last executing test programs: 10m5.329399286s ago: executing program 3 (id=214): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) write$cgroup_freezer_state(r3, &(0x7f0000000140)='FROZEN\x00', 0x7) r4 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 10m4.292481544s ago: executing program 3 (id=221): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000820c0200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x19200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)="1400000015000b63d25a80648c0ff65038bdf737", 0x14}], 0x1}, 0x2000c884) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x8000000000000001}, 0x9051, 0x7, 0x0, 0x4, 0x1000000, 0xa, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0b00000005000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r4, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=[0x0], 0x0, 0x8b, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000009c0), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93e24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000009000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) r10 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x2000489c) 10m3.978714869s ago: executing program 3 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 10m2.686956759s ago: executing program 3 (id=243): perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 9m59.573393023s ago: executing program 3 (id=260): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', @random='\x00\x00\x00\x00\x00 '}) 9m59.099841395s ago: executing program 3 (id=263): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x2}, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x41b08000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x205, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000dc0)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x2, 0x10, 0x9, 0x0, 0x9, 0x4a8fc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4020, 0x5, 0x800, 0x7, 0xbc6, 0x1, 0x4, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) 9m44.053976543s ago: executing program 32 (id=263): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x2}, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x41b08000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x205, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000dc0)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x2, 0x10, 0x9, 0x0, 0x9, 0x4a8fc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4020, 0x5, 0x800, 0x7, 0xbc6, 0x1, 0x4, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) 9m16.849801006s ago: executing program 5 (id=470): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000300009", 0x7}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 9m15.821458694s ago: executing program 5 (id=477): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) recvmsg(r0, &(0x7f0000003c40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8906, 0x0) 9m15.335693826s ago: executing program 5 (id=483): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9m15.079690398s ago: executing program 5 (id=487): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r5, &(0x7f0000000780)="c2fe8c33892148665589054dfc90f645a863907a7e1902f2ee209fc9e343c620a09b01852b544b2a5f1d1723c7c6b7d1f0f2cf9d58798e0a5621b43f286f71db9fb94464d4281c225f85549e95a1c27263b05bd805fc40f8fbc43464ddf96e83ace31a59f17df1256a8ab358e033", &(0x7f0000000900)=""/189}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57}, 0x94) socketpair(0x1a, 0x0, 0x1, &(0x7f0000000100)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = gettid() r9 = socket$kcm(0x2, 0x3, 0x2) r10 = socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r10, &(0x7f0000002d40)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x80, 0x0}, 0x4000) sendmsg$inet(r9, 0x0, 0x200040c4) syz_open_procfs$namespace(r8, &(0x7f0000000080)='ns/pid\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2d, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x1, 0x7, 0x1, 0x20, 0x0, 0x7fffffffffffffff, 0x5008, 0x37d227e0e6384d28, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x3}, 0x278c8, 0x3, 0xed6b, 0x0, 0x5, 0x4, 0x2, 0x0, 0x8000, 0x0, 0xbe2d}, r8, 0x3, r2, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x0, 0x57, 0xe9, &(0x7f0000000340)="e134a80b8d59794f9fe7b59fa74c413e1e86d59da62f56eebf27a674e8b479e8bfd72a2f91e1231b8ac43ea16416d464b2afa336f6c888f76d542c8aaedeecc126aee4559de188fee13b240691520894389ea2cbac9d09", &(0x7f0000000a00)=""/233, 0x3, 0x0, 0xb0, 0x0, &(0x7f0000000b00)="b1d98895cde088947f9a129334cb605337895768de989342a56065282f74fd6678f33dde6368bf610dacf817124ce815d037980c7e55129212d2100e5497617886911689a81384f692797dd8b76c6e47540d7da053a285fb624b1a1e9cf1eb9c01809cefbd18cbf2f2626dab69cd433e72b9a690d289678eaee9ff2cad9c74c1ad4626ad250acb8dc306d82e12fdd9f7b053f88d77bec0d28ac75871254456c5b0097b3f810e79e0639f8c24590a9281", 0x0, 0x0, 0x0, 0x4}, 0x50) 9m14.797243431s ago: executing program 5 (id=490): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000070000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x2000000) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 9m14.519122624s ago: executing program 5 (id=496): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffd5e, 0x8b, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x10a043, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0xf7, 0xff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x488c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r3) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) close(r6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000007e7463f0b792e73a7511047bc16b7476864c2c26d8a47b501d467fcffe9238ad6ad41720819745aae53c0aafad9bea57f6fa1ced243b70529afe44eb0e1c563a3a951c9964e09fd8d5dd064175a9c2f7121ab94e", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000010000000000000000000000000000000000080000000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 8m59.404845465s ago: executing program 33 (id=496): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffd5e, 0x8b, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x10a043, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0xf7, 0xff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x488c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r3) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) close(r6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000007e7463f0b792e73a7511047bc16b7476864c2c26d8a47b501d467fcffe9238ad6ad41720819745aae53c0aafad9bea57f6fa1ced243b70529afe44eb0e1c563a3a951c9964e09fd8d5dd064175a9c2f7121ab94e", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000010000000000000000000000000000000000080000000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.834191494s ago: executing program 1 (id=4294): perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x2, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000008000000000000000000000018040000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) 4.693399911s ago: executing program 2 (id=4296): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@float={0x9, 0x0, 0x0, 0x10, 0x10}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @struct={0x2, 0x4, 0x0, 0x4, 0x1, 0x6, [{0x8, 0x5, 0x1530}, {0x2, 0x5, 0x2}, {0x2, 0x1, 0x6}, {0x1, 0x5, 0x100}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x1200000}]}]}, {0x0, [0x0, 0x30, 0x30, 0x2e, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000680)=""/152, 0xa2, 0x98, 0x1, 0x8000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r1, 0x20, &(0x7f00000008c0)={&(0x7f0000000780)=""/29, 0x1d, 0x0, &(0x7f00000007c0)=""/228, 0xe4}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000043000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}, @rights={{0x10}}], 0xe8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r7, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r5, @ANYRES64=r6, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000900)=""/170, &(0x7f0000000340)="106ad3404912244f53", &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r9, &(0x7f0000000b80)='syz0\x00', 0x1ff) 3.701285157s ago: executing program 1 (id=4300): perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb010018000000000000003d00000000800000000000000c0000000200000f010000000200000006000000fcffffff040000000500000001040000bf0e000000000000100c0000000c0000000000000900000000000000002e00ff8cf0d24a3828fefe7651cbe780e7477af1c3e1f73c4027d7fadb091a2faa8af43eb9b0c1a4f948d586eaa01c88653c5fc691033885d6df1ea7cc11575ccb570e378a69216bcb0c329000242de6e8cf74a6f7bc3c86c3a2a8d02535326dd2434436e2d9097d1104dfb69325a81dfbf764f4d8ce7c8058a28297969daa3155df5bb7"], &(0x7f0000000480)=""/85, 0x5b, 0x55, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x28, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000ff000000000000000600000018490000040000000000000000000000b7080000000000007b8af8ff00000000b7080000970000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b7ff8ff00000000bfa200000000000007020000f8ffffffb703000808000000b70400000000000085000000820000007d4ae0ff010000001831000002000000000000000000000095000000000000002a2fdd5ff140a6b65ccb4aedd216dffb00c095a5a2afefa4d8a1396b44f150af29fc150f63adfd2dcc4965b5f40f3f5464e1a38e3a6666ef4737916ad44b88b0c01bdcd956bb7c09569641550a8cb2469adc30190b4362e4a490e73f66650d2af4e990cf0c"], &(0x7f00000009c0)='syzkaller\x00', 0x40, 0x4d, &(0x7f0000000a00)=""/77, 0x41000, 0x10, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x6, 0xfffffbff, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[0xffffffffffffffff, 0x1], &(0x7f0000000b40)=[{0x2, 0x3, 0xb}, {0x5, 0x3, 0x1, 0x4}, {0x2, 0x3, 0x8, 0xa}, {0x1, 0x5, 0x9, 0xa}, {0x0, 0x1, 0x0, 0x9}, {0x4, 0x3, 0xa, 0x5}], 0x10, 0x9}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0100, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000440)={'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') 3.267828407s ago: executing program 2 (id=4302): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d402000020000000180000000000000000000000000000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047437, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) socket$kcm(0x29, 0x2, 0x0) close(r0) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x37, &(0x7f0000000100)=r4, 0x120) 2.7862596s ago: executing program 0 (id=4303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.705511314s ago: executing program 2 (id=4304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40eff, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0xffffffff, 0xa}, {0x1, 0x0, 0x1, 0x5}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4) 2.5700192s ago: executing program 1 (id=4307): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=r0, 0x67) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, 0x0, 0x9a) 2.489914034s ago: executing program 0 (id=4308): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.345770341s ago: executing program 2 (id=4310): socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xccc0, 0xac5d, 0x0, 0x0, 0x0, 0x4000200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000000000000000000000000000001800000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r4, 0x0, 0x9a) r5 = socket$kcm(0x2, 0x200000000000006, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008890) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='&\x00') r6 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024fcffff01000000000000000000000203000000080000000000000d0000000c00000000000000"], &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x4}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000080)=r1, 0xffffff15) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0200ff00000000711078000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.345453271s ago: executing program 6 (id=4311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.905822951s ago: executing program 4 (id=4313): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 1.760957827s ago: executing program 4 (id=4314): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x113, 0x4, 0x0, 0x0) 1.560206607s ago: executing program 6 (id=4315): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @loopback}}}], 0x20}, 0xe900) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) 1.510736669s ago: executing program 0 (id=4316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 1.369374176s ago: executing program 1 (id=4317): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003507d25a806f8c6394f90524fc600d00", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x4946, 0x3ff, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) close(r1) 1.361783826s ago: executing program 2 (id=4318): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xe02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000002c40)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x4004010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.341975417s ago: executing program 4 (id=4319): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r3, 0x0, r2}, 0x10) close(r2) socket$kcm(0x1e, 0x4, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) 821.408121ms ago: executing program 4 (id=4320): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000001800000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 659.782819ms ago: executing program 6 (id=4321): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 600.854312ms ago: executing program 4 (id=4322): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r0}, &(0x7f0000000100), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000013000000040000de0900000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000000c0)}, 0xffffffc6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b39}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 533.386875ms ago: executing program 1 (id=4323): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 533.111925ms ago: executing program 0 (id=4324): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 410.001901ms ago: executing program 6 (id=4325): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7c, 0xc0}, 0x2408, 0xca, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x2) 341.917264ms ago: executing program 4 (id=4326): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 245.607428ms ago: executing program 2 (id=4327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x1000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 245.157308ms ago: executing program 0 (id=4328): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000032000b07d2ee7cd35fb1010e0e94d3f7", 0x14}], 0x1}, 0x0) 236.000769ms ago: executing program 6 (id=4329): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0xd6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x51004400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x28, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x3c, 0x0, 0x0) 199.8095ms ago: executing program 1 (id=4330): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x10c002, 0x2, 0x1, 0x0, 0x800, 0x3, 0xfffd, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0]}}, 0x0, 0x62}, 0x28) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="2d64657669636b73202d6d7e791c6638202b63703e3200d17741d0f5b68bc843580b37004520afd8f4fafb75202d6e65745f7072696f2035bfd657f43670c94b48c3c17a1405212a222cddcfa557858f1242ed1f563c6c665ee8df70f7bf52b7c712a6e3b42b35c13ca1"], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) 7.096569ms ago: executing program 0 (id=4331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x487, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x200, 0x6, 0x1, 0x7, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000021000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x4, 0x13, 0x9, 0x0, 0x20080000001, 0x72180, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0x6}, 0x1b2a0, 0x3, 0xf, 0x3, 0x3, 0x9, 0x2, 0x0, 0x3, 0x0, 0x80000002000007}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 0s ago: executing program 6 (id=4332): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4, [{0x2, 0x2}, {0x3, 0x8}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000001fc0)=""/4128, 0x49, 0x1020, 0x1}, 0x28) kernel console output (not intermixed with test programs): ][T15317] do_syscall_64+0x4c/0xa0 [ 542.309423][T15317] ? clear_bhb_loop+0x30/0x80 [ 542.314100][T15317] ? clear_bhb_loop+0x30/0x80 [ 542.318774][T15317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.324668][T15317] RIP: 0033:0x7fdbc8988159 [ 542.329088][T15317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.348690][T15317] RSP: 002b:00007fdbc6be0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 542.357113][T15317] RAX: ffffffffffffffda RBX: 00007fdbc8c0ffa0 RCX: 00007fdbc8988159 [ 542.365101][T15317] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000004 [ 542.373070][T15317] RBP: 00007fdbc6be0090 R08: 0000000000000008 R09: 0000000000000000 [ 542.381036][T15317] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.389011][T15317] R13: 00007fdbc8c10038 R14: 00007fdbc8c0ffa0 R15: 00007fffc2b9e188 [ 542.397005][T15317] [ 543.262933][T15341] validate_nla: 1 callbacks suppressed [ 543.262953][T15341] netlink: 'syz.1.3283': attribute type 39 has an invalid length. [ 543.344636][T15346] netlink: 'syz.4.3285': attribute type 10 has an invalid length. [ 543.347920][T15339] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3282'. [ 543.386202][T15346] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3285'. [ 543.484136][T15339] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 543.855853][T15360] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3289'. [ 543.899688][T15360] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 544.256353][T15369] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3291'. [ 544.339552][T15367] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 544.366501][T15367] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3290'. [ 544.438593][T15370] netlink: 'syz.6.3292': attribute type 10 has an invalid length. [ 544.731640][T15383] tun0: tun_chr_ioctl cmd 1074025681 [ 545.125248][T15395] netlink: 'syz.2.3298': attribute type 39 has an invalid length. [ 545.279990][T15400] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 545.873322][ T9210] wlan1: Trigger new scan to find an IBSS to join [ 546.163106][T15405] __nla_validate_parse: 1 callbacks suppressed [ 546.163171][T15405] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3301'. [ 546.262723][T15410] FAULT_INJECTION: forcing a failure. [ 546.262723][T15410] name failslab, interval 1, probability 0, space 0, times 0 [ 546.323829][T15410] CPU: 0 PID: 15410 Comm: syz.2.3304 Not tainted syzkaller #0 [ 546.331354][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.341435][T15410] Call Trace: [ 546.343858][T15408] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3303'. [ 546.344731][T15410] [ 546.344743][T15410] dump_stack_lvl+0x188/0x250 [ 546.344776][T15410] ? show_regs_print_info+0x20/0x20 [ 546.344796][T15410] ? load_image+0x410/0x410 [ 546.344827][T15410] ? __might_sleep+0xf0/0xf0 [ 546.344846][T15410] ? __lock_acquire+0x7b50/0x7b50 [ 546.344875][T15410] should_fail+0x383/0x4b0 [ 546.344902][T15410] should_failslab+0x5/0x20 [ 546.344920][T15410] slab_pre_alloc_hook+0x51/0xc0 [ 546.344942][T15410] __kmalloc+0x6b/0x340 [ 546.344959][T15410] ? sk_prot_alloc+0xe7/0x210 [ 546.344983][T15410] sk_prot_alloc+0xe7/0x210 [ 546.408436][T15410] ? sk_alloc+0x1d/0x310 [ 546.412712][T15410] sk_alloc+0x2f/0x310 [ 546.416814][T15410] bpf_prog_test_run_skb+0x23c/0x1190 [ 546.422218][T15410] ? __fget_files+0x402/0x470 [ 546.426937][T15410] ? cpu_online+0x60/0x60 [ 546.431292][T15410] bpf_prog_test_run+0x31c/0x390 [ 546.436257][T15410] __sys_bpf+0x5a5/0x6f0 [ 546.440524][T15410] ? bpf_link_show_fdinfo+0x380/0x380 [ 546.445946][T15410] __x64_sys_bpf+0x78/0x90 [ 546.450388][T15410] do_syscall_64+0x4c/0xa0 [ 546.454824][T15410] ? clear_bhb_loop+0x30/0x80 [ 546.459529][T15410] ? clear_bhb_loop+0x30/0x80 [ 546.464238][T15410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 546.470156][T15410] RIP: 0033:0x7f458c2e3159 [ 546.474600][T15410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.494230][T15410] RSP: 002b:00007f458a53b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 546.502673][T15410] RAX: ffffffffffffffda RBX: 00007f458c56afa0 RCX: 00007f458c2e3159 [ 546.510668][T15410] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 000000000000000a [ 546.518658][T15410] RBP: 00007f458a53b090 R08: 0000000000000000 R09: 0000000000000000 [ 546.526646][T15410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.534638][T15410] R13: 00007f458c56b038 R14: 00007f458c56afa0 R15: 00007ffd6875d478 [ 546.542651][T15410] [ 546.952794][ T162] wlan1: Creating new IBSS network, BSSID 22:fd:74:39:10:15 [ 546.996086][T15421] netlink: 'syz.2.3307': attribute type 10 has an invalid length. [ 547.015677][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.043792][T15421] device bridge_slave_1 left promiscuous mode [ 547.072530][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.105622][T15421] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 547.360420][T15429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3311'. [ 547.428832][T15433] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3312'. [ 547.604769][T15433] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 547.643249][T15435] FAULT_INJECTION: forcing a failure. [ 547.643249][T15435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.666404][T15435] CPU: 1 PID: 15435 Comm: syz.1.3310 Not tainted syzkaller #0 [ 547.673903][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.683978][T15435] Call Trace: [ 547.687278][T15435] [ 547.690223][T15435] dump_stack_lvl+0x188/0x250 [ 547.694923][T15435] ? show_regs_print_info+0x20/0x20 [ 547.700135][T15435] ? load_image+0x410/0x410 [ 547.704650][T15435] ? __lock_acquire+0x7b50/0x7b50 [ 547.709694][T15435] should_fail+0x383/0x4b0 [ 547.714130][T15435] _copy_from_user+0x2e/0x170 [ 547.718817][T15435] __copy_msghdr_from_user+0xc9/0x630 [ 547.724198][T15435] ? verify_lock_unused+0x140/0x140 [ 547.729409][T15435] ? mark_lock+0x94/0x320 [ 547.733751][T15435] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 547.739067][T15435] ? __lock_acquire+0x13dc/0x7b50 [ 547.744119][T15435] ___sys_sendmsg+0x19a/0x2e0 [ 547.748818][T15435] ? __sys_sendmsg+0x290/0x290 [ 547.753603][T15435] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 547.759880][T15435] __se_sys_sendmsg+0x1b7/0x2a0 [ 547.764745][T15435] ? __x64_sys_sendmsg+0x80/0x80 [ 547.769707][T15435] ? syscall_enter_from_user_mode+0x2a/0x70 [ 547.775615][T15435] do_syscall_64+0x4c/0xa0 [ 547.780041][T15435] ? clear_bhb_loop+0x30/0x80 [ 547.784726][T15435] ? clear_bhb_loop+0x30/0x80 [ 547.789419][T15435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.795323][T15435] RIP: 0033:0x7fd384000159 [ 547.799754][T15435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.819376][T15435] RSP: 002b:00007fd382237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.827801][T15435] RAX: ffffffffffffffda RBX: 00007fd384288090 RCX: 00007fd384000159 [ 547.835783][T15435] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 000000000000000e [ 547.843760][T15435] RBP: 00007fd382237090 R08: 0000000000000000 R09: 0000000000000000 [ 547.851744][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.859729][T15435] R13: 00007fd384288128 R14: 00007fd384288090 R15: 00007ffda74b4b78 [ 547.867726][T15435] [ 548.622410][T15453] netlink: 'syz.4.3316': attribute type 39 has an invalid length. [ 548.682661][T15455] tun0: tun_chr_ioctl cmd 1074025681 [ 548.701778][T15458] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3318'. [ 548.730808][T15456] netlink: 143284 bytes leftover after parsing attributes in process `syz.6.3319'. [ 548.805848][T15451] tun0: tun_chr_ioctl cmd 35092 [ 548.906471][T15467] pimreg0: tun_chr_ioctl cmd 1074025677 [ 548.921173][T15467] pimreg0: linktype set to 823 [ 549.026001][T15471] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3323'. [ 549.312957][T15478] sctp: [Deprecated]: syz.0.3325 (pid 15478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.312957][T15478] Use struct sctp_sack_info instead [ 549.836058][T15486] FAULT_INJECTION: forcing a failure. [ 549.836058][T15486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.866649][T15488] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3329'. [ 549.892520][T15486] CPU: 1 PID: 15486 Comm: syz.4.3328 Not tainted syzkaller #0 [ 549.900030][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.910102][T15486] Call Trace: [ 549.913395][T15486] [ 549.916333][T15486] dump_stack_lvl+0x188/0x250 [ 549.921036][T15486] ? show_regs_print_info+0x20/0x20 [ 549.926244][T15486] ? load_image+0x410/0x410 [ 549.930755][T15486] ? __lock_acquire+0x7b50/0x7b50 [ 549.935793][T15486] should_fail+0x383/0x4b0 [ 549.940215][T15486] _copy_from_user+0x2e/0x170 [ 549.945030][T15486] __copy_msghdr_from_user+0xc9/0x630 [ 549.950419][T15486] ? verify_lock_unused+0x140/0x140 [ 549.955621][T15486] ? mark_lock+0x94/0x320 [ 549.959964][T15486] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 549.965272][T15486] ___sys_sendmsg+0x19a/0x2e0 [ 549.969962][T15486] ? __sys_sendmsg+0x290/0x290 [ 549.974740][T15486] ? trace_event_raw_event_lock+0x250/0x250 [ 549.980661][T15486] __se_sys_sendmsg+0x1b7/0x2a0 [ 549.985515][T15486] ? __x64_sys_sendmsg+0x80/0x80 [ 549.990450][T15486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 549.996445][T15486] ? lockdep_hardirqs_on+0x94/0x140 [ 550.001648][T15486] do_syscall_64+0x4c/0xa0 [ 550.006064][T15486] ? clear_bhb_loop+0x30/0x80 [ 550.010742][T15486] ? clear_bhb_loop+0x30/0x80 [ 550.015423][T15486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.021402][T15486] RIP: 0033:0x7facafbf0159 [ 550.025846][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.045463][T15486] RSP: 002b:00007facade48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.053889][T15486] RAX: ffffffffffffffda RBX: 00007facafe77fa0 RCX: 00007facafbf0159 [ 550.061868][T15486] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 0000000000000011 [ 550.069839][T15486] RBP: 00007facade48090 R08: 0000000000000000 R09: 0000000000000000 [ 550.077818][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.085784][T15486] R13: 00007facafe78038 R14: 00007facafe77fa0 R15: 00007fff6e409998 [ 550.093777][T15486] [ 550.107127][T15488] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 550.131873][T15492] netlink: 'syz.2.3330': attribute type 39 has an invalid length. [ 550.466319][T15504] tun0: tun_chr_ioctl cmd 1074025681 [ 550.730961][T15506] tun0: tun_chr_ioctl cmd 35092 [ 551.065927][T15517] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3339'. [ 551.111429][T15523] netlink: 'syz.0.3340': attribute type 10 has an invalid length. [ 551.116024][T15517] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 551.142649][T15523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3340'. [ 551.192169][T15523] device hsr0 entered promiscuous mode [ 551.198482][T15523] bridge0: port 2(hsr0) entered blocking state [ 551.264643][T15523] bridge0: port 2(hsr0) entered disabled state [ 551.303055][T15523] bridge0: port 2(hsr0) entered blocking state [ 551.309354][T15523] bridge0: port 2(hsr0) entered forwarding state [ 551.388493][T15524] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3341'. [ 551.497317][T15530] netlink: 'syz.0.3342': attribute type 39 has an invalid length. [ 551.577031][T15533] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3344'. [ 551.879751][T15531] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3343'. [ 551.891585][T15531] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 552.004039][T15540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3345'. [ 552.067098][T15541] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3346'. [ 552.209538][T15547] netlink: 'syz.2.3348': attribute type 21 has an invalid length. [ 552.232506][T15547] netlink: 'syz.2.3348': attribute type 1 has an invalid length. [ 552.253598][T15547] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.3348'. [ 552.276424][T15553] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3349'. [ 552.659899][T15560] netlink: 'syz.2.3352': attribute type 10 has an invalid length. [ 552.684140][T15567] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3355'. [ 552.950693][T15577] netlink: 'syz.0.3356': attribute type 39 has an invalid length. [ 553.181160][T15585] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3358'. [ 553.387729][T15585] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 554.269620][T15595] FAULT_INJECTION: forcing a failure. [ 554.269620][T15595] name failslab, interval 1, probability 0, space 0, times 0 [ 554.331901][T15595] CPU: 1 PID: 15595 Comm: syz.2.3361 Not tainted syzkaller #0 [ 554.339438][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.349527][T15595] Call Trace: [ 554.352839][T15595] [ 554.355808][T15595] dump_stack_lvl+0x188/0x250 [ 554.360541][T15595] ? show_regs_print_info+0x20/0x20 [ 554.365784][T15595] ? load_image+0x410/0x410 [ 554.370349][T15595] ? __might_sleep+0xf0/0xf0 [ 554.374984][T15595] ? __lock_acquire+0x7b50/0x7b50 [ 554.380055][T15595] ? migrate_enable+0x13e/0x200 [ 554.384960][T15595] should_fail+0x383/0x4b0 [ 554.389442][T15595] should_failslab+0x5/0x20 [ 554.393976][T15595] slab_pre_alloc_hook+0x51/0xc0 [ 554.398962][T15595] __kmalloc+0x6b/0x340 [ 554.403149][T15595] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 554.408901][T15595] ? trace_call_bpf+0x515/0x5b0 [ 554.413788][T15595] tomoyo_realpath_from_path+0xed/0x5e0 [ 554.419385][T15595] tomoyo_path_number_perm+0x251/0x6b0 [ 554.424867][T15595] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 554.430340][T15595] ? perf_trace_lock+0x301/0x390 [ 554.435419][T15595] security_file_ioctl+0x6c/0xa0 [ 554.440375][T15595] __se_sys_ioctl+0x48/0x170 [ 554.444984][T15595] do_syscall_64+0x4c/0xa0 [ 554.449410][T15595] ? clear_bhb_loop+0x30/0x80 [ 554.454095][T15595] ? clear_bhb_loop+0x30/0x80 [ 554.458791][T15595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.464707][T15595] RIP: 0033:0x7f458c2e3159 [ 554.469139][T15595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.488752][T15595] RSP: 002b:00007f458a53b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.497176][T15595] RAX: ffffffffffffffda RBX: 00007f458c56afa0 RCX: 00007f458c2e3159 [ 554.505157][T15595] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 554.513135][T15595] RBP: 00007f458a53b090 R08: 0000000000000000 R09: 0000000000000000 [ 554.521115][T15595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.529089][T15595] R13: 00007f458c56b038 R14: 00007f458c56afa0 R15: 00007ffd6875d478 [ 554.537111][T15595] [ 554.699255][T15595] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.878925][T15612] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3367'. [ 555.069072][T15615] netlink: 'syz.4.3368': attribute type 10 has an invalid length. [ 555.225834][T15624] netlink: 'syz.0.3370': attribute type 39 has an invalid length. [ 555.947882][T15634] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 559.043581][T15660] netlink: 'syz.0.3382': attribute type 39 has an invalid length. [ 560.430284][T15691] __nla_validate_parse: 3 callbacks suppressed [ 560.430325][T15691] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3390'. [ 560.528328][T15691] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 561.272757][T15702] netlink: 'syz.6.3394': attribute type 39 has an invalid length. [ 561.908827][T15717] netlink: 'syz.0.3399': attribute type 10 has an invalid length. [ 562.415481][T15729] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3405'. [ 562.436371][T15729] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 562.475863][T15734] netlink: 'syz.6.3407': attribute type 39 has an invalid length. [ 562.654365][T15740] netlink: 'syz.6.3409': attribute type 10 has an invalid length. [ 562.739096][T15740] device netdevsim0 entered promiscuous mode [ 563.202883][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.209269][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.493658][T15740] team0: Port device netdevsim0 removed [ 563.501902][T15740] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 563.574480][T15749] netlink: 'syz.6.3409': attribute type 10 has an invalid length. [ 564.022936][T15759] netlink: 'syz.0.3413': attribute type 10 has an invalid length. [ 567.446916][T15780] netlink: 'syz.6.3419': attribute type 39 has an invalid length. [ 567.690142][T15783] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3420'. [ 567.728367][T15783] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 568.758127][T15813] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3431'. [ 568.845887][T15816] netlink: 'syz.4.3432': attribute type 39 has an invalid length. [ 569.140120][T15824] FAULT_INJECTION: forcing a failure. [ 569.140120][T15824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.190844][T15824] CPU: 0 PID: 15824 Comm: syz.1.3435 Not tainted syzkaller #0 [ 569.198362][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.208443][T15824] Call Trace: [ 569.211746][T15824] [ 569.214701][T15824] dump_stack_lvl+0x188/0x250 [ 569.219410][T15824] ? show_regs_print_info+0x20/0x20 [ 569.224639][T15824] ? load_image+0x410/0x410 [ 569.229167][T15824] ? __lock_acquire+0x7b50/0x7b50 [ 569.234220][T15824] ? __mutex_lock_common+0x435/0x2400 [ 569.239616][T15824] should_fail+0x383/0x4b0 [ 569.244058][T15824] _copy_from_user+0x2e/0x170 [ 569.248768][T15824] vlan_ioctl_handler+0xba/0x5d0 [ 569.253809][T15824] ? mutex_lock_io_nested+0x60/0x60 [ 569.259029][T15824] ? rcu_lock_release+0x20/0x20 [ 569.263917][T15824] ? rcu_lock_release+0x20/0x20 [ 569.268796][T15824] sock_ioctl+0x23b/0x700 [ 569.273154][T15824] ? sock_poll+0x420/0x420 [ 569.277604][T15824] ? bpf_lsm_file_ioctl+0x5/0x10 [ 569.282561][T15824] ? security_file_ioctl+0x7c/0xa0 [ 569.287682][T15824] ? sock_poll+0x420/0x420 [ 569.292103][T15824] __se_sys_ioctl+0xfa/0x170 [ 569.296696][T15824] do_syscall_64+0x4c/0xa0 [ 569.301115][T15824] ? clear_bhb_loop+0x30/0x80 [ 569.305791][T15824] ? clear_bhb_loop+0x30/0x80 [ 569.310471][T15824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.316370][T15824] RIP: 0033:0x7fd384000159 [ 569.320785][T15824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.340386][T15824] RSP: 002b:00007fd382258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.348797][T15824] RAX: ffffffffffffffda RBX: 00007fd384287fa0 RCX: 00007fd384000159 [ 569.356765][T15824] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000005 [ 569.364732][T15824] RBP: 00007fd382258090 R08: 0000000000000000 R09: 0000000000000000 [ 569.372699][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.380668][T15824] R13: 00007fd384288038 R14: 00007fd384287fa0 R15: 00007ffda74b4b78 [ 569.388649][T15824] [ 569.519458][T15832] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3438'. [ 569.531257][T15832] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 570.016927][T15859] netlink: 'syz.1.3446': attribute type 39 has an invalid length. [ 570.229212][T15861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3447'. [ 570.248783][T15861] : renamed from caif0 [ 570.304642][T15861] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 570.629999][T15872] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3450'. [ 570.775628][T15884] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.3454'. [ 570.835550][T15884] netlink: 21648 bytes leftover after parsing attributes in process `syz.6.3454'. [ 570.871143][T15884] tipc: Started in network mode [ 570.882413][T15884] tipc: Node identity e, cluster identity 4711 [ 571.000183][T15884] tipc: Node number set to 14 [ 571.085609][T15900] netlink: 'syz.4.3457': attribute type 39 has an invalid length. [ 572.192928][T15940] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3466'. [ 572.236053][T15937] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3467'. [ 572.318058][T15937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.343848][T15943] netlink: 'syz.0.3469': attribute type 1 has an invalid length. [ 572.375734][T15943] netlink: 'syz.0.3469': attribute type 3 has an invalid length. [ 572.453226][T15943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3469'. [ 572.500095][T15955] netlink: 'syz.1.3470': attribute type 39 has an invalid length. [ 572.619751][T15976] netlink: get zone limit has 8 unknown bytes [ 572.813949][T15980] __nla_validate_parse: 2 callbacks suppressed [ 572.813966][T15980] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3472'. [ 572.847693][T15980] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 572.964113][T15987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.017244][T15987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.143527][T15987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.151006][T15987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.890467][T16018] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3483'. [ 573.941687][T16022] netlink: 'syz.6.3484': attribute type 39 has an invalid length. [ 574.097762][T16026] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3486'. [ 574.148075][T16026] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 575.259988][T16053] netlink: 'syz.4.3492': attribute type 10 has an invalid length. [ 575.275788][T16053] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3492'. [ 575.481096][T16058] netlink: 'syz.0.3495': attribute type 16 has an invalid length. [ 575.499476][T16058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3495'. [ 575.623739][T16065] netlink: 'syz.1.3497': attribute type 39 has an invalid length. [ 576.020735][T16080] netlink: 'syz.1.3501': attribute type 9 has an invalid length. [ 576.052476][T16080] netlink: 182472 bytes leftover after parsing attributes in process `syz.1.3501'. [ 576.650828][T16101] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3504'. [ 577.011408][ T9198] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 577.246641][T16118] netlink: 'syz.0.3507': attribute type 21 has an invalid length. [ 577.583944][T16118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3507'. [ 577.901467][T16114] netlink: 'syz.6.3506': attribute type 10 has an invalid length. [ 577.979428][T16114] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3506'. [ 578.408647][T16130] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 578.442906][T16133] netlink: 'syz.0.3511': attribute type 39 has an invalid length. [ 578.520244][T16135] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3512'. [ 578.855405][T16151] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3517'. [ 579.966255][T16178] netlink: 'syz.2.3525': attribute type 39 has an invalid length. [ 580.039383][T16175] netlink: 'syz.4.3524': attribute type 10 has an invalid length. [ 580.209538][T16181] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 580.259805][T16181] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3526'. [ 580.663086][T16195] netlink: 'syz.0.3529': attribute type 10 has an invalid length. [ 580.735155][T16195] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3529'. [ 581.311040][T16206] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3534'. [ 581.613674][T16215] netlink: 'syz.0.3537': attribute type 39 has an invalid length. [ 582.981098][T16235] netlink: 'syz.6.3542': attribute type 10 has an invalid length. [ 582.989487][T16237] FAULT_INJECTION: forcing a failure. [ 582.989487][T16237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.063808][T16235] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3542'. [ 583.102399][T16237] CPU: 1 PID: 16237 Comm: syz.1.3543 Not tainted syzkaller #0 [ 583.109913][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.119986][T16237] Call Trace: [ 583.123283][T16237] [ 583.126235][T16237] dump_stack_lvl+0x188/0x250 [ 583.130940][T16237] ? show_regs_print_info+0x20/0x20 [ 583.136165][T16237] ? load_image+0x410/0x410 [ 583.140702][T16237] ? __lock_acquire+0x7b50/0x7b50 [ 583.145754][T16237] should_fail+0x383/0x4b0 [ 583.150194][T16237] _copy_from_user+0x2e/0x170 [ 583.154899][T16237] __copy_msghdr_from_user+0xc9/0x630 [ 583.160292][T16237] ? verify_lock_unused+0x140/0x140 [ 583.165511][T16237] ? mark_lock+0x94/0x320 [ 583.169864][T16237] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 583.175168][T16237] ? __lock_acquire+0x13dc/0x7b50 [ 583.180229][T16237] ___sys_sendmsg+0x19a/0x2e0 [ 583.184936][T16237] ? __sys_sendmsg+0x290/0x290 [ 583.189731][T16237] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 583.196020][T16237] __se_sys_sendmsg+0x1b7/0x2a0 [ 583.200895][T16237] ? __x64_sys_sendmsg+0x80/0x80 [ 583.205847][T16237] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 583.211858][T16237] ? lockdep_hardirqs_on+0x94/0x140 [ 583.217079][T16237] do_syscall_64+0x4c/0xa0 [ 583.221507][T16237] ? clear_bhb_loop+0x30/0x80 [ 583.226202][T16237] ? clear_bhb_loop+0x30/0x80 [ 583.230896][T16237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 583.236801][T16237] RIP: 0033:0x7fd384000159 [ 583.241233][T16237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.260854][T16237] RSP: 002b:00007fd382258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.269288][T16237] RAX: ffffffffffffffda RBX: 00007fd384287fa0 RCX: 00007fd384000159 [ 583.277278][T16237] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 0000000000000004 [ 583.285266][T16237] RBP: 00007fd382258090 R08: 0000000000000000 R09: 0000000000000000 [ 583.293253][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.301247][T16237] R13: 00007fd384288038 R14: 00007fd384287fa0 R15: 00007ffda74b4b78 [ 583.309258][T16237] [ 583.402294][T16241] netlink: 'syz.0.3545': attribute type 25 has an invalid length. [ 583.410982][T16241] netlink: 'syz.0.3545': attribute type 9 has an invalid length. [ 583.425991][T16241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3545'. [ 584.433722][T16260] netlink: 'syz.6.3548': attribute type 26 has an invalid length. [ 584.480377][T16260] netlink: 54695 bytes leftover after parsing attributes in process `syz.6.3548'. [ 584.526758][T16259] netlink: 'syz.2.3549': attribute type 39 has an invalid length. [ 584.927802][T16267] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3551'. [ 584.993651][T16267] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 585.668480][T16294] netlink: 'syz.2.3558': attribute type 10 has an invalid length. [ 585.685178][T16294] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3558'. [ 585.869600][T16299] netlink: 'syz.1.3561': attribute type 39 has an invalid length. [ 585.885850][T16302] netlink: 'syz.0.3562': attribute type 9 has an invalid length. [ 585.956287][T16302] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3562'. [ 586.207478][T16311] FAULT_INJECTION: forcing a failure. [ 586.207478][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 586.317940][T16311] CPU: 0 PID: 16311 Comm: syz.2.3564 Not tainted syzkaller #0 [ 586.325476][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.335570][T16311] Call Trace: [ 586.338878][T16311] [ 586.341837][T16311] dump_stack_lvl+0x188/0x250 [ 586.346557][T16311] ? show_regs_print_info+0x20/0x20 [ 586.346920][T16310] netlink: 'syz.0.3565': attribute type 4 has an invalid length. [ 586.351785][T16311] ? load_image+0x410/0x410 [ 586.351832][T16311] ? __might_sleep+0xf0/0xf0 [ 586.351857][T16311] ? __lock_acquire+0x7b50/0x7b50 [ 586.373710][T16311] should_fail+0x383/0x4b0 [ 586.378173][T16311] should_failslab+0x5/0x20 [ 586.382711][T16311] slab_pre_alloc_hook+0x51/0xc0 [ 586.387685][T16311] __kmalloc+0x6b/0x340 [ 586.391870][T16311] ? tomoyo_encode+0x28a/0x550 [ 586.396676][T16311] tomoyo_encode+0x28a/0x550 [ 586.401308][T16311] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 586.407004][T16311] tomoyo_path_number_perm+0x251/0x6b0 [ 586.412512][T16311] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 586.418006][T16311] ? perf_trace_lock+0x301/0x390 [ 586.423079][T16311] security_file_ioctl+0x6c/0xa0 [ 586.428053][T16311] __se_sys_ioctl+0x48/0x170 [ 586.432680][T16311] do_syscall_64+0x4c/0xa0 [ 586.437124][T16311] ? clear_bhb_loop+0x30/0x80 [ 586.441831][T16311] ? clear_bhb_loop+0x30/0x80 [ 586.446546][T16311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 586.452472][T16311] RIP: 0033:0x7f458c2e3159 [ 586.456929][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.476560][T16311] RSP: 002b:00007f458a51a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.485000][T16311] RAX: ffffffffffffffda RBX: 00007f458c56b090 RCX: 00007f458c2e3159 [ 586.492987][T16311] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000009 [ 586.500977][T16311] RBP: 00007f458a51a090 R08: 0000000000000000 R09: 0000000000000000 [ 586.508963][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.516947][T16311] R13: 00007f458c56b128 R14: 00007f458c56b090 R15: 00007ffd6875d478 [ 586.524970][T16311] [ 586.552977][T16321] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3568'. [ 586.579464][T16321] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 586.590255][T16311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.181237][T16329] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3569'. [ 587.529326][T16342] netlink: 'syz.1.3573': attribute type 39 has an invalid length. [ 589.068590][T16382] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3578'. [ 589.112847][T16385] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3579'. [ 589.222845][T16385] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 589.849850][T16404] netlink: 'syz.1.3585': attribute type 39 has an invalid length. [ 590.074837][T16390] chnl_net:caif_netlink_parms(): no params data found [ 590.405045][T16390] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.422857][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.444286][T16390] device bridge_slave_0 entered promiscuous mode [ 590.495705][T16390] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.539724][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.580895][T16390] device bridge_slave_1 entered promiscuous mode [ 590.592367][ T9399] Bluetooth: hci3: command 0x0406 tx timeout [ 590.720073][T16410] syz.0.3586[16410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 590.720208][T16410] syz.0.3586[16410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 590.734976][T16390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.816437][T16424] netlink: 'syz.1.3590': attribute type 10 has an invalid length. [ 590.849060][T16424] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3590'. [ 590.883365][T16390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.183916][T16390] team0: Port device team_slave_0 added [ 591.191266][T16390] team0: Port device team_slave_1 added [ 591.236173][ T9320] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.290253][T16390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.311537][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.369456][T16390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.382567][ T9399] Bluetooth: hci1: command 0x0409 tx timeout [ 591.444948][T16433] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3592'. [ 591.456735][ T9320] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.527415][T16390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.542351][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.560410][T16433] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 591.660839][T16390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.733736][ T9320] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.840428][T16447] netlink: 'syz.1.3596': attribute type 39 has an invalid length. [ 592.177571][T16451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.207518][T16390] device hsr_slave_0 entered promiscuous mode [ 592.348156][T16390] device hsr_slave_1 entered promiscuous mode [ 592.407589][ T9320] bond0: (slave netdevsim0): Releasing backup interface [ 592.541394][ T9320] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.898707][T16471] netlink: 'syz.2.3603': attribute type 10 has an invalid length. [ 592.972063][T16471] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3603'. [ 593.010053][T16455] netlink: 'syz.4.3599': attribute type 10 has an invalid length. [ 593.048257][T16455] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3599'. [ 593.526951][T16485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3606'. [ 593.585235][ T5561] Bluetooth: hci1: command 0x041b tx timeout [ 593.610244][T16486] netlink: 'syz.4.3605': attribute type 16 has an invalid length. [ 593.636017][T16486] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3605'. [ 593.720830][T16480] netlink: 'syz.4.3605': attribute type 10 has an invalid length. [ 593.773436][T16480] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3605'. [ 593.812939][ T9320] tipc: Left network mode [ 594.222156][T16499] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3608'. [ 594.402376][T16499] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 594.495194][T16498] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.3609'. [ 594.518936][T16498] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 595.061009][T16390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 595.095955][T16390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.144989][T16390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 595.168074][T16530] FAULT_INJECTION: forcing a failure. [ 595.168074][T16530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.246129][T16390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 595.277528][T16529] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 595.283467][T16530] CPU: 1 PID: 16530 Comm: syz.4.3616 Not tainted syzkaller #0 [ 595.292978][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 595.303053][T16530] Call Trace: [ 595.306351][T16530] [ 595.309302][T16530] dump_stack_lvl+0x188/0x250 [ 595.314005][T16530] ? show_regs_print_info+0x20/0x20 [ 595.319226][T16530] ? load_image+0x410/0x410 [ 595.323754][T16530] ? __lock_acquire+0x7b50/0x7b50 [ 595.328811][T16530] should_fail+0x383/0x4b0 [ 595.333261][T16530] _copy_from_user+0x2e/0x170 [ 595.337964][T16530] __copy_msghdr_from_user+0xc9/0x630 [ 595.343364][T16530] ? verify_lock_unused+0x140/0x140 [ 595.347742][T16529] device syzkaller0 entered promiscuous mode [ 595.348575][T16530] ? mark_lock+0x94/0x320 [ 595.348599][T16530] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 595.348619][T16530] ? __lock_acquire+0x13dc/0x7b50 [ 595.348664][T16530] ___sys_sendmsg+0x19a/0x2e0 [ 595.348692][T16530] ? __sys_sendmsg+0x290/0x290 [ 595.348750][T16530] __se_sys_sendmsg+0x1b7/0x2a0 [ 595.348774][T16530] ? __x64_sys_sendmsg+0x80/0x80 [ 595.348806][T16530] ? syscall_enter_from_user_mode+0x2a/0x70 [ 595.348832][T16530] do_syscall_64+0x4c/0xa0 [ 595.348849][T16530] ? clear_bhb_loop+0x30/0x80 [ 595.403614][T16530] ? clear_bhb_loop+0x30/0x80 [ 595.408327][T16530] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.414232][T16530] RIP: 0033:0x7facafbf0159 [ 595.418635][T16530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.438238][T16530] RSP: 002b:00007facade27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.446664][T16530] RAX: ffffffffffffffda RBX: 00007facafe78090 RCX: 00007facafbf0159 [ 595.454624][T16530] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000009 [ 595.462585][T16530] RBP: 00007facade27090 R08: 0000000000000000 R09: 0000000000000000 [ 595.470542][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.478507][T16530] R13: 00007facafe78128 R14: 00007facafe78090 R15: 00007fff6e409998 [ 595.486495][T16530] [ 595.626052][ T5561] Bluetooth: hci1: command 0x040f tx timeout [ 596.208814][T16552] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3622'. [ 596.273280][T16552] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 596.347754][T16556] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3623'. [ 596.742150][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.862554][T16568] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3627'. [ 596.992113][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.001688][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.047197][T16390] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.196039][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.221635][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.277972][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.285200][ T9187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.582548][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.594873][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.642575][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.684861][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.692042][ T9187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.741809][ T5561] Bluetooth: hci1: command 0x0419 tx timeout [ 597.773294][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.804602][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.852700][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.881772][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.913290][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.958130][T16588] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 601.735700][T16588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.787408][T16594] netlink: 'syz.4.3634': attribute type 29 has an invalid length. [ 601.806254][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.824035][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.842135][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.850732][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.859819][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.893488][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.925569][T16390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.273826][T16615] FAULT_INJECTION: forcing a failure. [ 602.273826][T16615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.314895][T16615] CPU: 0 PID: 16615 Comm: syz.4.3639 Not tainted syzkaller #0 [ 602.322405][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.332481][T16615] Call Trace: [ 602.335780][T16615] [ 602.338727][T16615] dump_stack_lvl+0x188/0x250 [ 602.343429][T16615] ? show_regs_print_info+0x20/0x20 [ 602.348651][T16615] ? load_image+0x410/0x410 [ 602.353174][T16615] ? __lock_acquire+0x7b50/0x7b50 [ 602.358230][T16615] should_fail+0x383/0x4b0 [ 602.362679][T16615] _copy_from_user+0x2e/0x170 [ 602.367382][T16615] __copy_msghdr_from_user+0xc9/0x630 [ 602.372782][T16615] ? verify_lock_unused+0x140/0x140 [ 602.378005][T16615] ? mark_lock+0x94/0x320 [ 602.382355][T16615] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 602.384697][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.387681][T16615] ___sys_sendmsg+0x19a/0x2e0 [ 602.399633][T16615] ? __sys_sendmsg+0x290/0x290 [ 602.404427][T16615] ? trace_event_raw_event_lock+0x250/0x250 [ 602.405371][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.410357][T16615] __se_sys_sendmsg+0x1b7/0x2a0 [ 602.422471][T16615] ? __x64_sys_sendmsg+0x80/0x80 [ 602.427426][T16615] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 602.431023][T16390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.433435][T16615] ? lockdep_hardirqs_on+0x94/0x140 [ 602.433465][T16615] do_syscall_64+0x4c/0xa0 [ 602.433483][T16615] ? clear_bhb_loop+0x30/0x80 [ 602.433503][T16615] ? clear_bhb_loop+0x30/0x80 [ 602.433524][T16615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 602.433543][T16615] RIP: 0033:0x7facafbf0159 [ 602.433562][T16615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.433578][T16615] RSP: 002b:00007facade48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.497633][T16615] RAX: ffffffffffffffda RBX: 00007facafe77fa0 RCX: 00007facafbf0159 [ 602.505630][T16615] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 602.513619][T16615] RBP: 00007facade48090 R08: 0000000000000000 R09: 0000000000000000 [ 602.521608][T16615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.529594][T16615] R13: 00007facafe78038 R14: 00007facafe77fa0 R15: 00007fff6e409998 [ 602.537602][T16615] [ 602.639819][T16619] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3640'. [ 602.955462][T16626] netlink: 'syz.1.3641': attribute type 10 has an invalid length. [ 604.298230][T16641] netlink: 'syz.1.3645': attribute type 39 has an invalid length. [ 604.374991][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 604.405408][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.593373][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.603397][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.620626][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.630215][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 604.652148][T16390] device veth0_vlan entered promiscuous mode [ 604.687460][T16390] device veth1_vlan entered promiscuous mode [ 604.706750][T16650] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.3648'. [ 604.718415][ T9320] device hsr_slave_0 left promiscuous mode [ 604.734358][ T9320] device hsr_slave_1 left promiscuous mode [ 604.792518][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.800001][ T9320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.823234][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.830802][ T9320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.853262][ T9320] bridge0: port 3(bond0) entered disabled state [ 604.899436][ T9320] device bridge_slave_0 left promiscuous mode [ 604.912469][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.944349][ T9320] device veth1_macvtap left promiscuous mode [ 604.950426][ T9320] device veth0_macvtap left promiscuous mode [ 605.175417][ T9320] team0 (unregistering): Port device geneve1 removed [ 605.373535][ T9320] team0 (unregistering): Port device team_slave_1 removed [ 605.401640][ T9320] team0 (unregistering): Port device team_slave_0 removed [ 605.442849][ T9320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.463070][ T9320] device bond_slave_1 left promiscuous mode [ 605.488980][ T9320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.508155][ T9320] device bond_slave_0 left promiscuous mode [ 605.554649][ T9320] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 605.756908][ T9320] bond0 (unregistering): Released all slaves [ 605.942303][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 605.971541][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 606.042608][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.057833][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.096554][T16390] device veth0_macvtap entered promiscuous mode [ 606.119235][T16390] device veth1_macvtap entered promiscuous mode [ 606.169135][T16661] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3652'. [ 606.192484][T16661] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 606.202436][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.232943][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.287754][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.328710][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.350306][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.422274][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.458284][T16390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.469919][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 606.507522][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 606.526368][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.553077][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.574139][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.701357][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.742555][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.805723][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.886121][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.952203][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.016718][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.060523][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.115153][T16390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.148382][T16677] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3655'. [ 607.225218][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.265440][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.348789][T16390] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.431575][T16390] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.504707][T16390] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.545499][T16390] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.649399][T16684] netlink: 'syz.2.3656': attribute type 39 has an invalid length. [ 608.077260][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.125399][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.207513][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.318134][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.339542][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.386519][ T9187] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 608.443315][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 609.391194][T16707] netlink: 'syz.6.3576': attribute type 10 has an invalid length. [ 609.479064][T16707] team0: Port device netdevsim0 added [ 609.494054][T16711] netlink: 'syz.0.3666': attribute type 10 has an invalid length. [ 609.514164][ T9192] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 609.628916][T16723] netlink: 'syz.4.3669': attribute type 4 has an invalid length. [ 609.790879][T16727] delete_channel: no stack [ 609.856422][T16727] delete_channel: no stack [ 610.202202][T16745] netlink: 'syz.6.3676': attribute type 27 has an invalid length. [ 610.242197][T16745] netlink: 'syz.6.3676': attribute type 25 has an invalid length. [ 611.905865][T16774] netlink: 'syz.2.3682': attribute type 10 has an invalid length. [ 615.377130][T16809] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3694'. [ 615.433478][T16802] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3691'. [ 616.064628][T16826] netlink: 'syz.1.3699': attribute type 10 has an invalid length. [ 616.182466][T15893] Bluetooth: hci0: command 0x0406 tx timeout [ 616.335447][T16834] netlink: 'syz.4.3700': attribute type 27 has an invalid length. [ 616.368877][T16834] netlink: 'syz.4.3700': attribute type 25 has an invalid length. [ 616.870400][T16847] netlink: 'syz.0.3703': attribute type 10 has an invalid length. [ 617.132843][T16858] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3708'. [ 617.391727][T16868] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3712'. [ 617.677121][T16877] netlink: 'syz.4.3715': attribute type 3 has an invalid length. [ 617.693461][T16877] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3715'. [ 618.195155][T16872] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3713'. [ 618.210974][T16872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 618.227617][T16872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.442909][T16886] netlink: 'syz.2.3717': attribute type 27 has an invalid length. [ 618.489049][T16886] netlink: 'syz.2.3717': attribute type 25 has an invalid length. [ 618.669927][T16892] netlink: 'syz.6.3720': attribute type 10 has an invalid length. [ 619.201656][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.397195][T16892] device bridge_slave_1 left promiscuous mode [ 619.411948][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.431509][T16892] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 619.449911][T16902] netlink: 'syz.1.3723': attribute type 17 has an invalid length. [ 619.502233][T16908] netlink: 'syz.2.3724': attribute type 10 has an invalid length. [ 619.526665][T16908] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3724'. [ 619.940325][T16924] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3728'. [ 620.261300][T16929] syzkaller1: tun_chr_ioctl cmd 21731 [ 620.443513][T16937] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3731'. [ 620.945022][T16937] team0: Port device virt_wifi0 added [ 621.393512][T16956] validate_nla: 2 callbacks suppressed [ 621.393530][T16956] netlink: 'syz.4.3739': attribute type 10 has an invalid length. [ 621.398620][T16952] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3738'. [ 621.399282][T16956] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3739'. [ 621.522521][T16960] netlink: 'syz.2.3736': attribute type 10 has an invalid length. [ 621.536777][T16961] FAULT_INJECTION: forcing a failure. [ 621.536777][T16961] name failslab, interval 1, probability 0, space 0, times 0 [ 621.604006][T16961] CPU: 1 PID: 16961 Comm: syz.1.3741 Not tainted syzkaller #0 [ 621.611527][T16961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.621608][T16961] Call Trace: [ 621.624916][T16961] [ 621.627878][T16961] dump_stack_lvl+0x188/0x250 [ 621.632600][T16961] ? show_regs_print_info+0x20/0x20 [ 621.637841][T16961] ? load_image+0x410/0x410 [ 621.642382][T16961] ? __might_sleep+0xf0/0xf0 [ 621.647007][T16961] ? __lock_acquire+0x7b50/0x7b50 [ 621.652082][T16961] should_fail+0x383/0x4b0 [ 621.656546][T16961] should_failslab+0x5/0x20 [ 621.661078][T16961] slab_pre_alloc_hook+0x51/0xc0 [ 621.666058][T16961] __kmalloc+0x6b/0x340 [ 621.670244][T16961] ? tomoyo_encode+0x28a/0x550 [ 621.675053][T16961] tomoyo_encode+0x28a/0x550 [ 621.679689][T16961] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 621.685390][T16961] tomoyo_path_number_perm+0x251/0x6b0 [ 621.690887][T16961] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 621.696380][T16961] ? perf_trace_lock+0xe4/0x390 [ 621.701393][T16961] security_file_ioctl+0x6c/0xa0 [ 621.706370][T16961] __se_sys_ioctl+0x48/0x170 [ 621.710994][T16961] do_syscall_64+0x4c/0xa0 [ 621.715437][T16961] ? clear_bhb_loop+0x30/0x80 [ 621.720140][T16961] ? clear_bhb_loop+0x30/0x80 [ 621.724841][T16961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.730744][T16961] RIP: 0033:0x7fd384000159 [ 621.735167][T16961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.754775][T16961] RSP: 002b:00007fd382258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.763203][T16961] RAX: ffffffffffffffda RBX: 00007fd384287fa0 RCX: 00007fd384000159 [ 621.771175][T16961] RDX: 0000200000000000 RSI: 0000000000008b0f RDI: 0000000000000004 [ 621.779145][T16961] RBP: 00007fd382258090 R08: 0000000000000000 R09: 0000000000000000 [ 621.787146][T16961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.795120][T16961] R13: 00007fd384288038 R14: 00007fd384287fa0 R15: 00007ffda74b4b78 [ 621.803121][T16961] [ 621.857428][T16961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.001476][T16974] netlink: 'syz.1.3745': attribute type 15 has an invalid length. [ 622.076223][T16974] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3745'. [ 622.315817][T16976] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3747'. [ 623.042803][T17003] netlink: 'syz.0.3754': attribute type 10 has an invalid length. [ 623.083258][T17003] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3754'. [ 623.228420][T17008] netlink: 'syz.1.3753': attribute type 29 has an invalid length. [ 623.291841][T17008] netlink: 'syz.1.3753': attribute type 29 has an invalid length. [ 623.610301][T17021] netlink: 'syz.4.3761': attribute type 3 has an invalid length. [ 623.631415][T17021] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3761'. [ 623.659161][T17008] netlink: 'syz.1.3753': attribute type 29 has an invalid length. [ 623.700197][T17016] netlink: 'syz.1.3753': attribute type 29 has an invalid length. [ 624.000903][T17030] FAULT_INJECTION: forcing a failure. [ 624.000903][T17030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.323698][T17030] CPU: 0 PID: 17030 Comm: syz.1.3764 Not tainted syzkaller #0 [ 624.331217][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.341292][T17030] Call Trace: [ 624.344597][T17030] [ 624.347554][T17030] dump_stack_lvl+0x188/0x250 [ 624.352262][T17030] ? show_regs_print_info+0x20/0x20 [ 624.357482][T17030] ? load_image+0x410/0x410 [ 624.362005][T17030] ? __lock_acquire+0x7b50/0x7b50 [ 624.367059][T17030] should_fail+0x383/0x4b0 [ 624.371501][T17030] _copy_to_user+0x2e/0x130 [ 624.376032][T17030] bpf_test_finish+0x215/0x2f0 [ 624.380817][T17030] ? convert_skb_to___skb+0x360/0x360 [ 624.386205][T17030] ? ktime_get+0x247/0x270 [ 624.390659][T17030] bpf_prog_test_run_flow_dissector+0x509/0x630 [ 624.396935][T17030] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 624.402529][T17030] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 624.408102][T17030] bpf_prog_test_run+0x31c/0x390 [ 624.413072][T17030] __sys_bpf+0x5a5/0x6f0 [ 624.417341][T17030] ? bpf_link_show_fdinfo+0x380/0x380 [ 624.422733][T17030] ? rcu_nmi_exit+0x6f/0xf0 [ 624.427288][T17030] __x64_sys_bpf+0x78/0x90 [ 624.431737][T17030] do_syscall_64+0x4c/0xa0 [ 624.436172][T17030] ? clear_bhb_loop+0x30/0x80 [ 624.440872][T17030] ? clear_bhb_loop+0x30/0x80 [ 624.445572][T17030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 624.451489][T17030] RIP: 0033:0x7fd384000159 [ 624.455928][T17030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.475553][T17030] RSP: 002b:00007fd382258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.483995][T17030] RAX: ffffffffffffffda RBX: 00007fd384287fa0 RCX: 00007fd384000159 [ 624.491989][T17030] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 624.499980][T17030] RBP: 00007fd382258090 R08: 0000000000000000 R09: 0000000000000000 [ 624.507968][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.515954][T17030] R13: 00007fd384288038 R14: 00007fd384287fa0 R15: 00007ffda74b4b78 [ 624.523970][T17030] [ 624.530517][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.537021][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.756923][T17038] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3768'. [ 625.114753][T17055] netlink: 'syz.0.3770': attribute type 10 has an invalid length. [ 625.142320][T17055] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3770'. [ 625.462937][T17068] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.3776'. [ 626.777808][T17084] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3782'. [ 626.960921][T17090] validate_nla: 2 callbacks suppressed [ 626.960939][T17090] netlink: 'syz.0.3785': attribute type 10 has an invalid length. [ 627.016525][T17090] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3785'. [ 627.368145][T17100] netlink: 'syz.2.3784': attribute type 10 has an invalid length. [ 627.685625][T17107] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 627.926671][T17114] netlink: 199364 bytes leftover after parsing attributes in process `syz.1.3790'. [ 628.090290][T17123] netlink: 'syz.6.3795': attribute type 16 has an invalid length. [ 628.106157][T17123] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3795'. [ 628.157217][T17123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 628.414798][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3795'. [ 629.276239][T17137] netlink: 'syz.0.3798': attribute type 10 has an invalid length. [ 629.321162][T17137] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3798'. [ 629.431064][T17144] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3801'. [ 629.755888][T17157] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3804'. [ 630.316281][T17173] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3808'. [ 631.544630][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 632.105075][T17207] netlink: 'syz.6.3822': attribute type 15 has an invalid length. [ 632.139237][T17207] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.3822'. [ 632.203899][T17211] FAULT_INJECTION: forcing a failure. [ 632.203899][T17211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.300872][T17211] CPU: 0 PID: 17211 Comm: syz.2.3823 Not tainted syzkaller #0 [ 632.308384][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.318459][T17211] Call Trace: [ 632.321749][T17211] [ 632.324695][T17211] dump_stack_lvl+0x188/0x250 [ 632.329401][T17211] ? show_regs_print_info+0x20/0x20 [ 632.334624][T17211] ? load_image+0x410/0x410 [ 632.339158][T17211] ? __lock_acquire+0x7b50/0x7b50 [ 632.344230][T17211] should_fail+0x383/0x4b0 [ 632.348680][T17211] _copy_to_user+0x2e/0x130 [ 632.353219][T17211] simple_read_from_buffer+0xe3/0x150 [ 632.358624][T17211] proc_fail_nth_read+0x1a6/0x220 [ 632.363674][T17211] ? proc_fault_inject_write+0x310/0x310 [ 632.369337][T17211] ? fsnotify_perm+0x254/0x560 [ 632.374124][T17211] ? proc_fault_inject_write+0x310/0x310 [ 632.379786][T17211] vfs_read+0x2ff/0xd50 [ 632.383965][T17211] ? __lock_acquire+0x7b50/0x7b50 [ 632.388157][T17218] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3826'. [ 632.389014][T17211] ? kernel_read+0x1e0/0x1e0 [ 632.389059][T17211] ? mutex_lock_nested+0x17/0x20 [ 632.389077][T17211] ? __fdget_pos+0x2bf/0x370 [ 632.389095][T17211] ? ksys_read+0x70/0x260 [ 632.389115][T17211] ksys_read+0x153/0x260 [ 632.389137][T17211] ? vfs_write+0xd70/0xd70 [ 632.389159][T17211] ? lockdep_hardirqs_on+0x94/0x140 [ 632.430633][T17211] do_syscall_64+0x4c/0xa0 [ 632.435070][T17211] ? clear_bhb_loop+0x30/0x80 [ 632.439766][T17211] ? clear_bhb_loop+0x30/0x80 [ 632.444470][T17211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 632.450383][T17211] RIP: 0033:0x7f458c2a398e [ 632.454814][T17211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 632.474441][T17211] RSP: 002b:00007f458a53afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.482875][T17211] RAX: ffffffffffffffda RBX: 00007f458a53b6c0 RCX: 00007f458c2a398e [ 632.490862][T17211] RDX: 000000000000000f RSI: 00007f458a53b0a0 RDI: 0000000000000005 [ 632.498855][T17211] RBP: 00007f458a53b090 R08: 0000000000000000 R09: 0000000000000000 [ 632.506844][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.514835][T17211] R13: 00007f458c56b038 R14: 00007f458c56afa0 R15: 00007ffd6875d478 [ 632.522843][T17211] [ 632.619868][T17221] netlink: 'syz.6.3827': attribute type 10 has an invalid length. [ 632.665338][T17221] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3827'. [ 632.912679][ T9204] wlan1: Trigger new scan to find an IBSS to join [ 633.147419][T17221] team0: Port device virt_wifi0 removed [ 633.305907][T17237] FAULT_INJECTION: forcing a failure. [ 633.305907][T17237] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 633.363358][T17237] CPU: 1 PID: 17237 Comm: syz.4.3831 Not tainted syzkaller #0 [ 633.370867][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.380936][T17237] Call Trace: [ 633.384229][T17237] [ 633.387171][T17237] dump_stack_lvl+0x188/0x250 [ 633.391871][T17237] ? show_regs_print_info+0x20/0x20 [ 633.397090][T17237] ? load_image+0x410/0x410 [ 633.401613][T17237] ? __lock_acquire+0x7b50/0x7b50 [ 633.406659][T17237] ? perf_trace_lock+0xe4/0x390 [ 633.411535][T17237] should_fail+0x383/0x4b0 [ 633.415980][T17237] prepare_alloc_pages+0x1e3/0x5b0 [ 633.421122][T17237] __alloc_pages+0x11b/0x480 [ 633.425732][T17237] ? zone_statistics+0x170/0x170 [ 633.430691][T17237] ? __lock_acquire+0x7b50/0x7b50 [ 633.435755][T17237] new_slab+0xc0/0x4b0 [ 633.439851][T17237] ___slab_alloc+0x807/0xdd0 [ 633.444456][T17237] ? __alloc_skb+0xf4/0x750 [ 633.448983][T17237] kmem_cache_alloc_node+0x118/0x2c0 [ 633.454288][T17237] ? __alloc_skb+0xf4/0x750 [ 633.458818][T17237] __alloc_skb+0xf4/0x750 [ 633.463184][T17237] netlink_sendmsg+0x654/0xbe0 [ 633.467984][T17237] ? netlink_getsockopt+0x570/0x570 [ 633.473194][T17237] ? aa_sock_msg_perm+0x94/0x150 [ 633.478159][T17237] ? apparmor_socket_sendmsg+0x88/0x230 [ 633.483727][T17237] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 633.489034][T17237] ? security_socket_sendmsg+0x7c/0xa0 [ 633.494515][T17237] ? netlink_getsockopt+0x570/0x570 [ 633.499730][T17237] ____sys_sendmsg+0x5be/0x8f0 [ 633.504527][T17237] ? __sys_sendmsg_sock+0x30/0x30 [ 633.509584][T17237] ? import_iovec+0x6f/0xa0 [ 633.514118][T17237] ___sys_sendmsg+0x236/0x2e0 [ 633.518830][T17237] ? __sys_sendmsg+0x290/0x290 [ 633.523634][T17237] ? trace_event_raw_event_lock+0x250/0x250 [ 633.529588][T17237] __se_sys_sendmsg+0x1b7/0x2a0 [ 633.534468][T17237] ? __x64_sys_sendmsg+0x80/0x80 [ 633.539423][T17237] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 633.547293][T17237] ? trace_sys_enter+0x1f/0x80 [ 633.552084][T17237] do_syscall_64+0x4c/0xa0 [ 633.556521][T17237] ? clear_bhb_loop+0x30/0x80 [ 633.561222][T17237] ? clear_bhb_loop+0x30/0x80 [ 633.565925][T17237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.571839][T17237] RIP: 0033:0x7facafbf0159 [ 633.576277][T17237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.595901][T17237] RSP: 002b:00007facade48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.604335][T17237] RAX: ffffffffffffffda RBX: 00007facafe77fa0 RCX: 00007facafbf0159 [ 633.612329][T17237] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 633.620328][T17237] RBP: 00007facade48090 R08: 0000000000000000 R09: 0000000000000000 [ 633.628319][T17237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.636311][T17237] R13: 00007facafe78038 R14: 00007facafe77fa0 R15: 00007fff6e409998 [ 633.644320][T17237] [ 634.011197][T17271] netlink: 'syz.6.3836': attribute type 9 has an invalid length. [ 634.056789][T17271] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3836'. [ 634.246952][T17237] netlink: 'syz.4.3831': attribute type 9 has an invalid length. [ 634.441250][T17237] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3831'. [ 634.670411][T17278] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3839'. [ 635.057865][T17286] netlink: 'syz.6.3843': attribute type 10 has an invalid length. [ 635.108018][T17286] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3843'. [ 635.906253][T17294] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3845'. [ 636.951323][ T9204] wlan1: Trigger new scan to find an IBSS to join [ 637.318618][T17318] device syzkaller0 entered promiscuous mode [ 637.414521][T17323] netlink: 'syz.6.3854': attribute type 29 has an invalid length. [ 637.466665][T17327] FAULT_INJECTION: forcing a failure. [ 637.466665][T17327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.523668][T17327] CPU: 0 PID: 17327 Comm: syz.6.3854 Not tainted syzkaller #0 [ 637.531181][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.541268][T17327] Call Trace: [ 637.544570][T17327] [ 637.547515][T17327] dump_stack_lvl+0x188/0x250 [ 637.552221][T17327] ? show_regs_print_info+0x20/0x20 [ 637.557440][T17327] ? load_image+0x410/0x410 [ 637.561969][T17327] ? __lock_acquire+0x7b50/0x7b50 [ 637.567021][T17327] should_fail+0x383/0x4b0 [ 637.571467][T17327] _copy_from_user+0x2e/0x170 [ 637.576178][T17327] iovec_from_user+0x142/0x370 [ 637.580974][T17327] __import_iovec+0x70/0x490 [ 637.585599][T17327] import_iovec+0x6f/0xa0 [ 637.589955][T17327] ___sys_recvmsg+0x4e2/0x5c0 [ 637.594661][T17327] ? __sys_recvmsg+0x280/0x280 [ 637.599456][T17327] ? __lock_acquire+0x7b50/0x7b50 [ 637.604498][T17327] ? vfs_write+0xaa6/0xd70 [ 637.608931][T17327] ? __fget_files+0x402/0x470 [ 637.613624][T17327] __x64_sys_recvmsg+0x201/0x2d0 [ 637.618579][T17327] ? ___sys_recvmsg+0x5c0/0x5c0 [ 637.623431][T17327] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 637.629425][T17327] ? lockdep_hardirqs_on+0x94/0x140 [ 637.634634][T17327] do_syscall_64+0x4c/0xa0 [ 637.639048][T17327] ? clear_bhb_loop+0x30/0x80 [ 637.643726][T17327] ? clear_bhb_loop+0x30/0x80 [ 637.648402][T17327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 637.654293][T17327] RIP: 0033:0x7f6ba5692159 [ 637.658710][T17327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.678315][T17327] RSP: 002b:00007f6ba38c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 637.686730][T17327] RAX: ffffffffffffffda RBX: 00007f6ba591a090 RCX: 00007f6ba5692159 [ 637.694704][T17327] RDX: 0000000000002102 RSI: 00002000000005c0 RDI: 0000000000000003 [ 637.702678][T17327] RBP: 00007f6ba38c9090 R08: 0000000000000000 R09: 0000000000000000 [ 637.710646][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.718619][T17327] R13: 00007f6ba591a128 R14: 00007f6ba591a090 R15: 00007ffce46ba418 [ 637.726599][T17327] [ 637.978058][T17323] netlink: 'syz.6.3854': attribute type 29 has an invalid length. [ 637.998514][T17331] netlink: 'syz.1.3855': attribute type 10 has an invalid length. [ 638.020736][T17331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3855'. [ 638.037269][T17331] device ipvlan1 entered promiscuous mode [ 638.045422][T17331] bridge0: port 2(ipvlan1) entered blocking state [ 638.081942][T17331] bridge0: port 2(ipvlan1) entered disabled state [ 638.112581][ T9200] wlan1: Creating new IBSS network, BSSID 72:10:15:44:8a:60 [ 638.124764][T17331] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 638.174513][T17340] FAULT_INJECTION: forcing a failure. [ 638.174513][T17340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.195517][T17335] netlink: 'syz.0.3857': attribute type 21 has an invalid length. [ 638.198262][T17340] CPU: 1 PID: 17340 Comm: syz.6.3859 Not tainted syzkaller #0 [ 638.210859][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.220930][T17340] Call Trace: [ 638.224226][T17340] [ 638.224788][T17335] IPv6: NLM_F_CREATE should be specified when creating new route [ 638.227168][T17340] dump_stack_lvl+0x188/0x250 [ 638.227208][T17340] ? show_regs_print_info+0x20/0x20 [ 638.227228][T17340] ? load_image+0x410/0x410 [ 638.227252][T17340] ? __lock_acquire+0x7b50/0x7b50 [ 638.227280][T17340] should_fail+0x383/0x4b0 [ 638.227305][T17340] _copy_from_user+0x2e/0x170 [ 638.227326][T17340] bpf_test_init+0x136/0x1b0 [ 638.227350][T17340] bpf_prog_test_run_skb+0x181/0x1190 [ 638.227372][T17340] ? __fget_files+0x402/0x470 [ 638.227401][T17340] ? cpu_online+0x60/0x60 [ 638.227420][T17340] bpf_prog_test_run+0x31c/0x390 [ 638.227444][T17340] __sys_bpf+0x5a5/0x6f0 [ 638.227466][T17340] ? bpf_link_show_fdinfo+0x380/0x380 [ 638.227507][T17340] __x64_sys_bpf+0x78/0x90 [ 638.227527][T17340] do_syscall_64+0x4c/0xa0 [ 638.227545][T17340] ? clear_bhb_loop+0x30/0x80 [ 638.227564][T17340] ? clear_bhb_loop+0x30/0x80 [ 638.227584][T17340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 638.227604][T17340] RIP: 0033:0x7f6ba5692159 [ 638.227622][T17340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.227638][T17340] RSP: 002b:00007f6ba38ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.227660][T17340] RAX: ffffffffffffffda RBX: 00007f6ba5919fa0 RCX: 00007f6ba5692159 [ 638.227675][T17340] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 638.227687][T17340] RBP: 00007f6ba38ea090 R08: 0000000000000000 R09: 0000000000000000 [ 638.227699][T17340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.227711][T17340] R13: 00007f6ba591a038 R14: 00007f6ba5919fa0 R15: 00007ffce46ba418 [ 638.227741][T17340] [ 638.707404][T17349] FAULT_INJECTION: forcing a failure. [ 638.707404][T17349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.769607][T17349] CPU: 1 PID: 17349 Comm: syz.6.3861 Not tainted syzkaller #0 [ 638.777127][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.787205][T17349] Call Trace: [ 638.790508][T17349] [ 638.793455][T17349] dump_stack_lvl+0x188/0x250 [ 638.798160][T17349] ? show_regs_print_info+0x20/0x20 [ 638.803385][T17349] ? load_image+0x410/0x410 [ 638.807909][T17349] ? __lock_acquire+0x7b50/0x7b50 [ 638.812966][T17349] should_fail+0x383/0x4b0 [ 638.817424][T17349] _copy_from_user+0x2e/0x170 [ 638.822133][T17349] __sys_bpf+0x26d/0x6f0 [ 638.826400][T17349] ? bpf_link_show_fdinfo+0x380/0x380 [ 638.831818][T17349] __x64_sys_bpf+0x78/0x90 [ 638.836255][T17349] do_syscall_64+0x4c/0xa0 [ 638.840694][T17349] ? clear_bhb_loop+0x30/0x80 [ 638.845397][T17349] ? clear_bhb_loop+0x30/0x80 [ 638.850101][T17349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 638.856016][T17349] RIP: 0033:0x7f6ba5692159 [ 638.860452][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.880083][T17349] RSP: 002b:00007f6ba38ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.888518][T17349] RAX: ffffffffffffffda RBX: 00007f6ba5919fa0 RCX: 00007f6ba5692159 [ 638.896509][T17349] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 638.904500][T17349] RBP: 00007f6ba38ea090 R08: 0000000000000000 R09: 0000000000000000 [ 638.912490][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.920475][T17349] R13: 00007f6ba591a038 R14: 00007f6ba5919fa0 R15: 00007ffce46ba418 [ 638.928478][T17349] [ 640.402532][T17369] netlink: 'syz.6.3870': attribute type 10 has an invalid length. [ 640.588528][T17379] netlink: 'syz.4.3873': attribute type 4 has an invalid length. [ 641.026253][T17391] netlink: 'syz.6.3876': attribute type 10 has an invalid length. [ 641.153374][T17391] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3876'. [ 641.371663][T17392] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3875'. [ 642.082849][T17410] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3882'. [ 642.171215][T17410] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 642.201159][T17418] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3883'. [ 642.322370][T17418] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 642.353112][T17422] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3884'. [ 642.372806][T17421] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3886'. [ 642.414209][T17425] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 642.607681][T17433] netlink: 'syz.4.3887': attribute type 10 has an invalid length. [ 642.860118][T17436] netlink: 'syz.1.3890': attribute type 10 has an invalid length. [ 642.880662][T17436] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3890'. [ 643.770761][T17465] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3897'. [ 643.841988][T17465] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 644.391157][T17488] netlink: 'syz.4.3904': attribute type 10 has an invalid length. [ 644.487408][T17488] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3904'. [ 644.522996][T17489] netlink: 'syz.6.3903': attribute type 10 has an invalid length. [ 644.723079][T17497] netlink: 'syz.2.3907': attribute type 3 has an invalid length. [ 644.739929][T17497] netlink: 'syz.2.3907': attribute type 1 has an invalid length. [ 644.762561][T17497] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3907'. [ 644.765207][T17499] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3908'. [ 645.233784][T17514] FAULT_INJECTION: forcing a failure. [ 645.233784][T17514] name failslab, interval 1, probability 0, space 0, times 0 [ 645.271460][T17516] netlink: 'syz.2.3916': attribute type 29 has an invalid length. [ 645.279143][T17514] CPU: 1 PID: 17514 Comm: syz.1.3915 Not tainted syzkaller #0 [ 645.286773][T17514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.296849][T17514] Call Trace: [ 645.300152][T17514] [ 645.303104][T17514] dump_stack_lvl+0x188/0x250 [ 645.307805][T17514] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 645.314418][T17514] ? show_regs_print_info+0x20/0x20 [ 645.319644][T17514] ? load_image+0x410/0x410 [ 645.323094][T17516] netlink: 'syz.2.3916': attribute type 29 has an invalid length. [ 645.324168][T17514] ? crng_make_state+0x50c/0x670 [ 645.336951][T17514] should_fail+0x383/0x4b0 [ 645.341406][T17514] should_failslab+0x5/0x20 [ 645.345930][T17514] slab_pre_alloc_hook+0x51/0xc0 [ 645.350899][T17514] kmem_cache_alloc_trace+0x47/0x290 [ 645.356204][T17514] ? sctp_add_bind_addr+0x89/0x350 [ 645.361342][T17514] sctp_add_bind_addr+0x89/0x350 [ 645.366311][T17514] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 645.371976][T17514] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 645.378078][T17514] ? sctp_v4_is_any+0x31/0x50 [ 645.382777][T17514] ? sctp_copy_one_addr+0x93/0x660 [ 645.387917][T17514] sctp_bind_addr_copy+0xaf/0x3c0 [ 645.392970][T17514] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 645.399338][T17514] sctp_connect_new_asoc+0x2f5/0x6a0 [ 645.404650][T17514] ? __sctp_connect+0xd80/0xd80 [ 645.409524][T17514] ? __local_bh_enable_ip+0x136/0x1c0 [ 645.414934][T17514] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 645.420503][T17514] ? security_sctp_bind_connect+0x85/0xb0 [ 645.426253][T17514] sctp_sendmsg+0x15e1/0x2940 [ 645.430973][T17514] ? sctp_getsockopt+0x8a0/0x8a0 [ 645.435941][T17514] ? aa_af_perm+0x340/0x340 [ 645.440470][T17514] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 645.446917][T17514] ? aa_sock_msg_perm+0x94/0x150 [ 645.451882][T17514] ? sock_rps_record_flow+0x17/0x3b0 [ 645.457195][T17514] ? inet_sendmsg+0xca/0x2a0 [ 645.461805][T17514] ? inet_send_prepare+0x250/0x250 [ 645.466949][T17514] ____sys_sendmsg+0x5be/0x8f0 [ 645.471753][T17514] ? __sys_sendmsg_sock+0x30/0x30 [ 645.476815][T17514] ? import_iovec+0x6f/0xa0 [ 645.481350][T17514] ___sys_sendmsg+0x236/0x2e0 [ 645.486068][T17514] ? __sys_sendmsg+0x290/0x290 [ 645.490869][T17514] ? trace_event_raw_event_lock+0x250/0x250 [ 645.496822][T17514] __se_sys_sendmsg+0x1b7/0x2a0 [ 645.501706][T17514] ? __x64_sys_sendmsg+0x80/0x80 [ 645.506663][T17514] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 645.512682][T17514] ? lockdep_hardirqs_on+0x94/0x140 [ 645.517913][T17514] do_syscall_64+0x4c/0xa0 [ 645.522352][T17514] ? clear_bhb_loop+0x30/0x80 [ 645.522952][T17518] netlink: 'syz.2.3916': attribute type 29 has an invalid length. [ 645.527052][T17514] ? clear_bhb_loop+0x30/0x80 [ 645.539532][T17514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 645.545446][T17514] RIP: 0033:0x7fd384000159 [ 645.549885][T17514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.569512][T17514] RSP: 002b:00007fd382258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.577952][T17514] RAX: ffffffffffffffda RBX: 00007fd384287fa0 RCX: 00007fd384000159 [ 645.585954][T17514] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 645.593949][T17514] RBP: 00007fd382258090 R08: 0000000000000000 R09: 0000000000000000 [ 645.601911][T17514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.609867][T17514] R13: 00007fd384288038 R14: 00007fd384287fa0 R15: 00007ffda74b4b78 [ 645.617838][T17514] [ 645.626080][T17519] netlink: 'syz.2.3916': attribute type 29 has an invalid length. [ 646.006356][T17535] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3922'. [ 646.017563][T17536] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3920'. [ 646.030457][T17530] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3921'. [ 646.061156][T17530] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 646.321908][T17547] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3926'. [ 646.417399][T17546] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3927'. [ 646.603609][T17559] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3929'. [ 647.511821][T17573] raw_sendmsg: syz.1.3934 forgot to set AF_INET. Fix it! [ 647.842684][T17579] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.902476][T17582] validate_nla: 3 callbacks suppressed [ 647.902492][T17582] netlink: 'syz.1.3937': attribute type 10 has an invalid length. [ 647.938704][T17579] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.946013][T17579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.002449][T17579] device bridge0 entered promiscuous mode [ 648.668497][T17609] netlink: 'syz.1.3945': attribute type 10 has an invalid length. [ 648.760342][T17609] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.827251][T17609] bond0: (slave team0): Enslaving as an active interface with an up link [ 648.896919][T17612] __nla_validate_parse: 6 callbacks suppressed [ 648.896938][T17612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3945'. [ 649.092850][T17612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.136911][T17612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.188669][T17612] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 649.234738][T17612] bond0 (unregistering): (slave team0): Releasing backup interface [ 649.337340][T17612] bond0 (unregistering): Released all slaves [ 649.415828][T17611] netlink: 'syz.2.3946': attribute type 10 has an invalid length. [ 649.496795][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 650.137905][T17618] netlink: 'syz.1.3949': attribute type 8 has an invalid length. [ 650.214372][T17618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3949'. [ 650.842260][T17625] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3951'. [ 651.081853][T17627] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3952'. [ 651.182711][T17631] netlink: 'syz.6.3953': attribute type 10 has an invalid length. [ 651.261664][T17627] netlink: set zone limit has 4 unknown bytes [ 651.273228][T17631] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3953'. [ 652.323256][T17646] netlink: 'syz.1.3958': attribute type 10 has an invalid length. [ 654.529669][T17668] device syzkaller0 entered promiscuous mode [ 655.029767][T17676] netlink: 'syz.1.3968': attribute type 10 has an invalid length. [ 655.057615][T17676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3968'. [ 655.093893][T17676] bridge0: port 2(ipvlan1) entered blocking state [ 655.120771][T17676] bridge0: port 2(ipvlan1) entered disabled state [ 655.151775][T17676] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 655.695594][T17694] netlink: 'syz.1.3973': attribute type 10 has an invalid length. [ 655.884332][T17707] netlink: 'syz.6.3971': attribute type 10 has an invalid length. [ 655.983291][T17713] netlink: 'syz.0.3977': attribute type 2 has an invalid length. [ 655.991206][T17713] netlink: 'syz.0.3977': attribute type 8 has an invalid length. [ 656.093968][T17713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3977'. [ 656.193916][T17715] netlink: 'syz.4.3974': attribute type 25 has an invalid length. [ 656.201781][T17715] netlink: 'syz.4.3974': attribute type 29 has an invalid length. [ 656.904772][T17732] netlink: 'syz.6.3979': attribute type 10 has an invalid length. [ 657.143937][T17732] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.272932][T17732] bond0: (slave team0): Enslaving as an active interface with an up link [ 657.388060][T17739] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3979'. [ 657.662004][T17739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.812384][T17739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.951106][T17739] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 658.096558][T17739] bond0 (unregistering): (slave team0): Releasing backup interface [ 658.179611][T17739] bond0 (unregistering): Released all slaves [ 658.343916][T17757] netlink: 'syz.1.3989': attribute type 10 has an invalid length. [ 658.708469][T17768] netlink: 'syz.6.3993': attribute type 8 has an invalid length. [ 658.768416][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3993'. [ 659.020590][T17771] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3995'. [ 659.889608][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3999'. [ 659.977724][T17788] device dummy0 entered promiscuous mode [ 660.131565][T17788] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 660.472761][T17800] validate_nla: 3 callbacks suppressed [ 660.472779][T17800] netlink: 'syz.0.4002': attribute type 10 has an invalid length. [ 661.490344][T17810] netlink: 'syz.1.4005': attribute type 2 has an invalid length. [ 661.509116][T17814] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4007'. [ 661.518626][T17810] netlink: 'syz.1.4005': attribute type 8 has an invalid length. [ 661.535823][T17810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4005'. [ 661.996059][T17822] device syzkaller0 entered promiscuous mode [ 662.186932][T17829] netlink: 'syz.6.4013': attribute type 39 has an invalid length. [ 662.498548][T17838] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4015'. [ 662.514187][T17838] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 662.545811][T17841] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4016'. [ 662.565500][T17841] netlink: 'syz.1.4016': attribute type 2 has an invalid length. [ 663.390751][T17861] netlink: 'syz.6.4023': attribute type 2 has an invalid length. [ 663.413089][T17861] netlink: 'syz.6.4023': attribute type 8 has an invalid length. [ 663.437658][T17861] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4023'. [ 663.847242][T17868] netlink: 'syz.6.4026': attribute type 29 has an invalid length. [ 663.902055][T17872] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4027'. [ 663.958370][T17872] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 663.986348][T17868] netlink: 'syz.6.4026': attribute type 29 has an invalid length. [ 664.922975][T17881] netlink: 'syz.1.4031': attribute type 10 has an invalid length. [ 664.952310][T17881] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4031'. [ 666.394153][T17900] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4039'. [ 666.522385][T17902] netlink: 'syz.4.4038': attribute type 2 has an invalid length. [ 666.682399][T17902] netlink: 'syz.4.4038': attribute type 8 has an invalid length. [ 666.802265][T17902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4038'. [ 666.852347][T17908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4048'. [ 667.269903][T17916] netlink: 'syz.4.4043': attribute type 21 has an invalid length. [ 667.302735][T17916] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 667.332025][T17916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4043'. [ 667.518468][T17942] netlink: 'syz.6.4047': attribute type 10 has an invalid length. [ 667.553236][T17942] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4047'. [ 667.922901][T17950] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4053'. [ 667.970324][T17953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4052'. [ 667.990108][T17952] FAULT_INJECTION: forcing a failure. [ 667.990108][T17952] name failslab, interval 1, probability 0, space 0, times 0 [ 668.039861][T17952] CPU: 1 PID: 17952 Comm: syz.2.4054 Not tainted syzkaller #0 [ 668.047378][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.057455][T17952] Call Trace: [ 668.060755][T17952] [ 668.063702][T17952] dump_stack_lvl+0x188/0x250 [ 668.068403][T17952] ? show_regs_print_info+0x20/0x20 [ 668.073620][T17952] ? load_image+0x410/0x410 [ 668.078145][T17952] ? __lock_acquire+0x7b50/0x7b50 [ 668.083187][T17952] should_fail+0x383/0x4b0 [ 668.087613][T17952] should_failslab+0x5/0x20 [ 668.092138][T17952] slab_pre_alloc_hook+0x51/0xc0 [ 668.097117][T17952] __kmalloc+0x6b/0x340 [ 668.101290][T17952] ? security_sk_alloc+0x47/0x130 [ 668.106349][T17952] security_sk_alloc+0x47/0x130 [ 668.111234][T17952] sk_prot_alloc+0x101/0x210 [ 668.115844][T17952] ? sk_alloc+0x1d/0x310 [ 668.120110][T17952] sk_alloc+0x2f/0x310 [ 668.124198][T17952] bpf_prog_test_run_skb+0x23c/0x1190 [ 668.129585][T17952] ? __fget_files+0x402/0x470 [ 668.134258][T17952] ? cpu_online+0x60/0x60 [ 668.138576][T17952] bpf_prog_test_run+0x31c/0x390 [ 668.143514][T17952] __sys_bpf+0x5a5/0x6f0 [ 668.147779][T17952] ? bpf_link_show_fdinfo+0x380/0x380 [ 668.153189][T17952] __x64_sys_bpf+0x78/0x90 [ 668.157633][T17952] do_syscall_64+0x4c/0xa0 [ 668.162069][T17952] ? clear_bhb_loop+0x30/0x80 [ 668.166762][T17952] ? clear_bhb_loop+0x30/0x80 [ 668.171452][T17952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 668.177343][T17952] RIP: 0033:0x7f458c2e3159 [ 668.181763][T17952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.201365][T17952] RSP: 002b:00007f458a53b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.209788][T17952] RAX: ffffffffffffffda RBX: 00007f458c56afa0 RCX: 00007f458c2e3159 [ 668.217760][T17952] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 000000000000000a [ 668.225731][T17952] RBP: 00007f458a53b090 R08: 0000000000000000 R09: 0000000000000000 [ 668.233698][T17952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.241668][T17952] R13: 00007f458c56b038 R14: 00007f458c56afa0 R15: 00007ffd6875d478 [ 668.249647][T17952] [ 668.255870][ T162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 668.381802][T17956] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4055'. [ 668.395092][T17956] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 668.510866][T17967] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.4058'. [ 668.835903][T17977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4059'. [ 669.065360][T17984] netlink: 'syz.0.4064': attribute type 10 has an invalid length. [ 669.073965][T17984] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4064'. [ 669.298111][T17988] netlink: 'syz.1.4065': attribute type 10 has an invalid length. [ 669.418360][T17992] sctp: [Deprecated]: syz.0.4066 (pid 17992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.418360][T17992] Use struct sctp_sack_info instead [ 669.592987][T17974] delete_channel: no stack [ 669.947911][T18001] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 670.754826][T18023] netlink: 'syz.0.4077': attribute type 10 has an invalid length. [ 670.931883][T18025] netlink: 'syz.1.4075': attribute type 30 has an invalid length. [ 671.838172][T18031] FAULT_INJECTION: forcing a failure. [ 671.838172][T18031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.857067][T18031] CPU: 1 PID: 18031 Comm: syz.0.4079 Not tainted syzkaller #0 [ 671.864557][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.874636][T18031] Call Trace: [ 671.877938][T18031] [ 671.880883][T18031] dump_stack_lvl+0x188/0x250 [ 671.885581][T18031] ? show_regs_print_info+0x20/0x20 [ 671.890791][T18031] ? load_image+0x410/0x410 [ 671.895307][T18031] ? __lock_acquire+0x7b50/0x7b50 [ 671.900346][T18031] ? lockdep_hardirqs_on+0x94/0x140 [ 671.905561][T18031] should_fail+0x383/0x4b0 [ 671.909995][T18031] _copy_from_user+0x2e/0x170 [ 671.914683][T18031] __copy_msghdr_from_user+0x48a/0x630 [ 671.920155][T18031] ? verify_lock_unused+0x140/0x140 [ 671.925368][T18031] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 671.930672][T18031] ? __lock_acquire+0x13dc/0x7b50 [ 671.935724][T18031] ___sys_sendmsg+0x19a/0x2e0 [ 671.940423][T18031] ? __sys_sendmsg+0x290/0x290 [ 671.945235][T18031] __se_sys_sendmsg+0x1b7/0x2a0 [ 671.950100][T18031] ? __x64_sys_sendmsg+0x80/0x80 [ 671.955073][T18031] ? syscall_enter_from_user_mode+0x2a/0x70 [ 671.960992][T18031] do_syscall_64+0x4c/0xa0 [ 671.965416][T18031] ? clear_bhb_loop+0x30/0x80 [ 671.970106][T18031] ? clear_bhb_loop+0x30/0x80 [ 671.974793][T18031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 671.980702][T18031] RIP: 0033:0x7f11b88a2159 [ 671.985127][T18031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.004751][T18031] RSP: 002b:00007f11b6afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.013193][T18031] RAX: ffffffffffffffda RBX: 00007f11b8b29fa0 RCX: 00007f11b88a2159 [ 672.021192][T18031] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 0000000000000011 [ 672.029182][T18031] RBP: 00007f11b6afa090 R08: 0000000000000000 R09: 0000000000000000 [ 672.037167][T18031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.045147][T18031] R13: 00007f11b8b2a038 R14: 00007f11b8b29fa0 R15: 00007ffe102185e8 [ 672.053153][T18031] [ 672.683491][T18064] netlink: 'syz.4.4090': attribute type 10 has an invalid length. [ 672.745038][T18064] __nla_validate_parse: 4 callbacks suppressed [ 672.745056][T18064] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4090'. [ 672.824909][T18064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 673.042943][T18067] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4089'. [ 674.165158][T18094] netlink: 'syz.1.4096': attribute type 21 has an invalid length. [ 674.215381][T18094] netlink: 'syz.1.4096': attribute type 1 has an invalid length. [ 674.246730][T18094] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4096'. [ 674.617890][T18108] geneve1: mtu less than device minimum [ 674.875289][T18108] device syzkaller0 entered promiscuous mode [ 674.885677][T18116] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4102'. [ 674.997562][T18111] syzkaller0: mtu greater than device maximum [ 675.011999][T18116] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 675.070733][T18118] FAULT_INJECTION: forcing a failure. [ 675.070733][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 675.135849][T18118] CPU: 1 PID: 18118 Comm: syz.2.4103 Not tainted syzkaller #0 [ 675.143379][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.153464][T18118] Call Trace: [ 675.156770][T18118] [ 675.159732][T18118] dump_stack_lvl+0x188/0x250 [ 675.164458][T18118] ? show_regs_print_info+0x20/0x20 [ 675.169691][T18118] ? load_image+0x410/0x410 [ 675.174238][T18118] ? __might_sleep+0xf0/0xf0 [ 675.178865][T18118] ? __lock_acquire+0x7b50/0x7b50 [ 675.183953][T18118] should_fail+0x383/0x4b0 [ 675.188427][T18118] should_failslab+0x5/0x20 [ 675.192960][T18118] slab_pre_alloc_hook+0x51/0xc0 [ 675.197939][T18118] __kmalloc+0x6b/0x340 [ 675.202119][T18118] ? tomoyo_encode+0x28a/0x550 [ 675.206946][T18118] tomoyo_encode+0x28a/0x550 [ 675.211591][T18118] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 675.217323][T18118] tomoyo_path_number_perm+0x251/0x6b0 [ 675.222827][T18118] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 675.228320][T18118] ? perf_trace_lock+0x301/0x390 [ 675.233488][T18118] security_file_ioctl+0x6c/0xa0 [ 675.238473][T18118] __se_sys_ioctl+0x48/0x170 [ 675.243109][T18118] do_syscall_64+0x4c/0xa0 [ 675.247556][T18118] ? clear_bhb_loop+0x30/0x80 [ 675.252263][T18118] ? clear_bhb_loop+0x30/0x80 [ 675.256979][T18118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 675.262903][T18118] RIP: 0033:0x7f458c2e3159 [ 675.267355][T18118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.286985][T18118] RSP: 002b:00007f458a53b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.295439][T18118] RAX: ffffffffffffffda RBX: 00007f458c56afa0 RCX: 00007f458c2e3159 [ 675.303436][T18118] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 675.311433][T18118] RBP: 00007f458a53b090 R08: 0000000000000000 R09: 0000000000000000 [ 675.319434][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.327434][T18118] R13: 00007f458c56b038 R14: 00007f458c56afa0 R15: 00007ffd6875d478 [ 675.335495][T18118] [ 675.566247][T18118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 675.881823][T18122] netlink: 'syz.1.4105': attribute type 10 has an invalid length. [ 676.773175][T18140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 677.245550][T18157] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4113'. [ 677.362445][T18157] netlink: 'syz.0.4113': attribute type 2 has an invalid length. [ 677.400299][T18157] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4113'. [ 677.440302][T18157] netlink: zone id is out of range [ 677.552357][T18157] netlink: zone id is out of range [ 677.689917][T18157] netlink: zone id is out of range [ 677.793151][T18157] netlink: zone id is out of range [ 677.798502][T18157] netlink: zone id is out of range [ 677.889397][T18157] netlink: zone id is out of range [ 677.992247][T18157] netlink: zone id is out of range [ 678.082018][T18167] netlink: 'syz.6.4114': attribute type 46 has an invalid length. [ 678.092649][T18167] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4114'. [ 678.244079][T18178] FAULT_INJECTION: forcing a failure. [ 678.244079][T18178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.300866][T18179] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4116'. [ 678.326045][T18178] CPU: 1 PID: 18178 Comm: syz.6.4118 Not tainted syzkaller #0 [ 678.333543][T18178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.343612][T18178] Call Trace: [ 678.346900][T18178] [ 678.349837][T18178] dump_stack_lvl+0x188/0x250 [ 678.354533][T18178] ? show_regs_print_info+0x20/0x20 [ 678.359745][T18178] ? load_image+0x410/0x410 [ 678.364268][T18178] ? __lock_acquire+0x7b50/0x7b50 [ 678.369301][T18178] ? __alloc_skb+0x473/0x750 [ 678.373910][T18178] should_fail+0x383/0x4b0 [ 678.378347][T18178] _copy_from_iter+0x234/0x1160 [ 678.383215][T18178] ? __lock_acquire+0x7b50/0x7b50 [ 678.388265][T18178] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 678.393653][T18178] ? __virt_addr_valid+0x3c6/0x470 [ 678.398841][T18178] ? __check_object_size+0x30c/0x410 [ 678.404174][T18178] skb_copy_datagram_from_iter+0xf1/0x6c0 [ 678.409911][T18178] ? skb_put+0x10e/0x200 [ 678.414173][T18178] tun_get_user+0xb28/0x3b10 [ 678.418798][T18178] ? tun_ring_recv+0xc90/0xc90 [ 678.423591][T18178] ? rcu_lock_release+0x5/0x20 [ 678.428374][T18178] ? __lock_acquire+0x7b50/0x7b50 [ 678.433434][T18178] tun_chr_write_iter+0x112/0x1e0 [ 678.438478][T18178] vfs_write+0x748/0xd70 [ 678.442743][T18178] ? file_end_write+0x250/0x250 [ 678.447619][T18178] ? __fget_files+0x402/0x470 [ 678.452321][T18178] ? __fdget_pos+0x1e2/0x370 [ 678.456920][T18178] ? ksys_write+0x70/0x260 [ 678.461352][T18178] ksys_write+0x153/0x260 [ 678.465697][T18178] ? __ia32_sys_read+0x80/0x80 [ 678.470479][T18178] ? lockdep_hardirqs_on+0x94/0x140 [ 678.475694][T18178] do_syscall_64+0x4c/0xa0 [ 678.480118][T18178] ? clear_bhb_loop+0x30/0x80 [ 678.484808][T18178] ? clear_bhb_loop+0x30/0x80 [ 678.489495][T18178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 678.495410][T18178] RIP: 0033:0x7f6ba5692159 [ 678.499851][T18178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.519469][T18178] RSP: 002b:00007f6ba38ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.527904][T18178] RAX: ffffffffffffffda RBX: 00007f6ba5919fa0 RCX: 00007f6ba5692159 [ 678.535885][T18178] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 678.543870][T18178] RBP: 00007f6ba38ea090 R08: 0000000000000000 R09: 0000000000000000 [ 678.551852][T18178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.559832][T18178] R13: 00007f6ba591a038 R14: 00007f6ba5919fa0 R15: 00007ffce46ba418 [ 678.567835][T18178] [ 678.782340][T18187] netlink: 'syz.1.4119': attribute type 21 has an invalid length. [ 679.191643][T18193] netlink: 'syz.6.4122': attribute type 3 has an invalid length. [ 679.226815][T18193] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4122'. [ 679.558311][T18196] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4121'. [ 682.067215][T18209] netlink: 14696 bytes leftover after parsing attributes in process `syz.0.4126'. [ 683.032377][T18265] device sit0 entered promiscuous mode [ 683.652741][T18260] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4138'. [ 683.695330][T18260] net_ratelimit: 242 callbacks suppressed [ 683.695349][T18260] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 684.463237][T18286] device sit0 left promiscuous mode [ 686.431575][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.438114][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.582832][T18302] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 687.671792][T18302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 687.787659][T18302] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 688.621424][T18321] device syz_tun entered promiscuous mode [ 688.996994][T18328] netlink: 'syz.1.4153': attribute type 10 has an invalid length. [ 689.024938][T18328] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4153'. [ 692.830267][T18386] netlink: 'syz.2.4169': attribute type 10 has an invalid length. [ 692.942252][T18386] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4169'. [ 693.766322][T18398] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4172'. [ 695.961482][T18432] netlink: 'syz.2.4182': attribute type 10 has an invalid length. [ 696.585047][T18434] netlink: 'syz.4.4183': attribute type 10 has an invalid length. [ 696.712589][T18442] netlink: 'syz.2.4184': attribute type 10 has an invalid length. [ 696.732323][T18442] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4184'. [ 697.371590][T18457] netlink: 'syz.4.4187': attribute type 9 has an invalid length. [ 697.421497][T18457] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4187'. [ 697.834374][T18467] netlink: set zone limit has 8 unknown bytes [ 698.133749][T18472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4192'. [ 698.253181][T18476] netlink: 'syz.2.4192': attribute type 25 has an invalid length. [ 698.261093][T18476] netlink: 'syz.2.4192': attribute type 29 has an invalid length. [ 698.746707][T18480] netlink: 'syz.2.4194': attribute type 10 has an invalid length. [ 699.451516][ T5147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 700.542347][T18505] netlink: 'syz.4.4198': attribute type 10 has an invalid length. [ 700.561897][T18510] FAULT_INJECTION: forcing a failure. [ 700.561897][T18510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.562178][T18505] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4198'. [ 700.663507][T18510] CPU: 1 PID: 18510 Comm: syz.1.4209 Not tainted syzkaller #0 [ 700.671029][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.681100][T18510] Call Trace: [ 700.684396][T18510] [ 700.687346][T18510] dump_stack_lvl+0x188/0x250 [ 700.692053][T18510] ? show_regs_print_info+0x20/0x20 [ 700.697270][T18510] ? load_image+0x410/0x410 [ 700.701798][T18510] ? __lock_acquire+0x7b50/0x7b50 [ 700.706852][T18510] should_fail+0x383/0x4b0 [ 700.711306][T18510] _copy_from_user+0x2e/0x170 [ 700.716010][T18510] map_update_elem+0x5a1/0x760 [ 700.720796][T18510] __sys_bpf+0x46b/0x6f0 [ 700.725050][T18510] ? bpf_link_show_fdinfo+0x380/0x380 [ 700.730454][T18510] __x64_sys_bpf+0x78/0x90 [ 700.734874][T18510] do_syscall_64+0x4c/0xa0 [ 700.739294][T18510] ? clear_bhb_loop+0x30/0x80 [ 700.743972][T18510] ? clear_bhb_loop+0x30/0x80 [ 700.748648][T18510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 700.754542][T18510] RIP: 0033:0x7fd384000159 [ 700.758961][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.778566][T18510] RSP: 002b:00007fd382258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.786981][T18510] RAX: ffffffffffffffda RBX: 00007fd384287fa0 RCX: 00007fd384000159 [ 700.794956][T18510] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 700.802928][T18510] RBP: 00007fd382258090 R08: 0000000000000000 R09: 0000000000000000 [ 700.810903][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.818872][T18510] R13: 00007fd384288038 R14: 00007fd384287fa0 R15: 00007ffda74b4b78 [ 700.826857][T18510] [ 701.231720][T18516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4201'. [ 701.530665][T18529] netlink: 'syz.1.4201': attribute type 1 has an invalid length. [ 701.588505][T18535] netlink: set zone limit has 8 unknown bytes [ 701.627191][T18529] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4201'. [ 701.630923][T18534] netlink: set zone limit has 8 unknown bytes [ 702.017864][T18535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.025594][T18535] IPv6: NLM_F_CREATE should be set when creating new route [ 702.033824][T18535] IPv6: NLM_F_CREATE should be set when creating new route [ 702.041459][T18535] IPv6: NLM_F_CREATE should be set when creating new route [ 702.527041][T18546] netlink: 'syz.2.4207': attribute type 10 has an invalid length. [ 703.309763][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'. [ 704.274869][T18559] netlink: 'syz.1.4211': attribute type 10 has an invalid length. [ 704.288605][T18559] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4211'. [ 704.302236][T18565] netlink: 'syz.2.4212': attribute type 2 has an invalid length. [ 704.309996][T18565] netlink: 'syz.2.4212': attribute type 3 has an invalid length. [ 704.391200][T18565] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.4212'. [ 704.429231][T18571] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.4214'. [ 704.875739][T18580] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4217'. [ 705.041281][T18578] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4217'. [ 705.610370][T18609] FAULT_INJECTION: forcing a failure. [ 705.610370][T18609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.648791][T18609] CPU: 1 PID: 18609 Comm: syz.6.4221 Not tainted syzkaller #0 [ 705.656306][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.666388][T18609] Call Trace: [ 705.669692][T18609] [ 705.672642][T18609] dump_stack_lvl+0x188/0x250 [ 705.677353][T18609] ? show_regs_print_info+0x20/0x20 [ 705.682578][T18609] ? load_image+0x410/0x410 [ 705.687097][T18609] ? __lock_acquire+0x7b50/0x7b50 [ 705.692127][T18609] ? perf_trace_lock_acquire+0xed/0x3f0 [ 705.697694][T18609] should_fail+0x383/0x4b0 [ 705.702128][T18609] _copy_from_user+0x2e/0x170 [ 705.706824][T18609] kstrtouint_from_user+0xd3/0x220 [ 705.711941][T18609] ? kstrtol_from_user+0x2a0/0x2a0 [ 705.717070][T18609] proc_fail_nth_write+0x8b/0x200 [ 705.722100][T18609] ? proc_fail_nth_read+0x220/0x220 [ 705.727304][T18609] ? common_file_perm+0x171/0x1c0 [ 705.732339][T18609] ? proc_fail_nth_read+0x220/0x220 [ 705.737540][T18609] vfs_write+0x304/0xd70 [ 705.741796][T18609] ? file_end_write+0x250/0x250 [ 705.746668][T18609] ? mutex_lock_nested+0x17/0x20 [ 705.751608][T18609] ? __fdget_pos+0x2bf/0x370 [ 705.756221][T18609] ? ksys_write+0x70/0x260 [ 705.760667][T18609] ksys_write+0x153/0x260 [ 705.765005][T18609] ? __ia32_sys_read+0x80/0x80 [ 705.769780][T18609] ? lockdep_hardirqs_on+0x94/0x140 [ 705.774992][T18609] do_syscall_64+0x4c/0xa0 [ 705.779425][T18609] ? clear_bhb_loop+0x30/0x80 [ 705.784118][T18609] ? clear_bhb_loop+0x30/0x80 [ 705.788805][T18609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.794699][T18609] RIP: 0033:0x7f6ba565298e [ 705.799118][T18609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.818726][T18609] RSP: 002b:00007f6ba38c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.827255][T18609] RAX: ffffffffffffffda RBX: 00007f6ba38c96c0 RCX: 00007f6ba565298e [ 705.835239][T18609] RDX: 0000000000000001 RSI: 00007f6ba38c90a0 RDI: 0000000000000005 [ 705.843212][T18609] RBP: 00007f6ba38c9090 R08: 0000000000000000 R09: 0000000000000000 [ 705.851190][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.859164][T18609] R13: 00007f6ba591a128 R14: 00007f6ba591a090 R15: 00007ffce46ba418 [ 705.867157][T18609] [ 706.123999][T18612] netlink: set zone limit has 8 unknown bytes [ 706.222169][T18616] ¥: port 1(team0) entered blocking state [ 706.242355][T18616] ¥: port 1(team0) entered disabled state [ 706.279715][T18616] device team0 entered promiscuous mode [ 706.327634][T18611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4222'. [ 706.342272][T18616] device team_slave_0 entered promiscuous mode [ 706.370480][T18616] device team_slave_1 entered promiscuous mode [ 706.391418][T18616] device netdevsim0 entered promiscuous mode [ 706.672204][T18621] netlink: 'syz.4.4225': attribute type 10 has an invalid length. [ 706.680083][T18621] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4225'. [ 706.861526][T18631] netlink: set zone limit has 8 unknown bytes [ 706.919142][T18631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.926633][T18631] IPv6: NLM_F_CREATE should be set when creating new route [ 706.934530][T18631] IPv6: NLM_F_CREATE should be set when creating new route [ 706.942354][T18631] IPv6: NLM_F_CREATE should be set when creating new route [ 707.333719][T18641] netlink: 'syz.6.4232': attribute type 4 has an invalid length. [ 707.960487][T18652] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 707.992377][T18652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.016301][T18648] netlink: 'syz.6.4234': attribute type 10 has an invalid length. [ 708.499231][T18657] FAULT_INJECTION: forcing a failure. [ 708.499231][T18657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.530560][T18657] CPU: 0 PID: 18657 Comm: syz.4.4238 Not tainted syzkaller #0 [ 708.538072][T18657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.548153][T18657] Call Trace: [ 708.551449][T18657] [ 708.554397][T18657] dump_stack_lvl+0x188/0x250 [ 708.559101][T18657] ? show_regs_print_info+0x20/0x20 [ 708.564328][T18657] ? load_image+0x410/0x410 [ 708.568858][T18657] ? __lock_acquire+0x7b50/0x7b50 [ 708.573904][T18657] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 708.579911][T18657] should_fail+0x383/0x4b0 [ 708.584351][T18657] _copy_from_user+0x2e/0x170 [ 708.589044][T18657] __sys_bpf+0x26d/0x6f0 [ 708.593305][T18657] ? bpf_link_show_fdinfo+0x380/0x380 [ 708.598731][T18657] __x64_sys_bpf+0x78/0x90 [ 708.603167][T18657] do_syscall_64+0x4c/0xa0 [ 708.607599][T18657] ? clear_bhb_loop+0x30/0x80 [ 708.612292][T18657] ? clear_bhb_loop+0x30/0x80 [ 708.616990][T18657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.623010][T18657] RIP: 0033:0x7facafbf0159 [ 708.627451][T18657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.647077][T18657] RSP: 002b:00007facade48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.655529][T18657] RAX: ffffffffffffffda RBX: 00007facafe77fa0 RCX: 00007facafbf0159 [ 708.663525][T18657] RDX: 0000000000000020 RSI: 0000200000000840 RDI: 0000000000000002 [ 708.671522][T18657] RBP: 00007facade48090 R08: 0000000000000000 R09: 0000000000000000 [ 708.679516][T18657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.687507][T18657] R13: 00007facafe78038 R14: 00007facafe77fa0 R15: 00007fff6e409998 [ 708.695527][T18657] [ 709.219799][T18678] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 709.269652][T18678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.326028][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4243'. [ 710.392545][T18703] netlink: 'syz.2.4250': attribute type 10 has an invalid length. [ 710.526358][T18709] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4251'. [ 710.535865][T18709] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 710.751588][T18711] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.4253'. [ 711.148190][T18726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4257'. [ 713.098719][T18748] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4264'. [ 713.340264][T18748] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 713.462234][T15896] Bluetooth: hci1: command 0x0406 tx timeout [ 713.921519][T18762] netlink: 'syz.0.4267': attribute type 10 has an invalid length. [ 714.054278][T18770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4268'. [ 714.296465][T18778] netlink: 'syz.4.4268': attribute type 1 has an invalid length. [ 714.376533][T18778] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4268'. [ 714.693502][T18785] netlink: set zone limit has 8 unknown bytes [ 714.819872][T18785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4272'. [ 715.253835][T18788] FAULT_INJECTION: forcing a failure. [ 715.253835][T18788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.674086][T18788] CPU: 0 PID: 18788 Comm: syz.2.4273 Not tainted syzkaller #0 [ 715.681603][T18788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.691675][T18788] Call Trace: [ 715.694956][T18788] [ 715.697889][T18788] dump_stack_lvl+0x188/0x250 [ 715.702576][T18788] ? show_regs_print_info+0x20/0x20 [ 715.707774][T18788] ? load_image+0x410/0x410 [ 715.712282][T18788] ? __lock_acquire+0x7b50/0x7b50 [ 715.717318][T18788] should_fail+0x383/0x4b0 [ 715.721743][T18788] _copy_from_user+0x2e/0x170 [ 715.726419][T18788] __sys_bpf+0x26d/0x6f0 [ 715.730670][T18788] ? bpf_link_show_fdinfo+0x380/0x380 [ 715.736060][T18788] __x64_sys_bpf+0x78/0x90 [ 715.740485][T18788] do_syscall_64+0x4c/0xa0 [ 715.744901][T18788] ? clear_bhb_loop+0x30/0x80 [ 715.749577][T18788] ? clear_bhb_loop+0x30/0x80 [ 715.754259][T18788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 715.760154][T18788] RIP: 0033:0x7f458c2e3159 [ 715.764571][T18788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.784177][T18788] RSP: 002b:00007f458a51a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.792594][T18788] RAX: ffffffffffffffda RBX: 00007f458c56b090 RCX: 00007f458c2e3159 [ 715.800571][T18788] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 715.808538][T18788] RBP: 00007f458a51a090 R08: 0000000000000000 R09: 0000000000000000 [ 715.816510][T18788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.824478][T18788] R13: 00007f458c56b128 R14: 00007f458c56b090 R15: 00007ffd6875d478 [ 715.832463][T18788] [ 716.448545][T18810] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 716.499706][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.542389][T18810] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 716.586689][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.704090][T18823] netlink: 'syz.0.4283': attribute type 10 has an invalid length. [ 716.733650][T18823] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4283'. [ 717.295237][T18827] FAULT_INJECTION: forcing a failure. [ 717.295237][T18827] name failslab, interval 1, probability 0, space 0, times 0 [ 717.472343][T18827] CPU: 0 PID: 18827 Comm: syz.2.4282 Not tainted syzkaller #0 [ 717.479859][T18827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.489938][T18827] Call Trace: [ 717.493236][T18827] [ 717.496186][T18827] dump_stack_lvl+0x188/0x250 [ 717.500897][T18827] ? show_regs_print_info+0x20/0x20 [ 717.506124][T18827] ? load_image+0x410/0x410 [ 717.510659][T18827] ? __might_sleep+0xf0/0xf0 [ 717.515279][T18827] ? __lock_acquire+0x7b50/0x7b50 [ 717.520339][T18827] should_fail+0x383/0x4b0 [ 717.524791][T18827] should_failslab+0x5/0x20 [ 717.529313][T18827] slab_pre_alloc_hook+0x51/0xc0 [ 717.534274][T18827] ? kobject_set_name_vargs+0x5d/0x110 [ 717.539763][T18827] __kmalloc_track_caller+0x69/0x330 [ 717.545067][T18827] ? kobject_set_name_vargs+0x5d/0x110 [ 717.550569][T18827] kstrdup_const+0x51/0x90 [ 717.555036][T18827] kobject_set_name_vargs+0x5d/0x110 [ 717.560353][T18827] dev_set_name+0xdf/0x130 [ 717.564799][T18827] ? get_device+0x30/0x30 [ 717.569161][T18827] ? __raw_spin_lock_init+0x41/0x100 [ 717.574475][T18827] ? device_initialize+0x2a5/0x4d0 [ 717.579613][T18827] netdev_register_kobject+0xaf/0x320 [ 717.585004][T18827] register_netdevice+0x10e8/0x1720 [ 717.590223][T18827] ? netif_stacked_transfer_operstate+0x200/0x200 [ 717.596657][T18827] ? vscnprintf+0x80/0x80 [ 717.601034][T18827] ? radix_tree_lookup+0x263/0x280 [ 717.606160][T18827] ppp_dev_configure+0x81a/0xaa0 [ 717.611127][T18827] ppp_ioctl+0x8c2/0x1a70 [ 717.615486][T18827] ? ppp_poll+0x250/0x250 [ 717.619844][T18827] ? bpf_lsm_file_ioctl+0x5/0x10 [ 717.624787][T18827] ? security_file_ioctl+0x7c/0xa0 [ 717.629905][T18827] ? ppp_poll+0x250/0x250 [ 717.634238][T18827] __se_sys_ioctl+0xfa/0x170 [ 717.638840][T18827] do_syscall_64+0x4c/0xa0 [ 717.643262][T18827] ? clear_bhb_loop+0x30/0x80 [ 717.647943][T18827] ? clear_bhb_loop+0x30/0x80 [ 717.652627][T18827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 717.658525][T18827] RIP: 0033:0x7f458c2e3159 [ 717.662948][T18827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.682558][T18827] RSP: 002b:00007f458a4f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.690975][T18827] RAX: ffffffffffffffda RBX: 00007f458c56b180 RCX: 00007f458c2e3159 [ 717.698948][T18827] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000006 [ 717.706918][T18827] RBP: 00007f458a4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 717.714889][T18827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.722859][T18827] R13: 00007f458c56b218 R14: 00007f458c56b180 R15: 00007ffd6875d478 [ 717.730848][T18827] [ 719.257766][T18849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4288'. [ 719.351102][T18851] netlink: 'syz.6.4290': attribute type 12 has an invalid length. [ 719.411417][T18854] netlink: 149044 bytes leftover after parsing attributes in process `syz.6.4290'. [ 719.422505][T18857] netlink: 'syz.2.4292': attribute type 25 has an invalid length. [ 719.444864][T18857] netlink: 'syz.2.4292': attribute type 6 has an invalid length. [ 719.476025][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4292'. [ 719.546853][T18851] netlink: 'syz.6.4290': attribute type 1 has an invalid length. [ 719.561570][T18851] netlink: 63763 bytes leftover after parsing attributes in process `syz.6.4290'. [ 719.861263][T18865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4294'. [ 720.091697][T18862] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.4295'. [ 720.695600][T18876] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.4298'. [ 721.023440][T18889] netlink: 'syz.6.4301': attribute type 10 has an invalid length. [ 721.433353][T18889] device wlan1 entered promiscuous mode [ 721.439453][T18889] team0: Port device wlan1 added [ 721.824772][T18890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.010316][T18930] netlink: 'syz.6.4315': attribute type 10 has an invalid length. [ 723.206455][T18930] device veth0_vlan left promiscuous mode [ 723.247658][T18930] device veth0_vlan entered promiscuous mode [ 723.333571][T18930] team0: Device veth0_vlan failed to register rx_handler [ 724.120736][ T4195] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 724.535952][ T4195] Bluetooth: hci0: Unknown advertising packet type: 0x80 [ 724.536130][ T4195] ================================================================== [ 724.551616][ T4195] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 724.559506][ T4195] Read of size 1 at addr ffff8880625c5a03 by task kworker/u5:4/4195 [ 724.567508][ T4195] [ 724.569852][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 724.577411][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.587489][ T4195] Workqueue: hci0 hci_rx_work [ 724.592259][ T4195] Call Trace: [ 724.595558][ T4195] [ 724.598516][ T4195] dump_stack_lvl+0x188/0x250 [ 724.603215][ T4195] ? show_regs_print_info+0x20/0x20 [ 724.608427][ T4195] ? load_image+0x410/0x410 [ 724.612928][ T4195] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 724.618395][ T4195] print_address_description+0x60/0x2d0 [ 724.623944][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 724.629059][ T4195] kasan_report+0xdf/0x130 [ 724.633477][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 724.638599][ T4195] hci_le_meta_evt+0x12cf/0x3ca0 [ 724.643537][ T4195] ? hci_event_packet+0x363/0x1310 [ 724.648650][ T4195] ? __lock_acquire+0x7b50/0x7b50 [ 724.653687][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 724.659754][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 724.665387][ T4195] ? mark_lock+0x94/0x320 [ 724.669714][ T4195] ? mutex_unlock+0x10/0x10 [ 724.674214][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 724.680197][ T4195] ? lock_chain_count+0x20/0x20 [ 724.685049][ T4195] ? __rwlock_init+0x140/0x140 [ 724.689820][ T4195] hci_event_packet+0xe0b/0x1310 [ 724.694761][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 724.699613][ T4195] ? rcu_lock_release+0x20/0x20 [ 724.704475][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 724.709733][ T4195] hci_rx_work+0x255/0xa10 [ 724.714162][ T4195] process_one_work+0x867/0xff0 [ 724.719028][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 724.724660][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 724.729952][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 724.734973][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 724.740523][ T4195] ? wq_worker_running+0x97/0x170 [ 724.745547][ T4195] worker_thread+0xad7/0x12a0 [ 724.750251][ T4195] kthread+0x42e/0x520 [ 724.754346][ T4195] ? rcu_lock_release+0x20/0x20 [ 724.759195][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 724.763787][ T4195] ret_from_fork+0x1f/0x30 [ 724.768236][ T4195] [ 724.771250][ T4195] [ 724.773570][ T4195] Allocated by task 18982: [ 724.777975][ T4195] __kasan_kmalloc+0xaf/0xe0 [ 724.782567][ T4195] __alloc_skb+0x22c/0x750 [ 724.786984][ T4195] vhci_write+0xbd/0x440 [ 724.791264][ T4195] vfs_write+0x748/0xd70 [ 724.795505][ T4195] ksys_write+0x153/0x260 [ 724.799831][ T4195] do_syscall_64+0x4c/0xa0 [ 724.804243][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 724.810137][ T4195] [ 724.812457][ T4195] Last potentially related work creation: [ 724.818171][ T4195] kasan_save_stack+0x35/0x60 [ 724.822848][ T4195] kasan_record_aux_stack+0xb8/0x100 [ 724.828148][ T4195] insert_work+0x54/0x3d0 [ 724.832492][ T4195] __queue_work+0x90b/0xc80 [ 724.836995][ T4195] call_timer_fn+0x17b/0x540 [ 724.841591][ T4195] __run_timers+0x598/0x810 [ 724.846100][ T4195] run_timer_softirq+0x63/0xf0 [ 724.850874][ T4195] handle_softirqs+0x336/0x830 [ 724.855642][ T4195] __irq_exit_rcu+0x13b/0x230 [ 724.860328][ T4195] irq_exit_rcu+0x5/0x20 [ 724.864582][ T4195] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 724.870219][ T4195] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.876208][ T4195] [ 724.878542][ T4195] Second to last potentially related work creation: [ 724.885122][ T4195] kasan_save_stack+0x35/0x60 [ 724.889801][ T4195] kasan_record_aux_stack+0xb8/0x100 [ 724.895087][ T4195] insert_work+0x54/0x3d0 [ 724.899416][ T4195] __queue_work+0x90b/0xc80 [ 724.903942][ T4195] call_timer_fn+0x17b/0x540 [ 724.908533][ T4195] __run_timers+0x598/0x810 [ 724.913036][ T4195] run_timer_softirq+0x63/0xf0 [ 724.917801][ T4195] handle_softirqs+0x336/0x830 [ 724.922561][ T4195] __irq_exit_rcu+0x13b/0x230 [ 724.927233][ T4195] irq_exit_rcu+0x5/0x20 [ 724.931481][ T4195] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 724.937116][ T4195] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.943093][ T4195] [ 724.945412][ T4195] The buggy address belongs to the object at ffff8880625c5800 [ 724.945412][ T4195] which belongs to the cache kmalloc-512 of size 512 [ 724.959463][ T4195] The buggy address is located 3 bytes to the right of [ 724.959463][ T4195] 512-byte region [ffff8880625c5800, ffff8880625c5a00) [ 724.973086][ T4195] The buggy address belongs to the page: [ 724.978712][ T4195] page:ffffea0001897100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x625c4 [ 724.988860][ T4195] head:ffffea0001897100 order:2 compound_mapcount:0 compound_pincount:0 [ 724.997184][ T4195] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 725.005168][ T4195] raw: 00fff00000010200 ffffea00017f3d00 0000000400000004 ffff888016c41c80 [ 725.013748][ T4195] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 725.022321][ T4195] page dumped because: kasan: bad access detected [ 725.028725][ T4195] page_owner tracks the page as allocated [ 725.034433][ T4195] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 63975219064, free_ts 63971825238 [ 725.053539][ T4195] get_page_from_freelist+0x24f6/0x2670 [ 725.059085][ T4195] __alloc_pages+0x1ee/0x480 [ 725.063671][ T4195] new_slab+0xc0/0x4b0 [ 725.067737][ T4195] ___slab_alloc+0x807/0xdd0 [ 725.072325][ T4195] kmem_cache_alloc_trace+0xf9/0x290 [ 725.077606][ T4195] rtnl_newlink+0x17f/0x1920 [ 725.082191][ T4195] rtnetlink_rcv_msg+0x7f1/0xf10 [ 725.087127][ T4195] netlink_rcv_skb+0x1e9/0x430 [ 725.091889][ T4195] netlink_unicast+0x78f/0x940 [ 725.096649][ T4195] netlink_sendmsg+0x8ba/0xbe0 [ 725.101408][ T4195] __sys_sendto+0x46d/0x620 [ 725.105909][ T4195] __x64_sys_sendto+0xda/0xf0 [ 725.110582][ T4195] do_syscall_64+0x4c/0xa0 [ 725.115001][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 725.120891][ T4195] page last free stack trace: [ 725.125557][ T4195] free_unref_page_prepare+0x637/0x6c0 [ 725.131013][ T4195] free_unref_page+0x8f/0x2a0 [ 725.135685][ T4195] stack_depot_save+0x42f/0x460 [ 725.140531][ T4195] __kasan_slab_alloc+0xa9/0xc0 [ 725.145377][ T4195] slab_post_alloc_hook+0x4c/0x380 [ 725.150484][ T4195] kmem_cache_alloc+0x15d/0x280 [ 725.155333][ T4195] __debug_object_init+0x83b/0xc80 [ 725.160442][ T4195] ipv6_mc_init_dev+0x240/0xa50 [ 725.165341][ T4195] ipv6_add_dev+0xb93/0x11a0 [ 725.169951][ T4195] addrconf_notify+0x66f/0xf20 [ 725.174730][ T4195] raw_notifier_call_chain+0xcb/0x160 [ 725.180099][ T4195] register_netdevice+0x12a8/0x1720 [ 725.185293][ T4195] rtnl_newlink+0x14fe/0x1920 [ 725.189965][ T4195] rtnetlink_rcv_msg+0x7f1/0xf10 [ 725.194899][ T4195] netlink_rcv_skb+0x1e9/0x430 [ 725.199659][ T4195] netlink_unicast+0x78f/0x940 [ 725.204423][ T4195] [ 725.206741][ T4195] Memory state around the buggy address: [ 725.212365][ T4195] ffff8880625c5900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 725.220421][ T4195] ffff8880625c5980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 725.228474][ T4195] >ffff8880625c5a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 725.236531][ T4195] ^ [ 725.240591][ T4195] ffff8880625c5a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 725.248660][ T4195] ffff8880625c5b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 725.256726][ T4195] ================================================================== [ 725.264783][ T4195] Disabling lock debugging due to kernel taint [ 725.279181][ T4195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 725.286419][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 725.295383][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.305569][ T4195] Workqueue: hci0 hci_rx_work [ 725.310278][ T4195] Call Trace: [ 725.313573][ T4195] [ 725.316530][ T4195] dump_stack_lvl+0x188/0x250 [ 725.321228][ T4195] ? show_regs_print_info+0x20/0x20 [ 725.326686][ T4195] ? load_image+0x410/0x410 [ 725.331229][ T4195] panic+0x2f8/0x850 [ 725.335213][ T4195] ? bpf_jit_dump+0xd0/0xd0 [ 725.339743][ T4195] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 725.345747][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 725.350631][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 725.355762][ T4195] check_panic_on_warn+0x80/0xa0 [ 725.360773][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 725.365904][ T4195] end_report+0x6d/0xf0 [ 725.370082][ T4195] kasan_report+0x102/0x130 [ 725.374606][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 725.379745][ T4195] hci_le_meta_evt+0x12cf/0x3ca0 [ 725.384700][ T4195] ? hci_event_packet+0x363/0x1310 [ 725.389834][ T4195] ? __lock_acquire+0x7b50/0x7b50 [ 725.394886][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 725.400975][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 725.406624][ T4195] ? mark_lock+0x94/0x320 [ 725.410969][ T4195] ? mutex_unlock+0x10/0x10 [ 725.415490][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 725.421500][ T4195] ? lock_chain_count+0x20/0x20 [ 725.426373][ T4195] ? __rwlock_init+0x140/0x140 [ 725.431152][ T4195] hci_event_packet+0xe0b/0x1310 [ 725.436112][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 725.440979][ T4195] ? rcu_lock_release+0x20/0x20 [ 725.445854][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 725.451078][ T4195] hci_rx_work+0x255/0xa10 [ 725.455522][ T4195] process_one_work+0x867/0xff0 [ 725.460403][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 725.466061][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 725.471375][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 725.476418][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 725.481990][ T4195] ? wq_worker_running+0x97/0x170 [ 725.487037][ T4195] worker_thread+0xad7/0x12a0 [ 725.491752][ T4195] kthread+0x42e/0x520 [ 725.495842][ T4195] ? rcu_lock_release+0x20/0x20 [ 725.500715][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 725.505324][ T4195] ret_from_fork+0x1f/0x30 [ 725.509769][ T4195] [ 725.512876][ T4195] Kernel Offset: disabled [ 725.517201][ T4195] Rebooting in 86400 seconds..