.316813][T10859] RIP: 0033:0x7ff423b9e559 [ 816.321277][T10859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.341024][T10859] RSP: 002b:00007ff424b30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.349571][T10859] RAX: ffffffffffffffda RBX: 00007ff423e25fa0 RCX: 00007ff423b9e559 [ 816.357622][T10859] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000003 [ 816.365640][T10859] RBP: 00007ff424b30090 R08: 0000000000000000 R09: 0000000000000000 [ 816.373654][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.381665][T10859] R13: 00007ff423e26038 R14: 00007ff423e25fa0 R15: 00007ffe6b46feb8 [ 816.389698][T10859] [ 816.549603][T10864] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 816.582209][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1909'. [ 816.617621][T10866] netlink: 'syz.4.1910': attribute type 25 has an invalid length. [ 816.627026][T10866] netlink: 'syz.4.1910': attribute type 29 has an invalid length. [ 816.673595][T10868] netlink: 'syz.1.1911': attribute type 10 has an invalid length. [ 816.689009][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1911'. [ 817.826283][T10890] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1920'. [ 817.878421][T10890] device hsr_slave_0 left promiscuous mode [ 817.939575][T10890] device hsr_slave_1 left promiscuous mode [ 818.003090][T10888] netlink: 'syz.1.1919': attribute type 29 has an invalid length. [ 818.226094][T10903] tun0: tun_chr_ioctl cmd 21731 [ 818.560288][T10908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1926'. [ 819.074891][T10927] FAULT_INJECTION: forcing a failure. [ 819.074891][T10927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.110211][T10927] CPU: 1 PID: 10927 Comm: syz.4.1930 Not tainted syzkaller #0 [ 819.117752][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.127848][T10927] Call Trace: [ 819.131156][T10927] [ 819.134130][T10927] dump_stack_lvl+0x188/0x24e [ 819.138871][T10927] ? show_regs_print_info+0x12/0x12 [ 819.144155][T10927] ? load_image+0x410/0x410 [ 819.148709][T10927] ? __lock_acquire+0x7ea0/0x7ea0 [ 819.153788][T10927] should_fail_ex+0x390/0x4c0 [ 819.158527][T10927] _copy_from_user+0x2c/0x170 [ 819.163251][T10927] iovec_from_user+0x143/0x360 [ 819.168077][T10927] __import_iovec+0x6c/0x510 [ 819.172738][T10927] import_iovec+0x6f/0xa0 [ 819.177124][T10927] ___sys_sendmsg+0x252/0x360 [ 819.181862][T10927] ? __sys_sendmsg+0x2a0/0x2a0 [ 819.186686][T10927] ? __lock_acquire+0x7ea0/0x7ea0 [ 819.191791][T10927] __se_sys_sendmsg+0x1c3/0x2b0 [ 819.196695][T10927] ? __x64_sys_sendmsg+0x80/0x80 [ 819.201700][T10927] ? lockdep_hardirqs_on+0x94/0x140 [ 819.206959][T10927] do_syscall_64+0x4c/0xa0 [ 819.211439][T10927] ? clear_bhb_loop+0x60/0xb0 [ 819.216210][T10927] ? clear_bhb_loop+0x60/0xb0 [ 819.220939][T10927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.226877][T10927] RIP: 0033:0x7fa22d99e559 [ 819.231332][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.250986][T10927] RSP: 002b:00007fa22e958028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.259452][T10927] RAX: ffffffffffffffda RBX: 00007fa22dc25fa0 RCX: 00007fa22d99e559 [ 819.267476][T10927] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 819.275495][T10927] RBP: 00007fa22e958090 R08: 0000000000000000 R09: 0000000000000000 [ 819.283503][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.291520][T10927] R13: 00007fa22dc26038 R14: 00007fa22dc25fa0 R15: 00007fffc1e043f8 [ 819.299563][T10927] [ 819.698809][T10937] device syzkaller0 entered promiscuous mode [ 819.706226][T10943] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1936'. [ 819.724928][T10945] team0: Device veth0_to_bond is up. Set it down before adding it as a team port [ 820.814209][T10980] FAULT_INJECTION: forcing a failure. [ 820.814209][T10980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.833784][T10980] CPU: 0 PID: 10980 Comm: syz.5.1946 Not tainted syzkaller #0 [ 820.841318][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 820.851395][T10980] Call Trace: [ 820.854688][T10980] [ 820.857641][T10980] dump_stack_lvl+0x188/0x24e [ 820.862341][T10980] ? show_regs_print_info+0x12/0x12 [ 820.867552][T10980] ? load_image+0x410/0x410 [ 820.872079][T10980] ? __lock_acquire+0x7ea0/0x7ea0 [ 820.877127][T10980] should_fail_ex+0x390/0x4c0 [ 820.881875][T10980] _copy_from_user+0x2c/0x170 [ 820.886616][T10980] iovec_from_user+0x143/0x360 [ 820.891404][T10980] __import_iovec+0x6c/0x510 [ 820.896097][T10980] import_iovec+0x6f/0xa0 [ 820.900530][T10980] ___sys_sendmsg+0x252/0x360 [ 820.905469][T10980] ? __sys_sendmsg+0x2a0/0x2a0 [ 820.910296][T10980] ? __lock_acquire+0x7ea0/0x7ea0 [ 820.915367][T10980] __se_sys_sendmsg+0x1c3/0x2b0 [ 820.920257][T10980] ? __x64_sys_sendmsg+0x80/0x80 [ 820.925263][T10980] ? lockdep_hardirqs_on+0x94/0x140 [ 820.930491][T10980] do_syscall_64+0x4c/0xa0 [ 820.934960][T10980] ? clear_bhb_loop+0x60/0xb0 [ 820.939674][T10980] ? clear_bhb_loop+0x60/0xb0 [ 820.944413][T10980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.950359][T10980] RIP: 0033:0x7ff423b9e559 [ 820.954808][T10980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.974448][T10980] RSP: 002b:00007ff424b30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.982940][T10980] RAX: ffffffffffffffda RBX: 00007ff423e25fa0 RCX: 00007ff423b9e559 [ 820.990919][T10980] RDX: 0000000000000000 RSI: 0000200000002340 RDI: 0000000000000003 [ 820.998916][T10980] RBP: 00007ff424b30090 R08: 0000000000000000 R09: 0000000000000000 [ 821.006940][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.014922][T10980] R13: 00007ff423e26038 R14: 00007ff423e25fa0 R15: 00007ffe6b46feb8 [ 821.022917][T10980] [ 822.153069][T10954] validate_nla: 10 callbacks suppressed [ 822.153085][T10954] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 822.171363][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1941'. [ 822.183888][T10949] netlink: 'syz.4.1939': attribute type 29 has an invalid length. [ 822.211471][T10964] tun0: tun_chr_ioctl cmd 21731 [ 822.562525][T10992] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1950'. [ 822.765304][T11002] netlink: 'syz.0.1952': attribute type 25 has an invalid length. [ 822.872522][T11002] netlink: 'syz.0.1952': attribute type 29 has an invalid length. [ 822.891556][T11001] netlink: 'syz.1.1951': attribute type 10 has an invalid length. [ 822.912864][T11001] team0: Device veth0_to_bond is up. Set it down before adding it as a team port [ 826.027048][T11020] netlink: 'syz.4.1958': attribute type 2 has an invalid length. [ 826.230442][T11020] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1958'. [ 826.639923][T11025] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 826.751277][T11025] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 826.796382][T11027] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 826.873333][T11025] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 827.005035][T11025] tun0: tun_chr_ioctl cmd 21731 [ 827.017525][T11033] FAULT_INJECTION: forcing a failure. [ 827.017525][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 827.060287][T11033] CPU: 1 PID: 11033 Comm: syz.3.1959 Not tainted syzkaller #0 [ 827.067887][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 827.077973][T11033] Call Trace: [ 827.081279][T11033] [ 827.084233][T11033] dump_stack_lvl+0x188/0x24e [ 827.088944][T11033] ? show_regs_print_info+0x12/0x12 [ 827.094167][T11033] ? load_image+0x410/0x410 [ 827.098690][T11033] ? __might_sleep+0xd0/0xd0 [ 827.103319][T11033] ? __lock_acquire+0x7ea0/0x7ea0 [ 827.108396][T11033] should_fail_ex+0x390/0x4c0 [ 827.113121][T11033] should_failslab+0x5/0x20 [ 827.117646][T11033] slab_pre_alloc_hook+0x59/0x300 [ 827.122695][T11033] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 827.128452][T11033] __kmem_cache_alloc_node+0x4f/0x270 [ 827.133851][T11033] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 827.139616][T11033] __kmalloc+0xa3/0x240 [ 827.143795][T11033] tomoyo_realpath_from_path+0xe2/0x5c0 [ 827.150069][T11033] ? tomoyo_domain+0xd2/0x120 [ 827.154808][T11033] ? tomoyo_path_number_perm+0x205/0x650 [ 827.160476][T11033] tomoyo_path_number_perm+0x22f/0x650 [ 827.165964][T11033] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 827.171477][T11033] ? ksys_write+0x1ce/0x260 [ 827.176011][T11033] ? common_file_perm+0x171/0x1c0 [ 827.181101][T11033] ? __fget_files+0x28/0x460 [ 827.185735][T11033] security_file_ioctl+0x6c/0xa0 [ 827.190700][T11033] __se_sys_ioctl+0x48/0x170 [ 827.195317][T11033] do_syscall_64+0x4c/0xa0 [ 827.199753][T11033] ? clear_bhb_loop+0x60/0xb0 [ 827.204453][T11033] ? clear_bhb_loop+0x60/0xb0 [ 827.209160][T11033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.215078][T11033] RIP: 0033:0x7fc89319e559 [ 827.219513][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.239138][T11033] RSP: 002b:00007fc89402f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.247601][T11033] RAX: ffffffffffffffda RBX: 00007fc893426090 RCX: 00007fc89319e559 [ 827.255594][T11033] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 000000000000000a [ 827.263584][T11033] RBP: 00007fc89402f090 R08: 0000000000000000 R09: 0000000000000000 [ 827.271578][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.279570][T11033] R13: 00007fc893426128 R14: 00007fc893426090 R15: 00007fffeb2e15e8 [ 827.287586][T11033] [ 827.293817][T11032] validate_nla: 3 callbacks suppressed [ 827.293833][T11032] netlink: 'syz.5.1962': attribute type 16 has an invalid length. [ 827.344096][T11033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 827.420212][T11032] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1962'. [ 827.526567][T11041] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1964'. [ 827.731969][T11045] netlink: 'syz.3.1965': attribute type 25 has an invalid length. [ 827.770863][T11045] netlink: 'syz.3.1965': attribute type 29 has an invalid length. [ 828.027581][T11057] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 828.064461][T11057] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 828.250789][T11067] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1975'. [ 828.318437][T11067] bridge0: port 3(dummy0) entered disabled state [ 828.401054][T11067] bridge0: port 3(dummy0) entered disabled state [ 828.427627][T11079] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1976'. [ 828.757541][T11091] netlink: 'syz.3.1980': attribute type 29 has an invalid length. [ 828.816498][T11088] netlink: 'syz.5.1981': attribute type 25 has an invalid length. [ 828.846111][T11088] netlink: 'syz.5.1981': attribute type 29 has an invalid length. [ 828.930360][T11091] netlink: 'syz.3.1980': attribute type 29 has an invalid length. [ 828.963650][T11092] netlink: 'syz.3.1980': attribute type 29 has an invalid length. [ 829.437843][T11092] tun0: tun_chr_ioctl cmd 21731 [ 829.691256][T11114] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1989'. [ 830.214114][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1995'. [ 830.851367][T11142] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2004'. [ 830.973386][T11150] tun0: tun_chr_ioctl cmd 21731 [ 831.043201][T11152] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2006'. [ 831.097581][T11152] bridge0: port 3(bond0) entered blocking state [ 831.138780][T11152] bridge0: port 3(bond0) entered disabled state [ 831.208530][T11152] device bond0 entered promiscuous mode [ 831.226484][T11152] device bond_slave_0 entered promiscuous mode [ 831.236425][T11152] device bond_slave_1 entered promiscuous mode [ 831.274729][T11152] bridge0: port 3(bond0) entered blocking state [ 831.282244][T11152] bridge0: port 3(bond0) entered forwarding state [ 831.549160][T11162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2011'. [ 832.067828][T11173] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2016'. [ 832.693690][T11194] validate_nla: 13 callbacks suppressed [ 832.693721][T11194] netlink: 'syz.5.2025': attribute type 29 has an invalid length. [ 832.785447][T11194] netlink: 'syz.5.2025': attribute type 29 has an invalid length. [ 832.833219][T11195] netlink: 'syz.5.2025': attribute type 29 has an invalid length. [ 832.855948][T11196] netlink: 'syz.5.2025': attribute type 29 has an invalid length. [ 832.962525][T11194] tun0: tun_chr_ioctl cmd 21731 [ 832.972275][T11198] netlink: 'syz.1.2026': attribute type 10 has an invalid length. [ 832.998338][T11198] __nla_validate_parse: 1 callbacks suppressed [ 832.998626][T11198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2026'. [ 833.329906][T11206] netlink: 'syz.0.2030': attribute type 25 has an invalid length. [ 833.421884][T11206] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 833.846795][T11215] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2029'. [ 834.068060][T11218] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2033'. [ 835.105365][T11228] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 835.170603][T11228] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2037'. [ 835.797901][T11242] netlink: 'syz.4.2041': attribute type 10 has an invalid length. [ 835.844308][T11240] netlink: 'syz.0.2042': attribute type 29 has an invalid length. [ 835.876972][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2041'. [ 836.101758][T11240] tun0: tun_chr_ioctl cmd 21731 [ 836.991776][T11260] FAULT_INJECTION: forcing a failure. [ 836.991776][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.073733][T11259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2047'. [ 837.160245][T11260] CPU: 0 PID: 11260 Comm: syz.4.2049 Not tainted syzkaller #0 [ 837.167818][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.177923][T11260] Call Trace: [ 837.181240][T11260] [ 837.184211][T11260] dump_stack_lvl+0x188/0x24e [ 837.188946][T11260] ? show_regs_print_info+0x12/0x12 [ 837.194196][T11260] ? load_image+0x410/0x410 [ 837.198832][T11260] ? __lock_acquire+0x7ea0/0x7ea0 [ 837.203910][T11260] ? perf_trace_lock+0xf8/0x390 [ 837.208819][T11260] should_fail_ex+0x390/0x4c0 [ 837.213573][T11260] _copy_from_user+0x2c/0x170 [ 837.218320][T11260] ___sys_sendmsg+0x1c3/0x360 [ 837.223073][T11260] ? __sys_sendmsg+0x2a0/0x2a0 [ 837.227910][T11260] ? trace_call_bpf+0xbf/0x6b0 [ 837.232757][T11260] __se_sys_sendmsg+0x1c3/0x2b0 [ 837.237679][T11260] ? perf_trace_preemptirq_template+0x268/0x320 [ 837.243973][T11260] ? __x64_sys_sendmsg+0x80/0x80 [ 837.249001][T11260] ? lockdep_hardirqs_on+0x94/0x140 [ 837.254266][T11260] do_syscall_64+0x4c/0xa0 [ 837.258732][T11260] ? clear_bhb_loop+0x60/0xb0 [ 837.263467][T11260] ? clear_bhb_loop+0x60/0xb0 [ 837.268204][T11260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.274170][T11260] RIP: 0033:0x7fa22d99e559 [ 837.278625][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.298285][T11260] RSP: 002b:00007fa22e958028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.306751][T11260] RAX: ffffffffffffffda RBX: 00007fa22dc25fa0 RCX: 00007fa22d99e559 [ 837.314782][T11260] RDX: 0000000000000000 RSI: 0000200000001880 RDI: 0000000000000003 [ 837.322973][T11260] RBP: 00007fa22e958090 R08: 0000000000000000 R09: 0000000000000000 [ 837.331022][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.339059][T11260] R13: 00007fa22dc26038 R14: 00007fa22dc25fa0 R15: 00007fffc1e043f8 [ 837.347106][T11260] [ 837.744007][T11275] FAULT_INJECTION: forcing a failure. [ 837.744007][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 837.780344][T11275] CPU: 0 PID: 11275 Comm: syz.3.2054 Not tainted syzkaller #0 [ 837.787899][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.798027][T11275] Call Trace: [ 837.801351][T11275] [ 837.804321][T11275] dump_stack_lvl+0x188/0x24e [ 837.809059][T11275] ? show_regs_print_info+0x12/0x12 [ 837.814311][T11275] ? load_image+0x410/0x410 [ 837.818865][T11275] ? __might_sleep+0xd0/0xd0 [ 837.823502][T11275] ? __lock_acquire+0x7ea0/0x7ea0 [ 837.828590][T11275] should_fail_ex+0x390/0x4c0 [ 837.833333][T11275] should_failslab+0x5/0x20 [ 837.837884][T11275] slab_pre_alloc_hook+0x59/0x300 [ 837.842985][T11275] ? sk_prot_alloc+0xe7/0x210 [ 837.847720][T11275] __kmem_cache_alloc_node+0x4f/0x270 [ 837.853131][T11275] ? sk_prot_alloc+0xe7/0x210 [ 837.857840][T11275] __kmalloc+0xa3/0x240 [ 837.862018][T11275] sk_prot_alloc+0xe7/0x210 [ 837.866548][T11275] ? sk_alloc+0x20/0x330 [ 837.870833][T11275] sk_alloc+0x36/0x330 [ 837.874929][T11275] ? bpf_ctx_init+0x154/0x190 [ 837.879670][T11275] bpf_prog_test_run_skb+0x36d/0x18e0 [ 837.885091][T11275] ? __fget_files+0x28/0x460 [ 837.889724][T11275] ? __fget_files+0x3fc/0x460 [ 837.894454][T11275] ? cpu_online+0xa0/0xa0 [ 837.898818][T11275] bpf_prog_test_run+0x31c/0x390 [ 837.903794][T11275] __sys_bpf+0x62b/0x780 [ 837.908070][T11275] ? bpf_link_show_fdinfo+0x380/0x380 [ 837.913486][T11275] ? lock_chain_count+0x20/0x20 [ 837.918376][T11275] __x64_sys_bpf+0x78/0x90 [ 837.922823][T11275] do_syscall_64+0x4c/0xa0 [ 837.927266][T11275] ? clear_bhb_loop+0x60/0xb0 [ 837.931980][T11275] ? clear_bhb_loop+0x60/0xb0 [ 837.936693][T11275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.942636][T11275] RIP: 0033:0x7fc89319e559 [ 837.947118][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.966791][T11275] RSP: 002b:00007fc894050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 837.975248][T11275] RAX: ffffffffffffffda RBX: 00007fc893425fa0 RCX: 00007fc89319e559 [ 837.983254][T11275] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 837.991261][T11275] RBP: 00007fc894050090 R08: 0000000000000000 R09: 0000000000000000 [ 837.999320][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.007330][T11275] R13: 00007fc893426038 R14: 00007fc893425fa0 R15: 00007fffeb2e15e8 [ 838.015418][T11275] [ 838.218394][T11280] validate_nla: 5 callbacks suppressed [ 838.218465][T11280] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 838.241538][T11280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2056'. [ 838.551150][T11286] netlink: 'syz.3.2058': attribute type 29 has an invalid length. [ 840.967787][T11287] netlink: 'syz.0.2057': attribute type 25 has an invalid length. [ 840.975930][T11287] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 840.987819][T11291] tipc: Started in network mode [ 840.993428][T11291] tipc: Node identity 9215a268, cluster identity 4711 [ 841.001703][T11291] tipc: Node number set to 2450891368 [ 841.008172][T11286] netlink: 'syz.3.2058': attribute type 29 has an invalid length. [ 841.025964][T11294] netlink: 'syz.5.2059': attribute type 39 has an invalid length. [ 841.109378][T11304] tun0: tun_chr_ioctl cmd 21731 [ 841.119725][T11308] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2061'. [ 841.297357][T11313] FAULT_INJECTION: forcing a failure. [ 841.297357][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 841.410246][T11313] CPU: 0 PID: 11313 Comm: syz.1.2063 Not tainted syzkaller #0 [ 841.417823][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.427942][T11313] Call Trace: [ 841.431276][T11313] [ 841.434267][T11313] dump_stack_lvl+0x188/0x24e [ 841.439029][T11313] ? show_regs_print_info+0x12/0x12 [ 841.444302][T11313] ? load_image+0x410/0x410 [ 841.448876][T11313] ? __might_sleep+0xd0/0xd0 [ 841.453526][T11313] ? __lock_acquire+0x7ea0/0x7ea0 [ 841.458694][T11313] should_fail_ex+0x390/0x4c0 [ 841.463463][T11313] should_failslab+0x5/0x20 [ 841.468026][T11313] slab_pre_alloc_hook+0x59/0x300 [ 841.473118][T11313] ? __lock_acquire+0x7ea0/0x7ea0 [ 841.478215][T11313] ? security_sk_alloc+0x47/0x130 [ 841.483321][T11313] __kmem_cache_alloc_node+0x4f/0x270 [ 841.488812][T11313] ? security_sk_alloc+0x47/0x130 [ 841.493904][T11313] __kmalloc+0xa3/0x240 [ 841.498125][T11313] security_sk_alloc+0x47/0x130 [ 841.503061][T11313] sk_prot_alloc+0x101/0x210 [ 841.507732][T11313] sk_alloc+0x36/0x330 [ 841.511892][T11313] unix_create1+0xb3/0x710 [ 841.516407][T11313] unix_create+0x139/0x1f0 [ 841.520901][T11313] __sock_create+0x49a/0x940 [ 841.525571][T11313] __sys_socketpair+0x1bd/0x540 [ 841.530497][T11313] __x64_sys_socketpair+0x97/0xb0 [ 841.535588][T11313] do_syscall_64+0x4c/0xa0 [ 841.540093][T11313] ? clear_bhb_loop+0x60/0xb0 [ 841.544837][T11313] ? clear_bhb_loop+0x60/0xb0 [ 841.549579][T11313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.555543][T11313] RIP: 0033:0x7f40fb39e559 [ 841.560025][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.579703][T11313] RSP: 002b:00007f40fc1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 841.588202][T11313] RAX: ffffffffffffffda RBX: 00007f40fb625fa0 RCX: 00007f40fb39e559 [ 841.596247][T11313] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 841.604282][T11313] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 841.612320][T11313] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 841.620353][T11313] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 841.628432][T11313] [ 842.178325][T11330] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 842.197769][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'. [ 842.278692][T11335] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.2072'. [ 842.353371][T11342] netlink: 'syz.1.2074': attribute type 25 has an invalid length. [ 842.366456][T11342] netlink: 'syz.1.2074': attribute type 29 has an invalid length. [ 842.380007][T11339] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2073'. [ 842.828144][T11352] netlink: 'syz.4.2077': attribute type 29 has an invalid length. [ 843.104003][T11351] tun0: tun_chr_ioctl cmd 21731 [ 843.555563][T11370] FAULT_INJECTION: forcing a failure. [ 843.555563][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 843.619415][T11370] CPU: 1 PID: 11370 Comm: syz.1.2083 Not tainted syzkaller #0 [ 843.626991][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.637122][T11370] Call Trace: [ 843.640465][T11370] [ 843.643455][T11370] dump_stack_lvl+0x188/0x24e [ 843.648208][T11370] ? show_regs_print_info+0x12/0x12 [ 843.653465][T11370] ? load_image+0x410/0x410 [ 843.658028][T11370] ? __might_sleep+0xd0/0xd0 [ 843.662674][T11370] ? __lock_acquire+0x7ea0/0x7ea0 [ 843.667771][T11370] should_fail_ex+0x390/0x4c0 [ 843.672554][T11370] should_failslab+0x5/0x20 [ 843.677110][T11370] slab_pre_alloc_hook+0x59/0x300 [ 843.682201][T11370] ? __lock_acquire+0x7ea0/0x7ea0 [ 843.687295][T11370] ? kvmalloc_node+0x6c/0x180 [ 843.692036][T11370] __kmem_cache_alloc_node+0x4f/0x270 [ 843.697475][T11370] ? schedule_delayed_monitor_work+0x160/0x160 [ 843.703712][T11370] ? kvmalloc_node+0x6c/0x180 [ 843.708450][T11370] __kmalloc_node+0xa2/0x240 [ 843.713111][T11370] kvmalloc_node+0x6c/0x180 [ 843.717672][T11370] bpf_test_run_xdp_live+0x1da/0x1a90 [ 843.723110][T11370] ? 0xffffffffa00051c0 [ 843.727328][T11370] ? text_poke_copy+0x7b/0x90 [ 843.732856][T11370] ? 0xffffffffa00051c0 [ 843.737080][T11370] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 843.743050][T11370] ? xdp_convert_md_to_buff+0x330/0x330 [ 843.748700][T11370] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 843.755020][T11370] ? bpf_test_init+0x119/0x140 [ 843.759851][T11370] ? xdp_convert_md_to_buff+0x5b/0x330 [ 843.765375][T11370] bpf_prog_test_run_xdp+0x757/0xf80 [ 843.770735][T11370] ? __lock_acquire+0x7ea0/0x7ea0 [ 843.775837][T11370] ? dev_put+0x80/0x80 [ 843.779985][T11370] ? dev_put+0x80/0x80 [ 843.784115][T11370] bpf_prog_test_run+0x31c/0x390 [ 843.789124][T11370] __sys_bpf+0x62b/0x780 [ 843.793434][T11370] ? bpf_link_show_fdinfo+0x380/0x380 [ 843.798911][T11370] ? lock_chain_count+0x20/0x20 [ 843.803840][T11370] __x64_sys_bpf+0x78/0x90 [ 843.808322][T11370] do_syscall_64+0x4c/0xa0 [ 843.812812][T11370] ? clear_bhb_loop+0x60/0xb0 [ 843.817555][T11370] ? clear_bhb_loop+0x60/0xb0 [ 843.822301][T11370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.828257][T11370] RIP: 0033:0x7f40fb39e559 [ 843.832724][T11370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.852391][T11370] RSP: 002b:00007f40fc1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 843.860904][T11370] RAX: ffffffffffffffda RBX: 00007f40fb625fa0 RCX: 00007f40fb39e559 [ 843.868928][T11370] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 843.876958][T11370] RBP: 00007f40fc1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 843.884981][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.893000][T11370] R13: 00007f40fb626038 R14: 00007f40fb625fa0 R15: 00007fffc04ecb08 [ 843.901023][T11370] [ 844.276159][T11378] validate_nla: 3 callbacks suppressed [ 844.276202][T11378] netlink: 'syz.1.2086': attribute type 10 has an invalid length. [ 844.326812][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2086'. [ 844.380677][T11383] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2089'. [ 844.527608][T11387] netlink: 'syz.3.2090': attribute type 25 has an invalid length. [ 844.560342][T11387] netlink: 'syz.3.2090': attribute type 29 has an invalid length. [ 844.617628][T11389] FAULT_INJECTION: forcing a failure. [ 844.617628][T11389] name failslab, interval 1, probability 0, space 0, times 0 [ 844.691739][T11389] CPU: 1 PID: 11389 Comm: syz.0.2091 Not tainted syzkaller #0 [ 844.699292][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.709389][T11389] Call Trace: [ 844.712703][T11389] [ 844.715671][T11389] dump_stack_lvl+0x188/0x24e [ 844.720403][T11389] ? kasan_set_track+0x4b/0x70 [ 844.725218][T11389] ? show_regs_print_info+0x12/0x12 [ 844.730456][T11389] ? load_image+0x410/0x410 [ 844.735054][T11389] should_fail_ex+0x390/0x4c0 [ 844.739802][T11389] should_failslab+0x5/0x20 [ 844.744374][T11389] slab_pre_alloc_hook+0x59/0x300 [ 844.749467][T11389] ? sock_kmalloc+0x92/0xf0 [ 844.754053][T11389] __kmem_cache_alloc_node+0x4f/0x270 [ 844.759480][T11389] ? sock_kmalloc+0x92/0xf0 [ 844.764038][T11389] __kmalloc+0xa3/0x240 [ 844.768228][T11389] ? __virt_addr_valid+0x188/0x540 [ 844.773399][T11389] sock_kmalloc+0x92/0xf0 [ 844.777847][T11389] ipv6_renew_options+0x2c0/0xac0 [ 844.782947][T11389] do_ipv6_setsockopt+0x1d9e/0x3c30 [ 844.788224][T11389] ? sk_dst_reset+0xa0/0xa0 [ 844.792798][T11389] ? verify_lock_unused+0x140/0x140 [ 844.798056][T11389] ? mark_lock+0x94/0x320 [ 844.802469][T11389] ? __lock_acquire+0x1359/0x7ea0 [ 844.807569][T11389] ? get_pid_task+0x1c/0x1e0 [ 844.812201][T11389] ? aa_label_sk_perm+0x501/0x6b0 [ 844.817298][T11389] ? verify_lock_unused+0x140/0x140 [ 844.822562][T11389] ? aa_sk_perm+0x950/0x950 [ 844.827134][T11389] ? __might_sleep+0xd0/0xd0 [ 844.831776][T11389] ? __fget_files+0x28/0x460 [ 844.836451][T11389] ? aa_sk_perm+0x81f/0x950 [ 844.841027][T11389] ? aa_af_perm+0x340/0x340 [ 844.845606][T11389] ? __fget_files+0x3fc/0x460 [ 844.850338][T11389] ? aa_sock_opt_perm+0x74/0x100 [ 844.855348][T11389] ipv6_setsockopt+0x55/0x190 [ 844.860087][T11389] ? sock_common_recvmsg+0x190/0x190 [ 844.865463][T11389] __sys_setsockopt+0x2bf/0x3d0 [ 844.870374][T11389] __x64_sys_setsockopt+0xb1/0xc0 [ 844.875465][T11389] do_syscall_64+0x4c/0xa0 [ 844.879965][T11389] ? clear_bhb_loop+0x60/0xb0 [ 844.884695][T11389] ? clear_bhb_loop+0x60/0xb0 [ 844.889435][T11389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.895392][T11389] RIP: 0033:0x7f08cb19e559 [ 844.899862][T11389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.919527][T11389] RSP: 002b:00007f08cc04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.928002][T11389] RAX: ffffffffffffffda RBX: 00007f08cb425fa0 RCX: 00007f08cb19e559 [ 844.936036][T11389] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000003 [ 844.944063][T11389] RBP: 00007f08cc04c090 R08: 0000000000000120 R09: 0000000000000000 [ 844.952088][T11389] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 844.960119][T11389] R13: 00007f08cb426038 R14: 00007f08cb425fa0 R15: 00007ffd4290ada8 [ 844.968159][T11389] [ 845.269834][T11395] netlink: 'syz.5.2094': attribute type 29 has an invalid length. [ 845.338511][T11395] netlink: 'syz.5.2094': attribute type 29 has an invalid length. [ 845.412759][T11404] tun0: tun_chr_ioctl cmd 21731 [ 845.445538][T11398] netlink: 'syz.5.2094': attribute type 29 has an invalid length. [ 845.481396][T11401] netlink: 'syz.5.2094': attribute type 29 has an invalid length. [ 845.781174][T11412] netlink: 'syz.3.2098': attribute type 20 has an invalid length. [ 845.919330][T11426] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2101'. [ 846.144956][T11431] netlink: 'syz.5.2102': attribute type 10 has an invalid length. [ 846.160691][T11431] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2102'. [ 846.288906][T11433] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2103'. [ 846.449707][T11438] netlink: 'syz.4.2104': attribute type 29 has an invalid length. [ 846.540324][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 846.577527][T11441] device syzkaller0 entered promiscuous mode [ 846.936755][T11453] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2108'. [ 851.319511][T11478] validate_nla: 5 callbacks suppressed [ 851.319532][T11478] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 852.599039][T11468] netlink: 'syz.5.2113': attribute type 10 has an invalid length. [ 852.607470][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2113'. [ 852.637422][T11478] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 852.666591][T11486] tun0: tun_chr_ioctl cmd 21731 [ 852.671927][T11485] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2118'. [ 852.861908][T11491] netlink: 'syz.5.2120': attribute type 25 has an invalid length. [ 852.894531][T11491] netlink: 'syz.5.2120': attribute type 29 has an invalid length. [ 852.964376][T11495] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 852.999567][T11495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2121'. [ 853.331399][T11504] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 853.339795][T11504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2125'. [ 853.519051][T11509] netlink: 'syz.5.2126': attribute type 29 has an invalid length. [ 853.701396][T11509] netlink: 'syz.5.2126': attribute type 29 has an invalid length. [ 853.782851][T11514] netlink: 'syz.5.2126': attribute type 29 has an invalid length. [ 853.949707][T11524] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2132'. [ 854.269575][T11526] tun0: tun_chr_ioctl cmd 21731 [ 854.570046][T11543] FAULT_INJECTION: forcing a failure. [ 854.570046][T11543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.596891][T11543] CPU: 1 PID: 11543 Comm: syz.3.2140 Not tainted syzkaller #0 [ 854.604444][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.614555][T11543] Call Trace: [ 854.617872][T11543] [ 854.620836][T11543] dump_stack_lvl+0x188/0x24e [ 854.623402][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2138'. [ 854.625546][T11543] ? show_regs_print_info+0x12/0x12 [ 854.625581][T11543] ? load_image+0x410/0x410 [ 854.625607][T11543] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 854.650479][T11543] ? lockdep_hardirqs_on+0x94/0x140 [ 854.655736][T11543] should_fail_ex+0x390/0x4c0 [ 854.660470][T11543] copyin+0x1b/0x120 [ 854.664421][T11543] _copy_from_iter+0x447/0x1130 [ 854.669356][T11543] ? copyout_mc+0x110/0x110 [ 854.673905][T11543] ? txopt_get+0x76/0x3f0 [ 854.678292][T11543] ? txopt_get+0x76/0x3f0 [ 854.682671][T11543] ? txopt_get+0x340/0x3f0 [ 854.687137][T11543] ? rawv6_sendmsg+0x1b1/0x1710 [ 854.692046][T11543] ? fl6_sock_lookup+0xc0/0xc0 [ 854.696857][T11543] ? kasan_check_range+0x80/0x290 [ 854.701952][T11543] rawv6_probe_proto_opt+0x166/0x300 [ 854.707286][T11543] rawv6_sendmsg+0xa6c/0x1710 [ 854.712029][T11543] ? compat_rawv6_ioctl+0x60/0x60 [ 854.717122][T11543] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 854.723591][T11543] ? aa_sock_msg_perm+0x94/0x150 [ 854.728584][T11543] ? inet_sendmsg+0x7a/0x2a0 [ 854.733217][T11543] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 854.738558][T11543] ? inet_send_prepare+0x250/0x250 [ 854.743759][T11543] ____sys_sendmsg+0x5ed/0x9a0 [ 854.748592][T11543] ? __sys_sendmsg_sock+0x30/0x30 [ 854.753675][T11543] ? __import_iovec+0x306/0x510 [ 854.758584][T11543] ? import_iovec+0x6f/0xa0 [ 854.763125][T11543] ___sys_sendmsg+0x2a2/0x360 [ 854.767838][T11543] ? __sys_sendmsg+0x2a0/0x2a0 [ 854.772667][T11543] __se_sys_sendmsg+0x1c3/0x2b0 [ 854.777544][T11543] ? __x64_sys_sendmsg+0x80/0x80 [ 854.782523][T11543] ? syscall_enter_from_user_mode+0x2a/0x80 [ 854.788449][T11543] do_syscall_64+0x4c/0xa0 [ 854.792888][T11543] ? clear_bhb_loop+0x60/0xb0 [ 854.797589][T11543] ? clear_bhb_loop+0x60/0xb0 [ 854.802290][T11543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.808206][T11543] RIP: 0033:0x7fc89319e559 [ 854.812639][T11543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.832274][T11543] RSP: 002b:00007fc894050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.840714][T11543] RAX: ffffffffffffffda RBX: 00007fc893425fa0 RCX: 00007fc89319e559 [ 854.848728][T11543] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000006 [ 854.856728][T11543] RBP: 00007fc894050090 R08: 0000000000000000 R09: 0000000000000000 [ 854.864722][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.872718][T11543] R13: 00007fc893426038 R14: 00007fc893425fa0 R15: 00007fffeb2e15e8 [ 854.880729][T11543] [ 855.048220][T11548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2141'. [ 855.235144][T11559] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2146'. [ 856.409061][T11570] validate_nla: 15 callbacks suppressed [ 856.409083][T11570] netlink: 'syz.3.2148': attribute type 29 has an invalid length. [ 856.477995][T11576] tun0: tun_chr_ioctl cmd 21731 [ 856.528942][T11574] netlink: 'syz.3.2148': attribute type 29 has an invalid length. [ 856.598628][T11584] netlink: 'syz.5.2155': attribute type 10 has an invalid length. [ 856.650566][T11584] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2155'. [ 857.126600][T11594] netlink: 'syz.5.2159': attribute type 10 has an invalid length. [ 857.147356][T11594] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2159'. [ 857.282803][T11602] netlink: 'syz.0.2162': attribute type 25 has an invalid length. [ 857.330682][T11602] netlink: 'syz.0.2162': attribute type 29 has an invalid length. [ 857.599879][T11616] FAULT_INJECTION: forcing a failure. [ 857.599879][T11616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.639658][T11616] CPU: 1 PID: 11616 Comm: syz.0.2168 Not tainted syzkaller #0 [ 857.647234][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.657347][T11616] Call Trace: [ 857.660678][T11616] [ 857.663670][T11616] dump_stack_lvl+0x188/0x24e [ 857.668431][T11616] ? show_regs_print_info+0x12/0x12 [ 857.673699][T11616] ? load_image+0x410/0x410 [ 857.678272][T11616] ? __lock_acquire+0x7ea0/0x7ea0 [ 857.683378][T11616] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 857.689182][T11616] should_fail_ex+0x390/0x4c0 [ 857.693939][T11616] _copy_from_user+0x2c/0x170 [ 857.698680][T11616] ___sys_sendmsg+0x1c3/0x360 [ 857.703435][T11616] ? __sys_sendmsg+0x2a0/0x2a0 [ 857.708307][T11616] ? __lock_acquire+0x7ea0/0x7ea0 [ 857.713443][T11616] __se_sys_sendmsg+0x1c3/0x2b0 [ 857.718367][T11616] ? __x64_sys_sendmsg+0x80/0x80 [ 857.723412][T11616] ? lockdep_hardirqs_on+0x94/0x140 [ 857.728687][T11616] do_syscall_64+0x4c/0xa0 [ 857.733173][T11616] ? clear_bhb_loop+0x60/0xb0 [ 857.737908][T11616] ? clear_bhb_loop+0x60/0xb0 [ 857.742655][T11616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.748619][T11616] RIP: 0033:0x7f08cb19e559 [ 857.753089][T11616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.772841][T11616] RSP: 002b:00007f08cc04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.781325][T11616] RAX: ffffffffffffffda RBX: 00007f08cb425fa0 RCX: 00007f08cb19e559 [ 857.789347][T11616] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 857.797371][T11616] RBP: 00007f08cc04c090 R08: 0000000000000000 R09: 0000000000000000 [ 857.805404][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.813428][T11616] R13: 00007f08cb426038 R14: 00007f08cb425fa0 R15: 00007ffd4290ada8 [ 857.821487][T11616] [ 857.934700][T11621] netlink: 'syz.4.2169': attribute type 29 has an invalid length. [ 858.251411][T11614] __nla_validate_parse: 1 callbacks suppressed [ 858.251432][T11614] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2166'. [ 858.311738][T11621] netlink: 'syz.4.2169': attribute type 29 has an invalid length. [ 858.326932][T11624] netlink: 'syz.3.2170': attribute type 10 has an invalid length. [ 858.340507][T11624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2170'. [ 858.400690][T11630] tun0: tun_chr_ioctl cmd 21731 [ 858.414430][T11623] netlink: 'syz.4.2169': attribute type 29 has an invalid length. [ 858.807436][T11640] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2175'. [ 858.904722][T11643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2176'. [ 859.483459][T11662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2184'. [ 859.744995][T11669] tun0: tun_chr_ioctl cmd 21731 [ 859.825616][ T28] INFO: task syz.2.1251:8644 blocked for more than 143 seconds. [ 859.839325][ T28] Not tainted syzkaller #0 [ 859.847425][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.857366][ T28] task:syz.2.1251 state:D stack:24880 pid:8644 ppid:4318 flags:0x00004002 [ 859.867878][ T28] Call Trace: [ 859.872081][ T28] [ 859.875288][ T28] __schedule+0x107f/0x4030 [ 859.891638][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 859.899413][ T28] ? release_firmware_map_entry+0x187/0x187 [ 859.914329][ T28] ? task_work_cancel+0xa1/0x220 [ 859.922616][ T28] ? task_work_cancel_func+0x210/0x210 [ 859.928336][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 859.935591][ T28] schedule+0xb9/0x180 [ 859.939895][ T28] ? _free_event+0x10d/0x1050 [ 859.946027][ T28] _free_event+0x176/0x1050 [ 859.951397][ T28] perf_event_release_kernel+0x7c4/0x850 [ 859.957735][ T28] ? __might_sleep+0xd0/0xd0 [ 859.963142][ T28] ? calc_timer_values+0x410/0x410 [ 859.968940][ T28] ? __might_sleep+0xd0/0xd0 [ 859.978185][ T28] ? perf_mmap+0x1470/0x1470 [ 859.985693][ T28] perf_release+0x37/0x40 [ 859.993067][ T28] __fput+0x20a/0x8b0 [ 859.997762][ T28] task_work_run+0x1d0/0x260 [ 860.003359][ T28] ? task_work_cancel+0x220/0x220 [ 860.009072][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 860.021097][ T28] do_exit+0x9d5/0x2570 [ 860.025541][ T28] ? lock_chain_count+0x20/0x20 [ 860.039652][ T28] ? rcu_is_watching+0x11/0xa0 [ 860.045746][ T28] ? put_task_struct+0x80/0x80 [ 860.051715][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 860.058208][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 860.065477][ T28] ? _raw_spin_unlock_irq+0x25/0x40 [ 860.071878][ T28] do_group_exit+0x229/0x2e0 [ 860.076740][ T28] __x64_sys_exit_group+0x3b/0x40 [ 860.083182][ T28] do_syscall_64+0x4c/0xa0 [ 860.087842][ T28] ? clear_bhb_loop+0x60/0xb0 [ 860.093884][ T28] ? clear_bhb_loop+0x60/0xb0 [ 860.098825][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.108877][ T28] RIP: 0033:0x7f3af2d9e559 [ 860.114164][ T28] RSP: 002b:00007f3af3c20f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 860.126351][ T28] RAX: ffffffffffffffda RBX: 00007f3af2e0b5f0 RCX: 00007f3af2d9e559 [ 860.138732][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 860.160285][ T28] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f3af3026038 [ 860.179180][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.207648][ T28] R13: 00007f3af3026038 R14: 00007f3af3025fa0 R15: 00007ffcf7656658 [ 860.217160][ T28] [ 860.227483][ T28] [ 860.227483][ T28] Showing all locks held in the system: [ 860.238067][ T28] 1 lock held by rcu_tasks_kthre/12: [ 860.248813][ T28] #0: ffffffff8d92e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 860.268405][ T28] 2 locks held by rcu_tasks_trace/13: [ 860.274780][ T28] #0: ffffffff8d92ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 860.286618][ T28] #1: ffffffff8d933578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 860.298303][ T28] 1 lock held by khungtaskd/28: [ 860.303967][ T28] #0: ffffffff8d92d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 860.314554][ T28] 2 locks held by kworker/0:2/130: [ 860.320067][ T28] #0: ffff888018472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 860.338184][ T28] #1: ffffc90002da7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 860.350504][ T28] 2 locks held by getty/4026: [ 860.355248][ T28] #0: ffff88803158e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 860.368064][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 860.379247][ T28] 3 locks held by kworker/u4:2/4350: [ 860.385357][ T28] 3 locks held by kworker/u4:8/4444: [ 860.398438][ T28] #0: ffff888018479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 860.410429][ T28] #1: ffffc90004407d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 860.429027][ T28] #2: ffffffff8eb566e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 860.439148][ T28] 1 lock held by syz.0.2183/11657: [ 860.451970][ T28] #0: ffffffff8d98c788 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 860.463347][ T28] 1 lock held by syz.1.2186/11666: [ 860.468511][ T28] #0: ffffffff8d98c788 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 860.482474][ T28] 2 locks held by syz.4.2187/11668: [ 860.487768][ T28] #0: ffffffff8eb566e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 860.499403][ T28] #1: ffffffff8d933578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 860.511670][ T28] 2 locks held by syz.1.2186/11671: [ 860.517060][ T28] #0: ffff888055a1d0b0 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_exit_task+0x2e1/0x970 [ 860.527610][ T28] #1: ffffffff8d98c788 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 860.538695][ T28] 1 lock held by syz.3.2188/11673: [ 860.544109][ T28] #0: ffffffff8eb566e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 860.553268][ T28] 1 lock held by syz.3.2188/11675: [ 860.558545][ T28] #0: ffffffff8eb566e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 860.568134][ T28] 1 lock held by syz.5.2189/11676: [ 860.573479][ T28] #0: ffffffff8d98c788 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 860.584221][ T28] [ 860.586737][ T28] ============================================= [ 860.586737][ T28] [ 860.596994][ T28] NMI backtrace for cpu 1 [ 860.601379][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 860.608652][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.618735][ T28] Call Trace: [ 860.622035][ T28] [ 860.624988][ T28] dump_stack_lvl+0x188/0x24e [ 860.629702][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 860.635025][ T28] ? show_regs_print_info+0x12/0x12 [ 860.640251][ T28] ? load_image+0x410/0x410 [ 860.644779][ T28] ? vprintk_emit+0x59f/0x6a0 [ 860.649492][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 860.654636][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 860.659606][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 860.665784][ T28] ? _printk+0xda/0x130 [ 860.669981][ T28] ? load_image+0x410/0x410 [ 860.674510][ T28] ? load_image+0x410/0x410 [ 860.679042][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 860.685159][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 860.691254][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 860.697269][ T28] watchdog+0xf0e/0xf50 [ 860.701456][ T28] ? watchdog+0x1ed/0xf50 [ 860.705826][ T28] kthread+0x29d/0x330 [ 860.709921][ T28] ? hungtask_pm_notify+0x40/0x40 [ 860.714974][ T28] ? kthread_blkcg+0xd0/0xd0 [ 860.719615][ T28] ret_from_fork+0x1f/0x30 [ 860.724098][ T28] [ 860.728160][ T28] Sending NMI from CPU 1 to CPUs 0: [ 860.733810][ C0] NMI backtrace for cpu 0 [ 860.733822][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 860.733838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.733850][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 860.733884][ C0] RIP: 0010:memset_erms+0x0/0x10 [ 860.733909][ C0] Code: 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 <49> 89 f9 40 88 f0 48 89 d1 f3 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 [ 860.733925][ C0] RSP: 0018:ffffc900000e75d8 EFLAGS: 00000202 [ 860.733939][ C0] RAX: 0000000000000001 RBX: ffffc900000e7688 RCX: ffffffff8139037a [ 860.733952][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900000e76d8 [ 860.733963][ C0] RBP: dffffc0000000000 R08: ffffc900000e76e7 R09: 1ffff9200001cedc [ 860.733976][ C0] R10: dffffc0000000000 R11: fffff5200001cedd R12: dffffc0000000000 [ 860.733989][ C0] R13: ffffc900000e8000 R14: ffffc900000e76c0 R15: ffffc900000e76bd [ 860.734002][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 860.734017][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.734029][ C0] CR2: 0000200000001100 CR3: 000000007e439000 CR4: 00000000003506f0 [ 860.734045][ C0] DR0: 00002000000003c0 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.734056][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 860.734067][ C0] Call Trace: [ 860.734073][ C0] [ 860.734078][ C0] unwind_next_frame+0x8da/0x1fd0 [ 860.734106][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 860.734133][ C0] ? stack_trace_save+0xf0/0xf0 [ 860.734156][ C0] arch_stack_walk+0x10c/0x140 [ 860.734181][ C0] ? __kmem_cache_free+0xb6/0x200 [ 860.734204][ C0] stack_trace_save+0xa6/0xf0 [ 860.734226][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 860.734256][ C0] kasan_set_track+0x4b/0x70 [ 860.734278][ C0] ? kasan_set_track+0x4b/0x70 [ 860.734300][ C0] ? kasan_save_free_info+0x27/0x40 [ 860.734317][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 860.734341][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 860.734405][ C0] ? __kmem_cache_free+0xb6/0x200 [ 860.734424][ C0] kasan_save_free_info+0x27/0x40 [ 860.734441][ C0] ____kasan_slab_free+0x126/0x1f0 [ 860.734467][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 860.734492][ C0] ? skb_release_data+0x5e9/0x7e0 [ 860.734511][ C0] __kmem_cache_free+0xb6/0x200 [ 860.734534][ C0] skb_release_data+0x5e9/0x7e0 [ 860.734559][ C0] consume_skb+0xa2/0x100 [ 860.734578][ C0] nsim_dev_trap_report_work+0x71f/0xa80 [ 860.734614][ C0] ? process_one_work+0x7b4/0x1160 [ 860.734636][ C0] process_one_work+0x8ab/0x1160 [ 860.734667][ C0] ? worker_detach_from_pool+0x240/0x240 [ 860.734687][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 860.734707][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 860.734725][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 860.734744][ C0] ? wq_worker_running+0x97/0x190 [ 860.734764][ C0] worker_thread+0xaf5/0x12a0 [ 860.734805][ C0] kthread+0x29d/0x330 [ 860.734819][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 860.734839][ C0] ? kthread_blkcg+0xd0/0xd0 [ 860.734856][ C0] ret_from_fork+0x1f/0x30 [ 860.734891][ C0] [ 860.759536][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 860.759587][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 860.759648][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.759680][ T28] Call Trace: [ 860.759701][ T28] [ 860.759728][ T28] dump_stack_lvl+0x188/0x24e [ 860.759810][ T28] ? memcpy+0x3c/0x60 [ 860.759869][ T28] ? show_regs_print_info+0x12/0x12 [ 860.759893][ T28] ? load_image+0x410/0x410 [ 860.759946][ T28] panic+0x2d3/0x710 [ 860.760027][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 860.760121][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 860.760225][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 860.760349][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 860.760462][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 860.760544][ T28] watchdog+0xf4d/0xf50 [ 860.760626][ T28] ? watchdog+0x1ed/0xf50 [ 860.760715][ T28] kthread+0x29d/0x330 [ 860.760766][ T28] ? hungtask_pm_notify+0x40/0x40 [ 860.760828][ T28] ? kthread_blkcg+0xd0/0xd0 [ 860.760876][ T28] ret_from_fork+0x1f/0x30 [ 860.761000][ T28] [ 860.762629][ T28] Kernel Offset: disabled [ 861.167528][ T28] Rebooting in 86400 seconds..